last executing test programs: 28m35.887817257s ago: executing program 32 (id=240): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) socket(0xa, 0x5, 0x0) unshare$auto(0x40000080) mknod$auto(0x0, 0xc9, 0xc8) mmap$auto(0x9, 0x8, 0xdf, 0x9b7d, 0x2, 0x8000) nanosleep$auto(&(0x7f0000000000)={0x180000000000, 0x9}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setfsgid$auto(0x9) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x2000, 0x0) r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8955, 0x0) add_key$auto(0x0, 0x0, 0x0, 0x6, 0x100) r1 = socket(0x3008bcb91a0c5d7d, 0x3, 0x1) r2 = socket(0xa, 0x801, 0x106) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x4, 0x3, 0x9b72, 0x2, 0x8000) ioctl$auto(r2, 0x9, 0xd) socket(0x2, 0x1, 0x106) unshare$auto(0x40000080) mmap$auto(0x200000009, 0x2f04, 0x4, 0x1000000000000013, 0x6, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x14, 0xfffffffffffffffd, 0x40000008000) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) epoll_create1$auto(0x4) mremap$auto(0x0, 0x8000000000000008, 0x3fd6, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) 26m21.980742601s ago: executing program 33 (id=757): socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89b1, &(0x7f0000000900)={'vlan0\x00'}) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) mmap$auto(0xfffffffffffffffd, 0x8000000000004, 0x285, 0x40eb1, 0x404, 0x308000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x840000000002, 0x3, 0xff) r1 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x9) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x8, 0xc, 0x80000000010, 0x1, 0x9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) connect$auto(0x3, &(0x7f0000000040)={0x2, @sockaddr_1_1}, 0x55) write$auto(0x3, 0x0, 0xfdf3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), 0xffffffffffffffff) setfsgid$auto(0x9) 24m33.155842703s ago: executing program 34 (id=1052): getpid() (async) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) (async, rerun: 32) madvise$auto(0x0, 0x1fffe0000000, 0xe) (rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) mlockall$auto(0x8000000000000001) (async) unshare$auto(0x40000080) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x1, 0x2, 0x41e23517, 0x14, 0xad7, 0x1) 24m11.805009536s ago: executing program 35 (id=1094): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) r1 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto(0x6, 0x0, 0x40, 0xfffffffffffffffe, 0x0) close_range$auto(r1, r0, 0x0) r2 = syz_clone(0xca000, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0) setpgid$auto(r2, 0x85c3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0x4, 0x1) write$auto(0x3, 0x0, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x1, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x2, 0x9) mseal$auto(0x1ffff000, 0x7dda, 0x0) getpgrp(r2) 23m41.586575253s ago: executing program 36 (id=1131): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0x7, 0x0, 0x0, 0x6, 0xffffffff, 0x24}, 0x8000, 0x0, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x0, 0xfffffffffffff000, 0x2) shmat$auto(0x8a6a, &(0x7f0000000000)='!\x00', 0x7) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) fchown$auto(0x0, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mq_open$auto(0x0, 0x3ff, 0x7, &(0x7f0000000140)={0x7, 0x2f05, 0xa509, 0x4}) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000010000c1728d2af766"}, 0x55) getdents64$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x2, 0x1}, 0x100400) sched_setaffinity$auto(0x0, 0x80000000, &(0x7f0000000040)=0x1b26a056) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x23) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) setuid$auto(0x800000000008) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x2010000000000) r0 = open(&(0x7f0000000080)='./cgroup\x00', 0x1c6b7d, 0x37e5c9853cd1b90e) fanotify_mark$auto(0x400000000000, 0x101, 0x8040, r0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) clone3$auto(0x0, 0x1000) socket(0xa, 0x2, 0x3a) 23m34.884047157s ago: executing program 37 (id=1145): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x8) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) (async) memfd_secret$auto(0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) socket(0x29, 0xa, 0x8) (async) io_submit$auto(0x0, 0xfffffffffffff801, 0xfffffffffffffffe) (async) rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) (async) ioctl$auto(r0, 0x0, 0x7f9) fgetxattr$auto(0xca, &(0x7f0000001980)='\xf2\x00', 0x0, 0x1) (async) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async) write$auto(0x3, 0x0, 0xfdef) (async) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x5, 0x0) (async) socket(0x1, 0xa, 0xfffffff7) (async) getsockopt$auto(0x6, 0x84, 0x14, 0x0, &(0x7f0000000080)=0x4) 21m16.284221206s ago: executing program 38 (id=1416): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x8180b, 0x67) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x40000) read$auto(0x4, 0x0, 0x20fd) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0x4, 0x0, 0xfdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x80) getsockopt$auto(0x6, 0x1, 0x11, 0xfffffffffffffffe, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) madvise$auto(0x0, 0x2003f0, 0x15) 20m9.741185691s ago: executing program 39 (id=1522): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xa95, 0xc2, 0x77a1fca8, 0x18, 0x100000001, 0x0) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (rerun: 64) mmap$auto(0x4, 0x40009, 0x3d0c6262, 0x9b72, 0x40, 0x28000) (async) connect$auto(0x3, 0x0, 0x55) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c815) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x3, 0x1) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40014}, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000904}, 0x48000) (async) syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) select$auto(0xff, &(0x7f0000000080)={[0x9, 0xfffffffffffffffc, 0x4, 0xe, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa654, 0x202, 0x9, 0x1]}, 0x0, 0x0, 0x0) (rerun: 32) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', 0x0) (async) epoll_create$auto(0x4) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x100000, 0x53, 0x9) 19m2.793382745s ago: executing program 40 (id=1725): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) connect$auto(0x3, 0x0, 0x55) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) r1 = socket(0x1f, 0x6, 0x2) close_range$auto(r1, r0, 0x3) fsmount$auto(0x4, 0x0, 0x200003) mmap$auto(0x20000000, 0x9, 0x100000000, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) mlockall$auto(0x7) setreuid$auto(0x4, 0x5) brk$auto(0x7b5900000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$auto(0x3, 0x4020940b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x3) getsockopt$auto(0x6, 0x40000000029, 0x3, 0xfffffffffffffffe, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x6) 18m31.378589666s ago: executing program 9 (id=1818): mmap$auto(0x3, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x9, 0x40eb2, 0x402, 0x300000000000) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async) unshare$auto(0x40000080) (async) socket(0xa, 0x801, 0x106) (async) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async) socket(0x1d, 0x2, 0x2) (async) connect$auto(0x3, 0x0, 0x54) socket$nl_generic(0x10, 0x3, 0x10) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) socket(0xa, 0x801, 0x84) (async) mmap$auto(0x0, 0xb, 0x5, 0xeb1, 0x3ff, 0x8000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) io_uring_setup$auto(0x6, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) (async) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) (async) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x352c, 0x0, 0x1, 0x4}, 0x9}, 0x40, 0x300, 0x0) 18m29.658225799s ago: executing program 9 (id=1822): mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) io_setup$auto(0x1, 0x0) io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) mount$auto(&(0x7f0000000040)='macvlan0\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfs\x00\x00X\xca\xd8\xce\xc1\xfc\x9f\x9f?o;\xf7\xdf\x9f\x11\xc5\xea\xd9', 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdd, 0x9b72, 0x1000000000000002, 0x8000) setrlimit$auto(0x1000000007, 0x0) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) fspick$auto(0xffffffffffffff9c, &(0x7f0000000000)='!\x00', 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) madvise$auto(0x0, 0x2000040080000003, 0x1) symlink$auto(&(0x7f0000000180)='/]%([\x97\xd3)\x00', &(0x7f00000001c0)=')\x00') prctl$auto(0x4, 0x1, 0x40, 0x5, 0x9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mbind$auto(0x9b, 0xc5, 0x4, &(0x7f0000000140)=0xd, 0x8000000000000001, 0x80000000) r1 = socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x17, 0x401, 0x8000) bpf$auto(0x5, 0x0, 0x7) mkdir$auto(0x0, 0x8001) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRES8=r0, @ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) mount$auto(0x0, 0x0, 0x0, 0x10001, 0x0) 18m28.976539612s ago: executing program 9 (id=1824): r0 = socket(0xa, 0x2, 0x88) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x800000000000008, 0xc, 0x9, 0x3, 0x6, 0x1, 0x40009, 0x5e582972, 0x4000000000000000, 0x14, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x80000001, 0x8) (async) madvise$auto(0x0, 0x200007, 0x15) (async) connect$auto(0x3, &(0x7f0000000040)={0xa, @sockaddr_1_1={"d2e6898a9ff6f89ff8b40b897f9eccf15a7dd13d1401b67390caf9ff0fdb8f69aeae54baf4d05d53c20c740c3b92d529e2f81b674ccdd992cd210e0e1954c18183095c8d8e7b0e4e15675fca23b24fe0ed750142fd55ee2e390886201e084ec807814cdced52efb9d5e24ac959ff4a9a9a6d6021d1eef1eeeb82b813092833d5a80a20fd10778978571d"}}, 0x55) (async) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="09ae0300"}, 0x55) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmmsg$auto(0x15, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x7c, 0x0, 0x7fffffff, 0x2}, 0x7}, 0x3, 0x3) (async) dup3$auto(0x8000000000000001, 0x5, 0x800000000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) sendmmsg$auto(r0, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0xfffffffffffffffa, 0x3}, 0xed7138c}, 0x7, 0x0) 18m27.885334166s ago: executing program 9 (id=1826): memfd_create$auto(&(0x7f0000000200)='^[/\x00', 0x0) socket(0xa, 0x4, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)={0x20, r1, 0x200, 0x70bd25, 0x25dfdbfa, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_CHANNELS={0x8, 0x9, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100ff000000000000ea4900000008000300", @ANYRES32=r4], 0x1c}}, 0x14000080) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x6ac, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_PMKID={0xf9, 0x55, "0c717414884b96945dcf18cc3baf6739aeb9ca4acf9e1f57c44493e3c87f34483655da9601b88336d78ac128de1e54d3688caf7b535afb7b5c6c8f2e05a4115cb6311fb56cd22e5f9a6e84adf6ad67c66e5116757bda541ce3a9634b2954f83823239a7194feff3ae340e9efcb81dc97cabc373b062dd8ac10af2009a25f8ed70e661de0c6c9c0e9cd013100589d30e43818f0cbbe3244cb9174d9e6094e73b238478b188720af99af0deac6ff382b43d2837fd33001aa3e5bc1782ebac532d610f344c3530afe2ed41f4fc469a548d91aa68919d6394a1a9afdfe23d9ea600c64b38f50feb8a86ebee28c44d3cacdc29cb56401d9"}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x1b, 0xba, "4441a6d8ddc6fbbf201eaa4448d97926f2309f7b31cd6a"}, @NL80211_ATTR_MAC_MASK={0x3b, 0xd7, "09a57e6ca49bc0e66a80045833d22bda2e27693383f882b52bde942840b64d39380074d52beac75e4ca1821060b1c7f31dc9fad58d2f1f"}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, "c82a2fe2ab8236fa5dbb5dbaa62523bfd2b3a7eba37ab194333ad2b5ce0a8a6894fcb38fa7f45759a90969b060aa0b1816eaf204e004981c3ac2617f86013e5f98fc9d16cc723a769a4e9ef9b666442f307c5aeb04f9f95299c401e81f7e02b7177446cf8a1b1ba548adf2598992d62c321371ead40860909753cbba7cedd860f05bd4aa"}, @NL80211_ATTR_IE_RIC={0x4b0, 0xb2, "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"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x6ac}, 0x1, 0x0, 0x0, 0x44}, 0x800) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8, 0x7) timer_create$auto(0xfffffff9, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x14, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) io_cancel$auto(0x4, 0x0, 0x0) madvise$auto(0x6, 0x6, 0x2019) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) fsopen$auto(0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) statx$auto(0xffffff9c, 0x0, 0x2001000, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7fffffff, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x2, 0x0, 0x3}, 0x6f3) write$auto(0x3, 0x0, 0x34000) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x7fffffffffffffff, 0xfffffffffffffeff, 0x1, 0x14, 0x5, 0x1d) 18m26.650321954s ago: executing program 9 (id=1829): socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) setsockopt$auto(0x3, 0x0, 0x8, 0x0, 0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x2, 0x697b}, 0xed7138c}, 0x9a6, 0x0) (async) io_uring_setup$auto(0x40000002c55, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = socket(0x10, 0x3, 0x6) (rerun: 32) socket(0xf, 0xa, 0x2) (async) setuid$auto(0x333d) (async) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) (async) tkill$auto(0x80000000000001, 0x7) socket(0x2b, 0x1, 0x1) (async) setsockopt$auto(0x6, 0x6, 0xd, 0x0, 0xc) (async, rerun: 64) madvise$auto(0xfffffffffffffffe, 0x20200, 0x9) (async, rerun: 64) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, "4b9d30bc2ebf1179209ea251b6e00b12"}, @ETHTOOL_A_FEATURES_HEADER={0x7, 0x1, "77fd41"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 18m25.325545566s ago: executing program 9 (id=1835): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x5, 0x4, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x81, 0xffff) mmap$auto(0x0, 0x600000000000000, 0x7f, 0xde93, 0x4, 0x5d7f) prctl$auto(0x6, 0x7, 0x200, 0x4, 0x3aa) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 18m25.037551566s ago: executing program 41 (id=1835): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x5, 0x4, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x81, 0xffff) mmap$auto(0x0, 0x600000000000000, 0x7f, 0xde93, 0x4, 0x5d7f) prctl$auto(0x6, 0x7, 0x200, 0x4, 0x3aa) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 18m15.74011239s ago: executing program 0 (id=1859): connect$auto(0x3, 0x0, 0x55) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mlockall$auto(0x7) (async) syncfs$auto(0xffffffffffffffff) (async) mprotect$auto(0x0, 0x8000000000000001, 0x6) (async) clone3$auto(0x0, 0x40) getrandom$auto(0x0, 0x6000000, 0x3) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) (async) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) (async) setuid$auto(0xe) (async) r1 = socket(0x11, 0x3, 0x2) socket(0x8, 0x80805, 0x4) (async) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [0x4, 0x7, 0x2, 0x9b2]}, 0x34}, 0x1, 0x0, 0x0, 0x3e67db5b9c25a18b}, 0x4014) socket(0x10, 0x2, 0x0) inotify_init1$auto(0x3000000000000) (async) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(&(0x7f0000000200)='#)-\\&[}\x00', 0xde8, 0xb, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x8000000000000000, 0x8, 0x7, 0x9, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0xf, 0x0, 0x9, 0x10001, 0x5, [0x9, 0x7f, 0x77, 0x1, 0x8, 0xe06, 0x400, 0x3, 0x80000000, 0x8, 0x3, 0xfffffffffffffff9, 0x10, 0x3, 0x35c4, 0x1, 0x6, 0x8, 0xea8, 0x8, 0x5, 0x8, 0x5, 0x1, 0x200000000800, 0x9, 0x5, 0x2, 0x800, 0x8000000000000000, 0x2ab, 0x8, 0x7ff, 0x1, 0x1, 0x3, 0xffffffffffff0000, 0x6b, 0xfffffffffffffff9, 0x4, 0x2ba, 0x4, 0xf, 0xffffffffffffff26, 0x9, 0x7fffffff, 0x6, 0x7d, 0xdc]}, 0x800, 0x0) (async) poll$auto(&(0x7f0000000080)={0x2, 0x0, 0x1a}, 0xff, 0x1) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), 0xffffffffffffffff) (async) bpf$auto(0x5, 0x0, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) listmount$auto(&(0x7f0000000000)={0x2, 0xfffffff3, 0x2, 0x6, 0x7ff}, &(0x7f0000000240)=0xdd, 0x9, 0xe1b) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) mlockall$auto(0x7) 18m13.143515383s ago: executing program 0 (id=1861): mmap$auto(0x0, 0x8, 0x72, 0x8b72, 0x8f1, 0x8000) socket(0x23, 0x5, 0x0) write$auto(0x3, 0x0, 0x81) r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x300, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x4) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7e, 0x4) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) io_uring_setup$auto(0x1ff, &(0x7f0000000040)={0x80002, 0x3ff, 0x7, 0x4, 0x0, 0x1, 0xffffffffffffffff, [0x9, 0x5, 0x40], {0x7, 0x1, 0x9, 0x4, 0xfffffffb, 0x3, 0xa, 0xfff, 0x1}, {0x1, 0x9, 0xa53, 0x9, 0x5, 0x7fff, 0xc12, 0x751, 0x1c}}) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) r1 = socket(0x10, 0x2, 0x0) get_mempolicy$auto(&(0x7f0000000140)=0x8, &(0x7f0000000180)=0x6, 0x3, 0x7fffffff, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) 17m57.389148795s ago: executing program 0 (id=1861): mmap$auto(0x0, 0x8, 0x72, 0x8b72, 0x8f1, 0x8000) socket(0x23, 0x5, 0x0) write$auto(0x3, 0x0, 0x81) r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x300, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x4) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7e, 0x4) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) io_uring_setup$auto(0x1ff, &(0x7f0000000040)={0x80002, 0x3ff, 0x7, 0x4, 0x0, 0x1, 0xffffffffffffffff, [0x9, 0x5, 0x40], {0x7, 0x1, 0x9, 0x4, 0xfffffffb, 0x3, 0xa, 0xfff, 0x1}, {0x1, 0x9, 0xa53, 0x9, 0x5, 0x7fff, 0xc12, 0x751, 0x1c}}) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) r1 = socket(0x10, 0x2, 0x0) get_mempolicy$auto(&(0x7f0000000140)=0x8, &(0x7f0000000180)=0x6, 0x3, 0x7fffffff, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) 17m57.1948141s ago: executing program 0 (id=1894): syz_genetlink_get_family_id$auto_802_15_4_MAC(0x0, 0xffffffffffffffff) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x18, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) mmap$auto(0x8000000, 0x8, 0x1000000016, 0x12, 0x3, 0x180000000) socketpair$auto(0x14000006, 0x2000003, 0xc9, 0x0) read$auto(0x3, 0x0, 0x80) r0 = socket(0x10, 0x2, 0xc) ioprio_set$auto(0x2, 0x800000000, 0x8) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x3, 0x1) getsockopt$auto(0x6, 0x65, 0x5, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="f5017400fbdbdf250a000400dbbc9d0afd4cf67c7fcade5ffc594bb48f0cc376435aa5cc0bd9c6bf5af57fc54201f6f53721b00e028e1c91554a37c6cda8f12497c19bf151bbeee84c6fc9c2e65c9186031e9e4ce8a33a20b72be4651f70b80a020a4079dc6bc1d71e3a697217b77424c6e45f82383a64dc147c600b02c165010da9eff3068dff4201a3bfdd3ccc30908d8f3ba878"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) fstatfs$auto(0x3, 0x0) socketpair$auto(0xd4, 0x5, 0x7, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x73b4) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xc, 0x0, 0x0) bpf$auto(0x5, 0x0, 0x504) mkdir$auto(&(0x7f0000000440)='\x1e\fZ\xfe]\x05\x94\xae\n\x06\x82\xae\xc2\x89\xbfd=\xb3$\xe8\x11>\xe5K\x9a\x0f\xb2\xb5\xae\x93\xce3\x00\x8a\x85\xa4F-tG\x1a\xac\xf3\xe9E|]\x83;\xf5\xa4\xc16\xae\n\xa1g\x86\x91\xbc\xc2Y!\xc4D\x1b\x8d\x87;%\\\xc8\x99$<\xba\x03r\"\x91wk\xcb\xc9rX\xe1\xe6q\xe3\xd1\x95\xe1Rl\"\xedI-m,\x84\x1cy\xf3?\xc3\xa3\x12\x15\'\x84\\\x04T6\xc4\xb8\xfb?E\x90\xc2A\xdf\x17p\xfe\x1e\xe89\xe6\x06b,\xe34\xbeo8\x9e\xd4\xedn\x19OF\xd8@F\x9a{\xc0&C\"\xa0p\x97\x93\x1f$q;\xfd\x10\x8c\xf3\xb4\xb8&%E\x990|\x13\xb7D\xf1]9\xc17)-\xbd@;\xd5Y+\xcb\x87D\n\x8eu38,\xf7e\x15\x11\xf1n/[Ju\xfej,O\xce\xfa\xb3;\f\xb5f\xdf\x97\xbaj\x86x\xbb\xf6\xbe\x91\xd9\xee\xb5,uP\x1e\xc498\\+%\x0e\xbd\xd7\xa7\xef\xeb4\b\x8a\xfd\xee\x9a\x92qT\xffw\xe7I\xab\xb7\x95X}T\x19\x12\xcc\x13\xa4\xc5\x9e\xec\x0eNH:;\xd5s%\xe2\xf1m\xf4&', 0x3) 17m57.002483494s ago: executing program 0 (id=1896): mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0x9) execve$auto(&(0x7f00000001c0)='-\x8c\xe6t5b/\xd4\x8a\x95\xde\xef\n>F\n\xf82\xa8L\x81;\x80+\xe2RI\"\x17\x97k\xae\xf0B\x90\xb9\xe1 :\xfb\n\x879\x9b\xfau\xac\xcb\x92\t\xdf\x18x\xa3V\x1b\x15Y\x90\xb8\x1d!\x93e\xfe\xcb/\xf7\xe5\'A\x93\xf4\xde\x10G\x88\xfa\xc8\x02>\xc2\xb0\xe1\xaf\xf6ZaP\xb1\xe4\x9aH\xef\xaeq\x84\x88\xb2\xa5\x9a}\x15|\xe0d\xb6`\v\x957\xc8\xdb\x1b\x90w\x02\xc1R!\xc1B\xb9[\xce\x05)\xa4\xc7\x1e?|].=}\xf9\x12A28\x85\x9e&\xb9Xv\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81e\x7fk\xed\xa6\x12HP\x932\x1fV\x15\x82\xab\x9a\xcc\xcfU\fRg\x9a=\x13\x90\xd3\xefs\xc3>1[\v+\xd0|H\xf6\xa18/3\xa2\xcb\xae\x1ez\'\x96@\xb9\xcbgA\xcd\xb0\x1e\xa4\xf4\x8f\x94\xd6\x9c\xcbQ\x8b!y\xeb\x0e\xb6N\xf7D.\xb3\x03\xda%\xb6\x10J\x855\x1b\x9a\x81+\xbc\x15\x8c\x127q<\x1el2\x05 \x82D\xb9\x91jl\xfb\x01\"\x1d\xa2o\xcf\xdcn\xe9\x83\x8a\x97\xc4{N9\x84%f\x10\x1aM\xaeJC\x13\a\x00\xbd\xc1J\x1bI\td\xb4Q\xbdB\xb5,\f2\af\xa3\xa2\x05\x1d>\xe2S(4\xac\x03hu\xff\x11\x10\x1b\xbce\xc5\\\rE:P\xc3\xf9S\x86\xb5\xed:\xd0\xde\x8b\xf7\xa0\xc9\xd5\xc6uMG\x01\n\xd1\xeb\xa5\x16\x86\xbdH2\xe0\xfbOP\xfc\xea\x01\r;h', 0x0, 0x0) r0 = socket(0x25, 0x1, 0x7) (async) bind$auto(0x3, &(0x7f0000000040)={0x1, @sa_data_min="40749586298af2cc1c4b1852e785"}, 0xd) (async) listen$auto(0x3, 0xfffffffa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x20000000000008, 0x8000) r1 = socket(0x2, 0x3, 0xa) (async) mmap$auto(0x0, 0x20009, 0xdf, 0x11, 0x401, 0x8000) (async) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) (async) socket(0x11, 0x80003, 0x300) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) mmap$auto(0x6, 0x2, 0x3ff57696, 0x15, 0x2, 0x8000000000008000) (async) mmap$auto(0x0, 0xe983, 0xe2, 0x13, 0xb, 0x8000) (async) futex_wake$auto(0x0, 0x8, 0x7, 0x2) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) pidfd_send_signal$auto(0xfffffffffffffff3, 0xe31, 0xfffffffffffffffd, 0x0) (async) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x0, r1, 0x8) (async) socket(0xa, 0x801, 0xe695) (async) pipe$auto(0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2b, 0x3, 0x73) socket(0xa, 0x2, 0x88) (async) mmap$auto(0x100000000007, 0x20009, 0xdf, 0x1000000eb1, 0x40010000000a5, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x1004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) tkill$auto(0x1, 0x7) (async) recvmmsg$auto(r0, &(0x7f0000000340)={{&(0x7f0000000000)=[0x8, 0xaf3, 0x6, 0xc5a], 0x1, &(0x7f0000000100)={&(0x7f0000000080)=[0x9, 0xe, 0x9], 0xfffffffffffffffc}, 0xa, &(0x7f0000000140)=[0x800, 0x6], 0x4, 0xff}, 0x8}, 0x5, 0x100, &(0x7f0000000380)={0x49858788, 0x8}) 17m55.072928279s ago: executing program 0 (id=1900): socket(0x1a, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) msync$auto(0x1ffff000, 0x80100000000002, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x4000040) semtimedop$auto(0x7, &(0x7f0000000080)={0x2, 0x4f, 0x10d2}, 0x1, &(0x7f00000000c0)={0x400000000000006, 0x80000000}) socket(0x1d, 0x2, 0x6) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) sysfs$auto(0x4, 0x0, 0x31000) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x80000000, 0x100000001, 0x10, 0x6, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3a) ioctl$auto(0x1, 0x89a1, 0x8) open(0x0, 0x323c3, 0xa7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) utime$auto(0x0, &(0x7f0000001ac0)={0x8, 0x2}) listen$auto(0x3, 0x81) ioctl$sock_SIOCGIFINDEX(r0, 0x8905, 0x0) 17m54.766282755s ago: executing program 42 (id=1900): socket(0x1a, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) msync$auto(0x1ffff000, 0x80100000000002, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x4000040) semtimedop$auto(0x7, &(0x7f0000000080)={0x2, 0x4f, 0x10d2}, 0x1, &(0x7f00000000c0)={0x400000000000006, 0x80000000}) socket(0x1d, 0x2, 0x6) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) sysfs$auto(0x4, 0x0, 0x31000) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x80000000, 0x100000001, 0x10, 0x6, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3a) ioctl$auto(0x1, 0x89a1, 0x8) open(0x0, 0x323c3, 0xa7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) utime$auto(0x0, &(0x7f0000001ac0)={0x8, 0x2}) listen$auto(0x3, 0x81) ioctl$sock_SIOCGIFINDEX(r0, 0x8905, 0x0) 10m25.838044003s ago: executing program 2 (id=3304): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x9, 0xdf, 0x13, 0x1, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x8c) socket(0xa, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) close_range$auto(0x2, 0xfffffffffffff000, 0x2) pselect6$auto(0x665e, &(0x7f0000000080)={[0xed, 0x4, 0x140b, 0x4fa, 0x100, 0x10000000006, 0x100, 0x4, 0x4261, 0x1042, 0x3, 0x4, 0xc9, 0x4, 0xe, 0x100000001]}, &(0x7f0000000180)={[0xac2, 0x1, 0xd, 0x1, 0x318bd8f8, 0x6, 0x81, 0x9, 0x4, 0x1, 0xfffffffffffffff4, 0x267, 0x85, 0x3f, 0x7, 0x7fffffff]}, &(0x7f0000000200)={[0x64a5, 0xb, 0x1, 0x2, 0xc54, 0x5, 0x80, 0x1, 0x986, 0x0, 0x81, 0x6, 0x101, 0x6, 0x2, 0xb337]}, &(0x7f0000000100)={0x1, 0x81}, &(0x7f0000000280)=[0x3]) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) setsockopt$auto(r0, 0x29, 0x21, &(0x7f0000000040)='!\x00', 0x1ff) connect$auto(r0, &(0x7f0000000140)={0xa, @sa_data_min="ff1700802000000000000100"}, 0x58) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x200000, 0x0, 0x11}, 0x18) ioctl$auto(0x3, 0x89e0, 0x91) writev$auto(0x0, &(0x7f0000000000)={0x0, 0x8}, 0xb) mseal$auto(0x1ffff000, 0x7ddd, 0x0) madvise$auto(0x1ffff000, 0x5510, 0x8) open(&(0x7f00000002c0)='./file0/file0\x00', 0x40842, 0x20) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) rt_sigaction$auto(0xffffffff, 0x0, 0x0, 0x8) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mlock$auto(0xfbe8, 0x4) mlock$auto(0x81, 0xffff) 10m23.686692461s ago: executing program 2 (id=3311): mmap$auto(0x0, 0x36b00000000000, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x3, 0x5, 0x7, 0x0) mmap$auto(0x800000000000000, 0x400008, 0xe1, 0x9b72, 0x2082, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x8, 0x329, 0x10011, 0x2, 0x8000) clone$auto(0x4, 0x400, 0xfffffffffffffffe, 0xfffffffffffffffc, 0xd1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) access$auto(0x0, 0x7fffffff) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x40000, 0x50) getdents$auto(r1, 0x0, 0x34) r2 = socket(0x11, 0x3, 0x2) syz_clone(0x204800, &(0x7f00000001c0)="49a873de65f3dbd6797222fd51aeafdd7046251fcfe2d49724a36b1a4a99da7a2b77ad2bd576d7c9e094ccb6d20ad23bad4288cd18407a81bd5fe7d32498e98b76611188315931d29ec8982b1ae8d65e4b0b47b374f86c7cb39fa3924fe3fdbee67c1cc26514be92a2515a77de662aaf1f0dcfba9fa068eb31f3f8926288b3251e6a4f79d6a211693c9bf286cbabc1c93017f3f83569a63fc615dd54edb8633ef7c96c4c99790f11ea04f4a3fcf21904413618c2ea7be664562ad76823726b12180768f660ed2f65c0627f26a3cb15394778d2fd9d49e6bb7ca4a52dfa89c2c4a0b0f25f7bdc", 0xe6, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000002c0)="6a0f671da5e132a76c6ee1aa143f026703d1a166d44659e8687ac2135322d9934b496a0e53ea843e638cdae3466d1facbec70c722a4de4a25f675298dfc00e55496371dae294d41fcb52babb2a181c8aa23f75aa58d4828ba68fecb8f708faaba030d5b04421efc2727b726f2b6680033cb230575c764ca3c390fc68e921fc59d23261389b1a4a529d5edec8d7c01c2a3e766850b9d9f062f172f6c2707164bdeb478eb257db472505d5c28b175da4a0f8b7b064") ioctl$sock_SIOCGIFINDEX(r2, 0x8955, 0x0) pidfd_send_signal$auto(r1, 0xfffff495, &(0x7f0000000380)={@siginfo_0_0={0xfffff494, 0x4, 0xffff7fff, @_sigsys={0x0, 0xffffffff}}}, 0x7fffffff) madvise$auto(0x400004, 0x6, 0x15) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fcntl$auto(0x0, 0x402, 0x80000001) madvise$auto(0x80, 0x9, 0xffff) vmsplice$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)=[0x2]}, 0x400, 0x4) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x40409, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x8, 0xc0d, 0x7) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$auto(r0, 0x0, 0x6) 10m22.860115088s ago: executing program 2 (id=3313): settimeofday$auto(&(0x7f0000000180)={0x1ed5d7403, 0x1}, 0x0) r0 = socket(0x2a, 0x2, 0x6) connect$auto(0x3, &(0x7f0000000180)={0x2a, @sockaddr_1_1}, 0x54) r1 = getpgrp(0x0) process_vm_readv$auto(r1, &(0x7f0000000040)={&(0x7f0000000000), 0x8}, 0x200, &(0x7f00000000c0)={&(0x7f0000000080), 0xe}, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) futex_wake$auto(0x0, 0xa0, 0x80003, 0x82) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x240008d4) mmap$auto(0x0, 0x2, 0xc8b, 0x578, 0xfffffffffffff903, 0x1) splice$auto(r0, &(0x7f0000000040)=0x4, r2, &(0x7f0000000080)=0x2, 0x61d, 0x8) 10m21.059047973s ago: executing program 2 (id=3320): socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x17, 0x401, 0x8000) close_range$auto(0x2, 0xfffffffffffff000, 0x2) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) socket(0xa, 0x2, 0x3a) bind$auto(0x3, &(0x7f0000000040)={0xa, @sa_data_min="000000fffcfbff010400"}, 0x69) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="6a2f7ff43519eb7100"}, 0x55) pipe2$auto(0x0, 0x80) r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_NAPI_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NETDEV_A_NAPI_ID={0x8, 0x2, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) 10m19.827913243s ago: executing program 2 (id=3322): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) sendmmsg$auto(0x3, 0x0, 0x7, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0xf6c56d6cdcf2e8fd, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) rseq$auto(&(0x7f0000000140)={0x1000000e, 0x401, 0x0, 0x24, 0xffffffff, 0x2, "afbc3de5254d169386a8dbac55e9d6c4e2f0a90b26ff7c1406000000000000003e4082fa703d1c"}, 0x8000, 0xff, 0xc1f6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) semctl$auto(0x5, 0xf59, 0xfffffffb, 0xffffffffffffffff) 10m15.837957315s ago: executing program 2 (id=3328): unshare$auto(0x40000080) futex_waitv$auto(&(0x7f0000000000)={0x100, 0x7, 0x200, 0x4}, 0x80000001, 0x0, 0x0, 0x1ff) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) (async) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@link_create={@map_fd=0x6, @target_fd=0x2, 0x7, 0x10005, @bpf_attr_link_create_4_1={0xd}}, 0xa3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) (async) getrandom$auto(0x0, 0x6000000, 0x3) unshare$auto(0x20000080) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x2a7) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setns(r0, 0x0) mlockall$auto(0x7) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000200)='\x06a\xae\x00'/19, 0x0, 0x0) (async) execve$auto(&(0x7f0000000200)='\x06a\xae\x00'/19, 0x0, 0x0) execve$auto(&(0x7f0000000040)='ns/time_for_children\x00', &(0x7f0000000140)=&(0x7f0000000100)='\x00', 0x0) symlink$auto(&(0x7f00000001c0)='-\x00', &(0x7f0000000280)=')s:\x00') execve$auto(&(0x7f00000005c0)=':,\x00', 0x0, 0x0) execve$auto(&(0x7f00000002c0)=':,\x00', &(0x7f0000000480)=&(0x7f0000000540)='\x00', &(0x7f0000000500)=&(0x7f0000000400)='\x00P2\xc4c\xe5\xb5\x1b\x0f\x97\x83\xaai`\xdb\xdfn\x96:u\x13\xa4\x0e1\x8cU\xa5\xa1\xf8\xb7^\xd1\xf7\xcf\f\xd7>\xb1\x9b(') mmap$auto(0x0, 0x2020009, 0x3, 0xeb4, 0x100000009, 0x8000) mlockall$auto(0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16) (async) memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16) mmap$auto(0x3, 0x2020009, 0x4, 0xebf, 0xfffffffffffffffa, 0x400000008000) alarm$auto(0x1) (async) alarm$auto(0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0xffffffffffffffff, 0x2, 0xdf, 0x9b72, 0x2, 0x7ffe) (async) mmap$auto(0xffffffffffffffff, 0x2, 0xdf, 0x9b72, 0x2, 0x7ffe) socket(0x10, 0x2, 0x2000003c) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x6, 0x5, 0x8) (async) madvise$auto(0x6, 0x5, 0x8) 10m0.689247416s ago: executing program 43 (id=3328): unshare$auto(0x40000080) futex_waitv$auto(&(0x7f0000000000)={0x100, 0x7, 0x200, 0x4}, 0x80000001, 0x0, 0x0, 0x1ff) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) (async) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@link_create={@map_fd=0x6, @target_fd=0x2, 0x7, 0x10005, @bpf_attr_link_create_4_1={0xd}}, 0xa3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) (async) getrandom$auto(0x0, 0x6000000, 0x3) unshare$auto(0x20000080) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x2a7) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setns(r0, 0x0) mlockall$auto(0x7) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000200)='\x06a\xae\x00'/19, 0x0, 0x0) (async) execve$auto(&(0x7f0000000200)='\x06a\xae\x00'/19, 0x0, 0x0) execve$auto(&(0x7f0000000040)='ns/time_for_children\x00', &(0x7f0000000140)=&(0x7f0000000100)='\x00', 0x0) symlink$auto(&(0x7f00000001c0)='-\x00', &(0x7f0000000280)=')s:\x00') execve$auto(&(0x7f00000005c0)=':,\x00', 0x0, 0x0) execve$auto(&(0x7f00000002c0)=':,\x00', &(0x7f0000000480)=&(0x7f0000000540)='\x00', &(0x7f0000000500)=&(0x7f0000000400)='\x00P2\xc4c\xe5\xb5\x1b\x0f\x97\x83\xaai`\xdb\xdfn\x96:u\x13\xa4\x0e1\x8cU\xa5\xa1\xf8\xb7^\xd1\xf7\xcf\f\xd7>\xb1\x9b(') mmap$auto(0x0, 0x2020009, 0x3, 0xeb4, 0x100000009, 0x8000) mlockall$auto(0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16) (async) memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16) mmap$auto(0x3, 0x2020009, 0x4, 0xebf, 0xfffffffffffffffa, 0x400000008000) alarm$auto(0x1) (async) alarm$auto(0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0xffffffffffffffff, 0x2, 0xdf, 0x9b72, 0x2, 0x7ffe) (async) mmap$auto(0xffffffffffffffff, 0x2, 0xdf, 0x9b72, 0x2, 0x7ffe) socket(0x10, 0x2, 0x2000003c) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x6, 0x5, 0x8) (async) madvise$auto(0x6, 0x5, 0x8) 6m37.180060296s ago: executing program 1 (id=4022): mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x1081, 0x3) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x2, 0x3a) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x2, 0x8000, 0x0) ioperm$auto(0x4, 0xbc6, 0x81) futex_waitv$auto(&(0x7f0000000000)={0xf, 0xb7f7, 0x4, 0x4}, 0x877, 0x10000, 0x0, 0x62bd) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) io_uring_setup$auto(0x5, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x5, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x7, 0x7, 0x5, 0x5, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfffff654, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) (async) getrusage$auto(0x0, &(0x7f0000001800)={{0xcb, 0x401}, {0x199, 0x7fff}, 0x8, 0x8000000000000001, 0x81, 0xacd3, 0x0, 0x4, 0x8000000000000000, 0x0, 0x1, 0xba4, 0x3b5, 0x1, 0x9a7}) socket(0x2, 0x1, 0x106) (async) socket(0xa, 0x2, 0x88) (async) setsockopt$auto(0x3, 0x0, 0x40, 0x0, 0x10001) creat$auto(0x0, 0x4) (async) creat$auto(0x0, 0x9) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') io_uring_setup$auto(0x6, 0x0) (async) open(0x0, 0x22242, 0x155) (async) select$auto(0x8, &(0x7f0000000140)={[0x8c, 0x7, 0x1000, 0x0, 0x9, 0xb, 0x8, 0x1, 0x4648, 0x7f, 0x10000, 0x0, 0x3, 0x0, 0x7, 0x200]}, 0x0, 0x0, 0x0) 6m36.110219391s ago: executing program 1 (id=4025): mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) io_uring_setup$auto(0x6, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xbf7b27a032fa9cf, 0x162) fstatfs$auto(r0, &(0x7f0000000040)={0x800000000000e, 0x0, 0x9, 0x7, 0x4, 0x3, 0x0, {[0x2f18, 0xd]}, 0x2, 0xa, 0x0, [0x4, 0x7, 0x2, 0x3]}) mmap$auto(0x0, 0x200, 0x1000000004, 0x9b76, 0x200002, 0x8000) setreuid$auto(0x3, 0x7) utime$auto(0xfffffffffffffffd, 0xfffffffffffffffc) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = open(0x0, 0x22240, 0x155) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f0000000140)={0xfff8, @sa_data_min="75d951e0ec9d705e95fd4afb7eb4"}, 0x10001) ioctl$auto(0x3, 0x80000541b, 0x38) ioctl$sock_SIOCGIFINDEX(r1, 0x40049409, 0x0) unshare$auto(0x40000080) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000100), r2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x4000015) gettid() fanotify_init$auto(0x5, 0x2000000000002) 6m35.640061612s ago: executing program 1 (id=4030): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x6, 0x1, 0x3c, 0x0, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) mount$auto(0x0, &(0x7f00000002c0)='/\x00', &(0x7f0000000300)='cifs\x00', 0x7, &(0x7f0000000340)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x3, 0x46) getsockopt$auto(0x6, 0x29, 0x24, 0x0, 0x0) socket(0x2, 0x2, 0x1) mmap$auto(0xf, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80000001]}, &(0x7f0000000100)={[0x4, 0x2, 0xf6, 0x5, 0x2, 0x4, 0x9, 0x800, 0x4, 0x100000001, 0x4, 0x5, 0x200, 0x4, 0xffffffffffffffff, 0x1]}, &(0x7f00000001c0)={0x48e}) listmount$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0) clone$auto(0x8001, 0xd, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf254a0000000c00990001000000000000006f6fc381a61cd0ce33b3a6e905a88778b8cb5fc829bbb614a2e91c3bb4f5a1dc9114519dbdc895c7a9eb707a0c916abb2e1a9f4d7777c55186787281560dc77f38eb7fddfe1e92a3aaa20ab126e6e6a2873fc3fe0ca0"], 0x20}}, 0x4000000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0x22240, 0x155) open(0x0, 0xa240, 0x1de) mmap$auto(0xffffffffffffffff, 0xfff, 0x4000000000df, 0xeb1, 0x401, 0x10) 6m33.144125175s ago: executing program 1 (id=4035): r0 = socket(0xa, 0x6, 0x0) epoll_create1$auto(0x1) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200000008003c0009080000"], 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0x4) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x5, 0xfffffffffffff000, 0x4000000000002) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fchmod$auto(0x0, 0x9b9a) bind$auto(0x3, &(0x7f0000000040)={0xa, @sa_data_min="000000fffcfbff010400"}, 0x69) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) r1 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r2 = socket(0xa, 0x2, 0x4) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) fstatfs$auto(0x3, 0x0) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), r2) setsockopt$auto(0x3, 0x0, 0x60, 0x0, 0x10001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) close_range$auto(r0, r1, 0x3) 6m30.963659006s ago: executing program 1 (id=4040): io_submit$auto(0x7, 0x9, &(0x7f0000000040)=&(0x7f0000000000)={0x7, 0x5, 0x1ff, 0x1, 0x2, 0xed4, 0x4, 0x7, 0x9, 0x0, 0x5, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_ZERO(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x204, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xb8, 0x3, "682b8df1d4abaeaa18546f4e3a3784efd3f444500b79db7f47a54c98df7fda16073ba16921aca3ba131776721d93c2d79f93d6fea90d1a00279be201cf8ff658f08c4cfb5fe2ee486bd1e186177347c3295bebfcb81ba8dc0f57e9d42f912fd7b9212b698f932cb48184da66e7e7edea29f2fd98a480a2d71193eaf33524121c744ba73a8e50af590e87e91617957d1ca2190273fb46b371f64e6a14a4ec2ec1dc5b755654834b6a89c3c7af8886eec606728c62"}, @IPVS_CMD_ATTR_DEST={0x33, 0x2, "17554597bc65fb6d8052a952168a376704e449ab78d6431dfb9b3f7fb0291af896b8baad13a1d4893ab0a0514cff7f"}, @IPVS_CMD_ATTR_DEST={0xfb, 0x2, "f650bbc5d0a503593bd504adb9993af77dcd9b09bd4874cd2e27c26e3b11b01be699f41ad6999305cfdd602ca6bc61f29182eb3158c8ae881c9bc803204fd0ca36dd842e6ab5885c463cf827a612ef9d44b568fac942948bf36a4413fe21738bff3692dfdfe1e9c980df63cd0cf21c901d88b55dd5a41ac1579775dc0387cad30e06f8c4133308fdd027f1d9485220c660cdc0426a4fca911c3b569ab9e142c8b55524a23f9f40e75f81db4c7bff32b29b82ee722d11e8720edabf846802e4a30fb3da91f8c8226c7790e68a87bd9a1186ca1be248d8ce21bcd7d6a96ecdf40f2a6b082acccd3981353f4520adb0b9f8b0f90fffa94706"}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa00000}]}, 0x204}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), r0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, r2, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x7fffffff}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x10}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x5}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x13}, @NL80211_ATTR_HT_CAPABILITY={0x98, 0x1f, "e2d54eb20743760c6312cd05694e7f9909fce30dbc8261e1da49a862e5c0d7c211e79d63f7db15f766f3a4bfeb7769cab8b81e576949d79bb942a12001218e885231636264ef46f5dbf76eeb2b48b9c58166c494b3f932bc5d31de43208bf4d6edfc6b4c716faa843b78c7b487c97aa63250c1cadf92df1184761242b91c7d928fbc295b38422ed69bcafc82fbeffb77c147689b"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000600)={0x450, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4c}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x9}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "500a9edd8b33feb6"}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_EMA_RNR_ELEMS={0x32, 0x145, "3318e47377eb634dfd9c43fd1305b157e6e95ff8c1e8459a1e46905f714202f46e6936078e4f4425ce18d69c34d2"}, @NL80211_ATTR_IE={0x3e5, 0x2a, "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"}]}, 0x450}, 0x1, 0x0, 0x0, 0x4004080}, 0x80) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000b40), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$auto_BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004081) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x8, 0x2, "2051edec"}, @IPVS_CMD_ATTR_DEST={0x17, 0x2, "46a69aba6b55a61c20b0c4c3c81eab4570c891"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x800) mq_timedsend$auto(0x8, &(0x7f0000000e40)='/}$!](-\'&\x00', 0x9, 0x9, &(0x7f0000000e80)={0x1ff, 0x2}) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)={0x104, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_FILS_ERP_REALM={0xe5, 0xfa, "f1cb4c1cfb376bc458938fb4136e565f0e8ac88232463a599178853786c8bd7866b272c069b008c244e6cdd64994646aa35e6a2d87df2ae83bae3f7fd1fd3951736b90f37e98071186fd523a3c6de34ca288ddaa5a22952aed27c6393611c57febb955510ce527f927dac031934ccff72b1d05092983c959fd636afafe131652d46172158d342eaed4f9893c9e94fb262444db1408251506ec875e4dee488ce85ec8769164d5c19f83e054c15a00cdf8a173b8fdb1b5d0d39399d360bb3234f7a38869afb03e1c7e5e184526a5b15ec2cb5d52210da36b6e560209200b52ef7e26"}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x844) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001100)={'veth1_macvtap\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f00000012c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x118, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_CNTDWN_OFFS_BEACON={0xdd, 0xba, "a31a454dd10e4acb7be570520585c5698fd06de620e7355067f85a47323c82b0c2908414ad2905990bfda79e3acb6d863114d85deab14f742a68175d323723a1b8dbbde717f1010cb634a7db4f1027c4ac93173d30e05bd37ed03d97a4d8fc668caa271a61d6ae62e1c8fd9042f08e462548ddfcf93bc89bfafe3d728a4439d3aad0720624169663d63e6d966311fd6b96ff1ac6493e3f040bc5f89ad4f3e586c0323d441f7db6ce0f4a6aaa71247a38f6ea697a7d6d10cd1ab2e62952578f566431fa338ff9e299ff7ceb9781eb7aac799c107e047b46d6cb"}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_PMK={0x15, 0xfe, "4af76a1f8d1abbc123be7165b7b91e3314"}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x400a0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x210002, 0x10, 0x38}, 0x18) process_madvise$auto(r6, &(0x7f00000013c0)={&(0x7f0000001380)=[0x5, 0x6, 0x9], 0x9}, 0x0, 0x3, 0x4) mmap$auto(0x81, 0x5e, 0x2, 0x17, 0xc6, 0x4c05) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000001640)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001600)={&(0x7f0000001440)={0x1b4, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_MASK={0xe6, 0xd7, "92576f73fed53e8a1b613f3b077a6a081f77344488812da9a6eee505107991bd2ccb4edcfa36869eeb3201e8c870d0278216715522161b29896ea62a869c79b75e844f0f442a6f01d5ca7103fbd7363bf913d7d1cde8f31a4c254ee53f300f4edff06f553d045d1a5f81cf811c15ac019e854eb64b9d1a37793f9fb7f44d36f93b9559ad7dff9ee08f5f845f746dce69449895dfa8e7b942efe49f6ece7b27196915dfb281b6a52d625503da0cbc9e92a19366729f87180ada84c574dc5bf017dceef743db0d7ac69e8353c34ec7a2aee4f4eb221c1797b577e5027dc21620fff24d"}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xae, 0x84, "67c6e2d19459d4ba0a0cb1d300b487e0cb685d432313b252314fad5fadb7b3e3f828bb46b16b6ba29b18cdd63b2141b3475f7c3f0a811c029c8b75a5384ebdb13ae3995e2665e0f7c2666af7d332ea4d9493e48c08093f6d8018c40b5c80d008b0401e4e8c2fc2f0ed5077eba00b553ab640e9a32ea3fb482cf17a954206ba53340c3a67bf5d9278d521a48ef281cd6520d299c16506d086d483bae8412d85e70b02010534086aef2967"}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4004010}, 0x800) lsetxattr$auto(&(0x7f0000001680)='\x00', &(0x7f00000016c0)='IPVS\x00', &(0x7f0000001700)=[0x400, 0x1e, 0x7, 0xf9e], 0xf69, 0x800) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000001740), r4) creat$auto(&(0x7f0000001780)='(%-$%\x00', 0x0) socketpair$auto(0xd4, 0x6, 0xf84d, &(0x7f00000017c0)) mprotect$auto(0x5c8, 0x2, 0x4) bpf$auto(0x9, &(0x7f0000001800)=@bpf_attr_7={@start_id=0xc, 0xfffffff7, 0x7f}, 0xfffffad2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001900), r4) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x905f6eb3fda8e131}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)={0x9c, r8, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x71, 0x3, "fec2a94f7b9127bbd7812f59f47bae4184bbe4e36c5a114630a30a3fba9b6afeb927a498578b40b64efd6a1bf0c9dd79f2f1054a629cc259b869e9470151c3a0f7f0455b2959cd0198d0406c4e77ed9bac4b40cff2e5043e9e525f0fc9f5ba52e9125042880d275f48439c709c"}, @OVS_PACKET_ATTR_HASH={0xc}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x9a8f}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20004c90) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001c80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4008201}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10c, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_FLAGS={0x45, 0x11, "5fe92eabb72fdacd85ffc9b7e20e9b7e3dbde415cedd9fe90f3ee25f1e30c517efb071b8870bc255c395248ba89d75f294f79031860a090f615bd9412f6f594a45"}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x84, 0xbb, "ac4439569c0482b64ae1be69a6e0b522c455652dc21b3207685615f0095f2ec832334bd1f3eb384608428976ccd7abbb885603b2717432af180f1768d54da568f656016f3221fb263446c436d36b61624fb70cdfc4d8f7123e724779161fd5f822b4d012d5f9dc36e044ef7375d344f67cae6ad6520e1087c351b89ef1f2a8c5"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a7b86253d64148a94bd530fd72cdc081934792276566acb1"}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc011}, 0x1) 6m30.155583769s ago: executing program 1 (id=4045): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4000800, 0x8, 0xc) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) connect$auto(0x3, 0x0, 0x55) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) mlockall$auto(0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x88d0}, 0x2000c041) socket(0x2, 0x1, 0x0) socket(0x5, 0x1, 0xe5f) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x2) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x100000000000038, 0x0) fsopen$auto(0x0, 0x1) open(&(0x7f0000000000)='./file0\x00', 0xe63e, 0x20) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) 6m14.131355094s ago: executing program 44 (id=4045): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4000800, 0x8, 0xc) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) connect$auto(0x3, 0x0, 0x55) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) mlockall$auto(0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x88d0}, 0x2000c041) socket(0x2, 0x1, 0x0) socket(0x5, 0x1, 0xe5f) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x2) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x100000000000038, 0x0) fsopen$auto(0x0, 0x1) open(&(0x7f0000000000)='./file0\x00', 0xe63e, 0x20) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) 5m32.350704114s ago: executing program 4 (id=4133): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_pgetevents$auto(0x8, 0x4, 0x6871a176, 0x0, 0x0, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x8000000000000001, 0x6) clone3$auto(0x0, 0x40) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) setuid$auto(0xe) bpf$auto(0x5, 0x0, 0x5) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) gettimeofday$auto(0x0, 0x0) 5m25.839365334s ago: executing program 4 (id=4144): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20048890}, 0x2000c041) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000100)={0x2, @sockaddr_1_1={"69ae3824405e97b4d4a0f444af443b80fba24f92d245c549386761b79a2a6d46c22cb73c6ee0f04594091b8b92fe7e2408223519fb0f15caca561f38e1a90bb8812bca3d608be09eb5052ed2"}}, 0x6b) (async) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_SET_DEST(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x87, 0x3, "0124444bb37ecdfc0274f657a21d5f52a5eaedd2ac531798de87a62b3bdba7aaa5edd2b38d88d8a0ef02cee6abe9babfb7f0c64ce42ba85fe385203c13f58992d1507da5e8508079c011fb41f62f2b2cec7b769f4c30c464390a1d40bc2de10e2651c5b7aa2409c61db3c621a84afd0a8bcb093697d0be28803ba433104768f03b3dfd"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40044}, 0x40000) 5m25.032542172s ago: executing program 4 (id=4146): mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x73) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="4d0000089985e923cfabffa4af28fd6a53e4ea844420"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x80000) 5m24.222402305s ago: executing program 4 (id=4150): socket(0x2, 0x3, 0xa) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x3, 0x5, 0x7, 0x0) clone$auto(0x40, 0x0, 0x0, 0x0, 0xa80) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) socket(0xa, 0x2, 0x73) (async) bind$auto(0x3, &(0x7f0000000040)={0xa, @sa_data_min="001000"}, 0x69) (async) select$auto(0x3, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x0, 0xc, 0x8, 0x3, 0x6, 0x2, 0x9, 0x5e582970, 0x4000000000000000, 0x8, 0x4, 0x9, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100000012"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x8, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xc57138c}, 0x9a6, 0xe000) getsockopt$auto(0x4, 0x40000000084, 0x1d, 0xfffffffffffffffe, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x0, 0x0) (async) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) getsockopt$auto(0x6, 0x40000000029, 0x16, 0xfffffffffffffffe, 0x0) (rerun: 64) 5m21.469276616s ago: executing program 4 (id=4154): timer_delete$auto(0x10000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) 5m18.137489682s ago: executing program 4 (id=4163): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) r1 = socket(0xa, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_HSR(&(0x7f0000000080), r1) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa487a21159300747}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02040000", @ANYRES16=r3, @ANYBLOB="020026bd7000fcdbdf250300000006000700060000000a0001000d1de00205570000"], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x2000850) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x3, 0x408, 0xc, 0xffffffffffffffff, 0x4000000002, 0x50}, 0x6f4) bind$auto(0x3, &(0x7f0000000040)={0xa, @sockaddr_1_1={"44c889ce6bedc9"}}, 0x6b) mount$auto(0x0, &(0x7f00000002c0)='/\x00', 0x0, 0x7, 0x0) 5m2.440433241s ago: executing program 45 (id=4163): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) r1 = socket(0xa, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_HSR(&(0x7f0000000080), r1) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa487a21159300747}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02040000", @ANYRES16=r3, @ANYBLOB="020026bd7000fcdbdf250300000006000700060000000a0001000d1de00205570000"], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x2000850) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x3, 0x408, 0xc, 0xffffffffffffffff, 0x4000000002, 0x50}, 0x6f4) bind$auto(0x3, &(0x7f0000000040)={0xa, @sockaddr_1_1={"44c889ce6bedc9"}}, 0x6b) mount$auto(0x0, &(0x7f00000002c0)='/\x00', 0x0, 0x7, 0x0) 3m6.766928938s ago: executing program 8 (id=4395): mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x2, 0x0) socket(0xa, 0x2, 0x4) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) select$auto(0xb, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4b, 0x7, 0x15, 0x4, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x5}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) 3m6.270107443s ago: executing program 8 (id=4399): mmap$auto(0x2cce0000000, 0x1003, 0x100000001, 0x9b72, 0x2, 0x1) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x14, 0x0, 0x56b) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x73) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="4d0000089985e923cfabffa4af28fd6a53e4ea849420"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x80000) prctl$auto(0x1000000003b, 0x2, 0x0, 0x5, 0x400) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) madvise$auto(0x0, 0xffffffffffff0001, 0x15) utime$auto(0x0, 0x0) 3m2.957966345s ago: executing program 8 (id=4405): arch_prctl$auto(0xfff, 0x1000) chdir$auto(&(0x7f0000000200)='/\x00') mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1e"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(0x0, 0xfffffffffffffffc, 0x60000002, 0x0) setsockopt$auto(0x3, 0x1, 0x45, 0x0, 0x9) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r1) mkdir$auto(&(0x7f0000000140)='MAC80211_HWSIM\x00', 0x1) rmdir$auto(&(0x7f0000000340)='MAC80211_HWSIM\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'macsec0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r3, 0x301, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) getsockopt$auto(0x6, 0x11c, 0x1, 0xfffffffffffffffe, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x1b, 0x0) clock_nanosleep$auto(0xfffffff9, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 3m1.413849099s ago: executing program 8 (id=4408): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0xffffffff, 0x9, 0x8000000000000000, 0x0) r0 = socket(0x21, 0x3, 0xa) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r2, @ANYBLOB="110325bc6b00fedbdf2513", @ANYRES64=r0, @ANYBLOB="323b645e4dd0edd817a3f91378533a78da51719c2fc4a4d4741d6b14c639a0a81d1c634ee9b72b1eb333c0c6cbe83d3e9227d2e2da64d4df877fdf7d414d7976249e79762a84da38bfd22961dd3ed85ec0840d91d471dafd81ff7506d30b683f0edb96df4e80d1763f2cdb0e89d1", @ANYRESDEC=r1], 0x14}, 0x1, 0x0, 0x0, 0xc801}, 0x4040) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) ioctl$auto(0x3, 0xfffffff8, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000000)='.\x00', 0x0, 0xa) getdents64$auto(0x0, &(0x7f0000000440)={0x6, 0x4, 0x5, 0x1}, 0x2000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x14) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x30040005) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) 2m59.875251977s ago: executing program 8 (id=4412): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x801, 0x84) (async) socket(0x2, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="6a2f7ff43519eb7100"}, 0x55) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) (async) sysinfo$auto(0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) (async) close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 32) ioctl$auto(r0, 0x100, 0x4) (rerun: 32) 2m57.83047498s ago: executing program 8 (id=4419): unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) unshare$auto(0x20000080) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setns(r0, 0x0) (async) mlockall$auto(0x7) (async, rerun: 64) personality$auto(0xfffffffc) (async, rerun: 64) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) fcntl$auto(0x2, 0x40c, 0x7f) (async) execve$auto(&(0x7f0000000200)='\x06a\xae\x00'/19, 0x0, 0x0) (async) execve$auto(&(0x7f0000000040)='ns/time_for_children\x00', &(0x7f0000000140)=&(0x7f0000000100)='\x00', 0x0) (async) symlink$auto(&(0x7f00000001c0)='-\x00', &(0x7f0000000280)=')s:\x00') (async) execve$auto(&(0x7f00000005c0)=':,\x00', 0x0, 0x0) execve$auto(&(0x7f00000002c0)=':,\x00', &(0x7f0000000480)=&(0x7f0000000540)='\x00', &(0x7f0000000500)=&(0x7f0000000400)='\x00P2\xc4c\xe5\xb5\x1b\x0f\x97\x83\xaai`\xdb\xdfn\x96:u\x13\xa4\x0e1\x8cU\xa5\xa1\xf8\xb7^\xd1\xf7\xcf\f\xd7>\xb1\x9b(') (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) mlockall$auto(0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16) (async) mmap$auto(0x3, 0x2020009, 0x4, 0xebf, 0xfffffffffffffffa, 0x400000008000) alarm$auto(0x1) mmap$auto(0xc, 0x2000000000534, 0x3, 0x50000000017, 0x2, 0x1) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x3a) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) madvise$auto(0x0, 0x80000001, 0x8) 2m42.025747317s ago: executing program 46 (id=4419): unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) unshare$auto(0x20000080) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setns(r0, 0x0) (async) mlockall$auto(0x7) (async, rerun: 64) personality$auto(0xfffffffc) (async, rerun: 64) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) fcntl$auto(0x2, 0x40c, 0x7f) (async) execve$auto(&(0x7f0000000200)='\x06a\xae\x00'/19, 0x0, 0x0) (async) execve$auto(&(0x7f0000000040)='ns/time_for_children\x00', &(0x7f0000000140)=&(0x7f0000000100)='\x00', 0x0) (async) symlink$auto(&(0x7f00000001c0)='-\x00', &(0x7f0000000280)=')s:\x00') (async) execve$auto(&(0x7f00000005c0)=':,\x00', 0x0, 0x0) execve$auto(&(0x7f00000002c0)=':,\x00', &(0x7f0000000480)=&(0x7f0000000540)='\x00', &(0x7f0000000500)=&(0x7f0000000400)='\x00P2\xc4c\xe5\xb5\x1b\x0f\x97\x83\xaai`\xdb\xdfn\x96:u\x13\xa4\x0e1\x8cU\xa5\xa1\xf8\xb7^\xd1\xf7\xcf\f\xd7>\xb1\x9b(') (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) mlockall$auto(0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16) (async) mmap$auto(0x3, 0x2020009, 0x4, 0xebf, 0xfffffffffffffffa, 0x400000008000) alarm$auto(0x1) mmap$auto(0xc, 0x2000000000534, 0x3, 0x50000000017, 0x2, 0x1) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x3a) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) madvise$auto(0x0, 0x80000001, 0x8) 15.218859386s ago: executing program 7 (id=4710): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000400)={0x296101, 0x4a, 0xe1057435771835a}, 0x18) unshare$auto(0x20000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x0) clone$auto(0xfffffffe00000, 0x1, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x400000000004) 14.940963s ago: executing program 7 (id=4711): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) pread64$auto(r4, 0x0, 0x1, 0x8) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) brk$auto(0xffffffffffffff66) (async, rerun: 32) socket(0xa, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async, rerun: 64) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) write$auto(r0, &(0x7f0000000180)='-;/\x00', 0x3) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$auto_MAC802154_HWSIM(0x0, r4) (async) writev$auto(0x1, 0x0, 0x1) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xe0, 0x9b72, 0x2, 0x8000) (async, rerun: 64) sendmsg$auto_NETDEV_CMD_NAPI_GET0(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r1, 0x301, 0x70bd2b, 0x25dfdbfe, {}, [@NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40051}, 0x64040884) 12.01736438s ago: executing program 7 (id=4721): mmap$auto(0x8, 0x2020009, 0x3, 0x800000eb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22242, 0x155) socket(0x22, 0x3, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x15, 0x5, 0x0) r3 = socket(0x2, 0x1, 0x106) sendmsg$auto_NFC_CMD_SE_IO(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="870d0000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf251b00000006001100080000000a0019008d3481c5ab0d000005000a0080000000"], 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) move_mount$auto(r1, 0x0, r1, 0x0, 0x277) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x1413c0, 0x4) vmsplice$auto(r4, &(0x7f00000000c0)={0x0, 0x2}, 0x7, 0x2) close_range$auto(0x7, 0xfffffffffffffff8, 0x2) socket(0x6, 0x6, 0x0) mmap$auto(0x2, 0xfffffffffffffff9, 0x8, 0x12, 0x5, 0x6ab) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r3, &(0x7f0000000000)={0x0, 0xffffffffffffff06, &(0x7f0000001300)={&(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x18}}, 0x24044002) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000001040), 0x7f) mprotect$auto(0x1, 0xffff, 0xe) clone$auto(0x7, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x7) fsmount$auto(0x6, 0x1, 0xac) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) socket(0x10, 0x2, 0x0) dup2$auto(0x5, 0x4) 11.181448327s ago: executing program 3 (id=4724): socket(0xa, 0x3, 0x73) (async) socket(0xa, 0x3, 0x73) mmap$auto(0x0, 0x400008, 0xdf, 0x9b76, 0x3, 0x7fff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b76, 0x3, 0x7fff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2) setsockopt$auto(0x400000000000003, 0x29, 0x7, 0x0, 0x401) socket(0xa, 0x2, 0x3a) (async) r0 = socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0xe, 0xeb1, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getresgid$auto(&(0x7f0000000000)=0x2, 0x0, 0x0) setsockopt$auto(r0, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) setsockopt$auto(0x400000000000003, 0x29, 0x37, 0xffffffffffffffff, 0x0) 11.080573225s ago: executing program 7 (id=4725): r0 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) write$auto(0x1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8, 0x7) socket(0x1d, 0x2, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mseal$auto(0x8000, 0x7, 0x0) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000002c75eae2c1c1162ea6dc361300", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf25010000000c00040000000000000000000c000200050000000000000004000700"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) (async) write$auto(0x1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8, 0x7) (async) socket(0x1d, 0x2, 0x6) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mseal$auto(0x8000, 0x7, 0x0) (async) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000002c75eae2c1c1162ea6dc361300", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf25010000000c00040000000000000000000c000200050000000000000004000700"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) (async) 11.080092186s ago: executing program 5 (id=4726): socket(0x2, 0x801, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000080) landlock_create_ruleset$auto(&(0x7f0000000000)={0xf0, 0x9}, 0xb, 0x0) listen$auto(0x3, 0x9) sendfile$auto(0x1, 0x3, 0x0, 0xc01) 10.010095733s ago: executing program 5 (id=4727): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="c1c33da3", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40000c0) clone$auto(0x81000005, 0x2, 0xfffffffffffffffd, 0xffffffffffffffff, 0x7ffffffa) mbind$auto(0x452d, 0xc, 0x0, &(0x7f00000000c0)=0x3b5, 0x9, 0x5) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x60) madvise$auto(0x0, 0xffffffffffff0001, 0x15) init_module$auto(0xffffffffffffffff, 0x100, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x9, 0x6) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x800000000000008, 0xc, 0x9, 0x3, 0x6, 0x1, 0x40009, 0x5e582972, 0x4000000000000000, 0x14, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000040000fdef}, 0x1) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004084}, 0x48000) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(0x0, 0xffffffffffffffff) ppoll$auto(0x0, 0x9eba, &(0x7f0000000140)={0x5852, 0x1000}, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20005811}, 0x4048040) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) fanotify_init$auto(0x65, 0x2) 7.821031896s ago: executing program 7 (id=4729): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) sendfile$auto(0x1, 0x3, 0x0, 0xc01) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xffffd, 0x4020008, 0xdf, 0xeb1, 0x2000000000401, 0x8000) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x2000004, 0x4000000000df, 0x40eb2, 0x1000000000402, 0x2fe09165) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x73) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) 7.073436831s ago: executing program 3 (id=4731): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0x10, 0x2, 0x0) mprotect$auto(0x2, 0xffffffffffffffff, 0x1) socket(0x23, 0x80805, 0x0) (async) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) socket(0x2b, 0x1, 0x0) (async) r1 = socket(0x2b, 0x1, 0x0) msgctl$auto(0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4004801) socket(0xa, 0x2, 0x88) (async) socket(0xa, 0x2, 0x88) sendfile$auto(0x1, 0x3, 0x0, 0xc01) recvfrom$auto(0x3, 0x0, 0x2, 0x6, 0x0, 0x0) (async) recvfrom$auto(0x3, 0x0, 0x2, 0x6, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) (async) shutdown$auto(0x200000003, 0x2) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) setsockopt$auto(0xffffffffffffffff, 0x7fffffff, 0x7, 0x0, 0x3b3) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TCP_METRICS_ATTR_ADDR_IPV4={0x0, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004010}, 0x40000c0) unshare$auto(0x80) (async) unshare$auto(0x80) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) 6.959455283s ago: executing program 6 (id=4732): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x100000000000039, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) bind$auto(0x3, &(0x7f0000002000)={0x10, @sockaddr_1_1={"be299638191f5f"}}, 0xf) unshare$auto(0x40000080) 6.170568829s ago: executing program 3 (id=4733): unshare$auto(0x40000080) mmap$auto(0x40001, 0xaa3, 0x3, 0xeb1, 0x800000000000000c, 0x8000) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) mlockall$auto(0x7) socket(0x2a, 0x2, 0x6) connect$auto(0x3, &(0x7f0000000180)={0x2a, @sockaddr_1_1}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1, 0x1, 0x1) mlockall$auto(0x4) socket(0x2c, 0x80003, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x10001, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(r1, 0x0, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0xc01) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x7, 0x207, 0x7, 0xc, 0x9, 0x0, 0x8000000000000001, 0x2800000000000002, 0x9, 0xde582971, 0xff, 0x9, 0x4, 0xffff, 0x8, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) clock_adjtime$auto(0x400003, &(0x7f0000000000)={0x8000, 0x2, 0x80000001, 0x2, 0x5, 0x9d89, 0x5, 0x4, 0xffff8c94, 0x0, 0x1, {}, 0x4, 0x2, 0x3, 0x6, 0xf, 0x3, 0x9}) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="293ad8c700003c"], 0x5d}, 0x1, 0x0, 0x0, 0x4010}, 0x4045880) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x8c, 0x100000000, 0x101, 0x10010, 0x7fffffffffffffff, 0x6) ioctl$auto(0xc9, 0x100000002, 0x4000000005c8d) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\xef\x00', 0x3) socket(0x15, 0x5, 0x0) 4.774070524s ago: executing program 3 (id=4734): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xf8, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_FEC_MODES={0xb1, 0x2, "2c78bbd486144602543afaeb48d47db230b6fccb9f80b12beea70a54c3483404b46defc5a6c58345e6c94e7db5b8ab5f5221193805b2ef79d3446602cfc96a7d1658196a32c8dd8df733ce0a63af950057b5c92dc5f5b4999bb85648256f90341a3b7337d7f730259c684b365df552f8adf3c94f9bda3ce361db0a26c6f35395b710a25d8eb22e1727e6d0b07c5aeceae60bc34f49c784c0ebeebf540cb0452b506f03373588ee9395ea65b508"}, @ETHTOOL_A_FEC_MODES={0x2d, 0x2, "3b6dbb442d4da77fbd1c9d22056a193ed43e12dafea2be2deaca9fdc7232db838b4b0bfc8d0000008d"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4014}, 0x4800) process_madvise$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x7}, 0x9, 0x977, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') setresuid$auto(0x60, 0x1000, 0x8000) setns(r2, 0x0) socket(0xa, 0x801, 0x106) mknod$auto(&(0x7f0000000b00)='\xe1\x9eHU', 0x63d1, 0x7ff) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) 4.552985151s ago: executing program 6 (id=4735): socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x3) r0 = socket(0x2b, 0x1, 0x1) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r2, 0xf25736b7f4caf589, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4048000) socket(0x15, 0x5, 0x0) bind$auto(r0, &(0x7f0000000000)={0x2, @sa_data_min="58fe000000000000e5ffffff00"}, 0x400) 4.117338948s ago: executing program 3 (id=4736): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x5, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x8000000000000201, 0x9, 0x3, 0x6, 0x7, 0xd886, 0xb68, 0x341, 0x41, 0x7, 0x200, 0x8, 0xc]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0x2000000003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x6, 0x1d, 0x0, 0xfb3) socket(0xa, 0x5, 0x0) socket(0xa, 0x2, 0x3a) socketpair$auto(0x3, 0x5, 0x1e1, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="bfb75aafbff83e2900"}, 0x69) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) 3.997909537s ago: executing program 5 (id=4737): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) close_range$auto(0x2, 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xbb4, 0x2, 0x8000) bpf$auto(0x0, &(0x7f0000000040)=@task_fd_query={0x0, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x1000, 0x3}, 0x6f3) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket(0x2a, 0x2, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x5, 0x73) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(0x0, 0x0, 0x18) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x222c0, 0x146) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000180)={0x2, @sa_data_min="56339cb253921f17b1cfb8e8cca5"}, 0x55) 3.93055876s ago: executing program 6 (id=4738): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xfffffffffffffcbd, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x8000}, @BATADV_ATTR_TT_FLAGS={0x8, 0x15, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) bpf$auto(0xffffffff, &(0x7f0000000780)=@link_update={0x6, @new_map_fd=0x4, 0x4007, @old_map_fd=0x6}, 0xa3) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x10001, &(0x7f0000000000)=0xffff, 0x6) pipe$auto(&(0x7f0000000240)=0x8) writev$auto(0x5, &(0x7f0000000100)={0x0, 0x5}, 0x201) vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x2}, 0x2, 0x5) close_range$auto(0x2, 0x8000, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYRESOCT], 0x1ac}}, 0x20000051) 3.602120347s ago: executing program 6 (id=4739): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x3, 0x5, 0x7, 0x0) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0x4, 0x0, 0x3}, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x3, 0x200005, 0x2, 0x40eb1, 0x800000000005ff, 0x300000000000) fcntl$auto(0x2, 0x6, 0x80000001) madvise$auto(0x0, 0x20000a, 0x2004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21eb, 0xffff85ef, 0x3, 0x8, 0x4, 0x2e, 0x0, 0x3}, 0x6f4) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x8, 0xae7, 0xf331, 0x18, 0xfffffffffffffff9, 0x4) sendmsg$auto_NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="100300cf", @ANYRES16=r0, @ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x20002000}, 0x50) setrlimit$auto(0x1000000007, 0x0) socket(0x18, 0x5, 0x0) madvise$auto(0x0, 0x200007, 0x19) r1 = open(0x0, 0x1a1043, 0x2a) shutdown$auto(r1, 0x1000) 3.115005697s ago: executing program 3 (id=4740): msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) (async) msync$auto(0x3, 0x4, 0x1) 2.581198268s ago: executing program 5 (id=4741): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2) (async) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) io_uring_setup$auto(0x6, 0x0) (async) setfsuid$auto(0x30) (async) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0x8008b705, 0x0) (async) mmap$auto(0x0, 0x10000c5, 0x0, 0x40eb2, 0x402, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x88, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x70, 0x1, "0300000000000000cb1a814af2acaf6d57b9a8d55567bfcbf3c47bc8b993b6e47c7ea9440c3a4c0b1178e81da90cc73ba3bab8ec237214360e5a4c4d3bb9d20e4d6cd4a934996212c16338e696a3293a07d6e829049852156a7c62e49be943632214467669c30156ae98166c"}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x200008d4) memfd_create$auto(&(0x7f00000001c0)='\xc4--:\xdd:,.\xa1K\'\a6\xeb\x9a\xcb\xd5:J\xf2\x1e\x8fj\xa5\xd7l(\x10b\xc3\x95tl\xca\n\"{l\b\xaa+w \x7f\x042\xbe\x95`\xb0o\xe7\x84\xcd\xf7\xb4\xc1\x89\xabR\x16\xca\xa86\xbf\x9e\xff\xc0r\xa7\xa7[\xd2\xc0\xcf \xefZ\x9b\x01\x82$5_\x14z1\x1b:um\xcc*(cB\x05\xcd\x018\x80\x86\x87\xd2\x84`0\xda\xc8Y\x83>*\x9e\xf7!v\xf0\xeb\x1e\xd3\xd1&H<\x7f\xf7\x9f\xc28\xc9ViL7c?\xd75\x8f\xff\"\xf8\x93#\xa49\'\xd5\xbeH\x82\n\xe3\x19\xd4\t\xd5Eu\x05\xf4b\xc8\x99\x17\xee*D\x86\xa2\x9f\xa0\x9f\xca$\xcf\x19\xb34o\xbc\xd8h\x97\xcdB\x8b\x03\xaa#\xff\xd1l\xbc\v\f-k\x9d\xf5\xde\xb3\xb3pf\x02\x8b:\x13\x00\xdf\xb4\xd4f0\xffZ\x84\xd8\xce\xa8{@\x90\xd0\xb00\xb2\xd0(\x9fy\xb7\x02\xbcn\x03\xceF\xbc\xf1rK\x8e\x17+\xa2\x8aG\xed\x12\xfds\x1d\x13;\x16\xbcdZ\x90\x8e\xe8\x88\x17r\x1fJ\xb5\r\x93\xbb\xe8Z\xae%\x1a\x9b<\a\t\\,<\x04a\x84\xe7\xea\xefq8\xb3\x93GF&\xda\x9dn\xdf:\xe9nf;\x85\x1a\xe5\x03\xaf\xd5\xdb\xdeDSE\xae\xae\x1e\x0e\xab\xbc\x8az\x959J\a\x83\xf0\x1d\xc5\xca\xb38\xe2\x1d \xd4\x00'/356, 0x4) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async) mmap$auto(0x0, 0x400006, 0xdf, 0x809b72, 0x2, 0x8000) pipe2$auto(0x0, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) dup2$auto(0x5, 0x4) (async, rerun: 64) select$auto(0xb, &(0x7f0000000100)={[0x7f, 0x31, 0xffffffffffffffff, 0x80000000, 0x7, 0x6, 0x81, 0x67e, 0x8, 0x2, 0x5, 0x10001, 0x334, 0x4, 0xfffffffffffffffe, 0x8]}, 0x0, 0x0, 0x0) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xd, 0x0, 0x8000) (async) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000000), r0) (async, rerun: 32) r3 = open(&(0x7f0000000080)='./file0\x00', 0x22000, 0x50) (rerun: 32) fsync$auto(r3) (async) io_uring_register$auto(0xffffffffffffffff, 0x6, 0x0, 0xfffffffe) 2.48289621s ago: executing program 7 (id=4742): r0 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x800, 0x5) socket(0xa, 0x3, 0x6) r1 = socket(0x10, 0x2, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) socket(0xa, 0x3, 0x6) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="ff00"}, 0x55) sendmmsg$auto(0x15, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x1, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) write$auto(r1, 0x0, 0xffd8) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f00000022c0)='ns/uts\x00') clone$auto(0x7, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x7) munmap$auto(0x20001000, 0x7) clone$auto(0x0, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000800), r3) sendmsg$auto_TIPC_NL_MEDIA_SET(r3, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000840)=ANY=[@ANYBLOB="14200000", @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x40010) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) sendfile$auto(0x1, 0x3, 0x0, 0xc01) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1a00279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x890c, 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x0) open$dir(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x42000, 0x5) 1.902906537s ago: executing program 6 (id=4743): r0 = socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe80000000000100"}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) write$auto(r0, 0x0, 0x2) write$auto(0x3, 0x0, 0x34000) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x3ff, 0x9) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) 1.557487196s ago: executing program 5 (id=4744): madvise$auto(0x0, 0x2000040080000004, 0xe) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002240), 0xffffffffffffffff) r0 = socket(0x2c, 0x9, 0x0) r1 = socket(0xe, 0x3, 0x2) fcntl$auto(r1, 0x80, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r0, 0x0, 0x4058000) mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_notify$auto(0x7, 0x0) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) connect$auto(0x200, &(0x7f0000000000)={0x6, @sa_data_min="37788c9e9b6e551fd34c824ab613"}, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) fstatfs$auto(0x0, 0x0) socket(0x1d, 0x5, 0x1) setsockopt$auto(0x3, 0x8000000000000006, 0x22, 0x0, 0x7ffffc) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) prctl$auto(0x6, 0x1, 0x4, 0x5, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) mmap$auto(0x8000000000000001, 0x2020009, 0x200003, 0xeb4, 0xc, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x40000002, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x6, 0x0) fanotify_init$auto(0x9, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 576.355064ms ago: executing program 6 (id=4745): madvise$auto(0x0, 0xffffffff, 0xe) (async) memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) (async) ftruncate$auto(0x3, 0x700) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x7ffd) (async) close_range$auto(0x2, 0x8000, 0x4000000000) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) (async, rerun: 64) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 64) mlock$auto(0xfbe8, 0x1000000000000004) mlock$auto(0x81, 0xffff) move_pages$auto(0x1, 0x2000000000003, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000) (async) mmap$auto(0x0, 0x20009, 0x9, 0x11, 0x401, 0x8000) (async) close_range$auto(0x4000000000000, 0x5, 0x4000000000002) (async, rerun: 32) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (rerun: 32) getdents64$auto(0x0, 0x0, 0x2000) close_range$auto(0x2, 0x8003, 0x0) (async, rerun: 64) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') (rerun: 64) 0s ago: executing program 5 (id=4746): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) sendmsg$auto_IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, 0x0, 0x24000000) (async) io_cancel$auto(0xfffffffffffffffc, &(0x7f0000000000)={0x9, 0x7fffffff, 0x7fff, 0xfff, 0x9, 0x0, 0x54, 0x5, 0x1, 0x0, 0x9, 0xffffffffffffffff}, &(0x7f0000000040)={0x4, 0x6490, 0x9, 0x100000001}) r1 = syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_SRC_HW_ADDR={0xc, 0xc, 0xf}]}, 0x28}}, 0x4091) (async) socket(0x11, 0xa, 0x300) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x0, 0x2, 0x8, 0xc, 0x66b, 0x4, 0x1}, 0x6f4) clock_gettime$auto(0x1, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) unshare$auto(0x9) close_range$auto(0x2, 0x8000, 0x0) kernel console output (not intermixed with test programs): tting the MTU to 1560 would solve the problem. [ 1375.560363][T28766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1375.707635][T28261] hsr_slave_0: left promiscuous mode [ 1375.815161][T28261] hsr_slave_1: left promiscuous mode [ 1375.931825][T28261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1375.939304][T28261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1376.142265][T28261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1376.170154][T28261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1376.281610][ T5841] Bluetooth: hci2: command tx timeout [ 1376.505279][T28261] veth1_macvtap: left promiscuous mode [ 1376.510860][T28261] veth0_macvtap: left promiscuous mode [ 1376.551502][T28261] veth1_vlan: left promiscuous mode [ 1376.561530][T28261] veth0_vlan: left promiscuous mode [ 1381.220006][T28261] team0 (unregistering): Port device team_slave_1 removed [ 1381.475779][T28261] team0 (unregistering): Port device team_slave_0 removed [ 1383.607360][T28766] hsr_slave_0: entered promiscuous mode [ 1383.628378][T28766] hsr_slave_1: entered promiscuous mode [ 1383.639010][T28766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1383.656496][T28766] Cannot create hsr debugfs directory [ 1385.285639][T28766] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1385.391706][T28766] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1385.447866][T28766] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1385.520890][T28766] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1385.619316][T29004] ptrace attach of "./syz-executor exec"[26335] was attempted by "jâ5æ×Â\x0cïTøu(RÝǯû–J¯øÝ`ª|à0#ˆzzÈøt0²Cwe˜í:5Óçm4Mñ)i·U(ÚæYÓÅÌZÂç~_Dâé”Õ™è{\x5cÿ±ü\x0cƒ¬D¡ë6ËÖ­gbµé>—ÿ7øÊà>̹¹‘†‰˜\x1b[=Jòé›ÏÌ÷ÁÎÉ÷sG\x22¾Ç–¹o(Øw¸‹@¯„Ü~#ê™ëéræ׃¶BÞ§RŒÑì™÷ösŒ¢Q #Tˆ¶fÌÚP©e¢¤B¬ý.çÔÁÿYv™yºwtDò]WïÎÏø]©ã)´\x092p«h×ν),Ý:­©ÎQÊ\x1b\x0a\x0b\x0c%•BE:kaG“fÛ.œ»~\x22bFÚ ÈëR\x07g~ƒ··¾› Rû?(4—3Ï©ÏmöôQé3AÊc­KÚò\x0d\x07!Fü®f†ªxøL>oÔ,S£+T\x0dƒÚoøË-ZW!ÒòÊ¿îOs@½u“G.zÏ(öü 1 [ 1431.556775][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1431.572291][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1431.592913][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1431.611583][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1431.620006][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1432.133286][T13109] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.408570][T13109] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.610096][T13109] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.070186][T29774] chnl_net:caif_netlink_parms(): no params data found [ 1433.279068][T13109] bridge_slave_1: left allmulticast mode [ 1433.296748][T13109] bridge_slave_1: left promiscuous mode [ 1433.315563][T13109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.495226][T13109] bridge_slave_0: left allmulticast mode [ 1433.501018][T13109] bridge_slave_0: left promiscuous mode [ 1433.529717][T13109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.721529][T28768] Bluetooth: hci1: command tx timeout [ 1434.749767][T13109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1434.777025][T13109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1434.841593][T13109] bond0 (unregistering): Released all slaves [ 1435.129995][T29774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.137335][T29774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.158415][T29774] bridge_slave_0: entered allmulticast mode [ 1435.166399][T29774] bridge_slave_0: entered promiscuous mode [ 1435.195766][T29774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.211665][T29774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.229136][T29774] bridge_slave_1: entered allmulticast mode [ 1435.262677][T29774] bridge_slave_1: entered promiscuous mode [ 1435.420326][T29774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1435.462589][T29774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1435.606246][T13109] hsr_slave_0: left promiscuous mode [ 1435.629045][T13109] hsr_slave_1: left promiscuous mode [ 1435.671670][T13109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1435.679133][T13109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1435.712592][T13109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1435.720062][T13109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.801509][T28768] Bluetooth: hci1: command tx timeout [ 1435.810265][T13109] veth1_macvtap: left promiscuous mode [ 1435.821646][T13109] veth1_vlan: left promiscuous mode [ 1435.827041][T13109] veth0_vlan: left promiscuous mode [ 1437.028135][T13109] team0 (unregistering): Port device team_slave_1 removed [ 1437.150726][T13109] team0 (unregistering): Port device team_slave_0 removed [ 1437.881874][T28768] Bluetooth: hci1: command tx timeout [ 1438.623042][T29774] team0: Port device team_slave_0 added [ 1438.721583][T29774] team0: Port device team_slave_1 added [ 1438.802294][T29774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1438.809275][T29774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1438.856708][T29774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1438.869534][T29774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1438.876642][T29774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1438.903246][T29774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1439.252433][T29774] hsr_slave_0: entered promiscuous mode [ 1439.332454][T29774] hsr_slave_1: entered promiscuous mode [ 1439.386752][T29774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1439.406476][T29774] Cannot create hsr debugfs directory [ 1439.961416][T28768] Bluetooth: hci1: command tx timeout [ 1442.053888][T29774] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1442.095441][T29774] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1442.164246][T29774] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1442.231422][T29774] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1442.559524][T29774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1442.577017][T29774] 8021q: adding VLAN 0 to HW filter on device team0 [ 1442.596580][T26721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.603827][T26721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1442.672372][T26721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.679530][T26721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1443.275795][T29774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1443.844556][T29774] veth0_vlan: entered promiscuous mode [ 1443.909533][T29774] veth1_vlan: entered promiscuous mode [ 1443.971849][T29774] veth0_macvtap: entered promiscuous mode [ 1444.009796][T29774] veth1_macvtap: entered promiscuous mode [ 1444.080015][T29774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.146632][T29774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.181417][T29774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.225438][T29774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.259631][T29774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.291238][T29774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.301235][T29774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.340105][T29774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.381091][T29774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1444.407983][T29774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.448388][T29774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.479404][T29774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1444.525051][T29774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.572652][T29774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1444.609658][T29774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.630884][T29774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1444.652035][T29774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.671393][T29774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1444.683670][T29774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.704123][T29774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1444.741355][T29774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.763156][T29774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1444.839738][T29774] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.886700][T29774] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.921594][T29774] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.930347][T29774] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.431815][T26721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.453486][T26721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.498485][T26719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.516651][T26719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.186114][T30102] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4003'. [ 1447.317301][T30102] net_ratelimit: 11 callbacks suppressed [ 1447.317321][T30102] openvswitch: netlink: ufid size 41 bytes exceeds the range (1, 16) [ 1449.795425][T30167] netlink: 'syz.4.4020': attribute type 1 has an invalid length. [ 1449.875164][T30167] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4020'. [ 1450.411504][T30161] netlink: 326 bytes leftover after parsing attributes in process `syz.7.4018'. [ 1452.410135][T30205] CIFS mount error: No usable UNC path provided in device string! [ 1452.410135][T30205] [ 1452.750891][T30205] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1463.180019][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1463.190437][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1463.199925][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1463.208548][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1463.217058][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1463.225756][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1463.586755][T26719] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.321764][T28768] Bluetooth: hci4: command tx timeout [ 1465.745393][T26719] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.411544][T28768] Bluetooth: hci4: command tx timeout [ 1467.670679][T26719] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.588890][T26719] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.489449][T28768] Bluetooth: hci4: command tx timeout [ 1469.793249][T30352] chnl_net:caif_netlink_parms(): no params data found [ 1470.247275][T26719] bridge_slave_1: left allmulticast mode [ 1470.264763][T26719] bridge_slave_1: left promiscuous mode [ 1470.270559][T26719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.752003][T26719] bridge_slave_0: left allmulticast mode [ 1470.757816][T26719] bridge_slave_0: left promiscuous mode [ 1470.765944][T26719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.572623][T28768] Bluetooth: hci4: command tx timeout [ 1473.546588][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1473.556704][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1473.565989][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1473.574754][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1473.583636][ T5841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1473.593666][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1475.660105][T26719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1475.722284][T28768] Bluetooth: hci5: command tx timeout [ 1475.912698][T26719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1476.034699][T26719] bond0 (unregistering): Released all slaves [ 1476.943960][T30352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.951096][T30352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.018487][T30352] bridge_slave_0: entered allmulticast mode [ 1477.051591][T30352] bridge_slave_0: entered promiscuous mode [ 1477.072954][T30352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.080075][T30352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.160794][T30352] bridge_slave_1: entered allmulticast mode [ 1477.192240][T30352] bridge_slave_1: entered promiscuous mode [ 1477.354931][T30352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1477.403205][T30352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.548787][T30352] team0: Port device team_slave_0 added [ 1477.575778][T30352] team0: Port device team_slave_1 added [ 1477.714502][T30352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1477.735804][T30352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1477.801591][T28768] Bluetooth: hci5: command tx timeout [ 1477.842014][T30352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1477.893082][T30352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1477.900062][T30352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1477.990991][T30352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.124463][T30352] hsr_slave_0: entered promiscuous mode [ 1478.146856][T30352] hsr_slave_1: entered promiscuous mode [ 1478.173260][T30352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1478.180861][T30352] Cannot create hsr debugfs directory [ 1478.299135][T30399] netlink: 334 bytes leftover after parsing attributes in process `syz.7.4069'. [ 1479.061481][T30430] gre0: entered allmulticast mode [ 1479.067801][T30431] gre0: left allmulticast mode [ 1479.889253][T28768] Bluetooth: hci5: command tx timeout [ 1481.963635][T28768] Bluetooth: hci5: command tx timeout [ 1482.023147][T26719] hsr_slave_0: left promiscuous mode [ 1482.068957][T26719] hsr_slave_1: left promiscuous mode [ 1482.106086][T26719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1482.131538][T26719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1482.180157][T26719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1482.202827][T26719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.286675][T26719] veth1_macvtap: left promiscuous mode [ 1482.307193][T26719] veth0_macvtap: left promiscuous mode [ 1482.331739][T26719] veth1_vlan: left promiscuous mode [ 1482.337658][T26719] veth0_vlan: left promiscuous mode [ 1484.286429][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.297110][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.433108][T26719] team_slave_1 (unregistering): left allmulticast mode [ 1484.462519][T26719] team0 (unregistering): Port device team_slave_1 removed [ 1484.666520][T26719] team_slave_0 (unregistering): left allmulticast mode [ 1484.720756][T26719] team0 (unregistering): Port device team_slave_0 removed [ 1486.617955][T26719] team0 (unregistering): left allmulticast mode [ 1487.139684][T30416] chnl_net:caif_netlink_parms(): no params data found [ 1487.276141][T30352] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1487.335079][T30352] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1487.402820][T30352] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1487.636366][T30352] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1488.013081][T30416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.020298][T30416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.071568][T30416] bridge_slave_0: entered allmulticast mode [ 1488.119678][T30416] bridge_slave_0: entered promiscuous mode [ 1488.202574][T30416] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.209698][T30416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.292385][T30416] bridge_slave_1: entered allmulticast mode [ 1488.300557][T30416] bridge_slave_1: entered promiscuous mode [ 1488.659165][T30416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1488.715980][T30416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1488.999158][T30416] team0: Port device team_slave_0 added [ 1489.067960][T30416] team0: Port device team_slave_1 added [ 1489.463934][T30416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1489.471003][T30416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1489.706465][T30416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1489.803748][T30416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1489.891382][T30416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1490.015980][T30514] RDS: rds_bind could not find a transport for ::ffff:172.20.22.52, load rds_tcp or rds_rdma? [ 1490.081335][T30416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1490.753163][T30416] hsr_slave_0: entered promiscuous mode [ 1490.852112][T30416] hsr_slave_1: entered promiscuous mode [ 1490.871715][T30416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1490.879322][T30416] Cannot create hsr debugfs directory [ 1491.123142][T30352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1491.490724][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 1491.517966][T30352] 8021q: adding VLAN 0 to HW filter on device team0 [ 1491.805238][T15531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1491.812468][T15531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1491.883507][T15531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.890651][T15531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1493.299426][T30352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1494.728698][T30547] kexec: Could not allocate control_code_buffer [ 1495.597389][T30352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1495.968431][T30416] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1496.024485][T30416] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1496.062908][T30416] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1496.119514][T30416] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1496.559933][T30416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1496.603404][T30416] 8021q: adding VLAN 0 to HW filter on device team0 [ 1496.636199][T30416] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1496.646934][T30416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1496.714161][T27694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.721334][T27694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.772761][T27694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.779984][T27694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1497.799940][T30416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1497.819041][T30620] ptrace attach of "./syz-executor exec"[28766] was attempted by "./syz-executor exec"[30620] [ 1497.995615][T30352] veth0_vlan: entered promiscuous mode [ 1498.426390][T30352] veth1_vlan: entered promiscuous mode [ 1498.574911][T30352] veth0_macvtap: entered promiscuous mode [ 1498.726609][T30352] veth1_macvtap: entered promiscuous mode [ 1498.870561][T30352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1498.941318][T30352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1498.951183][T30352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.011377][T30352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.041339][T30352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.071764][T30352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.082425][T30352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.141388][T30352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.201650][T30352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.240750][T30352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.283197][T30352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1499.345254][T30352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1499.402503][T30352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.447432][T30352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1499.490549][T30352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.555060][T30352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1499.608200][T30352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.649301][T30352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1499.691769][T30352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.714426][T30352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1499.731411][T30352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.743731][T30352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1499.827910][T30352] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.860440][T30352] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.898520][T30352] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.938032][T30352] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.075995][T30416] veth0_vlan: entered promiscuous mode [ 1500.147425][T30416] veth1_vlan: entered promiscuous mode [ 1500.254696][T30416] veth0_macvtap: entered promiscuous mode [ 1500.288290][T30416] veth1_macvtap: entered promiscuous mode [ 1500.484849][T30416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.542897][T30416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.578702][T30416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.591363][T30416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.621315][T30416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.651505][T30416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.672960][T30416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.696438][T30416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.725771][T30416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.745999][T30416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.766635][T30416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.798031][T30416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.816778][T30416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1500.944935][T30416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1500.991573][T30416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.059510][T30416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.106131][T30416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.151353][T30416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.201614][T30416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.271526][T30416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.311376][T30416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.353624][T30416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.405238][T30416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.446887][T30416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.502098][T30416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.550830][T30416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1502.126450][T30416] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.158811][T30416] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.181359][T30416] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.190113][T30416] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.339490][T15526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.373099][T15526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.637885][T26722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.646557][T26717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.692940][T26717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.700466][T26722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.287745][ T7572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.364616][ T7572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.952808][T30771] lo: entered allmulticast mode [ 1511.683850][T30771] lo: left allmulticast mode [ 1512.401751][T30778] Process accounting resumed [ 1518.923501][T30865] FAULT_INJECTION: forcing a failure. [ 1518.923501][T30865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1518.946975][T30865] CPU: 1 UID: 0 PID: 30865 Comm: syz.8.4136 Not tainted 6.12.0-rc7-syzkaller #0 [ 1518.956073][T30865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1518.966164][T30865] Call Trace: [ 1518.969469][T30865] [ 1518.972482][T30865] dump_stack_lvl+0x16c/0x1f0 [ 1518.977203][T30865] should_fail_ex+0x497/0x5b0 [ 1518.981911][T30865] _copy_from_user+0x2e/0xd0 [ 1518.986535][T30865] copy_msghdr_from_user+0x99/0x160 [ 1518.991762][T30865] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1518.997606][T30865] ? find_held_lock+0x2d/0x110 [ 1519.002411][T30865] ___sys_sendmsg+0xff/0x1e0 [ 1519.007573][T30865] ? __pfx____sys_sendmsg+0x10/0x10 [ 1519.012919][T30865] ? fdget+0x176/0x210 [ 1519.017014][T30865] __sys_sendmsg+0x117/0x1f0 [ 1519.021629][T30865] ? __pfx___sys_sendmsg+0x10/0x10 [ 1519.026795][T30865] do_syscall_64+0xcd/0x250 [ 1519.031322][T30865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.037260][T30865] RIP: 0033:0x7f4b92d7e719 [ 1519.041696][T30865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1519.061335][T30865] RSP: 002b:00007f4b93c54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1519.069780][T30865] RAX: ffffffffffffffda RBX: 00007f4b92f35f80 RCX: 00007f4b92d7e719 [ 1519.077780][T30865] RDX: 0000000000080000 RSI: 0000000020001d40 RDI: 0000000000000003 [ 1519.085861][T30865] RBP: 00007f4b93c54090 R08: 0000000000000000 R09: 0000000000000000 [ 1519.093855][T30865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1519.101851][T30865] R13: 0000000000000000 R14: 00007f4b92f35f80 R15: 00007ffd01815b08 [ 1519.109862][T30865] [ 1520.738737][T30883] nbd: must specify a size in bytes for the device [ 1525.351533][T30935] can: request_module (can-proto-0) failed. [ 1527.435162][T30974] cgroup: fork rejected by pids controller in /syz4 [ 1528.578212][T31093] netlink: 'syz.8.4162': attribute type 4 has an invalid length. [ 1529.994789][T31124] block nbd0: not configured, cannot reconfigure [ 1530.450719][T31142] svc: failed to register nfsdv3 RPC service (errno 111). [ 1530.513088][T31142] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1530.552859][T31149] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4167'. [ 1535.795994][T26722] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.162938][T31268] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4179'. [ 1540.434750][T26722] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.198252][T26722] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.217426][T26722] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.753132][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.759466][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.767964][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1545.781009][T13210] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1545.789524][T13210] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1545.798100][T13210] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1545.806941][T13210] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1545.814475][T13210] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1546.200485][T31342] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4187'. [ 1547.045861][T31342] HSR: entered promiscuous mode [ 1547.172693][T31344] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4187'. [ 1547.611567][T31344] openvswitch: HSR: Dropping previously announced user features [ 1547.674363][T26722] bridge_slave_1: left allmulticast mode [ 1547.680046][T26722] bridge_slave_1: left promiscuous mode [ 1547.722202][T26722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.769285][T26722] bridge_slave_0: left allmulticast mode [ 1547.793514][T26722] bridge_slave_0: left promiscuous mode [ 1547.801186][T26722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.894052][T13210] Bluetooth: hci0: command tx timeout [ 1548.872558][T28768] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1548.883657][T28768] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1548.891986][T28768] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1548.900228][T28768] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1548.908314][T28768] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1548.916091][T28768] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1549.961960][T26722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1549.970636][T28768] Bluetooth: hci0: command tx timeout [ 1550.057705][T26722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1550.088946][T26722] bond0 (unregistering): Released all slaves [ 1550.386434][T31335] chnl_net:caif_netlink_parms(): no params data found [ 1551.005649][T28768] Bluetooth: hci4: command tx timeout [ 1551.861665][T31409] netlink: 334 bytes leftover after parsing attributes in process `syz.5.4193'. [ 1552.041773][T28768] Bluetooth: hci0: command tx timeout [ 1552.102190][T31335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.109321][T31335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.126658][T31335] bridge_slave_0: entered allmulticast mode [ 1552.166498][T31335] bridge_slave_0: entered promiscuous mode [ 1552.226355][T31335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.253069][T31335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.260352][T31335] bridge_slave_1: entered allmulticast mode [ 1552.367408][T31335] bridge_slave_1: entered promiscuous mode [ 1552.656162][T31362] chnl_net:caif_netlink_parms(): no params data found [ 1553.035393][T31335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1553.083626][T28768] Bluetooth: hci4: command tx timeout [ 1553.413860][T31335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1553.875041][T31335] team0: Port device team_slave_0 added [ 1554.123874][T28768] Bluetooth: hci0: command tx timeout [ 1554.241467][T26722] hsr_slave_0: left promiscuous mode [ 1554.251043][T26722] hsr_slave_1: left promiscuous mode [ 1554.331992][T26722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1554.339454][T26722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.452616][T26722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1554.484067][T26722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.682483][T26722] veth1_macvtap: left promiscuous mode [ 1554.688059][T26722] veth0_macvtap: left promiscuous mode [ 1554.730069][T26722] veth1_vlan: left promiscuous mode [ 1554.740916][T26722] veth0_vlan: left promiscuous mode [ 1555.161605][T28768] Bluetooth: hci4: command tx timeout [ 1557.338812][T13210] Bluetooth: hci4: command tx timeout [ 1558.221263][T13210] Bluetooth: hci1: command 0x0406 tx timeout [ 1559.166888][T26722] team0 (unregistering): Port device team_slave_1 removed [ 1559.408314][T26722] team0 (unregistering): Port device team_slave_0 removed [ 1561.673524][T31335] team0: Port device team_slave_1 added [ 1562.262276][T31335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1562.269269][T31335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1562.463671][T31335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1562.525928][T31335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1562.567495][T31335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1562.707519][T31335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1563.201450][T31362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.208590][T31362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.271545][T31362] bridge_slave_0: entered allmulticast mode [ 1563.314106][T31362] bridge_slave_0: entered promiscuous mode [ 1563.377880][T31362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.410118][T31362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.461922][T31362] bridge_slave_1: entered allmulticast mode [ 1563.483141][T31362] bridge_slave_1: entered promiscuous mode [ 1563.554543][T31335] hsr_slave_0: entered promiscuous mode [ 1563.599430][T31335] hsr_slave_1: entered promiscuous mode [ 1563.610346][T31335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1563.641746][T31335] Cannot create hsr debugfs directory [ 1563.875729][T31362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1563.936618][T31362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.287929][T31362] team0: Port device team_slave_0 added [ 1564.345387][T31362] team0: Port device team_slave_1 added [ 1565.235790][T26722] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.391473][T31362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1565.428976][T31362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1565.534803][T31362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1565.604128][T31362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1565.651355][T31362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1565.759172][T31362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1566.063220][T26722] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.099791][T26722] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.386198][T31362] hsr_slave_0: entered promiscuous mode [ 1568.409006][T31362] hsr_slave_1: entered promiscuous mode [ 1568.427692][T31362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1568.440600][T31362] Cannot create hsr debugfs directory [ 1568.610881][T26722] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.044198][T26722] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.109761][T31335] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1570.322858][T26722] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.385464][T31335] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1570.425587][T31335] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1570.476615][T31335] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1570.952000][T26722] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.143421][T26722] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.648705][T31335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1571.710464][T31335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1571.732292][T26722] bridge_slave_1: left allmulticast mode [ 1571.737991][T26722] bridge_slave_1: left promiscuous mode [ 1571.793961][T26722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.843110][T26722] bridge_slave_0: left allmulticast mode [ 1571.862366][T26722] bridge_slave_0: left promiscuous mode [ 1571.869016][T26722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.929048][T26722] bridge_slave_1: left allmulticast mode [ 1571.969885][T26722] bridge_slave_1: left promiscuous mode [ 1571.981956][T26722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.020534][T26722] bridge_slave_0: left allmulticast mode [ 1572.059854][T26722] bridge_slave_0: left promiscuous mode [ 1572.080262][T26722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.291746][T26722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1576.341896][T26722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1576.376059][T26722] bond0 (unregistering): Released all slaves [ 1577.163486][T26722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1577.319621][T26722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1577.405365][T26722] bond0 (unregistering): Released all slaves [ 1577.633818][T28259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.640983][T28259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1578.422423][T28259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.429575][T28259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1578.977899][T31362] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1579.011107][T31362] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1579.052249][T31362] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1579.191350][T31362] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1579.413525][T31362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1579.433928][T31362] 8021q: adding VLAN 0 to HW filter on device team0 [ 1579.690674][T31625] Process accounting resumed [ 1579.796712][T28262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.803996][T28262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1579.856251][T28262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.863441][T28262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1579.916193][T26722] hsr_slave_0: left promiscuous mode [ 1579.942295][T26722] hsr_slave_1: left promiscuous mode [ 1579.948503][T26722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1579.971581][T26722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1580.027560][T26722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1580.041621][T26722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1580.105887][T26722] hsr_slave_0: left promiscuous mode [ 1580.151129][T26722] hsr_slave_1: left promiscuous mode [ 1580.159360][T26722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1580.167996][T26722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1580.176573][T26722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1580.184548][T26722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1580.216267][T31632] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4223'. [ 1580.271523][T26722] veth1_macvtap: left promiscuous mode [ 1580.277106][T26722] veth0_macvtap: left promiscuous mode [ 1580.284462][T26722] veth1_vlan: left promiscuous mode [ 1580.289821][T26722] veth0_vlan: left promiscuous mode [ 1580.336913][T26722] veth1_macvtap: left promiscuous mode [ 1580.351638][T26722] veth0_macvtap: left promiscuous mode [ 1580.357287][T26722] veth1_vlan: left promiscuous mode [ 1580.371422][T26722] veth0_vlan: left promiscuous mode [ 1581.600307][T26722] team0 (unregistering): Port device team_slave_1 removed [ 1581.688800][T26722] team0 (unregistering): Port device team_slave_0 removed [ 1583.204655][T26722] team0 (unregistering): Port device team_slave_1 removed [ 1583.298656][T26722] team0 (unregistering): Port device team_slave_0 removed [ 1584.276555][T31362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1584.317750][T31335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1585.427178][T31335] veth0_vlan: entered promiscuous mode [ 1585.438296][T31335] veth1_vlan: entered promiscuous mode [ 1585.460453][T31335] veth0_macvtap: entered promiscuous mode [ 1585.469443][T31335] veth1_macvtap: entered promiscuous mode [ 1585.484765][T31335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1585.495300][T31335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.505181][T31335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1585.515689][T31335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.525664][T31335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1585.536201][T31335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.546062][T31335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1585.556914][T31335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.568435][T31335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1585.578178][T31335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.588762][T31335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.598823][T31335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.609727][T31335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.619706][T31335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.630225][T31335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.640128][T31335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.650808][T31335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.662507][T31335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1585.672530][T31335] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.681342][T31335] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.690059][T31335] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.698866][T31335] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.935155][T26720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.972253][T12124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1586.009868][T31362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1586.028024][T12124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1586.091389][T26720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.744795][T31362] veth0_vlan: entered promiscuous mode [ 1588.810783][T31362] veth1_vlan: entered promiscuous mode [ 1588.939738][T31362] veth0_macvtap: entered promiscuous mode [ 1588.982785][T31362] veth1_macvtap: entered promiscuous mode [ 1589.078362][T31362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1589.131368][T31362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1589.168096][T31362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1589.226968][T31362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1589.301500][T31362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1589.356400][T31362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1589.406290][T31362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1589.459319][T31362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1589.520205][T31362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1589.591430][T31362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1589.636863][T31362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1589.965989][T31362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1590.072559][T31362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1590.121733][T31362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1590.194174][T31362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1590.253249][T31362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1590.327969][T31362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1590.390859][T31362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1590.456767][T31362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1590.510366][T31362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1590.577619][T31362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1590.640047][T31362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1590.929150][T28262] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.090738][T31362] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.157962][T31362] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.219387][T31362] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.274739][T31362] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.496671][T28262] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.828051][T28262] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.913492][T13210] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1591.932184][T13210] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1591.942238][T13210] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1591.951692][T13210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1591.960207][T13210] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1592.001729][T13210] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1592.273632][T28262] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.551624][T26722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.559480][T26722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.900639][T27696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.993345][T27696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.101459][T28262] bridge_slave_1: left allmulticast mode [ 1593.107163][T28262] bridge_slave_1: left promiscuous mode [ 1593.158370][T28262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.216263][T28262] bridge_slave_0: left allmulticast mode [ 1593.264091][T28262] bridge_slave_0: left promiscuous mode [ 1593.320320][T28262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.126634][T13210] Bluetooth: hci1: command tx timeout [ 1595.048884][T28262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1595.070735][T28262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1595.093550][T28262] bond0 (unregistering): Released all slaves [ 1595.341502][T28262] HSR: left promiscuous mode [ 1596.049802][T31751] chnl_net:caif_netlink_parms(): no params data found [ 1596.216008][T13210] Bluetooth: hci1: command tx timeout [ 1596.901367][T28262] hsr_slave_0: left promiscuous mode [ 1596.998274][T28262] hsr_slave_1: left promiscuous mode [ 1597.081671][T28262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1597.089230][T28262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1597.110547][T28262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1597.145937][T28262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1597.213092][T28262] veth1_macvtap: left promiscuous mode [ 1597.239280][T28262] veth0_macvtap: left promiscuous mode [ 1597.263738][T28262] veth1_vlan: left promiscuous mode [ 1597.269221][T28262] veth0_vlan: left promiscuous mode [ 1598.297512][T13210] Bluetooth: hci1: command tx timeout [ 1599.206547][T28262] team0 (unregistering): Port device team_slave_1 removed [ 1599.318983][T28262] team0 (unregistering): Port device team_slave_0 removed [ 1600.364499][T13210] Bluetooth: hci1: command tx timeout [ 1600.546310][T31751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.557326][T31751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.578244][T31751] bridge_slave_0: entered allmulticast mode [ 1600.618423][T31751] bridge_slave_0: entered promiscuous mode [ 1600.845174][T31751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.870768][T31751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.885293][T31751] bridge_slave_1: entered allmulticast mode [ 1600.897375][T31751] bridge_slave_1: entered promiscuous mode [ 1601.060912][T31751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1601.119235][T31751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.297483][T31751] team0: Port device team_slave_0 added [ 1601.360518][T31751] team0: Port device team_slave_1 added [ 1601.621482][T31751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.658455][T31751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.806167][T31751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.871493][T31751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.903248][T31751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1602.063940][T31751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1602.540655][T31751] hsr_slave_0: entered promiscuous mode [ 1602.576368][T31751] hsr_slave_1: entered promiscuous mode [ 1602.610955][T31751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1602.661798][T31751] Cannot create hsr debugfs directory [ 1603.492802][T31896] can: request_module (can-proto-5) failed. [ 1604.304282][T31751] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1604.325919][T31751] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1604.335577][T31751] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1604.345284][T31751] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1604.545181][T31751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1604.562188][T31751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1604.594584][T31751] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1604.605266][T31751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1604.735929][T28262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.743107][T28262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1604.782700][T28262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.789845][T28262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1605.673592][T31751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1606.586487][T31751] veth0_vlan: entered promiscuous mode [ 1606.633181][T31751] veth1_vlan: entered promiscuous mode [ 1606.741859][T31751] veth0_macvtap: entered promiscuous mode [ 1606.789080][T31751] veth1_macvtap: entered promiscuous mode [ 1606.845924][T31751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.928157][T31751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.972643][T31751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.007534][T31751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.037905][T31751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.073785][T31751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.103239][T31751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.134539][T31751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.163518][T31751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.191741][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.198080][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.321596][T31751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.334012][T31751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1607.446013][T31751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.532177][T31751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.611265][T31751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.671256][T31751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.696933][T31751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.766505][T31751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.826294][T31751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.919059][T31751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.972203][T31751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.034127][T31751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.117100][T31751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1608.192051][T31751] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.200796][T31751] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.311342][T31751] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.361392][T31751] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.889314][ T7561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.941361][ T7561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.334262][T27696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.343286][T27696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1628.682193][T32249] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1628.997889][T32249] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1630.909969][T32312] netlink: 11 bytes leftover after parsing attributes in process `syz.8.4314'. [ 1630.989878][T32313] netlink: 11 bytes leftover after parsing attributes in process `syz.8.4314'. [ 1635.206310][T32376] bridge0: port 3(syz_tun) entered blocking state [ 1635.291748][T32376] bridge0: port 3(syz_tun) entered disabled state [ 1635.298376][T32376] syz_tun: entered allmulticast mode [ 1635.492625][T32376] syz_tun: entered promiscuous mode [ 1635.600451][T32383] netlink: 'syz.8.4325': attribute type 1 has an invalid length. [ 1636.203196][T32400] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4327'. [ 1636.480941][T32400] CIFS mount error: No usable UNC path provided in device string! [ 1636.480941][T32400] [ 1636.546124][T32400] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1640.815051][T32449] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4335'. [ 1643.652495][T32489] Invalid ELF header magic: != ELF [ 1646.766131][T32527] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4346'. [ 1647.049631][T32539] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4349'. [ 1647.962378][T32559] svc: failed to register nfsdv3 RPC service (errno 111). [ 1648.017663][T32559] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1653.875417][T32653] ptrace attach of "./syz-executor exec"[31335] was attempted by "./syz-executor exec"[32653] [ 1653.877895][T32640] ptrace attach of "./syz-executor exec"[31335] was attempted by "./syz-executor exec"[32640] [ 1654.660723][T32653] delete_channel: no stack [ 1654.689172][T32640] HSR: entered promiscuous mode [ 1654.730059][T32653] delete_channel: no stack [ 1654.794082][T32679] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4371'. [ 1665.438140][ T441] bridge0: port 3(syz_tun) entered blocking state [ 1665.489631][ T441] bridge0: port 3(syz_tun) entered disabled state [ 1665.571573][ T441] syz_tun: entered allmulticast mode [ 1665.617010][ T441] syz_tun: entered promiscuous mode [ 1665.682132][ T441] bridge0: port 3(syz_tun) entered blocking state [ 1665.688782][ T441] bridge0: port 3(syz_tun) entered forwarding state [ 1665.776698][ T444] )zV: entered promiscuous mode [ 1666.849067][ T459] Invalid ELF header magic: != ELF [ 1668.605226][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.611726][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.985969][ T555] Invalid ELF header magic: != ELF [ 1670.684201][T28768] Bluetooth: hci0: command 0x0406 tx timeout [ 1672.551591][ T623] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4430'. [ 1672.603161][ T623] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4430'. [ 1675.802785][T13210] Bluetooth: hci4: command 0x0406 tx timeout [ 1687.039902][ T799] netlink: 'syz.7.4459': attribute type 11 has an invalid length. [ 1687.229662][T13210] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1687.240950][T13210] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1687.249903][T13210] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1687.258839][T13210] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1687.280886][T13210] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1687.288377][T13210] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1689.371308][T13210] Bluetooth: hci5: command tx timeout [ 1689.584909][ T793] chnl_net:caif_netlink_parms(): no params data found [ 1689.989111][ T830] svc: failed to register nfsdv3 RPC service (errno 111). [ 1689.998117][ T830] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1691.024157][ T793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1691.056143][ T793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1691.084270][ T793] bridge_slave_0: entered allmulticast mode [ 1691.121637][ T793] bridge_slave_0: entered promiscuous mode [ 1691.168791][ T793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1691.201407][ T793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.227413][ T793] bridge_slave_1: entered allmulticast mode [ 1691.264505][ T793] bridge_slave_1: entered promiscuous mode [ 1691.402214][T13210] Bluetooth: hci5: command tx timeout [ 1692.462005][ T793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1692.721892][ T793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1693.327174][ T793] team0: Port device team_slave_0 added [ 1693.370146][ T793] team0: Port device team_slave_1 added [ 1693.490989][T13210] Bluetooth: hci5: command tx timeout [ 1693.553009][ T793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1693.591205][ T793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1693.721209][ T793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1693.783298][ T793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1693.790523][ T793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1693.995837][ T793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1694.410516][ T793] hsr_slave_0: entered promiscuous mode [ 1694.463660][ T793] hsr_slave_1: entered promiscuous mode [ 1694.481261][ T793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1694.509283][ T793] Cannot create hsr debugfs directory [ 1695.141191][ T889] netlink: 'syz.6.4470': attribute type 8 has an invalid length. [ 1698.257815][T13210] Bluetooth: hci5: command tx timeout [ 1700.663468][ T793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1700.724854][ T793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1700.775900][ T793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1700.854606][ T793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1701.478851][ T793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1701.575486][ T793] 8021q: adding VLAN 0 to HW filter on device team0 [ 1701.653615][T15531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.660735][T15531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1701.758358][T31029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.765536][T31029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1701.899682][ T793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1701.962686][ T942] kernel read not supported for file /#)-\&[} (pid: 942 comm: syz.5.4478) [ 1701.985855][ T793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1702.040946][ T29] audit: type=1800 audit(8277292263.538:28): pid=942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4478" name="#)-\&[}" dev="mqueue" ino=131444 res=0 errno=0 [ 1703.409940][ T793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1703.578064][ T962] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4480'. [ 1703.643652][ T793] veth0_vlan: entered promiscuous mode [ 1703.665344][ T793] veth1_vlan: entered promiscuous mode [ 1703.707591][ T793] veth0_macvtap: entered promiscuous mode [ 1703.724615][ T793] veth1_macvtap: entered promiscuous mode [ 1703.749501][ T793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.781172][ T793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.791021][ T793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.821190][ T793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.841710][ T793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.871170][ T793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.881023][ T793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.911232][ T793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.921078][ T793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.951218][ T793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.971691][ T793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.991169][ T793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.012331][ T793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1704.032172][ T793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.051186][ T793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.071636][ T793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.101171][ T793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.121505][ T793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.141285][ T793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.161186][ T793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.190580][ T793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.211473][ T793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.231194][ T793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.251356][ T793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1704.271213][ T793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.292330][ T793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1704.312424][ T793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.331196][ T793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.340173][ T793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.371215][ T793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.784542][T31042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1706.852327][T31042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.989486][ T7574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1707.003625][ T7574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.142477][ T983] netlink: 'syz.7.4483': attribute type 11 has an invalid length. [ 1707.150342][ T983] netlink: 'syz.7.4483': attribute type 11 has an invalid length. [ 1707.567086][ T991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4486'. [ 1714.323486][T13210] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1714.333159][T13210] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1714.342631][T13210] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1714.350987][T13210] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1714.613370][T13210] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1714.620696][T13210] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1714.865985][T31030] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.783603][T31030] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.970126][T31030] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.354428][T31030] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.683470][T13210] Bluetooth: hci5: command tx timeout [ 1716.762757][T13210] Bluetooth: hci1: command 0x0406 tx timeout [ 1719.532112][T28768] Bluetooth: hci5: command tx timeout [ 1720.141567][T31030] bridge_slave_1: left allmulticast mode [ 1720.147266][T31030] bridge_slave_1: left promiscuous mode [ 1720.159194][T31030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.243132][T31030] bridge_slave_0: left allmulticast mode [ 1720.248832][T31030] bridge_slave_0: left promiscuous mode [ 1720.301465][T31030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.601463][T13210] Bluetooth: hci5: command tx timeout [ 1722.385570][ T1131] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1723.652640][T13210] Bluetooth: hci5: command tx timeout [ 1725.465389][T31030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1725.509978][T31030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1725.525166][T31030] bond0 (unregistering): Released all slaves [ 1725.796002][T31751] bridge0: port 3(syz_tun) entered disabled state [ 1725.824190][T31751] syz_tun (unregistering): left allmulticast mode [ 1725.830695][T31751] syz_tun (unregistering): left promiscuous mode [ 1725.837983][T31751] bridge0: port 3(syz_tun) entered disabled state [ 1726.089199][ T1082] chnl_net:caif_netlink_parms(): no params data found [ 1726.521797][T31030] hsr_slave_0: left promiscuous mode [ 1726.580751][T31030] hsr_slave_1: left promiscuous mode [ 1726.587084][T31030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1726.601950][T31030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1726.634825][T31030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1726.658919][T31030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1726.713962][T31030] veth1_macvtap: left promiscuous mode [ 1726.729810][T31030] veth0_macvtap: left promiscuous mode [ 1726.741407][T31030] veth1_vlan: left promiscuous mode [ 1726.746768][T31030] veth0_vlan: left promiscuous mode [ 1727.136478][T28768] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1727.176947][T28768] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1727.197449][T28768] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1727.266103][T28768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1727.330907][T28768] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1727.345687][T28768] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1727.722106][T31030] team0 (unregistering): Port device team_slave_1 removed [ 1727.798655][T31030] team0 (unregistering): Port device team_slave_0 removed [ 1728.699114][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1728.717707][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.739285][ T1082] bridge_slave_0: entered allmulticast mode [ 1728.752439][ T1082] bridge_slave_0: entered promiscuous mode [ 1728.961952][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.969076][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.976850][ T1082] bridge_slave_1: entered allmulticast mode [ 1728.989632][ T1082] bridge_slave_1: entered promiscuous mode [ 1729.146495][ T1082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1729.184057][ T1082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1729.338938][ T1082] team0: Port device team_slave_0 added [ 1729.355439][ T1082] team0: Port device team_slave_1 added [ 1729.432745][ T1082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1729.439725][ T1082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1729.473302][ T1082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1729.486276][ T1082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1729.545874][ T1082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1729.601334][T28768] Bluetooth: hci1: command tx timeout [ 1729.745607][ T1082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1730.044622][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.051812][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.511776][ T1196] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4519'. [ 1730.570371][T31030] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.649115][ T1082] hsr_slave_0: entered promiscuous mode [ 1730.656040][ T1082] hsr_slave_1: entered promiscuous mode [ 1730.667690][ T1082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1730.681062][ T1082] Cannot create hsr debugfs directory [ 1730.765791][T31030] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.881022][T31030] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.977758][ T1170] chnl_net:caif_netlink_parms(): no params data found [ 1731.114284][T31030] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.654754][T28768] Bluetooth: hci1: command tx timeout [ 1731.771997][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.779496][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.809995][ T1170] bridge_slave_0: entered allmulticast mode [ 1731.830129][ T1170] bridge_slave_0: entered promiscuous mode [ 1731.922373][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.950013][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.231669][ T1170] bridge_slave_1: entered allmulticast mode [ 1732.238840][ T1170] bridge_slave_1: entered promiscuous mode [ 1732.448314][ T1170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1732.583333][T31030] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.678725][ T1170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1732.788967][T31030] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.012984][ T1170] team0: Port device team_slave_0 added [ 1733.115195][T31030] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.210049][ T1170] team0: Port device team_slave_1 added [ 1733.343447][T31030] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.460021][ T1170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1733.477426][ T1170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1733.518657][ T1170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1733.595577][ T1170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1733.614833][ T1170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1733.701278][ T1170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1733.731352][T28768] Bluetooth: hci1: command tx timeout [ 1733.874991][T31030] bridge_slave_1: left allmulticast mode [ 1733.880690][T31030] bridge_slave_1: left promiscuous mode [ 1733.910263][T31030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.943250][T31030] bridge_slave_0: left allmulticast mode [ 1733.949062][T31030] bridge_slave_0: left promiscuous mode [ 1733.966743][T31030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.984246][T31030] bridge_slave_1: left allmulticast mode [ 1733.997734][T31030] bridge_slave_1: left promiscuous mode [ 1734.004604][T31030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.028019][T31030] bridge_slave_0: left allmulticast mode [ 1734.041016][T31030] bridge_slave_0: left promiscuous mode [ 1734.091679][T31030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.818072][T28768] Bluetooth: hci1: command tx timeout [ 1736.791735][T31030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1736.828912][T31030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1736.867735][T31030] bond0 (unregistering): Released all slaves [ 1737.538941][T31030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1737.589145][T31030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1737.622307][T31030] bond0 (unregistering): Released all slaves [ 1737.927614][ T1170] hsr_slave_0: entered promiscuous mode [ 1738.320479][ T1170] hsr_slave_1: entered promiscuous mode [ 1738.386320][ T1170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1738.415153][ T1170] Cannot create hsr debugfs directory [ 1738.490129][T31030] )zV: left promiscuous mode [ 1739.095016][ T1082] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1739.495380][ T1082] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1739.643954][ T1082] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1739.768342][ T1082] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1740.400380][T31030] hsr_slave_0: left promiscuous mode [ 1740.420967][T31030] hsr_slave_1: left promiscuous mode [ 1740.428440][T31030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1740.446302][T31030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1740.462197][T31030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1740.480283][T31030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1740.595723][T31030] hsr_slave_0: left promiscuous mode [ 1740.616374][T31030] hsr_slave_1: left promiscuous mode [ 1740.635831][T31030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1740.655895][T31030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1740.678721][T31030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1740.701925][T31030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1740.855503][T31030] veth1_macvtap: left promiscuous mode [ 1740.881321][T31030] veth0_macvtap: left promiscuous mode [ 1740.886955][T31030] veth1_vlan: left promiscuous mode [ 1740.901866][T31030] veth0_vlan: left promiscuous mode [ 1740.908451][T31030] veth1_macvtap: left promiscuous mode [ 1740.917473][T31030] veth0_macvtap: left promiscuous mode [ 1740.933727][T31030] veth1_vlan: left promiscuous mode [ 1740.949437][T31030] veth0_vlan: left promiscuous mode [ 1742.561721][T31030] team0 (unregistering): Port device team_slave_1 removed [ 1742.760908][T31030] team0 (unregistering): Port device team_slave_0 removed [ 1746.015357][T31030] team0 (unregistering): Port device team_slave_1 removed [ 1746.136046][T31030] team0 (unregistering): Port device team_slave_0 removed [ 1747.427569][ T1082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1747.550467][ T1082] 8021q: adding VLAN 0 to HW filter on device team0 [ 1747.586450][T15524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1747.593687][T15524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1747.818628][ T1170] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1747.864956][T15531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.872118][T15531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1747.919254][ T1170] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1748.066871][ T1170] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1748.271748][ T1170] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1748.545658][ T1170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1748.566234][ T1170] 8021q: adding VLAN 0 to HW filter on device team0 [ 1748.577973][T31042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.585131][T31042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1748.739831][T31042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.747008][T31042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1749.107675][ T1082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1749.255430][ T1082] veth0_vlan: entered promiscuous mode [ 1749.324264][ T1082] veth1_vlan: entered promiscuous mode [ 1749.377173][ T1170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1749.718161][ T1082] veth0_macvtap: entered promiscuous mode [ 1749.744837][ T1082] veth1_macvtap: entered promiscuous mode [ 1749.795066][ T1082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1749.848751][ T1082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1749.860484][ T1082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1749.879015][ T1082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1749.890314][ T1082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1749.920539][ T1082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1749.930961][ T1082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1749.959546][ T1082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1749.985655][ T1082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1750.035205][ T1082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1750.078019][ T1082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.109928][ T1082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1750.142822][ T1082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.168691][ T1082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1750.198424][ T1082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.212514][ T1082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1750.288130][ T1082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.322154][ T1082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1750.504107][ T1082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.527595][ T1082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.571415][ T1082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.601697][ T1082] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.671882][ T1170] veth0_vlan: entered promiscuous mode [ 1750.765344][ T1170] veth1_vlan: entered promiscuous mode [ 1750.963797][ T1170] veth0_macvtap: entered promiscuous mode [ 1750.974319][T28262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1750.989720][T28262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1750.992198][ T1170] veth1_macvtap: entered promiscuous mode [ 1751.084273][ T1170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1751.122127][ T1170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.162480][ T1170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1751.185499][ T1170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.216718][ T1170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1751.251227][ T1170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.281289][ T1170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1751.302546][ T1170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.331209][ T1170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1751.351477][ T1170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.376571][ T1170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1751.444369][ T1170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1751.499757][ T1170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.525360][ T1170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1751.554037][ T1170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.575782][ T1170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1751.606988][ T1170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.631163][ T1170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1751.677807][ T1170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.700632][ T1170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1751.724406][ T1170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.749169][ T1170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1751.770886][ T1170] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.784521][ T1170] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.810303][ T1170] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.829499][ T1170] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.904259][T15524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1751.933643][T15524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1752.110907][T31042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1752.152341][T31042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1752.225622][T15524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1752.234458][T15524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1752.886858][ T1427] kernel read not supported for file /#)-\&[} (pid: 1427 comm: syz.7.4554) [ 1752.955157][ T29] audit: type=1800 audit(8277292314.458:29): pid=1427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4554" name="#)-\&[}" dev="mqueue" ino=119333 res=0 errno=0 [ 1754.661911][ T1474] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4565'. [ 1766.145900][ T1672] netlink: 342 bytes leftover after parsing attributes in process `syz.7.4586'. [ 1768.191652][ T1719] netlink: 342 bytes leftover after parsing attributes in process `syz.6.4589'. [ 1771.246567][ T1798] netlink: 342 bytes leftover after parsing attributes in process `syz.7.4604'. [ 1776.021675][ T1868] Process accounting resumed [ 1791.484603][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.491482][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.174293][ T2095] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4646'. [ 1793.228087][ T2096] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4646'. [ 1794.148434][ T2114] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4649'. [ 1794.158848][ T2115] netlink: 350 bytes leftover after parsing attributes in process `syz.7.4649'. [ 1794.602082][ T2112] netlink: 334 bytes leftover after parsing attributes in process `syz.5.4647'. [ 1795.699746][ T2112] netlink: 334 bytes leftover after parsing attributes in process `syz.5.4647'. [ 1796.489774][ T2157] netlink: zone id is out of range [ 1796.510721][ T2157] netlink: zone id is out of range [ 1796.537938][ T2157] netlink: zone id is out of range [ 1796.555709][ T2157] netlink: zone id is out of range [ 1796.615103][ T2157] netlink: zone id is out of range [ 1796.636780][ T2157] netlink: zone id is out of range [ 1796.654462][ T2157] netlink: zone id is out of range [ 1796.672757][ T2157] netlink: zone id is out of range [ 1802.594591][T13210] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1802.604448][T13210] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1802.614312][T13210] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1802.622706][T13210] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1802.969574][T13210] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1802.977180][T13210] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1803.175232][T31030] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.664928][T31030] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.375769][T31030] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.576651][T31030] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.863592][ T2266] netlink: 'syz.5.4677': attribute type 12 has an invalid length. [ 1804.872706][ T2266] netlink: 322 bytes leftover after parsing attributes in process `syz.5.4677'. [ 1805.090066][T13210] Bluetooth: hci4: command tx timeout [ 1805.651966][T31030] bridge_slave_1: left allmulticast mode [ 1805.677311][T31030] bridge_slave_1: left promiscuous mode [ 1805.711858][T31030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1805.732458][T31030] bridge_slave_0: left allmulticast mode [ 1805.744026][T31030] bridge_slave_0: left promiscuous mode [ 1805.751926][T31030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.161659][T13210] Bluetooth: hci4: command tx timeout [ 1807.409832][T31030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1807.427500][T31030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1807.444332][T31030] bond0 (unregistering): Released all slaves [ 1807.796485][ T2250] chnl_net:caif_netlink_parms(): no params data found [ 1809.080131][ T2250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1809.087616][ T2250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.095174][ T2250] bridge_slave_0: entered allmulticast mode [ 1809.102437][ T2250] bridge_slave_0: entered promiscuous mode [ 1809.110320][ T2250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1809.117705][ T2250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1809.125403][ T2250] bridge_slave_1: entered allmulticast mode [ 1809.132511][ T2250] bridge_slave_1: entered promiscuous mode [ 1809.165178][ T2250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1809.177581][ T2250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1809.246304][T13210] Bluetooth: hci4: command tx timeout [ 1809.402071][ T2250] team0: Port device team_slave_0 added [ 1809.461786][T31030] hsr_slave_0: left promiscuous mode [ 1809.467857][T31030] hsr_slave_1: left promiscuous mode [ 1809.482360][T31030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1809.490046][T31030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1809.515107][T31030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1809.528796][T31030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1809.563380][T31030] veth1_macvtap: left promiscuous mode [ 1809.569112][T31030] veth0_macvtap: left promiscuous mode [ 1809.577772][T31030] veth1_vlan: left promiscuous mode [ 1809.590629][T31030] veth0_vlan: left promiscuous mode [ 1811.331622][T13210] Bluetooth: hci4: command tx timeout [ 1811.910801][T31030] team0 (unregistering): Port device team_slave_1 removed [ 1812.464162][T31030] team0 (unregistering): Port device team_slave_0 removed [ 1814.519913][ T2250] team0: Port device team_slave_1 added [ 1814.613987][ T2250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1814.631132][ T2250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1814.687788][ T2250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1814.721674][ T2250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1814.728928][ T2250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1814.807166][ T2250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1814.928796][ T2250] hsr_slave_0: entered promiscuous mode [ 1814.948386][ T2250] hsr_slave_1: entered promiscuous mode [ 1814.971763][ T2250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1814.979362][ T2250] Cannot create hsr debugfs directory [ 1816.649971][ T2250] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1816.784885][ T2250] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1816.811800][ T2250] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1816.821788][ T2250] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1817.094189][ T2250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1817.175129][ T2250] 8021q: adding VLAN 0 to HW filter on device team0 [ 1817.197212][ T7574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.204398][ T7574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1817.244440][ T7574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.251659][ T7574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1817.531048][ T2250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1818.328233][T31030] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.529042][T31030] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.675790][T31030] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.740632][T28768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1818.794262][ T2250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1818.812297][T28768] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1818.822594][T28768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1818.831741][T28768] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1818.840410][T28768] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1819.133286][T31030] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.151374][T28768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1819.406760][ T2250] veth0_vlan: entered promiscuous mode [ 1819.517665][ T2250] veth1_vlan: entered promiscuous mode [ 1819.736816][ T2250] veth0_macvtap: entered promiscuous mode [ 1819.942338][ T2454] Invalid ELF header magic: != ELF [ 1819.983612][ T2250] veth1_macvtap: entered promiscuous mode [ 1820.262258][T31030] bridge_slave_1: left allmulticast mode [ 1820.267958][T31030] bridge_slave_1: left promiscuous mode [ 1820.305390][T31030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.364772][T31030] bridge_slave_0: left allmulticast mode [ 1820.370519][T31030] bridge_slave_0: left promiscuous mode [ 1820.397533][T31030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.261620][T13210] Bluetooth: hci0: command tx timeout [ 1821.394457][T31030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1821.415022][T31030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1821.437005][T31030] bond0 (unregistering): Released all slaves [ 1821.526547][ T2250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1821.570208][ T2250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1821.601901][ T2250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1821.641122][ T2250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1821.663135][ T2250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1821.710533][ T2250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1821.739736][ T2250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1821.779120][ T2250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1821.830856][ T2250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1821.865253][ T2250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1821.897290][ T2250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1821.923300][ T2460] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4693'. [ 1822.054629][T31030] HSR: left promiscuous mode [ 1822.104210][ T2429] chnl_net:caif_netlink_parms(): no params data found [ 1822.160117][ T2250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1822.441180][ T2250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1822.451046][ T2250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1822.495543][ T2250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1822.508926][ T2250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1822.523099][ T2250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1822.567145][ T2250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1822.615055][ T2250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1822.661468][ T2250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1822.701131][ T2250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1822.770076][ T2250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1822.845676][ T2250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.901129][ T2250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.909877][ T2250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.011158][ T2250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.323743][T13210] Bluetooth: hci0: command tx timeout [ 1823.977796][ T7574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1823.994251][ T7574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1824.233070][ T2429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.250245][ T2429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.288655][ T2429] bridge_slave_0: entered allmulticast mode [ 1824.325895][ T2429] bridge_slave_0: entered promiscuous mode [ 1824.349823][T31050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1824.386609][T31050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1824.483003][ T2429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.490679][ T2429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.518491][ T2429] bridge_slave_1: entered allmulticast mode [ 1824.548703][ T2429] bridge_slave_1: entered promiscuous mode [ 1824.761279][T31030] hsr_slave_0: left promiscuous mode [ 1824.809136][T31030] hsr_slave_1: left promiscuous mode [ 1824.825978][T31030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1824.877216][T31030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1824.925795][T31030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1824.943062][T31030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1825.120640][T31030] veth1_macvtap: left promiscuous mode [ 1825.141266][T31030] veth0_macvtap: left promiscuous mode [ 1825.165421][T31030] veth1_vlan: left promiscuous mode [ 1825.191446][T31030] veth0_vlan: left promiscuous mode [ 1825.411335][T28768] Bluetooth: hci0: command tx timeout [ 1827.496567][T13210] Bluetooth: hci0: command tx timeout [ 1827.646028][T31030] team0 (unregistering): Port device team_slave_1 removed [ 1827.755789][T31030] team0 (unregistering): Port device team_slave_0 removed [ 1828.975182][ T2429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1829.084779][ T2429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1829.737957][ T2429] team0: Port device team_slave_0 added [ 1829.813946][ T2429] team0: Port device team_slave_1 added [ 1830.036997][ T2429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1830.047318][ T2429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1830.101268][ T2429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1830.164595][ T2429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1830.191446][ T2429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1830.281252][ T2429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1830.520060][ T2429] hsr_slave_0: entered promiscuous mode [ 1830.562038][ T2429] hsr_slave_1: entered promiscuous mode [ 1830.571501][ T2429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1830.579323][ T2429] Cannot create hsr debugfs directory [ 1831.654658][ T2429] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1831.715224][ T2429] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1831.752600][ T2429] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1831.801259][ T2429] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1831.850025][ T2618] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4709'. [ 1831.884893][ T2618] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4709'. [ 1832.143602][ T2429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1832.183550][ T2429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1832.210097][T26716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1832.217287][T26716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1832.355209][T31050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1832.362479][T31050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1832.670300][ T2429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1832.701398][ T2429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1833.323764][ T2429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1833.396637][ T2654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4714'. [ 1834.054675][ T2429] veth0_vlan: entered promiscuous mode [ 1834.107908][ T2429] veth1_vlan: entered promiscuous mode [ 1834.122545][ T2697] ptrace attach of "./syz-executor exec"[1170] was attempted by ""[2697] [ 1834.231692][ T2429] veth0_macvtap: entered promiscuous mode [ 1834.256416][ T2429] veth1_macvtap: entered promiscuous mode [ 1834.320642][ T2429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1834.401461][ T2429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1834.431288][ T2429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1834.611254][ T2429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1834.621878][ T2429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1834.681978][ T2429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1834.702733][ T2429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1834.751525][ T2429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1834.805357][ T2429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1834.845143][ T2429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1834.889386][ T2429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1834.941567][ T2429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1834.993779][ T2429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.037989][ T2429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1835.081815][ T2429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.151375][ T2429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1835.217859][ T2429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.321395][ T2429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1835.391575][ T2429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.462169][ T2429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1835.529240][ T2429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.622487][ T2429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1835.734227][ T2429] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.819921][ T2429] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.890556][ T2429] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.950218][ T2429] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1836.582122][T31052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1836.590088][T31052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1836.834103][T31030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1836.911597][T31030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1843.060103][ T2869] tc_dump_action: action bad kind [ 1845.709835][ T2712] syz.7.4711 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1845.871215][ T2712] CPU: 1 UID: 0 PID: 2712 Comm: syz.7.4711 Not tainted 6.12.0-rc7-syzkaller #0 [ 1845.880219][ T2712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1845.890307][ T2712] Call Trace: [ 1845.893618][ T2712] [ 1845.896565][ T2712] dump_stack_lvl+0x16c/0x1f0 [ 1845.901284][ T2712] dump_header+0x101/0x900 [ 1845.905746][ T2712] oom_kill_process+0x270/0xa60 [ 1845.910627][ T2712] out_of_memory+0x351/0x1700 [ 1845.915336][ T2712] ? __pfx_out_of_memory+0x10/0x10 [ 1845.920472][ T2712] ? rcu_read_unlock+0x17/0x60 [ 1845.925264][ T2712] ? find_held_lock+0x2d/0x110 [ 1845.930065][ T2712] mem_cgroup_out_of_memory+0x207/0x270 [ 1845.935629][ T2712] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1845.941716][ T2712] ? do_raw_spin_unlock+0x172/0x230 [ 1845.946932][ T2712] try_charge_memcg+0x5b9/0xaf0 [ 1845.951805][ T2712] ? __pfx_try_charge_memcg+0x10/0x10 [ 1845.957198][ T2712] ? get_mem_cgroup_from_mm+0x7f/0x5f0 [ 1845.962677][ T2712] ? get_mem_cgroup_from_mm+0x129/0x5f0 [ 1845.968238][ T2712] __mem_cgroup_charge+0x9b/0x280 [ 1845.973321][ T2712] shmem_alloc_and_add_folio+0x507/0xc00 [ 1845.978973][ T2712] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1845.985157][ T2712] ? shmem_allowable_huge_orders+0xcd/0x3f0 [ 1845.991088][ T2712] shmem_get_folio_gfp+0x689/0x1530 [ 1845.996325][ T2712] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1846.001982][ T2712] shmem_write_begin+0x161/0x300 [ 1846.006936][ T2712] ? __pfx_shmem_write_begin+0x10/0x10 [ 1846.012408][ T2712] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 1846.019272][ T2712] generic_perform_write+0x2ba/0x920 [ 1846.024577][ T2712] ? __pfx_generic_perform_write+0x10/0x10 [ 1846.030404][ T2712] ? __pfx_generic_write_checks+0x10/0x10 [ 1846.036142][ T2712] shmem_file_write_iter+0x10e/0x140 [ 1846.041445][ T2712] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1846.047278][ T2712] __kernel_write_iter+0x318/0xa80 [ 1846.052402][ T2712] ? __pfx___kernel_write_iter+0x10/0x10 [ 1846.058056][ T2712] ? get_dump_page+0x15c/0x220 [ 1846.062857][ T2712] ? copy_mc_enhanced_fast_string+0xc/0x13 [ 1846.068771][ T2712] dump_user_range+0x389/0x8a0 [ 1846.073577][ T2712] ? __pfx_dump_user_range+0x10/0x10 [ 1846.078908][ T2712] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 1846.085113][ T2712] ? __pfx_writenote+0x10/0x10 [ 1846.089916][ T2712] elf_core_dump+0x2766/0x3840 [ 1846.094723][ T2712] ? __pfx_elf_core_dump+0x10/0x10 [ 1846.099854][ T2712] ? kasan_save_stack+0x42/0x60 [ 1846.104732][ T2712] ? kasan_save_stack+0x33/0x60 [ 1846.109615][ T2712] ? __kasan_kmalloc+0xaa/0xb0 [ 1846.114429][ T2712] ? __kmalloc_node_noprof+0x211/0x440 [ 1846.119906][ T2712] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 1846.125591][ T2712] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 1846.131606][ T2712] ? asm_exc_page_fault+0x26/0x30 [ 1846.136700][ T2712] ? rcu_is_watching+0x12/0xc0 [ 1846.141481][ T2712] ? trace_lock_acquire+0x14a/0x1d0 [ 1846.146697][ T2712] ? get_signal+0x237c/0x26d0 [ 1846.151417][ T2712] ? do_coredump+0x2c42/0x4160 [ 1846.156198][ T2712] do_coredump+0x2c42/0x4160 [ 1846.160823][ T2712] ? __pfx_do_coredump+0x10/0x10 [ 1846.165784][ T2712] ? kmem_cache_free+0x152/0x4b0 [ 1846.170740][ T2712] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 1846.176644][ T2712] ? asm_exc_page_fault+0x26/0x30 [ 1846.181837][ T2712] get_signal+0x237c/0x26d0 [ 1846.186377][ T2712] ? force_sig_fault+0xad/0xf0 [ 1846.191152][ T2712] ? __pfx_get_signal+0x10/0x10 [ 1846.196025][ T2712] arch_do_signal_or_restart+0x90/0x7e0 [ 1846.201621][ T2712] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1846.207791][ T2712] ? __bad_area_nosemaphore+0x334/0x6a0 [ 1846.213366][ T2712] ? do_user_addr_fault+0x920/0x13f0 [ 1846.218688][ T2712] irqentry_exit_to_user_mode+0x13f/0x280 [ 1846.224418][ T2712] asm_exc_page_fault+0x26/0x30 [ 1846.229285][ T2712] RIP: 0033:0x7f7a98f7e719 [ 1846.233715][ T2712] Code: Unable to access opcode bytes at 0x7f7a98f7e6ef. [ 1846.240827][ T2712] RSP: 002b:0000000000000009 EFLAGS: 00010246 [ 1846.246909][ T2712] RAX: 0000000000000000 RBX: 00007f7a99136058 RCX: 00007f7a98f7e719 [ 1846.254888][ T2712] RDX: 9999999999999999 RSI: 0000000000000009 RDI: 0000000000000021 [ 1846.262882][ T2712] RBP: 00007f7a98ff1616 R08: 0000000000000006 R09: 0000000000000000 [ 1846.271037][ T2712] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 1846.279036][ T2712] R13: 0000000000000000 R14: 00007f7a99136058 R15: 00007ffe001d2ba8 [ 1846.287026][ T2712] ? 0xffffffff81000000 [ 1846.291198][ T2712] [ 1846.330784][ T2712] memory: usage 307200kB, limit 307200kB, failcnt 23584 [ 1846.337852][ T2712] memory+swap: usage 432176kB, limit 9007199254740988kB, failcnt 0 [ 1846.346252][ T2712] kmem: usage 4672kB, limit 9007199254740988kB, failcnt 0 [ 1846.353764][ T2712] Memory cgroup stats for /syz7: [ 1846.354064][ T2712] cache 309035008 [ 1846.362809][ T2712] rss 729088 [ 1846.366748][ T2712] rss_huge 0 [ 1846.369968][ T2712] shmem 309035008 [ 1846.373939][ T2712] mapped_file 101625856 [ 1846.378114][ T2712] dirty 0 [ 1846.381131][ T2712] writeback 0 [ 1846.384534][ T2712] workingset_refault_anon 4450 [ 1846.389319][ T2712] workingset_refault_file 204 [ 1846.394194][ T2712] swap 127975424 [ 1846.398130][ T2712] swapcached 16384 [ 1846.402288][ T2712] pgpgin 964353 [ 1846.405769][ T2712] pgpgout 894343 [ 1846.409450][ T2712] pgfault 333850 [ 1846.413088][ T2712] pgmajfault 833 [ 1846.416661][ T2712] inactive_anon 257183744 [ 1846.421150][ T2712] active_anon 52600832 [ 1846.425252][ T2712] inactive_file 0 [ 1846.428920][ T2712] active_file 0 [ 1846.432516][ T2712] unevictable 0 [ 1846.435994][ T2712] hierarchical_memory_limit 314572800 [ 1846.441956][ T2712] hierarchical_memsw_limit 9223372036854771712 [ 1846.448547][ T2712] total_cache 309035008 [ 1846.452795][ T2712] total_rss 729088 [ 1846.456542][ T2712] total_rss_huge 0 [ 1846.460395][ T2712] total_shmem 309035008 [ 1846.464699][ T2712] total_mapped_file 101625856 [ 1846.470116][ T2712] total_dirty 0 [ 1846.473760][ T2712] total_writeback 0 [ 1846.477584][ T2712] total_workingset_refault_anon 4450 [ 1846.483029][ T2712] total_workingset_refault_file 204 [ 1846.488357][ T2712] total_swap 127975424 [ 1846.492515][ T2712] total_swapcached 16384 [ 1846.496867][ T2712] total_pgpgin 964353 [ 1846.501360][ T2712] total_pgpgout 894343 [ 1846.505470][ T2712] total_pgfault 333850 [ 1846.509578][ T2712] total_pgmajfault 833 [ 1846.514156][ T2712] total_inactive_anon 257183744 [ 1846.519032][ T2712] total_active_anon 52600832 [ 1846.524474][ T2712] total_inactive_file 0 [ 1846.528666][ T2712] total_active_file 0 [ 1846.533035][ T2712] total_unevictable 0 [ 1846.538089][ T2712] anon_cost 0 [ 1846.541674][ T2712] file_cost 0 [ 1846.545557][ T2712] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4721,pid=2744,uid=0 [ 1846.562712][ T2712] Memory cgroup out of memory: Killed process 2744 (syz.7.4721) total-vm:95316kB, anon-rss:780kB, file-rss:24976kB, shmem-rss:128kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 1847.473091][ T2930] cgroup: fork rejected by pids controller in /syz6 [ 1847.780810][T13415] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 1847.793550][T13415] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 1847.801984][T13415] CPU: 1 UID: 0 PID: 13415 Comm: kworker/1:7 Not tainted 6.12.0-rc7-syzkaller #0 [ 1847.811119][T13415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1847.821195][T13415] Workqueue: events swap_reclaim_work [ 1847.826609][T13415] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x1c0 [ 1847.833587][T13415] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 fe 48 83 c7 08 48 83 ec 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 19 01 00 00 48 89 f2 48 8b 4e 08 48 b8 00 00 00 [ 1847.853228][T13415] RSP: 0018:ffffc9000b84fc30 EFLAGS: 00010202 [ 1847.859324][T13415] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88814334d078 [ 1847.867320][T13415] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000008 [ 1847.875312][T13415] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1847.883315][T13415] R10: 0000000000000001 R11: 000000000000004f R12: dffffc0000000000 [ 1847.891302][T13415] R13: ffffffffffffffb8 R14: ffff88814334d000 R15: ffffc90003186000 [ 1847.899380][T13415] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1847.908348][T13415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1847.914965][T13415] CR2: 00007f7a98f7e6ef CR3: 0000000082534000 CR4: 00000000003526f0 [ 1847.923052][T13415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1847.931037][T13415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1847.939049][T13415] Call Trace: [ 1847.942341][T13415] [ 1847.945292][T13415] ? die_addr+0x3b/0xa0 [ 1847.949485][T13415] ? exc_general_protection+0x155/0x230 [ 1847.955070][T13415] ? asm_exc_general_protection+0x26/0x30 [ 1847.960830][T13415] ? __list_del_entry_valid_or_report+0x20/0x1c0 [ 1847.967366][T13415] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1847.972773][T13415] swap_reclaim_full_clusters+0x109/0x460 [ 1847.978535][T13415] swap_reclaim_work+0x2e/0x40 [ 1847.983344][T13415] process_one_work+0x958/0x1b30 [ 1847.988321][T13415] ? __pfx_psi_avgs_work+0x10/0x10 [ 1847.993469][T13415] ? __pfx_process_one_work+0x10/0x10 [ 1847.998883][T13415] ? assign_work+0x1a0/0x250 [ 1848.003521][T13415] worker_thread+0x6c8/0xf00 [ 1848.008250][T13415] ? __kthread_parkme+0x148/0x220 [ 1848.013306][T13415] ? __pfx_worker_thread+0x10/0x10 [ 1848.018464][T13415] kthread+0x2c1/0x3a0 [ 1848.022561][T13415] ? _raw_spin_unlock_irq+0x23/0x50 [ 1848.027792][T13415] ? __pfx_kthread+0x10/0x10 [ 1848.032403][T13415] ret_from_fork+0x45/0x80 [ 1848.036847][T13415] ? __pfx_kthread+0x10/0x10 [ 1848.041473][T13415] ret_from_fork_asm+0x1a/0x30 [ 1848.046284][T13415] [ 1848.049316][T13415] Modules linked in: [ 1848.054359][T13415] ---[ end trace 0000000000000000 ]--- [ 1848.059848][T13415] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x1c0 [ 1848.067470][T13415] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 fe 48 83 c7 08 48 83 ec 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 19 01 00 00 48 89 f2 48 8b 4e 08 48 b8 00 00 00 [ 1848.087364][T13415] RSP: 0018:ffffc9000b84fc30 EFLAGS: 00010202 [ 1848.093871][T13415] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88814334d078 [ 1848.101918][T13415] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000008 [ 1848.110170][T13415] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1848.118527][T13415] R10: 0000000000000001 R11: 000000000000004f R12: dffffc0000000000 [ 1848.126578][T13415] R13: ffffffffffffffb8 R14: ffff88814334d000 R15: ffffc90003186000 [ 1848.134623][T13415] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1848.143797][T13415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1848.150419][T13415] CR2: 00007f7a98f7e6ef CR3: 0000000082534000 CR4: 00000000003526f0 [ 1848.158779][T13415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1848.166822][T13415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1848.174890][T13415] Kernel panic - not syncing: Fatal exception [ 1848.181318][T13415] Kernel Offset: disabled [ 1848.185638][T13415] Rebooting in 86400 seconds..