last executing test programs: 8m33.987999261s ago: executing program 32 (id=345): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x0) clone$auto(0xfffffffe20000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xfa6) 7m39.932278062s ago: executing program 33 (id=478): r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x23) fchown$auto(r0, 0x1, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x7, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x7, 0x7, 0xadb6, 0x12, 0xffffffff, 0x3) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) bind$auto(0x2, &(0x7f00000001c0)={0x1, @sockaddr_1_1}, 0xb) getpeername$auto(0x3, 0x0, 0x0) (async) getpeername$auto(0x3, 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') socket(0x27, 0xa, 0x1) (async) socket(0x27, 0xa, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x17, 0x0) (async) sysfs$auto(0x2, 0x17, 0x0) fsopen$auto(0x0, 0x1) (async) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x3, 0xffffffffffff0001, 0x15) close_range$auto(r1, r0, 0x0) (async) close_range$auto(r1, r0, 0x0) madvise$auto(0x400, 0x7, 0x40) umask$auto(0x7) 5m22.038137776s ago: executing program 34 (id=996): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_submit$auto(0x6, 0x93, &(0x7f0000000040)=&(0x7f0000000000)={0xffffffffffffffff, 0x2, 0xd4a, 0x79b, 0xfffc, 0x9, 0x7, 0x3, 0x5, 0x0, 0x81, 0xffffffffffffffff}) close_range$auto(0x2, r0, 0xfffffffc) open(0x0, 0x22242, 0x155) socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) 5m10.562174112s ago: executing program 35 (id=1035): madvise$auto(0x0, 0x3, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) nanosleep$auto(0x0, 0x0) socket(0x1e, 0x1, 0x0) (async) r0 = socket(0x1e, 0x1, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) madvise$auto(0x0, 0x80000001, 0x8) 4m37.113670268s ago: executing program 5 (id=1142): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sysfs$auto(0x2, 0x0, 0x0) inotify_init1$auto(0x3000000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x1, 0x0, 0x10) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) open(0x0, 0x22240, 0x155) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) shutdown$auto(0x200000003, 0x2) unlinkat$auto(0xffffffffffffff9c, 0x0, 0x0) 4m35.942473014s ago: executing program 5 (id=1143): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r2, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x3}, 0x92) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) alarm$auto(0x664cdca6) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) io_uring_setup$auto(0x2, 0x0) bpf$auto(0x3, &(0x7f00000001c0)=@link_create={@map_fd=r0, @target_fd=r3, 0x5, 0x10000, @target_btf_id=0x8}, 0xe) 4m34.74468353s ago: executing program 5 (id=1146): r0 = open(&(0x7f0000000000)='./file0\x00', 0x20200, 0x100) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x28000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x168, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4fd}, @NL80211_ATTR_S1G_CAPABILITY={0x50, 0x128, "14705dcd53b5fe4c96b64c49ff15a3234847e7bb6ebb6ce4e7c2b7b46696fdc5526b31a8934fcf0ccaeca957976102d9cd96934c291e6d0567f5ac78f40e8add7cd689df59c5de55f07707a8"}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x1}, @NL80211_ATTR_HE_CAPABILITY={0x21, 0x10d, "0ece9277f3066e7602fb49670687d91ab40307febf4c8365e521396559"}, @NL80211_ATTR_STA_FLAGS2={0xc6, 0x43, "de3c1c96b40767a6a26721f3875f8bf90314ae7cd8a8fc82a424db1a362f3ce094aefbb6a416ccf2f58f82c640c0c66dfe5ad6bf3891c9f520016e6727ccebde9636ab776930d479f8f0becd031175b7fbdd85903f7c776b5e67ddd056fa9cf8652556ec6343fa58348b7c64e40e6476256b4c5d3daa7d86695201bee20f923e35541697404892933a9e9c718ffe490a19328372fe7d21ca86034de22aec817ff73b48bc7df61549e1aa24bfa48e3b6040f630e5f06954c2d9215058ce7a1d48b7b7"}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x8}]}, 0x168}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), r0) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0x9, 0x2, ':^(\'\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0x7, 0x2, ':%\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8, 0x3, 0x5}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0x7, 0x2, '*@\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x7, 0x1, "c15f4c"}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000440), r0) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_CNTDWN_OFFS_PRESP={0x10, 0xbb, "534a687d5872cc8a7d6f23f9"}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xfffffffc}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x8}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0xff}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, "c418e2b585652688b1a0ca5e8f68b051e7c3f27d545d06b2c1ec30a19906a2abba3e4a70176d49d4bf8bee8cf4691fe250f5ce3cdcbaf1d0c17bc1bb62d1d622fdcdee44d5216ccf96d4627b02f4ac103816773d97e8bc12040295cdd3cd7d7e46353204958b4189"}, @NL80211_ATTR_HE_CAPABILITY={0x12, 0x10d, "bebe9b3c08bdda125320830e5e3a"}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x81}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000004}, 0x14041) r3 = syz_genetlink_get_family_id$auto_NLBL_UNLBL(&(0x7f0000000640), r0) sendmsg$auto_NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0xc204c201}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xc8, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x41, 0x7, "4af9c61cb5c952fed8a93ad5600ee2d2b33bfbc84aad2abbc5d6c4c518a35bddc7370ba622fbebef8435817c9d681fe5455f2e1ebad028ae0720745c99"}, @NLBL_UNLABEL_A_SECCTX={0x70, 0x7, "830ab2018c74b572cb171b32c6f161b225b693af434e26bcbff36a23871096729f064391a1f29f1cf736394b7552e59d22e8d16f7fb737fc2a2102e4bcad1b2165476133d895e1f9343c305d6d499610289258be6b146c3a15dd3c0c9f4a57aafab840b82602bb6cc3680e8a"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000840), r0) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r4, 0x10, 0x70bd28, 0x5, {}, [@ETHTOOL_A_DEBUG_HEADER={0x7, 0x1, "9e8f01"}, @ETHTOOL_A_DEBUG_HEADER={0x7, 0x1, "6ba49e"}, @ETHTOOL_A_DEBUG_HEADER={0x7, 0x1, "96c150"}, @ETHTOOL_A_DEBUG_HEADER={0x7, 0x1, "86f64a"}, @ETHTOOL_A_DEBUG_HEADER={0x7, 0x1, "943506"}, @ETHTOOL_A_DEBUG_HEADER={0x7, 0x1, "e91a82"}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x9c, r2, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC_HINT={0x7e, 0xc8, "fee9fa38a5f37fa3c5938caeca274e6973f5c16fab39108a8529b229a6d2bdb4260cf1d82e05f9e1feb5568c5959425b82add3e002c6599fa6c879ce9d3f53547f7a138cf77f70abdcfd044f14b57b193c52ccdeced55bf1421e444767afefdb3bd7ac6f4ed29ff9131a335785aa76d6ae3556f6753349515368"}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) keyctl$auto(0x3, 0x1, 0x8001, 0x3ff, 0x9) mlockall$auto(0x80) getsockopt$auto(r0, 0x1000, 0x5, &(0x7f0000000b00)=':\x00', &(0x7f0000000b40)=0x3) sendmsg$auto_NL80211_CMD_STOP_AP(r0, &(0x7f0000000fc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000bc0)={0x3bc, r2, 0x380, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_IE={0x2a1, 0x2a, "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"}, @NL80211_ATTR_VHT_CAPABILITY={0x101, 0x9d, "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"}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000005) io_uring_setup$auto(0x7, &(0x7f0000001000)={0x5, 0x0, 0xf, 0x0, 0x7, 0x7, 0xffffffffffffffff, [0x5, 0x7, 0xad09], {0xa8400000, 0x6, 0x2, 0x6, 0x9, 0x2, 0x8, 0xdd3, 0x3}, {0x4, 0x9, 0x7, 0xffffffff, 0x3, 0x6, 0x6, 0x8, 0x400}}) r6 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f00000010c0), r0) sendmsg$auto_IPVS_CMD_SET_DEST(r0, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)={0x108, r6, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xe3, 0x1, "722e4d2f8bacf80bf50be8f010fe3c8dd17c222bc00b558115db6d58c2f879621ece34d3d003ac1703b6c0803ba2f54f5c296c320866922cf6fa88b5a28395c377bf6bab491c9f30eb4c4e2db28c78fd055a0ba5a66227e55e5a7f3d5e01bc947b6a3bd1fcdc1a1f4e499730b64e4d54a69a7abaa2a26d295fc783f739b9fd8105e4d0fe6d8e394d6c91b9b21b1e48add7572529fc2fe2cc557e3935d389e41dbf64d0a4586a869b8fa2d947f27b8972c460f04d45b51ca20dd41c2373d51d887486f3421bebefd00b6adeeac3be9a5000b69e18e99228a7f6dfe1d8c44afa"}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}]}, 0x108}}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x108, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_MBSSID_ELEMS={0x3e, 0x133, "888bcc0e55b99b3621bf1657ceabc8b51c06b9e8fdec7b484b9859233c2e5e81d7ee194612e59a91777740cb293f1c6412192ab67cf06a6ad041"}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x89, 0x124, "cbded74e2a571aad6c44c687cbd6c3996f2ad0595cecb085a0a7d73dbd309c1924aa862345d3ffdad9ff6bce741bb4761f940f86a6a44809cbcdb1bdcd2b14aa61039255c351140401e5917a44a06e0cd97e8c2cae5af2c0071952d0cbe0290d22e26bc8cfc3616fb4f50db31a60931acac9bb85d6039f4ef8a0da54b50a2878e7ffb0c5d0"}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x40}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "7185"}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x61}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e24}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x400c5) sendmsg$auto_CTRL_CMD_GETFAMILY(r5, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x2}, @CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x2}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x7}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x2}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xffff}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x7}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xdc1}, @CTRL_ATTR_FAMILY_NAME={0x9, 0x2, 'IPVS\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c4}, 0x4040000) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001640), r0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x54, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x7, 0x1, "11f750"}, @ETHTOOL_A_CHANNELS_HEADER={0x7, 0x1, "4995f9"}, @ETHTOOL_A_CHANNELS_HEADER={0x7, 0x1, "dd411f"}, @ETHTOOL_A_CHANNELS_HEADER={0x7, 0x1, "3d112d"}, @ETHTOOL_A_CHANNELS_HEADER={0x7, 0x1, "da085c"}, @ETHTOOL_A_CHANNELS_HEADER={0x7, 0x1, "fae860"}, @ETHTOOL_A_CHANNELS_HEADER={0x7, 0x1, "fcb8c6"}, @ETHTOOL_A_CHANNELS_HEADER={0x7, 0x1, "ab0030"}]}, 0x54}, 0x1, 0x0, 0x0, 0x1088c}, 0x880) alarm$auto(0xffff) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000017c0), r7) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x80, r9, 0x100, 0x3, 0x25dfdbfe, {}, [@NL80211_ATTR_HT_CAPABILITY={0x60, 0x1f, "9ca92399a4cc31a1a7f0323973483939e54f6bf5c78e9b02dccabc31c47e8c4708bdb9558981d7febce4788a5380d549a33dfa7f90d1fdd40471c9d6d101d4618c343b5513f7a1b2d63fe8a5512581522d245e08a2d440522328c43b"}, @NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0xd5}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x48001) io_cancel$auto(0x1, &(0x7f0000001900)={0x2, 0x64, 0x100, 0x100, 0x3, 0x415, 0x4634, 0x1, 0x3, 0x0, 0x100, r5}, &(0x7f0000001940)={0x1, 0x8000000000, 0x0, 0x5}) close_range$auto(r0, r10, 0xfffffffe) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r10, &(0x7f0000001a40)={&(0x7f0000001980), 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x40, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_CNTDWN_OFFS_BEACON={0x1b, 0xba, "894aa82e1200506dde272058a264c396bcf3ffdb19600f"}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x13a2bc4f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x80) sysfs$auto(0x40, 0x8, 0x2d) 4m34.377666033s ago: executing program 5 (id=1147): mincore$auto(0x4, 0x6, &(0x7f00000000c0)='!#\x00') (async) socket(0xa, 0x3, 0x102) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7020fddbdf250700000008000300", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000c0) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20008090) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4m33.927334404s ago: executing program 5 (id=1150): vmsplice$auto(0x1, &(0x7f0000000000)={&(0x7f0000000100), 0x5}, 0x6, 0x8) prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x1004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) tkill$auto(0x1, 0x7) 4m32.633903118s ago: executing program 5 (id=1153): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) exit$auto(0x7) poll$auto(&(0x7f0000000080)={0x2, 0x0, 0x1a}, 0xff, 0x1) clone$auto(0x8, 0x7fffffffffffffff, &(0x7f0000000000)=0x6d, &(0x7f0000000040)=0x5, 0x63abc6d8) setns(r0, 0x40000000) 4m32.101058928s ago: executing program 36 (id=1153): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) exit$auto(0x7) poll$auto(&(0x7f0000000080)={0x2, 0x0, 0x1a}, 0xff, 0x1) clone$auto(0x8, 0x7fffffffffffffff, &(0x7f0000000000)=0x6d, &(0x7f0000000040)=0x5, 0x63abc6d8) setns(r0, 0x40000000) 4m1.477244701s ago: executing program 7 (id=1225): socket(0xa, 0x3, 0x6) socket(0x25, 0x1, 0xffffff00) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="0600"}, 0x55) socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x276) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x6, 0xfffdffffffff0005, 0x19) madvise$auto(0xfffffffffffffffd, 0x53, 0x9) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmmsg$auto(0x3, 0x0, 0x200, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x20000000003, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) fremovexattr$auto(0x4, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0x2b, 0x1, 0x1) socket(0x11, 0x2, 0xbb) socket(0x2a, 0x2, 0x0) mmap$auto(0x1, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0xe3, 0x9b7f, 0xc, 0x8000) clone$auto(0x8000000000000000, 0x104, 0xfffffffffffffffc, 0x0, 0x100000000) madvise$auto(0x2, 0x3, 0x115) madvise$auto(0x7, 0x8, 0x3ff) 3m59.700490457s ago: executing program 7 (id=1228): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x0) (async) socket(0x23, 0x2, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETFAMILY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20008000) (async) io_uring_setup$auto(0x10000, &(0x7f0000000000)={0xb, 0xffffffff, 0xfff, 0x6, 0x2, 0x1, 0xffffffffffffffff, [0x1, 0x0, 0x9], {0x3, 0x0, 0x7, 0x5, 0x40, 0xbb6, 0x81, 0x2, 0xc}, {0x6, 0x3, 0x1, 0x1, 0x3, 0x9, 0x2, 0x7, 0xfff}}) (async) syz_genetlink_get_family_id$auto_SMC_GEN_NETLINK(&(0x7f0000000180), r1) r3 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002840), r1) (async, rerun: 32) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), r0) (rerun: 32) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x5}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x400}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x100000001}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0xc}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x400}, @NETDEV_A_PAGE_POOL_ID={0xc}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x101}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20000045) (async) sendmsg$auto_IPVS_CMD_GET_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3], 0x14}}, 0x4010) 3m59.273072767s ago: executing program 7 (id=1230): socket(0x2, 0x2, 0x1) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) io_uring_setup$auto(0x6, 0x0) (async) read$auto(0x3, 0x0, 0x8000000000000080) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0x2, 0x5, 0x0) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (async) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x0) (async) madvise$auto(0x0, 0x200, 0x15) (async) exit$auto(0x7) (async) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x8, 0x10007, 0xdf, 0xfff, 0x2, 0x8003) (async) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) r0 = open(0x0, 0x22240, 0x155) lseek$auto(r0, 0x2, 0x9bb2) (async) open(0x0, 0xa240, 0x1de) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 3m57.991331382s ago: executing program 7 (id=1236): setsockopt$auto(0x6, 0x6, 0xd, &(0x7f0000000040)='ns/cg\x0fB\x05\x81>', 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x7, 0x2010000000000) fanotify_init$auto(0x80, 0x2) socket(0x26, 0x80805, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) socket(0xa, 0x4, 0x0) close_range$auto(r1, 0xfffffffffffff000, 0x81) fanotify_init$auto(0x4f1, 0x0) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/pid\x00') open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) socket(0x2a16213c138436c7, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x400, 0xa, 0xfffffffffffffffb, 0x932, 0x1, 0x8) socket(0xa, 0x2, 0x0) prctl$auto(0x7, 0x9, 0x1d, 0xffffffffffffffc0, 0xffffffffffffffff) setsockopt$auto(r0, 0x1, 0x200, &(0x7f0000000100)='n\xb9\xeb\xf3\x04I\v\xaa\xba\xdc\x98v\xa9\x12\x9d\xe1#\xe0\xfb\x1a<\xe5\xfb6U*|Ls\xde\x96\x9cL\xe6\x1d:d\x1c\a\xdfa\xeaR\xb7\xef\x06\xde\x84\xbekZ\xf4\x8ePJ\xb6\xd0\xa7\xa27\xfb\xe2B\xbb#Vq\x9a\x86{\xa0\x82U\xdc\f\xa7\xb4m\xc5F\\\xf2\x1d]\xc0\x9cJ\xda\x84\xcd\x92:7\x04h\x90\xcd\xe6\xe0\x8e\x16\xf9\xd0@\x19\x12\xb71\xb6\x9d\xe4\xa7\xae\x0e[\x8a$\x84j\xaa\x86\xb8\xac#\"\xe7\xb5K\xf4S\xa4x\xc9i\x9f\xaf\x9a\xb1', 0xa) mprotect$auto(0xf, 0x7ffffffffffffffd, 0x8000000000000001) open(&(0x7f0000000080)='./file0\x00', 0x100, 0xd0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') r2 = socket(0x21, 0x801, 0x84) connect$auto(0x3, &(0x7f0000000280)={0x2, @sa_data_min="22c1d923cd6b4df444e9ef1b6c84"}, 0x55) pread64$auto(r2, &(0x7f0000000000)='ns/cg\x0fB\x05\x81>', 0xbd, 0x0) listen$auto(0x3, 0x81) 3m57.40659899s ago: executing program 7 (id=1238): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffff, 0x8000) syslog$auto(0xc, &(0x7f0000000000)='[(\xe1*\xc7r\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) writev$auto(0x5, &(0x7f0000000100)={0x0, 0x5}, 0x201) vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x80000000002}, 0x3, 0x4) mmap$auto(0xf000, 0xd, 0x1000000003, 0x38, 0x5, 0x8000) 3m57.117026632s ago: executing program 7 (id=1239): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x4000028000) (async) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3ff, 0x0) (async) socket(0xa, 0x801, 0x106) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x8) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) r0 = socket(0x1d, 0x3, 0x1) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) getsockopt$auto(r0, 0x65, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) mmap$auto(0x0, 0x8, 0x329, 0x10011, 0x4, 0x1008000) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff040, 0x4000000000002) (async, rerun: 32) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x29, 0x5, 0x0) (async) socket(0x23, 0x5, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (async) ioctl$auto(0x3, 0xff0a, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) 3m41.674544604s ago: executing program 37 (id=1239): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x4000028000) (async) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3ff, 0x0) (async) socket(0xa, 0x801, 0x106) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x8) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) r0 = socket(0x1d, 0x3, 0x1) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) getsockopt$auto(r0, 0x65, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) mmap$auto(0x0, 0x8, 0x329, 0x10011, 0x4, 0x1008000) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff040, 0x4000000000002) (async, rerun: 32) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x29, 0x5, 0x0) (async) socket(0x23, 0x5, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (async) ioctl$auto(0x3, 0xff0a, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) 3m23.789090769s ago: executing program 9 (id=1335): mmap$auto(0x5, 0xe982, 0xe52, 0x1000000000000eb1, 0x3fe, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x9, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x4000000000000000, 0x6, 0x3, 0x200, 0x8, 0x6]}, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x2004c180) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x8, 0xc, 0x9b72, 0x1, 0x9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) shmget$auto(0x8, 0x10563, 0x568d1af2) capset$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdc, 0xeb1, 0x401, 0x8000) io_uring_register$auto(0x100000001, 0x14, 0x0, 0x5) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) setsockopt$auto(0x3, 0x1, 0x19, 0xffffffffffffffff, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) syz_open_procfs$namespace(0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 3m23.525678451s ago: executing program 9 (id=1338): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x98, 0x5, 0x400, 0xf73, 0x8, 0x0) socket(0x2, 0x1, 0x106) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) 3m22.960467619s ago: executing program 9 (id=1344): madvise$auto(0x0, 0x2000040080000004, 0x2) ioctl$auto(0xc8, 0x400454ca, 0x5c8d) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) r0 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) socket(0xa, 0x2, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x9, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x4000000000000000, 0x3, 0x3, 0x200, 0x8, 0xc]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000180)={0xa, @sockaddr_1_1={"b5018a4e564c1f733651c04af315035e115104f1a7f749b1adf076ffcbed2b9e4b785084c8f8480854c54e2924cb5970734b34b69081be3d0308005fc3a2b05aba101d165d12a764577a98d5bd4e5ef502a30341cb0c96962c81bf17c3529e0088444529320aa7fba5d1b702e0dc1271f8104b86dc98cfc96851c50e0bb6c5ff5086a17bd68e18a06368c79249c76506d518ff381190120262c55c48fc630562"}}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) write$auto(0x3, 0x0, 0xfdef) munmap$auto(0x1000000, 0x2000000c) madvise$auto(0x0, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) 3m21.431138748s ago: executing program 9 (id=1351): mq_open$auto(&(0x7f0000000100)='{+-%{},]%**!]\x00', 0xe, 0x7, &(0x7f0000000140)={0x101, 0x2f05, 0xa509, 0x4}) socket(0x2a, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x540f, 0x103) mq_open$auto(&(0x7f0000000100)='{+-%{},]%**!]\x00', 0xe, 0x7, &(0x7f0000000140)={0x101, 0x2f05, 0xa509, 0x4}) (async) socket(0x2a, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) ioctl$auto(0x3, 0x540f, 0x103) (async) 3m21.005123657s ago: executing program 9 (id=1353): mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) umount2$auto(&(0x7f0000000180)='.\x00', 0x4) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) tkill$auto(0x80000000000001, 0x7) 3m19.360943946s ago: executing program 9 (id=1359): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) preadv2$auto(0x0, 0x0, 0x5, 0x1000, 0x40, 0xffffffff) close_range$auto(0x2, 0x8, 0x10000) r0 = socket(0x2, 0x3, 0x86) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x100000000000030, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) open(0x0, 0x22240, 0x154) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unlink$auto(&(0x7f0000000000)='(#\\#\x00') mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) execveat$auto(0x4c, 0x0, 0x0, 0x0, 0x6) 3m19.009389242s ago: executing program 38 (id=1359): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) preadv2$auto(0x0, 0x0, 0x5, 0x1000, 0x40, 0xffffffff) close_range$auto(0x2, 0x8, 0x10000) r0 = socket(0x2, 0x3, 0x86) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x100000000000030, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) open(0x0, 0x22240, 0x154) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unlink$auto(&(0x7f0000000000)='(#\\#\x00') mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) execveat$auto(0x4c, 0x0, 0x0, 0x0, 0x6) 1m35.321722993s ago: executing program 2 (id=1703): socket(0x1, 0x1, 0x1) bind$auto(0x3, &(0x7f0000000140)={0x1, @sa_data_min="af7af2952a203b6cdd8c8f51372e"}, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0x0, &(0x7f0000001200)='ns/pid\x00') r0 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)={0xf14, r0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e23}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x9}, @NL80211_ATTR_SCAN_FREQ_KHZ={0xee5, 0x124, "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"}]}, 0xf14}, 0x1, 0x0, 0x0, 0x4c004}, 0x881) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x0) writev$auto(0x7, &(0x7f0000000180)={&(0x7f0000000240), 0x5}, 0xa) lseek$auto(0x7, 0x6, 0x4) fanotify_init$auto(0x200, 0x2010000000000) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') open(0x0, 0x4242, 0xe1d2b27bdc14aabc) open(0x0, 0x10677d, 0x37e5c9853cd1b999) fanotify_mark$auto(0x400000000000, 0x101, 0x10c, 0x4, 0x0) dup2$auto(0x0, 0x3) read$auto(0x3, 0x0, 0x80) open(&(0x7f0000000000)='./file0\x00', 0x150080, 0x10) listen$auto(0x3, 0x81) listen$auto(0x3, 0x0) 1m34.59584481s ago: executing program 2 (id=1706): mmap$auto(0x0, 0xc, 0x2, 0x10, 0x2, 0x0) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0xfffd, 0x6) r0 = socket(0x11, 0x3, 0x2) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8a62005}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r1, @ANYBLOB="00042abd7000fedbdf258300000008003f00a5fcffff6f0025019843c0b4a1a0321681d6b2d9c7b2625915ae19e4d3b3974b0aa24d228dde5ebf6f565fbe8063614b87a235e526df0785244d566e3d0130c328ea09647f5e1e9d88a7f41583ee1e81c9bc0bf4097550db8ae8fca4ecf8b3ab32b14ffcabeec14c6758429d0d7828819091660007002601be59ce004300c500b8bdba5b6987217a4921452edea38d48dbab25dfe3b305a9f412cf088df6bcc1052ea7e29961443a001b0a3720dfacc3583de3be67616e6ecf0ecab3697a05000400e20012001800c08f7ec225ad661f279d2e247b28000005002a0104000000"], 0xf8}, 0x1, 0x0, 0x0, 0x1000}, 0x4844) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x17) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) ioctl$auto(0xc8, 0x400454d1, 0x5c8d) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="09ae0300"}, 0x55) socket(0x28, 0x1, 0x28) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x6, 0x6, 0xd, &(0x7f0000000040)='ns/cg\x0fB\x05\x81>', 0xc) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') sysfs$auto(0x2, 0x45, 0x0) rt_tgsigqueueinfo$auto(0x3, 0x7, 0x7, &(0x7f0000000180)={@siginfo_0_0={0x401, 0x1, 0x80, @_timer={0xaabe, 0xb7d, @sival_ptr=0x0, 0x8}}}) fsopen$auto(0x0, 0x1) sendto$auto(0x3, 0x0, 0x5e0, 0x101, &(0x7f0000000140)={0x2, @sockaddr_1_1}, 0x1c) mount$auto(0x0, &(0x7f0000001480)='}[,&*}\x00', 0x0, 0xfc, 0x0) unshare$auto(0x20000080) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) io_uring_setup$auto(0x6, 0x0) 1m33.218497562s ago: executing program 2 (id=1708): madvise$auto(0x0, 0x2000040080000004, 0xe) syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) pivot_root$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000040)='.\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xfffffffffffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) socket(0xa, 0x2, 0x73) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmmsg$auto(0x3, 0x0, 0x200, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x1ffff000, 0x5510, 0x8) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xc, 0x8000) clone$auto(0x8000000000000000, 0x104, 0xfffffffffffffffc, 0x0, 0x100000000) madvise$auto(0x0, 0x3, 0x15) sysfs$auto(0x2, 0x10000000000002b, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x8000) 1m29.87660872s ago: executing program 2 (id=1721): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) arch_prctl$auto(0x1021, 0x80000000000002) (async) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=ANY=[@ANYBLOB="04000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf254a00000004000d01"], 0x18}}, 0x4000000) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54010000", @ANYRES16=r2, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) epoll_create$auto(0x4) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) ioctl$auto(0x3, 0xffffffff80088a02, 0x1) (async) r3 = syz_genetlink_get_family_id$auto_NCSI(&(0x7f0000000280), r1) sendmsg$auto_NCSI_CMD_PKG_INFO(r0, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000002c0)={0x54c, r3, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@NCSI_ATTR_DATA={0x51c, 0x5, "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"}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x8}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x9}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x9}]}, 0x54c}, 0x1, 0x0, 0x0, 0x60004000}, 0x4020) 1m28.385012636s ago: executing program 2 (id=1723): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) listen$auto(0x3, 0x83) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x82099, 0xe9e, 0x7, 0x15, 0xffd, 0x100000001, 0x4, 0xf, 0x0, 0x0, 0xe, 0x3, 0xfd, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = socket(0x18, 0xa, 0xc) tkill$auto(0x80000000000001, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00082abd7000fddbdf250100060008000100", @ANYRES32=0x1, @ANYBLOB], 0xffffffffffffffc7}, 0x1, 0x0, 0x0, 0x8001}, 0x20011030) bind$auto(0x3, &(0x7f0000000000)={0x10, @sa_data_min="d059b8a5b5bce4bdf082c36111fd"}, 0xf) timerfd_create$auto(0x7, 0x0) close_range$auto(0x2, 0x8000, 0x0) setreuid$auto(0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x84c1, 0x0) poll$auto(&(0x7f00000000c0)={0xffffffffffffffff, 0xd, 0x9}, 0x10, 0x2) read$auto(r3, &(0x7f0000000100)='+*\x00', 0x5) lseek$auto(r2, 0x1000, 0x72) setresuid$auto(0xd, 0x0, 0x221) setrlimit$auto(0x6, &(0x7f0000000140)={0x0, 0x6}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, 0x0, 0x800) prctl$auto(0x1000000003b, 0x7fffffffffffffff, 0x6, 0x3, 0x72e0000) sched_getscheduler$auto(0x1) setresuid$auto(0x0, 0x6, 0x8000) setrlimit$auto(0x8, 0x0) mlock$auto(0xfbe8, 0x4) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000180), r0) 1m26.653339868s ago: executing program 2 (id=1728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000c40), r1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x4}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0xa}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "0f67c0979652f21e20cc79fed573"}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x800) r3 = socket(0x2, 0x5, 0x0) setsockopt$auto(r3, 0x2, 0x60, 0xfffffffffffffffe, 0x2) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_RF_MODE={0x5, 0xb, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40408c1}, 0x9e1706023210810c) 1m26.261093752s ago: executing program 39 (id=1728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000c40), r1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x4}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0xa}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "0f67c0979652f21e20cc79fed573"}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x800) r3 = socket(0x2, 0x5, 0x0) setsockopt$auto(r3, 0x2, 0x60, 0xfffffffffffffffe, 0x2) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), r1) sendmsg$auto_NFC_CMD_DISABLE_SE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_RF_MODE={0x5, 0xb, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40408c1}, 0x9e1706023210810c) 1m9.92774916s ago: executing program 3 (id=1777): r0 = socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socket(0x2, 0x801, 0x100) close_range$auto(0x0, 0xfffffffffffff000, 0x2) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') open(&(0x7f0000000040)='./cgroup\x00', 0x745240, 0x40) fanotify_init$auto(0x4, 0x2000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) socket(0x11, 0x3, 0x4) bind$auto(0x7, &(0x7f0000000080)={0x11, @sockaddr_1_1={"648301"}}, 0x3e) close_range$auto(0x0, 0xfffffefffffff004, 0x80000000000002) landlock_create_ruleset$auto(&(0x7f0000000040)={0x0, 0x1}, 0x8d, 0x0) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x7, 0x203, 0xffffffffffffffff, 0xf, 0x5, 0x3, 0x1, 0x2800000000000002, 0x9, 0x5e582971, 0x0, 0x2c, 0x4, 0xffff, 0x74, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) semctl$auto(0x7fffffff, 0x8, 0x1, 0xde6b) signalfd4$auto(0xffffffff, &(0x7f0000000080)={0x8000}, 0x8, 0x0) select$auto(0x5, &(0x7f0000000000)={[0xeb, 0x8001, 0x4, 0xd1, 0xb, 0x1ff, 0x500000, 0x10000, 0x7ff, 0x4, 0x105, 0x10001, 0x0, 0x4, 0xffffffffffffffff, 0x1]}, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x80) dup2$auto(r1, r0) ioctl$auto(0xc8, 0x400454e2, 0x5c8d) clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socket(0x15, 0x5, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x22240, 0x154) 1m9.179477607s ago: executing program 3 (id=1779): syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/time_for_children\x00') mmap$auto(0x0, 0x20009, 0xdf, 0x13, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x4) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) ioperm$auto(0x7, 0x6, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x9, 0x9, 0x401e, 0x401, 0x8000) r0 = socket(0x18, 0x2, 0x106) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x5, 0x0) futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r2 = socket(0x1e, 0x6, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0xfffffffffffffffe, 0x16) close_range$auto(r0, r1, 0x801002) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) sigaltstack$auto(&(0x7f00000000c0)={0x0, 0x0, 0x7fffffff}, 0x0) madvise$auto(0x10, 0xffffffffffff0005, 0x9) sigaltstack$auto(0x0, &(0x7f0000000240)={0x0, 0x1, 0x1}) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) 1m5.226500832s ago: executing program 3 (id=1792): r0 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="28800000", @ANYRES16=r0, @ANYBLOB="01012bbd7000fddbdf250d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000400000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x60048400}, 0x800) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000380)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x0, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) umount2$auto(&(0x7f0000000180)='.\x00', 0x4) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x418400, 0x112, 0x1d}, 0x18) recvmmsg$auto(r2, &(0x7f0000000300)={{&(0x7f0000000100)=[0x2, 0x0, 0x9], 0x9, &(0x7f0000000280)={&(0x7f0000000140)=[0x6], 0xf41}, 0x3, &(0x7f00000002c0)=[0x100000000], 0x93, 0x80000000}, 0xb}, 0x2, 0x0, &(0x7f0000000340)={0x6, 0x8}) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="28800000", @ANYRES16=r0, @ANYBLOB="01012bbd7000fddbdf250d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000400000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x60048400}, 0x800) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000380)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x0, 0x0) (async) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) (async) umount2$auto(&(0x7f0000000180)='.\x00', 0x4) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x418400, 0x112, 0x1d}, 0x18) (async) recvmmsg$auto(r2, &(0x7f0000000300)={{&(0x7f0000000100)=[0x2, 0x0, 0x9], 0x9, &(0x7f0000000280)={&(0x7f0000000140)=[0x6], 0xf41}, 0x3, &(0x7f00000002c0)=[0x100000000], 0x93, 0x80000000}, 0xb}, 0x2, 0x0, &(0x7f0000000340)={0x6, 0x8}) (async) 1m3.32503958s ago: executing program 3 (id=1802): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x7, 0x1000, 0xfffffffffffffffe, 0x8000000003, 0x4) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async, rerun: 64) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) (async, rerun: 64) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) bind$auto(0x3, &(0x7f0000000140)={0x1, @sa_data_min="af7af2952a203b6cdd8c8f51372e"}, 0xd) io_uring_register$auto(0x2, 0x16, &(0x7f0000000000)=[0x4, 0xa, 0x6], 0x1) (async, rerun: 32) syz_open_procfs$namespace(0x0, 0x0) (rerun: 32) close_range$auto(0x2, 0x8000, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x0) (async) fcntl$auto(0x2, 0x409, 0x1) (async) clone$auto(0x59, 0x0, 0x0, &(0x7f0000000040)=0x4, 0x2) 1m1.549063648s ago: executing program 3 (id=1807): r0 = socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(r0, &(0x7f0000000140)={0xa, @sockaddr_1_1={"98beb3"}}, 0x55) shutdown$auto(0x200000003, 0x2) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) write$auto(0x3, 0x0, 0x81) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x5, 0x3, 0x8b72, 0x6, 0x8000) exit$auto(0x7) unshare$auto(0x40000080) mmap$auto(0x959, 0x400008, 0xdf, 0x9b72, 0x10000000000002, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x9, 0x0, 0x0, 0xffffffffffffffff) socket(0xa, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) io_uring_setup$auto(0x6, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xdc0, 0x6, 0x30000000}, 0x1, 0x9, &(0x7f0000000080)={0x73af, 0x26}, 0x2) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) bpf$auto(0x12, 0x0, 0xcf) 59.097023584s ago: executing program 3 (id=1816): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x7f) mq_open$auto(0x0, 0xde8, 0xb, 0x0) socket(0x1f, 0x1, 0x2) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x6, 0x0) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) fsopen$auto(&(0x7f0000000000)='!\\@[:\x00', 0x5) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x55, 0x1, "91a34bcf474f8d5602f7f534bb50969cc07db1ed721d1392b788f8a4b07eb2b24e136ccbf60a24861bf050180dc65c262734ce39f3f4662cd87cbdba33a14ca1dde318c83eccdfa8f505e434206b2fecfe"}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x3b, 0x1, "78a5c31df7d817e8fc17a884a3f9d076c9ba0ba96bb6e9d2f2a84e4631b9eebde1a87c1bba723147634ec7cf087d37f656bdaf39ef1587"}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1f, 0x1, "d546195a651038dd9ec5a4943e684492a89b612d72491b87f09f4c"}]}, 0xc8}}, 0x8002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2) poll$auto(&(0x7f0000000080)={0x2, 0x0, 0x1a}, 0xff, 0x1) epoll_wait$auto(0x5, 0x0, 0x2, 0x18) 58.928042984s ago: executing program 40 (id=1816): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x7f) mq_open$auto(0x0, 0xde8, 0xb, 0x0) socket(0x1f, 0x1, 0x2) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x6, 0x0) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) fsopen$auto(&(0x7f0000000000)='!\\@[:\x00', 0x5) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x55, 0x1, "91a34bcf474f8d5602f7f534bb50969cc07db1ed721d1392b788f8a4b07eb2b24e136ccbf60a24861bf050180dc65c262734ce39f3f4662cd87cbdba33a14ca1dde318c83eccdfa8f505e434206b2fecfe"}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x3b, 0x1, "78a5c31df7d817e8fc17a884a3f9d076c9ba0ba96bb6e9d2f2a84e4631b9eebde1a87c1bba723147634ec7cf087d37f656bdaf39ef1587"}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1f, 0x1, "d546195a651038dd9ec5a4943e684492a89b612d72491b87f09f4c"}]}, 0xc8}}, 0x8002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2) poll$auto(&(0x7f0000000080)={0x2, 0x0, 0x1a}, 0xff, 0x1) epoll_wait$auto(0x5, 0x0, 0x2, 0x18) 36.212367789s ago: executing program 0 (id=1863): close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) setgroups$auto(0xc00000000, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) fchown$auto(0x5, 0x8, 0x3) socket(0xa, 0x3, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="0600"}, 0x55) r0 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="5cb04505669709e465251500000adbfd"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r1 = socket(0x10, 0x2, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x20000000) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) setresgid$auto(0x81, 0x800000a0, 0x8) socket(0x2, 0x2, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) exit$auto(0x7) unshare$auto(0x40000080) swapoff$auto(0x0) exit$auto(0x1) mmap$auto(0x0, 0x400008, 0xdc, 0x13, 0x1000002, 0x3fd) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) write$auto(0x3, 0x0, 0xfff5) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x1}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) 35.102651838s ago: executing program 0 (id=1868): close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x42400, 0x1) setregid$auto(0x5, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x0, 0x3) io_uring_setup$auto(0x6, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x1, 0x0) setresuid$auto(0x0, 0x8, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x4, 0x1, 0xc, 0x0, 0x6) socket(0x23, 0x80805, 0x0) connect$auto(0x3, &(0x7f0000000180)={0x23, @sockaddr_1_1}, 0x54) fallocate$auto(r0, 0x8, 0x5, 0xffffffffffffffff) 34.664366706s ago: executing program 0 (id=1871): connect$auto(0x3, &(0x7f0000000040)={0x1, @sockaddr_1_1}, 0x54) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x7) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(0x200000000000003, 0x1, 0x29, 0x0, 0x300) io_uring_setup$auto(0x6, 0x0) write$auto(r0, 0x0, 0x8e) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0xc8, 0x2, 0x9, 0xffffffffffff8001, 0xbef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) get_robust_list$auto(0x1, 0x0, 0x0) 32.892687297s ago: executing program 0 (id=1877): close_range$auto(0x0, 0xfffffffffffff000, 0x2) setresuid$auto(0xffffffffffffffff, 0x8, 0xffffffff) memfd_create$auto(&(0x7f00000001c0)='IPVS\x00\x84\x94\xbf\x7f\xe0(\xc7^M\xbe\x92\x98?I\xa5ja\xe8\xa1o\xb5-Z\x9dc\x152\xaew`0M\x1b3\r\x8afQ\xc2\x82W?r$\xf0\xce\x7f\x15\xa1\x13\xb2\x84\x04\xad<\x91\x85\xb22G\xf6\x8b\xba<\xe9&\x17%\x1a\xa5c\xe8\x06\xd4ok\x8a\xb2\xbaz\xf1\v\xf4\xaa\xda\x91\xfb\xea\x17~C\xb3\xc4S\xce\x83\x13\xd9\xbd{d\xfdB]\xb0R\x05b\x1b\xa5\xb8\x85\xa9\xbc5-9\x94\xa4QG\x06Z3#\x1cK\xbe\x16\xebaE~\x00\x00\x00\x00\x00', 0x8) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') fcntl$auto(r0, 0x2, 0x1) io_submit$auto(0x8c1a, 0x10, &(0x7f0000000080)=&(0x7f0000000040)={0x3, 0x3, 0x7, 0xfd, 0x265, 0x7, 0xfffffffffffff801, 0x3, 0x4, 0x0, 0x1, r0}) fchmod$auto(r1, 0x0) 32.546444343s ago: executing program 0 (id=1879): set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffe, @_sigpoll={0x52, 0x7}}}) rseq$auto(&(0x7f00000000c0)={0x3, 0xb9, 0x10, 0x2, 0x80000000, 0x5716, "e8ef535b956e4bf95af88208e62d73e59ad7de55d7871dbf70d6e0e0a18de97acc8dd0227dd9014ab711c0744116d76e5ccdbcdfbab7daf3ef4ed31bb674acff9023c12b034ef933f6796a959e03b26a9c3df7ebdbd5216081a33da59dc1f450a61b4682f56442846bfd983a3931e4aba1f94388eaa82b5b29aa9203ce97858aafbc3dc243c0cdb405fb9f670b6652fff02b4bb72d1c08514aaa9cf19d27f730fc88a62e8579f4d564d17a36c3783f9a9a8cb6fc426a7370610dbd45d3873df5731c1c0eb594651493b4cc687b98e27f4888f645d2dbcb7975053287a342eefa2fcfb81c12724a94fce46008cd8d340a"}, 0x1, 0x1d7, 0x44) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x402000000010006, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) creat$auto(&(0x7f0000000040)='X))\x00', 0x5) write$auto(0x3, 0x0, 0xfdef) io_uring_setup$auto(0x6, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) 29.984619056s ago: executing program 0 (id=1887): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffd, 0x5, 0x3, 0x14, 0x5, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0xfffffffffffffffd, 0x5, 0x3, 0x14, 0x5, 0x1) (async) 29.529710372s ago: executing program 41 (id=1887): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffd, 0x5, 0x3, 0x14, 0x5, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0xfffffffffffffffd, 0x5, 0x3, 0x14, 0x5, 0x1) (async) 9.693207211s ago: executing program 8 (id=1950): mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) socket(0xa, 0x801, 0x106) (async) socket(0xa, 0x801, 0x106) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000000)={0x6, @sa_data_min="c4ae00"}, 0x55) (async) connect$auto(0x3, &(0x7f0000000000)={0x6, @sa_data_min="c4ae00"}, 0x55) clone$auto(0x2020003b46, 0x2, 0x0, 0x0, 0x8000000000000001) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0) socket(0x2c, 0x3, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80003, 0x300) (async) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x100df, 0xeb1, 0x40000000000a5, 0x8000) bpf$auto(0x6, &(0x7f0000000000)=@bpf_attr_3={0x1, 0x9067, 0x40000080018c, 0x6a, 0x0, 0x8, 0x4, 0x57b8, 0xf, "63ac0600000033ebc15774e816ef77cf", 0x0, 0x100543, 0x4, 0x207, 0x3, 0x1009, 0x4, 0x2, 0xe, 0x5, @attach_btf_obj_fd, 0x166, 0x7fb, 0x6, 0xa, 0x48000000}, 0x10) (async) bpf$auto(0x6, &(0x7f0000000000)=@bpf_attr_3={0x1, 0x9067, 0x40000080018c, 0x6a, 0x0, 0x8, 0x4, 0x57b8, 0xf, "63ac0600000033ebc15774e816ef77cf", 0x0, 0x100543, 0x4, 0x207, 0x3, 0x1009, 0x4, 0x2, 0xe, 0x5, @attach_btf_obj_fd, 0x166, 0x7fb, 0x6, 0xa, 0x48000000}, 0x10) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x8) 8.704743669s ago: executing program 8 (id=1952): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="00a378af20555485130326bd7800fedbdf"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) (async, rerun: 64) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) (async, rerun: 64) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) r2 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000800), r0) (async) poll$auto(&(0x7f0000000140)={r0, 0x3, 0x2c}, 0x6c5d, 0x4) sendmsg$auto_TIPC_NL_KEY_SET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x1218, r2, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xe3, 0x4, "6797578b5faf65deae3834754f28726bee186aca03ee7b8004391be2009d4ad0dcc36ed4c687c5b18621a46a3cbc6ae4b56dd6cf3f5ce31593867f21fe3fbccf59456e4cf2c029239dc904d5ede465a1f6848703405a6375a037ed42f6d782a3ce11487a3a9dbfa1b6b13eff7f160a71643e0f024ff3d4c888956071731e4af3a77d84b5feffc5aac33b7d531ecc854e2b3394efd45264c75fd89e49873847d30cb1b399cbd9462ef02c15d582c058f55596332db9360d93598d1b574d3da4f100467c73d3fde597c8bfca9f30dff75577c7e1a391d7d9b34954743596cb1f"}, @TIPC_NLA_PUBL={0x32, 0x3, "b1e2f201758f5dbf422a9f4f9e8efe27273c137d2275e7774ca18c289fa9f6ee7d7eb1b1b1b99b274631c8cbbc2b"}, @TIPC_NLA_LINK={0x1004, 0x4, "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"}, @TIPC_NLA_BEARER={0xe6, 0x1, "b36b15d49db66b987cc6b159a41fddae21a0fe53437a253cd96e7c28388a272f4881896dbe7a5222dc06f1e472c66fb75b1edb57076a63390906b6357e426cf26cfa006745aba61ea3e206ebdc0821ab5ec76e4ef41de37aae05ded3e1ccbf409de34c499f70490ea082ea09d882ca69bb8121af20d47d43bb57cb952e26a1fccf5a6584669efcea8d13cfb3ec8e99fef0d4ee578a9ea2a01f7e696d9311f9014a64755421e264ba11e6c1f2d6b22cb941874e109cd4225ce1b79ed022bad668ef5d83e73fdf739bd0d40e3537f2265c9bd1de049c04ee5cb0eacc1a3407cfba19fe"}]}, 0x1218}, 0x1, 0x0, 0x0, 0x40800}, 0x10000090) (async, rerun: 32) sendmsg$auto_TIPC_NL_MEDIA_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000840)={0x18, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48001}, 0x40010) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64) sendmsg$auto_NBD_CMD_STATUS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) sendmsg$auto_NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r6, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffffff}]}, 0x20}}, 0x0) 7.251003562s ago: executing program 8 (id=1957): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0xb, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) name_to_handle_at$auto(0x1010, &(0x7f00000001c0)='/\x00', &(0x7f0000000000)={0xc, 0x75c0237c, "6d962c000400003344980946"}, 0x0, 0x200) (fail_nth: 5) statx$auto(0xffffffffffffff9c, 0x0, 0x51, 0x80000000, 0x0) 6.604545111s ago: executing program 4 (id=1958): ioperm$auto(0x7, 0x6, 0x2) r0 = socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x5, &(0x7f0000000580)={{0x0, 0x5, 0x0, 0x14, &(0x7f00000004c0), 0x1, 0x7fffffff}, 0x4}, 0x3, 0x6, 0x0) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) getcpu$auto(&(0x7f00000000c0)=0x10001, &(0x7f0000000100)=0xe391, 0x0) ioperm$auto(0x3, 0xa1, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) 6.055228001s ago: executing program 4 (id=1959): mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x41d) setrlimit$auto(0x1000000007, 0x0) socket(0x18, 0x5, 0x0) getrlimit$auto(0x9, &(0x7f0000000000)={0x5, 0x3ff}) 5.977218931s ago: executing program 1 (id=1960): syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) eventfd$auto(0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0xffffffffffffffff, 0xf, 0x5, 0x3, 0x1, 0x2800000000000002, 0x9, 0x5e582971, 0x0, 0x2c, 0x4, 0xffff, 0x74, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'}) mprotect$auto(0x80000001, 0xfffffffffffffffb, 0x5) madvise$auto(0x0, 0x80000001, 0x8) 5.436008257s ago: executing program 4 (id=1961): unlinkat$auto(0x6, 0xfffffffffffffffe, 0xa5d) (async) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) eventfd$auto(0x8c) (async) timerfd_gettime$auto(0x8, &(0x7f0000000000)={{0x5, 0x3}, {0x440d0f2f, 0x8}}) mmap$auto(0x0, 0x40009, 0xdc, 0x9b72, 0x4, 0x28000) (async) mprotect$auto(0x0, 0x5, 0x40) (async, rerun: 64) writev$auto(0x2000000, &(0x7f0000000000)={0x0, 0x8}, 0x80000000000b) (async, rerun: 64) r0 = socket(0x23, 0x2, 0x0) syz_genetlink_get_family_id$auto_NLBL_MGMT(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) pidfd_open$auto(0x1, 0x0) (async, rerun: 64) pidfd_send_signal$auto(0x1, 0xffffff49, &(0x7f0000000140)={@_si_pad}, 0x2) (async, rerun: 64) sendmsg$auto_TASKSTATS_CMD_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x1020) r4 = socket(0x2, 0x1, 0x0) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) (async, rerun: 64) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, 0x0, 0x4000000) socket(0x2, 0x3, 0xa) (async) mmap$auto(0x0, 0x698, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(r3, 0x2, 0x2020, 0x0, 0x5756) (async) write$auto(r4, &(0x7f0000000040)='*\xdd##+,\xef}&#+!:{(+^\\\x00', 0x100000001) (async) r5 = syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000000180), r0) sendmsg$auto_SMC_PNETID_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.996144641s ago: executing program 4 (id=1962): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket(0x25, 0x1, 0x3) (async, rerun: 64) socket(0x2b, 0x1, 0x1) (async) add_key$auto(0x0, 0x0, 0x0, 0x7fffffff, 0x8a2f) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) r0 = socket(0x2, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x40005) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) (async) read$auto(0x3, 0x0, 0x10) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) socket(0x1, 0x2, 0x0) (async, rerun: 32) getsockopt$auto(0x100000006, 0x1, 0x3c, 0xfffffffffffffffe, 0x0) (rerun: 32) 4.717058821s ago: executing program 8 (id=1963): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x29, 0x2, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setresgid$auto(0x81, 0x800000a0, 0x8) socket(0x2, 0x2, 0x1) exit$auto(0x7) unshare$auto(0x40000080) exit$auto(0x1) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mknod$auto(&(0x7f0000000180)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e', 0x1, 0x4) acct$auto(&(0x7f0000000380)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') acct$auto(0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) socket(0x15, 0x5, 0x0) socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) socket(0x23, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) clock_adjtime$auto(0x0, &(0x7f0000000000)={0x7, 0x8, 0x4, 0x8, 0x7fffffff, 0xffffffc0, 0x6, 0x5, 0x3, {0xfffffffa, 0x8}, 0xb9, 0x8, 0x1000, 0x2, 0xb, 0x5, 0x2000006, 0x101, 0x7fff, 0x3}) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4.478187424s ago: executing program 6 (id=1964): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x3, 0x0, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) sysfs$auto(0x2, 0x4, 0x0) 4.040820399s ago: executing program 1 (id=1965): r0 = socket(0xa, 0x3, 0xff) r1 = socket(0xa, 0x3, 0x2f) eventfd$auto(0x3) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x7, 0x207, 0x7, 0xc, 0x9, 0xfffffffffffffffc, 0x8000000000000001, 0x2800000000000002, 0x6, 0xde582970, 0xff, 0x9, 0x2, 0xffff, 0x8, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[], 0x588}, 0x1, 0x0, 0x0, 0x240008d4}, 0x8800) close_range$auto(0x2, 0x8000, 0x0) setitimer$auto(0xfffffffb, &(0x7f0000000000)={{0x56, 0xfffffffffffffffa}, {0xd44b, 0x5}}, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r2 = gettid() rt_sigqueueinfo$auto(r2, 0xe, &(0x7f0000000000)={@siginfo_0_0={0x76bb, 0x3, 0x4, @_sigfault={0x0}}}) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x7, 0x207, 0x7, 0xc, 0x9, 0x0, 0x8000000000000001, 0x2800000000000002, 0x9, 0xde582971, 0xff, 0x9, 0x4, 0xffff, 0x8, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) clock_adjtime$auto(0x3, &(0x7f0000000000)={0x8000, 0x2, 0x80000001, 0x2, 0x7, 0x9, 0x5, 0x4, 0xffff8c97, {0xffffffff, 0x2}, 0x3, 0x2, 0x4, 0x2, 0x3, 0x6, 0x9, 0x2, 0x9}) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="293ad8c700003c"], 0x5d}, 0x1, 0x0, 0x0, 0x4000}, 0x4045880) 3.796052768s ago: executing program 1 (id=1966): rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0xaa, 0x6, 0xffffffff, 0x1}, 0x8000, 0x1, 0x6) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x28, 0x5, 0x0) settimeofday$auto(&(0x7f0000000180)={0x1ed5d7403, 0x1}, 0x0) connect$auto(0x3, &(0x7f0000000080)={0x27, @sa_data_min="ba6ef10000006500"}, 0x54) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) inotify_init1$auto(0x3000000000000) r0 = socket(0x10, 0x3, 0x6) setsockopt$auto(0x3, 0x10e, 0x2, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00fc78bd903684fcff828745ced3030000", @ANYBLOB="14000000", @ANYRES64=r0, @ANYRES8=0x0, @ANYRESOCT=r1, @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0xc084) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r2) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="f51b26bd7000fedbdf2517"], 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) inotify_init1$auto(0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x24, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0xffffffffffffffff, 0x5411, 0x28) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7) mbind$auto(0x0, 0x5, 0x103fffffe, 0x0, 0x5, 0xffffffff) madvise$auto(0x6, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 3.153033469s ago: executing program 6 (id=1967): set_mempolicy$auto(0x6, &(0x7f0000000100)=0x10000000007e, 0x4) set_mempolicy$auto(0x64f84aeb, &(0x7f00000000c0)=0x7ff, 0x8) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0xf14, 0xf4240}, 0x7) 2.800197149s ago: executing program 1 (id=1968): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) (async) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) (async) mmap$auto(0x0, 0x20009, 0x5, 0xeb1, 0x88, 0x8000) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x3, 0x5, 0x13, 0xf4, 0x5) (async) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) (async) setsockopt$auto(0x400000000000003, 0x29, 0x39, 0xffffffffffffffff, 0x0) (async) dup2$auto(0x0, 0x4) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) r1 = socket(0x2, 0x1, 0x0) (async) bpf$auto(0x8000000000000022, 0xffffffffffffffff, 0x0) (async) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x4) (async) connect$auto(0x3, &(0x7f0000000100)={0x2, @sockaddr_1_1={"e146467eb458b143a3dccf9d91c52be0f476062082176dd041602b022a9e6df6ac2eea50a21e4a095ac623c30a09b40b13b2314997506bfd72530db4ca3c872a8b5913b0d1696016b000aceb76ca5d6238dd2665b3c97edb16a97b6f00000000575412"}}, 0x55) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) newfstatat$auto(0x8, &(0x7f0000000580)='/\x00', 0x0, 0x0) (async) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x10001) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0xc094) close_range$auto(0x2, 0x8, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) 2.320936312s ago: executing program 6 (id=1969): r0 = socket(0xa, 0x3, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r1, 0x5) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r0) sendmsg$auto_ILA_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x4}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x4}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x9b0}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0xa}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x4040000) setsockopt$auto(0x400000000000003, 0x29, 0x40, 0x0, 0x40020000) 2.033174426s ago: executing program 6 (id=1970): mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x40081) clone$auto(0xbb0, 0x800, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x7fffffff, 0x21) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x23) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000001f, 0x5, 0x154, 0x200000000000009, 0xc311) madvise$auto(0x0, 0x53, 0x15) msgrcv$auto(0x0, 0xffffffffffffffff, 0x10001, 0x8, 0x2) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) close_range$auto(0x5, 0x1, 0x100) socket$nl_generic(0x10, 0x3, 0x10) setresgid$auto(0x81, 0xffc0, 0xea) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') fchdir$auto(0xf4400000000) stat$auto(&(0x7f00000001c0)='$*)}),@!))\x00', &(0x7f0000000200)={0x2, 0x2, 0x101, 0xc6, 0xee01, 0xee00, 0x0, 0x7, 0x5, 0x9, 0x2, 0x7, 0x4, 0x1, 0x4, 0x800}) stat$auto(&(0x7f0000000040)='-@((#+$\x00', &(0x7f00000000c0)={0x773, 0x6, 0x40, 0x2, 0x7, r4, 0x0, 0x8, 0x8001, 0x18e9, 0x7, 0x18780, 0x7, 0x7, 0x3, 0x0, 0x7fffffff}) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0x5, 0x0, 0x1) mkdir$auto(0x0, 0x40) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x4, 0xffffffffffffffff, 0x0) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) shmctl$auto(0x0, 0xb, 0x0) 1.949814459s ago: executing program 8 (id=1971): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x1, 0x84) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(r0, 0x6, 0x4, 0x0, 0x800003) connect$auto(0x3, &(0x7f0000000280)={0x2, @sa_data_min="22c1d923cd6b4df444e9ef1b6c84"}, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) listen$auto(0x3, 0x0) listen$auto(0x3, 0x81) 1.543608075s ago: executing program 4 (id=1972): r0 = syz_genetlink_get_family_id$auto_SEG6(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xf5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040014}, 0x0) sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f00000013c0)={0x0, 0xfffffffffffffff0, &(0x7f0000001380)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000024cb257bc6a2eece8cf58c28d20b2869ab9a7db13d9b3842d85b86dd5813472bc281905c80edf2666869", @ANYRES16=r0, @ANYBLOB="010028bd700000dcdf2501000000050006000b00000005000500070000000800030000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x4044000) 1.501581985s ago: executing program 6 (id=1973): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x1b, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x18, 0x4, 0x1) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_nanosleep$auto(0xfffffff9, 0x1, 0x0, 0x0) move_pages$auto(0x0, 0xfffffffffffff708, &(0x7f0000000040)=&(0x7f0000000000)=[0xbb02, 0xc, 0xffff, 0x9, 0x3, 0x7a8b4881], &(0x7f0000000080)=0x4, &(0x7f00000000c0)=0x4, 0x40) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 1.492568625s ago: executing program 1 (id=1974): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000080)={0x14, 0x0, 0x6, 0x70bd28, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4004004) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x4c, 0x0) setsockopt$auto(r1, 0x104000000000010e, 0x3, 0x0, 0x400) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002c80), r0) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004100), r0) sendmsg$auto_OVS_DP_CMD_SET(r0, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004180)={&(0x7f0000004140)={0x14, r2, 0x92357bca98804707, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4004804) 1.382454954s ago: executing program 4 (id=1975): r0 = socket(0x15, 0x5, 0x0) (async) ioperm$auto(0x3, 0x2, 0x149) (async) futex_requeue$auto(0x0, 0x0, 0x7, 0xe28) (async) futex_wait$auto(&(0x7f0000000080)=[0x3, 0xac69, 0xa58b, 0x9, 0x3e58, 0x7], 0x80, 0xf, 0x4, &(0x7f0000000100)={0x8, 0x4}, 0x9) (async, rerun: 32) clone$auto(0x0, 0x6, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x6, 0x8) (rerun: 32) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) 1.038137173s ago: executing program 1 (id=1976): mmap$auto(0x15b0, 0xffffffffffffffff, 0xfffffffffffffffb, 0x9b72, 0xa, 0x8000) setrlimit$auto(0x1000000007, 0x0) read$auto(0x3, &(0x7f0000000140)='\"\x02R\xb6\xbc\x16\x15\x94\x0e+\xb3R\x1e\xb0\x90\xd1>\xfam\x0e\x19\x8a\x9a\x91$\n\xdc\xeb\xd4\xef\xa6\xd6To\x11\xbc\x9b]\x05\r\n$z\xd1Lt\x16\xd5\xa8\x14\xdb\xf0c\xd2^\xa6\xda\xce\xd9\xf9e\x13V\x86\x93\xb3\xb4\x82 \x00\x8d\x1e\xdd\x16\xf1\bi\xb1ml\xb2\xd1\xb6\xbb)\x13(\x00\x00\x00\x00\x00\x00_\x00\x00\x00\x00', 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setresuid$auto(0x1ffffffffffff, 0x40, 0xe) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) clone$auto(0x7, 0x7ffffffffffffffb, 0xffffffffffffffff, 0x0, 0x1) dup2$auto(0x800000003, 0x3) clock_nanosleep$auto(0x7, 0x6, 0x0, 0xfffffffffffffffd) mlockall$auto(0x7) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getresgid$auto(0x0, 0x0, 0x0) munlock$auto(0x8, 0x401) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x6, 0x0) write$auto(0x3, 0x0, 0x81) connect$auto(0x3, &(0x7f0000000000)={0xa, @sockaddr_1_1}, 0x53) io_cancel$auto(0x2, &(0x7f0000000040)={0x81, 0x9, 0x8, 0x0, 0x8, 0xfffffffd, 0xa, 0x4, 0x6, 0x0, 0x2, r0}, &(0x7f0000000080)={0x13, 0x7, 0x3, 0xe3}) prctl$auto(0x1000000003b, 0x1, 0x4, 0x40000000003, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xfffffffffffefffe, 0x15) munlock$auto(0x7ff, 0xd) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) msgrcv$auto(0x7, 0xfffffffffffffffe, 0xc4, 0x10001, 0x7ffd) 307.542661ms ago: executing program 8 (id=1977): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) socket(0x2, 0x6, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55) (async) setitimer$auto(0x4, &(0x7f0000000000)={{0x1fe, 0x10001}, {0x200000000004, 0x6}}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') bpf$auto(0x12, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0x2}, 0xcf) 0s ago: executing program 6 (id=1978): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CGROUPSTATS_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) fanotify_init$auto(0x65, 0x2) (async) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000001440)='ns/user\x00') memfd_create$auto(&(0x7f00000002c0)='IPVS\x00', 0x7) ftruncate$auto(0x3, 0x0) mmap$auto(0x1, 0x978, 0x5, 0x15, 0x7, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) io_uring_setup$auto(0x48, 0x0) (async) dup3$auto(0x8000000000000001, 0x5, 0x800000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r3) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) r5 = syz_genetlink_get_family_id$auto_SEG6(&(0x7f00000001c0), r3) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xc8, r5, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRET={0xa1, 0x4, "c75e35a2e206c6a9075a06cdbe94e2d667b2703368d424cdcc30273bda039877a48bc36f5647c63bb77ed85a7cd4bab2f4e0a201791a532f2070b229bb1bcb4505b686e11decb2402274a59dca3c368b6c5a712443505d49f3b8c1fd5bc49f33873a84385d0b3a52e5cc94056acb5fa6e58c3175418b7af3dd0a15252e768f382653b578abc5fe7f74dcfb6057777585e369b59e63c5f5544d771139d9"}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xa}]}, 0xc8}, 0x1, 0x0, 0x0, 0x400c801}, 0x80) kernel console output (not intermixed with test programs): ta. [ 367.810984][ T8063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.851345][ T8063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.870445][ T8063] bond0 (unregistering): Released all slaves [ 367.911675][T11222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.981171][T11222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.040548][ T5858] Bluetooth: hci3: command tx timeout [ 368.292253][T11222] team0: Port device team_slave_0 added [ 368.320300][T11222] team0: Port device team_slave_1 added [ 368.548349][T11222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.590438][T11222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.668450][T11222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.482766][T11222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.492544][T11222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.539499][T11222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.600026][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1016'. [ 369.943379][T11222] hsr_slave_0: entered promiscuous mode [ 370.021041][T11222] hsr_slave_1: entered promiscuous mode [ 370.051175][T11222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.059173][T11222] Cannot create hsr debugfs directory [ 370.088974][T11326] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1018'. [ 370.120713][ T5858] Bluetooth: hci3: command tx timeout [ 370.216797][ T8063] hsr_slave_0: left promiscuous mode [ 370.228237][ T8063] hsr_slave_1: left promiscuous mode [ 370.251079][ T8063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.266669][ T8063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.301802][ T8063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.322948][ T8063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.390952][ T8063] veth1_macvtap: left promiscuous mode [ 370.396570][ T8063] veth0_macvtap: left promiscuous mode [ 370.420783][ T8063] veth1_vlan: left promiscuous mode [ 370.426189][ T8063] veth0_vlan: left promiscuous mode [ 372.062518][ T8063] team0 (unregistering): Port device team_slave_1 removed [ 372.172100][ T8063] team0 (unregistering): Port device team_slave_0 removed [ 372.200619][ T5858] Bluetooth: hci3: command tx timeout [ 373.662601][T11222] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 373.676061][T11222] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 373.703793][T11222] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 373.746377][T11222] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 374.043083][ T8063] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.228432][T11222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.393924][ T8063] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.598916][ T8063] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.706636][T11222] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.743853][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.751081][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.823422][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.830637][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.993858][ T8063] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.275302][T11439] delete_channel: no stack [ 375.297159][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.370696][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.430575][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.482507][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.502531][ T5856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 375.511103][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.660197][ T8063] bridge_slave_1: left allmulticast mode [ 375.666003][ T8063] bridge_slave_1: left promiscuous mode [ 375.671906][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.906537][ T8063] bridge_slave_0: left allmulticast mode [ 375.915794][ T8063] bridge_slave_0: left promiscuous mode [ 375.940714][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.932883][ T8063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.955368][ T8063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.975089][ T8063] bond0 (unregistering): Released all slaves [ 377.266340][T11222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.439605][T11441] chnl_net:caif_netlink_parms(): no params data found [ 377.576508][ T5856] Bluetooth: hci2: command tx timeout [ 378.438893][T11441] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.461388][T11441] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.488097][T11441] bridge_slave_0: entered allmulticast mode [ 378.498835][T11441] bridge_slave_0: entered promiscuous mode [ 378.753983][T11441] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.770499][T11441] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.777805][T11441] bridge_slave_1: entered allmulticast mode [ 378.810158][T11441] bridge_slave_1: entered promiscuous mode [ 378.902718][T11516] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 378.918068][ T8063] hsr_slave_0: left promiscuous mode [ 378.946862][ T8063] hsr_slave_1: left promiscuous mode [ 378.954232][ T8063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.970429][ T8063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.041319][ T8063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.048810][ T8063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.138862][ T8063] veth1_macvtap: left promiscuous mode [ 379.167232][ T8063] veth0_macvtap: left promiscuous mode [ 379.175500][ T8063] veth1_vlan: left promiscuous mode [ 379.192019][ T8063] veth0_vlan: left promiscuous mode [ 379.641324][ T5858] Bluetooth: hci2: command tx timeout [ 380.268832][ T8063] team_slave_1 (unregistering): left promiscuous mode [ 380.308191][ T8063] team0 (unregistering): Port device team_slave_1 removed [ 380.373848][T11537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1051'. [ 380.388464][ T8063] team_slave_0 (unregistering): left promiscuous mode [ 380.410512][ T8063] team0 (unregistering): Port device team_slave_0 removed [ 380.556493][ T30] audit: type=1326 audit(4294967310.750:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.2.1052" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89d9d7e719 code=0x0 [ 380.980078][T11547] svc: failed to register nfsdv3 RPC service (errno 111). [ 380.989572][T11547] svc: failed to register nfsaclv3 RPC service (errno 111). [ 381.083303][T11441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.108467][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1054'. [ 381.183826][T11222] veth0_vlan: entered promiscuous mode [ 381.202093][T11441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.326480][T11441] team0: Port device team_slave_0 added [ 381.341724][T11222] veth1_vlan: entered promiscuous mode [ 381.357876][T11441] team0: Port device team_slave_1 added [ 381.485416][T11441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.494221][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.520721][T11441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.534521][T11441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.541635][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.568159][T11441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.612461][T11222] veth0_macvtap: entered promiscuous mode [ 381.665394][T11441] hsr_slave_0: entered promiscuous mode [ 381.684515][T11441] hsr_slave_1: entered promiscuous mode [ 381.698327][T11441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.707356][T11441] Cannot create hsr debugfs directory [ 381.716649][T11222] veth1_macvtap: entered promiscuous mode [ 381.721293][ T5858] Bluetooth: hci2: command tx timeout [ 381.742287][T11222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.752955][T11222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.763218][T11222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.779700][T11222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.791499][T11222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.858528][T11222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.869438][T11222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.879874][T11222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.890813][T11222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.903058][T11222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.930763][T11222] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.939575][T11222] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.948761][T11222] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.957896][T11222] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.185754][ T8063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.203580][ T8063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.332491][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.341288][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.378265][T11441] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 382.405648][T11441] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 382.417024][T11441] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 382.428102][T11441] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 382.641581][T11579] svc: failed to register nfsdv3 RPC service (errno 111). [ 382.704863][T11441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.719413][T11579] svc: failed to register nfsaclv3 RPC service (errno 111). [ 382.767086][T11441] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.806597][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.813837][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.896364][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.903699][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.048282][T11441] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 383.059000][T11441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.467823][T11601] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1060'. [ 383.640446][T11441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.801514][ T5858] Bluetooth: hci2: command tx timeout [ 383.966846][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.974993][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.502000][T11441] veth0_vlan: entered promiscuous mode [ 384.533579][T11441] veth1_vlan: entered promiscuous mode [ 384.626414][T11441] veth0_macvtap: entered promiscuous mode [ 384.655161][T11441] veth1_macvtap: entered promiscuous mode [ 384.711198][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.770573][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.782685][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.830624][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.850605][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.887865][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.921798][T11441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.958357][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.989654][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.010832][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.059716][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.071349][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.086965][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.103220][T11441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.175896][T11441] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.199680][T11441] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.214042][T11441] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.268805][T11441] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.495523][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.515514][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.598958][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.625367][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.220973][T11672] syz.5.1070(11672): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 387.092321][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'. [ 391.941679][T11814] ptrace attach of "./syz-executor exec"[9895] was attempted by "./syz-executor exec"[11814] [ 393.033923][T11835] HSR: entered promiscuous mode [ 396.158804][ T30] audit: type=1326 audit(8277292042.600:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.6.1112" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bb3b7e719 code=0x0 [ 404.614306][T12072] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1130'. [ 405.233201][ T30] audit: type=1326 audit(8277292051.690:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12086 comm="syz.2.1132" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89d9d7e719 code=0x0 [ 408.792974][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 408.802645][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 408.813375][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 408.821525][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 408.829278][ T5856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 408.836781][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 409.544142][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.484152][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.817424][T12177] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1145'. [ 411.160512][ T5858] Bluetooth: hci3: command tx timeout [ 411.162164][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.640595][ T5858] Bluetooth: hci0: command 0x0406 tx timeout [ 411.974864][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.624773][T12161] chnl_net:caif_netlink_parms(): no params data found [ 413.245863][ T5856] Bluetooth: hci3: command tx timeout [ 413.582863][T12161] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.603690][T12161] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.631883][T12161] bridge_slave_0: entered allmulticast mode [ 413.641458][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 413.651747][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 413.659594][T12161] bridge_slave_0: entered promiscuous mode [ 413.672511][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 413.687559][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 413.696488][ T5858] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 413.709741][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 413.960920][T12161] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.968210][T12161] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.980633][T12161] bridge_slave_1: entered allmulticast mode [ 413.988114][T12161] bridge_slave_1: entered promiscuous mode [ 414.012033][ T11] bridge_slave_1: left allmulticast mode [ 414.017754][ T11] bridge_slave_1: left promiscuous mode [ 414.041555][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.072389][ T11] bridge_slave_0: left allmulticast mode [ 414.078133][ T11] bridge_slave_0: left promiscuous mode [ 414.093856][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.321449][ T5856] Bluetooth: hci3: command tx timeout [ 415.817868][ T5856] Bluetooth: hci0: command tx timeout [ 415.856718][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.944866][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.963135][ T11] bond0 (unregistering): Released all slaves [ 416.077560][ T11] HSR: left promiscuous mode [ 416.241364][T12161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.554484][T12161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.997349][T12161] team0: Port device team_slave_0 added [ 417.039330][T12161] team0: Port device team_slave_1 added [ 417.204394][T12161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.221223][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.280712][T12161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.397028][ T11] hsr_slave_0: left promiscuous mode [ 417.410776][ T5856] Bluetooth: hci3: command tx timeout [ 417.423056][ T11] hsr_slave_1: left promiscuous mode [ 417.473578][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.504084][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.520942][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.528427][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.594834][ T11] veth1_macvtap: left promiscuous mode [ 417.600601][ T11] veth0_macvtap: left promiscuous mode [ 417.606807][ T11] veth1_vlan: left promiscuous mode [ 417.612353][ T11] veth0_vlan: left promiscuous mode [ 417.880666][ T5856] Bluetooth: hci0: command tx timeout [ 419.166703][ T11] team0 (unregistering): Port device team_slave_1 removed [ 419.233653][ T11] team0 (unregistering): Port device team_slave_0 removed [ 419.973221][ T5856] Bluetooth: hci0: command tx timeout [ 419.979904][T12161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.993871][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.020448][T12161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.287200][T12161] hsr_slave_0: entered promiscuous mode [ 420.328786][T12161] hsr_slave_1: entered promiscuous mode [ 420.360665][T12161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.368312][T12161] Cannot create hsr debugfs directory [ 420.450899][T12298] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1164'. [ 420.636742][T12233] chnl_net:caif_netlink_parms(): no params data found [ 421.155944][T12233] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.168291][T12233] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.196751][T12233] bridge_slave_0: entered allmulticast mode [ 421.211934][T12233] bridge_slave_0: entered promiscuous mode [ 421.282891][T12233] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.290140][T12233] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.326850][T12233] bridge_slave_1: entered allmulticast mode [ 421.348213][T12233] bridge_slave_1: entered promiscuous mode [ 421.541871][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.629492][T12233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.648836][T12233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.720043][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.926577][T12233] team0: Port device team_slave_0 added [ 422.005748][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.040549][ T5856] Bluetooth: hci0: command tx timeout [ 422.149946][T12233] team0: Port device team_slave_1 added [ 422.218230][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.315526][T12233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.328151][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.370430][T12233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.400781][T12233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.409458][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.448858][T12233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.587845][T12233] hsr_slave_0: entered promiscuous mode [ 422.670098][T12233] hsr_slave_1: entered promiscuous mode [ 422.694357][T12233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.714803][T12233] Cannot create hsr debugfs directory [ 423.043889][ T11] bridge_slave_1: left allmulticast mode [ 423.049632][ T11] bridge_slave_1: left promiscuous mode [ 423.074769][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.123979][ T11] bridge_slave_0: left allmulticast mode [ 423.129720][ T11] bridge_slave_0: left promiscuous mode [ 423.148385][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.521854][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.632274][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.725055][ T11] bond0 (unregistering): Released all slaves [ 424.797849][T12161] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 424.864831][T12161] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 425.105527][T12161] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 425.193849][T12161] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 426.022379][T12233] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 426.171074][T12233] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 426.233112][T12233] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 426.272557][T12161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.642233][T12233] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 426.719072][T12161] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.843749][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.850968][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.910609][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.917746][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.953837][ T11] hsr_slave_0: left promiscuous mode [ 427.973239][ T11] hsr_slave_1: left promiscuous mode [ 428.013601][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.021384][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.041588][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.049059][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.138361][ T11] veth1_macvtap: left promiscuous mode [ 428.149472][ T11] veth0_macvtap: left promiscuous mode [ 428.169686][ T11] veth1_vlan: left promiscuous mode [ 428.176515][ T11] veth0_vlan: left promiscuous mode [ 431.873277][ T11] team0 (unregistering): Port device team_slave_1 removed [ 432.151361][ T11] team0 (unregistering): Port device team_slave_0 removed [ 433.695049][T12233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.128539][T12233] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.215985][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.223201][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.312071][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.319242][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.512135][T12161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.529230][T12233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 434.566163][T12233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.475699][T12233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.575757][T12161] veth0_vlan: entered promiscuous mode [ 435.598973][T12161] veth1_vlan: entered promiscuous mode [ 435.703501][T12161] veth0_macvtap: entered promiscuous mode [ 435.747131][T12161] veth1_macvtap: entered promiscuous mode [ 435.820149][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.854054][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.881731][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.906453][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.932454][T12161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.973311][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.008222][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.038150][T12161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.070487][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.102112][T12161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.136752][T12161] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.180591][T12161] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.189652][T12161] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.216317][T12161] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.347164][T12233] veth0_vlan: entered promiscuous mode [ 436.360112][T12233] veth1_vlan: entered promiscuous mode [ 436.395547][T12233] veth0_macvtap: entered promiscuous mode [ 436.473495][T12233] veth1_macvtap: entered promiscuous mode [ 436.563053][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.596867][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.620521][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.640850][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.660476][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.684856][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.708606][T12233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.747674][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.770009][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.803703][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.817584][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.870026][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.892221][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.908640][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.919792][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.935818][T12233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.946647][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 436.957415][T12502] tc_dump_action: action bad kind [ 436.987108][T12233] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.003947][T12233] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.013191][T12233] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.022498][T12233] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.052327][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.060492][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.248697][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.263168][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.353461][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.361104][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.104205][T12546] delete_channel: no stack [ 439.642295][T12610] netlink: 'syz.2.1200': attribute type 11 has an invalid length. [ 439.666014][T12610] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1200'. [ 441.624895][T12674] svc: failed to register nfsdv3 RPC service (errno 111). [ 441.674278][T12674] svc: failed to register nfsaclv3 RPC service (errno 111). [ 445.405144][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.411857][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.128851][T12921] netlink: zone id is out of range [ 450.150440][T12921] netlink: zone id is out of range [ 450.155679][T12921] netlink: zone id is out of range [ 450.189418][T12921] netlink: zone id is out of range [ 450.214196][T12921] netlink: del zone limit has 4 unknown bytes [ 451.859593][T12966] nbd: must specify at least one socket [ 451.905755][T12964] svc: failed to register nfsdv3 RPC service (errno 111). [ 451.953760][T12964] svc: failed to register nfsaclv3 RPC service (errno 111). [ 454.860738][T12984] delete_channel: no stack [ 464.538589][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 464.572525][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 464.591407][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 464.636025][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 464.645086][ T5858] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 464.653008][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 465.601783][T13183] chnl_net:caif_netlink_parms(): no params data found [ 466.142056][T13183] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.159139][T13183] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.167226][T13183] bridge_slave_0: entered allmulticast mode [ 466.197661][T13183] bridge_slave_0: entered promiscuous mode [ 466.230117][T13183] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.278307][T13183] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.309877][T13183] bridge_slave_1: entered allmulticast mode [ 466.341723][T13183] bridge_slave_1: entered promiscuous mode [ 466.574833][T13183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.631310][T13220] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1291'. [ 466.644056][T13183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.774278][ T5856] Bluetooth: hci2: command tx timeout [ 467.083890][T13183] team0: Port device team_slave_0 added [ 467.191933][T13183] team0: Port device team_slave_1 added [ 468.848758][ T5856] Bluetooth: hci2: command tx timeout [ 469.727525][T13183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.768764][T13183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.856608][T13183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.882833][T13183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.889860][T13183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.953284][T13183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.313349][T13183] hsr_slave_0: entered promiscuous mode [ 470.331225][T13183] hsr_slave_1: entered promiscuous mode [ 470.360705][T13183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.368789][T13183] Cannot create hsr debugfs directory [ 470.930910][ T5856] Bluetooth: hci2: command tx timeout [ 471.594386][T13183] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 471.677642][T13183] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 471.764241][T13183] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 471.885076][T13183] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 472.336219][T13183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.489084][T13183] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.578735][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.586009][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.618533][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.625813][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.750052][T13183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 472.822611][T13183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.000556][ T5856] Bluetooth: hci2: command tx timeout [ 473.029174][T13272] lo: entered allmulticast mode [ 473.579128][T13272] lo: left allmulticast mode [ 473.604329][T13183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.827612][T13183] veth0_vlan: entered promiscuous mode [ 474.886025][T13183] veth1_vlan: entered promiscuous mode [ 475.249760][T13183] veth0_macvtap: entered promiscuous mode [ 475.269468][T13183] veth1_macvtap: entered promiscuous mode [ 475.339393][T13183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.378707][T13183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.390061][T13183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.401125][T13183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.411290][T13183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.421960][T13183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.432173][T13183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.443477][T13183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.456077][T13183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.486693][T13183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.506917][T13183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.516984][T13183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.527867][T13183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.538157][T13183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.549342][T13183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.559801][T13183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.570864][T13183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.582772][T13183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.621587][T13183] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.630685][T13183] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.650971][T13183] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.667795][T13183] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.926664][T13350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1311'. [ 475.999022][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1311'. [ 476.520399][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.530505][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.677388][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.703247][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.050018][T13411] can: request_module (can-proto-0) failed. [ 480.270623][T13445] openvswitch: netlink: Key 4 has unexpected len 13 expected 12 [ 482.724363][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'. [ 483.567829][T13528] kexec: Could not allocate control_code_buffer [ 485.867845][ T29] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.199491][ T29] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.543620][ T29] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.883704][ T29] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.025760][T13601] kexec: Could not allocate control_code_buffer [ 487.081239][T13616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 487.105644][T13616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 487.167451][T13616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 487.387115][T13616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 487.407554][T13616] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 487.729856][T13616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 487.870914][ T29] bridge_slave_1: left allmulticast mode [ 487.876652][ T29] bridge_slave_1: left promiscuous mode [ 487.901298][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.961478][ T29] bridge_slave_0: left allmulticast mode [ 487.977478][ T29] bridge_slave_0: left promiscuous mode [ 487.996087][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.392098][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.416422][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.437121][ T29] bond0 (unregistering): Released all slaves [ 489.801052][ T5856] Bluetooth: hci2: command tx timeout [ 490.221198][ T29] hsr_slave_0: left promiscuous mode [ 490.245819][ T29] hsr_slave_1: left promiscuous mode [ 490.265459][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.290540][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.321851][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.354459][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.429213][ T29] veth1_macvtap: left promiscuous mode [ 490.439184][ T29] veth0_macvtap: left promiscuous mode [ 490.480555][ T29] veth1_vlan: left promiscuous mode [ 490.486467][ T29] veth0_vlan: left promiscuous mode [ 491.836415][ T29] team0 (unregistering): Port device team_slave_1 removed [ 491.880600][ T5856] Bluetooth: hci2: command tx timeout [ 491.918954][ T29] team0 (unregistering): Port device team_slave_0 removed [ 492.804260][T13615] chnl_net:caif_netlink_parms(): no params data found [ 493.092916][T13615] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.111775][T13615] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.119072][T13615] bridge_slave_0: entered allmulticast mode [ 493.136692][T13615] bridge_slave_0: entered promiscuous mode [ 493.190638][T13615] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.204865][T13615] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.233725][T13615] bridge_slave_1: entered allmulticast mode [ 493.264189][T13615] bridge_slave_1: entered promiscuous mode [ 493.393612][T13615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.445103][T13615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.556280][T13615] team0: Port device team_slave_0 added [ 493.603660][T13615] team0: Port device team_slave_1 added [ 493.752369][T13615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.760702][T13615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.854377][T13615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.882860][T13615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.889910][T13615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.960694][ T5856] Bluetooth: hci2: command tx timeout [ 493.980421][T13615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.136709][T13615] hsr_slave_0: entered promiscuous mode [ 494.161979][T13615] hsr_slave_1: entered promiscuous mode [ 494.178794][T13615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.206989][T13615] Cannot create hsr debugfs directory [ 496.042270][ T5856] Bluetooth: hci2: command tx timeout [ 496.915894][T13615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 496.971697][T13615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 497.055720][T13615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 497.087555][T13615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 497.181045][T13615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.200151][T13615] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.218957][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.226328][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.331761][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.338999][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.491637][T13615] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 497.520394][T13615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.097132][T13615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.233693][T13615] veth0_vlan: entered promiscuous mode [ 498.286795][T13615] veth1_vlan: entered promiscuous mode [ 498.395196][T13615] veth0_macvtap: entered promiscuous mode [ 498.435783][T13615] veth1_macvtap: entered promiscuous mode [ 498.489158][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.532596][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.560165][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.606142][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.631870][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.690323][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.727233][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.773176][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.809453][T13615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.857805][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.912022][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.953278][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.977493][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.016265][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.040350][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.060522][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.093824][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.123644][T13615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.167955][T13615] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.202522][T13615] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.230589][T13615] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.239378][T13615] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.592606][T13839] netlink: 'syz.8.1387': attribute type 2 has an invalid length. [ 499.685037][T12670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.727756][T12670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.834213][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.862981][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.291978][T13946] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1406'. [ 506.246284][T13953] HSR: entered promiscuous mode [ 506.300978][T13953] delete_channel: no stack [ 506.845914][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.853099][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.295675][ T30] audit: type=1326 audit(3624.340:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14002 comm="syz.3.1418" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f400b17e719 code=0x0 [ 508.337695][ T30] audit: type=1326 audit(3625.370:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.3.1422" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f400b17e719 code=0x0 [ 511.498301][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1442'. [ 511.557552][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1442'. [ 514.303328][T14278] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1450'. [ 522.505245][T14492] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1484'. [ 525.490433][ T30] audit: type=1326 audit(3642.500:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14565 comm="syz.6.1499" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4eff17e719 code=0x0 [ 529.570902][T14684] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 530.975145][T14727] nbd: illegal input index 50331648 [ 534.521788][T13634] Bluetooth: hci3: command 0x0406 tx timeout [ 534.722906][T14838] netlink: 'syz.8.1536': attribute type 11 has an invalid length. [ 534.736084][T14838] netlink: 'syz.8.1536': attribute type 11 has an invalid length. [ 538.605748][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'. [ 538.811419][T14941] nfsd: Unknown parameter 'IPVS' [ 539.653409][T13634] Bluetooth: hci0: command 0x0406 tx timeout [ 543.476539][T15052] openvswitch: netlink: Flow actions attr not present in new flow. [ 543.734303][T15055] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 543.790377][T15055] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 550.565633][ T2970] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.661188][T13634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 550.671403][T13634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 550.679662][T13634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 550.689163][T13634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 550.697958][T13634] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 550.745535][T13634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 551.593939][ T2970] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.106125][ T2970] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.410972][ T2970] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.585694][T15184] chnl_net:caif_netlink_parms(): no params data found [ 552.841465][T13634] Bluetooth: hci1: command tx timeout [ 553.172908][T15184] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.180092][T15184] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.199483][T15184] bridge_slave_0: entered allmulticast mode [ 553.222032][T15184] bridge_slave_0: entered promiscuous mode [ 553.274309][T15184] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.297511][T15184] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.315293][T15184] bridge_slave_1: entered allmulticast mode [ 553.334456][T15184] bridge_slave_1: entered promiscuous mode [ 553.362952][ T2970] bridge_slave_1: left allmulticast mode [ 553.369958][ T2970] bridge_slave_1: left promiscuous mode [ 553.377358][ T2970] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.426686][ T2970] bridge_slave_0: left allmulticast mode [ 553.437880][ T2970] bridge_slave_0: left promiscuous mode [ 553.457587][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.931497][T13634] Bluetooth: hci1: command tx timeout [ 555.227075][ T2970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.249370][ T2970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.342475][ T2970] bond0 (unregistering): Released all slaves [ 555.508523][T15184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.527424][T15184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.627971][ T2970] HSR: left promiscuous mode [ 555.876047][T15184] team0: Port device team_slave_0 added [ 555.911268][ T2970] : left promiscuous mode [ 555.956155][T15283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1597'. [ 555.957238][T15184] team0: Port device team_slave_1 added [ 556.135110][T15184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.168120][T15184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.260441][T15184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.292545][T15184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.299551][T15184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.390399][T15184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.001463][T13634] Bluetooth: hci1: command tx timeout [ 557.006009][T15184] hsr_slave_0: entered promiscuous mode [ 557.125170][T15184] hsr_slave_1: entered promiscuous mode [ 557.150210][T15184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 557.158318][T15184] Cannot create hsr debugfs directory [ 558.017832][T15331] netlink: 'syz.3.1604': attribute type 11 has an invalid length. [ 558.536027][ T2970] hsr_slave_0: left promiscuous mode [ 558.680742][ T2970] hsr_slave_1: left promiscuous mode [ 558.722596][ T2970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.734843][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.761572][ T2970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.769063][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.942143][ T2970] veth1_macvtap: left promiscuous mode [ 558.971307][ T2970] veth0_macvtap: left promiscuous mode [ 558.977012][ T2970] veth1_vlan: left promiscuous mode [ 558.989718][ T2970] veth0_vlan: left promiscuous mode [ 559.123493][T13634] Bluetooth: hci1: command tx timeout [ 560.507495][ T2970] team0 (unregistering): Port device team_slave_1 removed [ 560.633378][ T2970] team0 (unregistering): Port device team_slave_0 removed [ 562.468598][T15184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 562.505028][T15184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 562.543459][T15184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 562.600138][T15184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 563.042362][T15184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.125725][T15184] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.171898][T12669] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.179127][T12669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.242556][T12669] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.249757][T12669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.519579][T15184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.715986][T15184] veth0_vlan: entered promiscuous mode [ 564.961937][T15184] veth1_vlan: entered promiscuous mode [ 565.102018][T15184] veth0_macvtap: entered promiscuous mode [ 565.176058][T15184] veth1_macvtap: entered promiscuous mode [ 565.221691][T15184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.243644][T15184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.283042][T15184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.314209][T15184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.361136][T15184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.390306][T15184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.420187][T15184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.446340][T15184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.479417][T15184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.540491][T15184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.560641][T15184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.570838][T15184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.581409][T15184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.591508][T15184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.602138][T15184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.612099][T15184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.622757][T15184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.634177][T15184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.648190][T15184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.657450][T15184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.666748][T15184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.675950][T15184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.060451][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.091845][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.314834][T12670] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.563319][T12670] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.631527][T12669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.639870][T12669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.051286][T12670] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.135779][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 567.146324][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 567.160711][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 567.198357][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 567.214959][ T5856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 567.230793][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 567.566396][T12670] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.102290][T12670] bridge_slave_1: left allmulticast mode [ 568.131500][T12670] bridge_slave_1: left promiscuous mode [ 568.137318][T12670] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.234906][T12670] bridge_slave_0: left allmulticast mode [ 568.258545][T12670] bridge_slave_0: left promiscuous mode [ 568.268919][T12670] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.288653][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.295218][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.330458][ T5856] Bluetooth: hci2: command tx timeout [ 569.352551][T12670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.381683][T12670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.394530][T12670] bond0 (unregistering): Released all slaves [ 570.126022][T15523] chnl_net:caif_netlink_parms(): no params data found [ 570.232151][T12670] hsr_slave_0: left promiscuous mode [ 570.272032][T12670] hsr_slave_1: left promiscuous mode [ 570.280918][T12670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.299193][T12670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.327335][T12670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.339201][T12670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.463506][T12670] veth1_macvtap: left promiscuous mode [ 570.469392][T12670] veth0_macvtap: left promiscuous mode [ 570.483981][T12670] veth1_vlan: left promiscuous mode [ 570.489873][T12670] veth0_vlan: left promiscuous mode [ 571.274702][T15623] RDS: rds_bind could not find a transport for fe80::300:0:0:0, load rds_tcp or rds_rdma? [ 571.410507][ T5856] Bluetooth: hci2: command tx timeout [ 571.897160][T12670] team0 (unregistering): Port device team_slave_1 removed [ 572.006426][T12670] team0 (unregistering): Port device team_slave_0 removed [ 572.914825][T15616] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1648'. [ 573.065724][T15523] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.082084][T15523] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.089401][T15523] bridge_slave_0: entered allmulticast mode [ 573.139583][T15523] bridge_slave_0: entered promiscuous mode [ 573.204109][T15523] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.221228][T15523] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.228540][T15523] bridge_slave_1: entered allmulticast mode [ 573.270084][T15523] bridge_slave_1: entered promiscuous mode [ 573.498274][ T5856] Bluetooth: hci2: command tx timeout [ 573.534492][T15523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.547123][T15523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.665589][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1655'. [ 573.855945][T15523] team0: Port device team_slave_0 added [ 573.893106][T15523] team0: Port device team_slave_1 added [ 574.105607][T15523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.150693][T15523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.234375][T15523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.272931][T15523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.290208][T15523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.359446][T15523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.515909][T15523] hsr_slave_0: entered promiscuous mode [ 574.523314][T15523] hsr_slave_1: entered promiscuous mode [ 575.560364][ T5856] Bluetooth: hci2: command tx timeout [ 575.881841][T12670] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.243515][T12670] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.415791][T13634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 576.424943][T13634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 576.436620][T13634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 576.451010][T13634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 576.460994][T13634] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 576.469411][T13634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 576.644875][T12670] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.837046][T12670] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.939625][T15523] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 576.966355][T15523] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 576.983425][T15523] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 577.011954][T15523] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 577.311444][T12670] bridge_slave_1: left allmulticast mode [ 577.319475][T12670] bridge_slave_1: left promiscuous mode [ 577.337252][T12670] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.365709][T12670] bridge_slave_0: left allmulticast mode [ 577.385798][T12670] bridge_slave_0: left promiscuous mode [ 577.400274][T12670] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.444679][T15735] kexec: Could not allocate control_code_buffer [ 578.367941][T12670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.402098][T12670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.426064][T12670] bond0 (unregistering): Released all slaves [ 578.522676][ T5856] Bluetooth: hci1: command tx timeout [ 578.923219][T15711] chnl_net:caif_netlink_parms(): no params data found [ 579.119411][T12670] hsr_slave_0: left promiscuous mode [ 579.131060][T12670] hsr_slave_1: left promiscuous mode [ 579.151060][T12670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.158553][T12670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.179776][T12670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.201974][T12670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.294448][T12670] veth1_macvtap: left promiscuous mode [ 579.310797][T12670] veth0_macvtap: left promiscuous mode [ 579.329964][T12670] veth1_vlan: left promiscuous mode [ 579.348606][T12670] veth0_vlan: left promiscuous mode [ 580.265727][T12670] team0 (unregistering): Port device team_slave_1 removed [ 580.318367][T12670] team0 (unregistering): Port device team_slave_0 removed [ 580.601097][ T5856] Bluetooth: hci1: command tx timeout [ 580.932094][T15523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.970989][T15711] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.978224][T15711] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.986770][T15711] bridge_slave_0: entered allmulticast mode [ 580.995452][T15711] bridge_slave_0: entered promiscuous mode [ 581.109217][T15711] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.117970][T15711] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.135129][T15711] bridge_slave_1: entered allmulticast mode [ 581.151819][T15711] bridge_slave_1: entered promiscuous mode [ 581.226240][T15711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.354787][T15711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.481145][T15523] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.583480][T15711] team0: Port device team_slave_0 added [ 581.653315][ T5856] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 581.664610][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.671863][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.686812][T15711] team0: Port device team_slave_1 added [ 581.762083][T15711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.779385][T15711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.840503][T15711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.865307][T12669] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.872540][T12669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.941551][T15711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.965191][T15711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.038960][T15711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.224272][T15711] hsr_slave_0: entered promiscuous mode [ 582.260819][T15711] hsr_slave_1: entered promiscuous mode [ 582.302203][T15711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.319073][T15711] Cannot create hsr debugfs directory [ 582.681123][ T5856] Bluetooth: hci1: command tx timeout [ 583.141564][T15523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.413880][T15523] veth0_vlan: entered promiscuous mode [ 583.461262][T15523] veth1_vlan: entered promiscuous mode [ 583.533164][T15523] veth0_macvtap: entered promiscuous mode [ 583.605107][T15523] veth1_macvtap: entered promiscuous mode [ 583.714833][T15523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.740767][T15523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.750990][T15523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.768004][T15523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.788508][T15523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.827991][T15523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.863223][T15523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.902487][T15523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.927838][T15523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.938738][T15523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.960396][T15523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.980482][T15523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.992256][T15523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.014999][T15523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.073275][T15523] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.091600][T15523] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.110403][T15523] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.129787][T15523] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.191190][T15711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 584.214104][T15711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 584.265830][T15711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 584.373426][T15711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 584.585053][T15673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.624628][T15673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.753881][T12669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.770551][T12669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.771128][ T5856] Bluetooth: hci1: command tx timeout [ 584.971365][T15711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.059004][T15711] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.087517][T12669] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.094746][T12669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.129063][T12669] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.136400][T12669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.767484][T15711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.805340][T15711] veth0_vlan: entered promiscuous mode [ 585.818066][T15711] veth1_vlan: entered promiscuous mode [ 585.893079][T15711] veth0_macvtap: entered promiscuous mode [ 585.934320][T15711] veth1_macvtap: entered promiscuous mode [ 586.080860][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.091486][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.101563][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.112186][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.122642][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.133517][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.143770][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.154753][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.166858][T15711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.178137][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.188741][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.198654][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.209428][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.222520][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.233478][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.244810][T15711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.255795][T15711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.268175][T15711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.281312][T15711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.290113][T15711] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.298965][T15711] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.307838][T15711] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.669432][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.711731][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.823672][T15674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.869783][T15674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.861409][T15936] delete_channel: no stack [ 599.079899][ T1049] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.637834][ T1049] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.714189][T13634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 599.740973][T13634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 599.765971][T13634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 599.774420][T13634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 599.782647][T13634] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 599.790178][T13634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 600.378275][ T1049] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.608961][ T1049] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.051823][ T1049] bridge_slave_1: left allmulticast mode [ 601.057554][ T1049] bridge_slave_1: left promiscuous mode [ 601.088269][ T1049] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.201661][ T1049] bridge_slave_0: left allmulticast mode [ 601.207426][ T1049] bridge_slave_0: left promiscuous mode [ 601.213342][ T1049] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.881152][T13634] Bluetooth: hci1: command tx timeout [ 602.771669][ T1049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.816010][ T1049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.904268][ T1049] bond0 (unregistering): Released all slaves [ 602.944131][T16143] chnl_net:caif_netlink_parms(): no params data found [ 603.680434][T16143] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.687817][T16143] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.705340][T16143] bridge_slave_0: entered allmulticast mode [ 603.717868][T16143] bridge_slave_0: entered promiscuous mode [ 603.967922][T13634] Bluetooth: hci1: command tx timeout [ 604.333399][T16143] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.340930][T16143] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.357655][T16143] bridge_slave_1: entered allmulticast mode [ 604.371620][T16143] bridge_slave_1: entered promiscuous mode [ 604.617031][T16143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.629775][T16143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.709286][ T1049] hsr_slave_0: left promiscuous mode [ 604.751193][ T1049] hsr_slave_1: left promiscuous mode [ 604.759613][ T1049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.790368][ T1049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.801771][ T1049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.809261][ T1049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.867729][ T1049] veth1_macvtap: left promiscuous mode [ 604.873574][ T1049] veth0_macvtap: left promiscuous mode [ 604.879966][ T1049] veth1_vlan: left promiscuous mode [ 604.896389][ T1049] veth0_vlan: left promiscuous mode [ 605.946635][ T1049] team0 (unregistering): Port device team_slave_1 removed [ 606.044310][ T1049] team0 (unregistering): Port device team_slave_0 removed [ 606.046628][T13634] Bluetooth: hci1: command tx timeout [ 607.104984][T16143] team0: Port device team_slave_0 added [ 607.114766][T16143] team0: Port device team_slave_1 added [ 607.271668][T16143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.278694][T16143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.379179][T16143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.411008][T16143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.418026][T16143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.477297][T16143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.720980][T16143] hsr_slave_0: entered promiscuous mode [ 607.779082][T16143] hsr_slave_1: entered promiscuous mode [ 607.819687][T16143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 607.840535][T16143] Cannot create hsr debugfs directory [ 608.120879][T13634] Bluetooth: hci1: command tx timeout [ 609.219177][T16241] delete_channel: no stack [ 610.712134][T16143] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 610.765815][T16143] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 610.885637][T16143] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 610.955511][T16143] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 611.534068][T16143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.608035][T16143] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.640874][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.648091][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.716548][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.723806][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.241522][T16143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.413640][T16143] veth0_vlan: entered promiscuous mode [ 612.484361][T16143] veth1_vlan: entered promiscuous mode [ 612.599231][T16143] veth0_macvtap: entered promiscuous mode [ 612.668887][T16143] veth1_macvtap: entered promiscuous mode [ 612.713320][T16143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.727345][T16143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.737506][T16143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.748344][T16143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.758624][T16143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.769565][T16143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.779826][T16143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.790459][T16143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.802510][T16143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.848807][T16143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.880297][T16143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.890185][T16143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.927548][T16143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.946566][T16143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.963781][T16143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.980037][T16143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.020454][T16143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.051611][T16143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.083950][T16143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.119502][T16143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.138778][T16143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.175268][T16143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.448580][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.509724][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.661833][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.693670][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.523433][T16412] svc: failed to register nfsdv3 RPC service (errno 111). [ 614.559094][T16412] svc: failed to register nfsaclv3 RPC service (errno 111). [ 619.461250][T16508] openvswitch: HSR: Dropping previously announced user features [ 619.492012][T16508] delete_channel: no stack [ 620.225731][T16544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1791'. [ 621.750471][T16581] netlink: 'syz.6.1799': attribute type 11 has an invalid length. [ 621.775315][T16581] netlink: 'syz.6.1799': attribute type 11 has an invalid length. [ 625.756402][ T66] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.468434][ T66] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.062393][ T66] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.093633][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 627.106462][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 627.118330][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 627.129725][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 627.145328][ T5856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 627.163810][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 627.823346][ T66] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.233528][T16705] chnl_net:caif_netlink_parms(): no params data found [ 628.251977][T16728] GUP no longer grows the stack in syz.6.1823 (16728): 1000-401000 (0) [ 628.340426][T16728] CPU: 0 UID: 0 PID: 16728 Comm: syz.6.1823 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 628.351297][T16728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 628.361421][T16728] Call Trace: [ 628.364747][T16728] [ 628.367726][T16728] dump_stack_lvl+0x16c/0x1f0 [ 628.372492][T16728] gup_vma_lookup+0x1d2/0x220 [ 628.377254][T16728] fixup_user_fault+0x26f/0x540 [ 628.382205][T16728] fault_in_user_writeable+0x70/0xe0 [ 628.387563][T16728] futex_wake_op+0x96c/0xdc0 [ 628.392250][T16728] ? __pfx_futex_wake_op+0x10/0x10 [ 628.397446][T16728] ? futex_wake+0x18e/0x4e0 [ 628.402030][T16728] ? __pfx_futex_wake+0x10/0x10 [ 628.406976][T16728] do_futex+0x2eb/0x350 [ 628.411198][T16728] ? __pfx_do_futex+0x10/0x10 [ 628.415943][T16728] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 628.421143][T16728] __x64_sys_futex+0x1e1/0x4c0 [ 628.425978][T16728] ? __pfx___x64_sys_futex+0x10/0x10 [ 628.431335][T16728] ? rcu_is_watching+0x12/0xc0 [ 628.436176][T16728] do_syscall_64+0xcd/0x250 [ 628.440745][T16728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.446723][T16728] RIP: 0033:0x7f4eff17e719 [ 628.451206][T16728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.470880][T16728] RSP: 002b:00007f4efff75038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 628.479373][T16728] RAX: ffffffffffffffda RBX: 00007f4eff335f80 RCX: 00007f4eff17e719 [ 628.487405][T16728] RDX: 0000000000000002 RSI: 0000000000000085 RDI: 0000000000000000 [ 628.495441][T16728] RBP: 00007f4eff1f132e R08: 0000000000000000 R09: 0000000000000001 [ 628.503475][T16728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.511513][T16728] R13: 0000000000000000 R14: 00007f4eff335f80 R15: 00007ffd6a00e518 [ 628.519568][T16728] [ 629.133804][T16705] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.172183][T16705] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.179510][T16705] bridge_slave_0: entered allmulticast mode [ 629.230447][T16705] bridge_slave_0: entered promiscuous mode [ 629.240478][T13634] Bluetooth: hci2: command tx timeout [ 629.293188][T16705] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.303238][T16705] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.321512][T16705] bridge_slave_1: entered allmulticast mode [ 629.328866][T16705] bridge_slave_1: entered promiscuous mode [ 629.633793][T16705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.725304][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.731904][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.762734][ T66] bridge_slave_1: left allmulticast mode [ 629.768442][ T66] bridge_slave_1: left promiscuous mode [ 629.806209][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.836735][ T66] bridge_slave_0: left allmulticast mode [ 629.860342][ T66] bridge_slave_0: left promiscuous mode [ 629.876494][ T30] audit: type=1804 audit(8277292036.900:15): pid=16772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1827" name="#)-\&[}" dev="mqueue" ino=56976 res=1 errno=0 [ 629.876536][T16772] kernel read not supported for file /#)-\&[} (pid: 16772 comm: syz.6.1827) [ 629.910538][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.048525][ T30] audit: type=1804 audit(8277292037.070:16): pid=16774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1827" name="#)-\&[}" dev="mqueue" ino=56976 res=1 errno=0 [ 630.150373][ T30] audit: type=1804 audit(8277292037.070:17): pid=16774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1827" name="#)-\&[}" dev="mqueue" ino=56976 res=1 errno=0 [ 630.248516][ T30] audit: type=1800 audit(8277292037.110:18): pid=16772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1827" name="#)-\&[}" dev="mqueue" ino=56976 res=0 errno=0 [ 631.320432][T13634] Bluetooth: hci2: command tx timeout [ 633.041724][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.054298][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.072615][ T66] bond0 (unregistering): Released all slaves [ 633.107722][T16705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.196089][T16705] team0: Port device team_slave_0 added [ 633.232812][T16705] team0: Port device team_slave_1 added [ 633.339374][T16705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.358748][T16705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.406426][T13634] Bluetooth: hci2: command tx timeout [ 633.539477][T16705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.555791][T16705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.566115][T16705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.630422][T16705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.871664][T16705] hsr_slave_0: entered promiscuous mode [ 633.915951][T16705] hsr_slave_1: entered promiscuous mode [ 633.922609][T16705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 633.930471][T16705] Cannot create hsr debugfs directory [ 634.337947][ T66] hsr_slave_0: left promiscuous mode [ 634.354259][ T66] hsr_slave_1: left promiscuous mode [ 634.367421][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.385108][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.402614][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.415869][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.473728][ T66] veth1_macvtap: left promiscuous mode [ 634.479475][ T66] veth0_macvtap: left promiscuous mode [ 634.485757][ T66] veth1_vlan: left promiscuous mode [ 634.491820][ T66] veth0_vlan: left promiscuous mode [ 635.480760][T13634] Bluetooth: hci2: command tx timeout [ 635.664849][ T66] team0 (unregistering): Port device team_slave_1 removed [ 635.788966][ T66] team0 (unregistering): Port device team_slave_0 removed [ 637.447213][T16908] )zV: entered promiscuous mode [ 638.323373][T16705] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 638.377625][T16705] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 638.481654][T16705] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 638.564434][T16705] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 639.073604][T16953] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1845'. [ 639.149204][T16705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.251109][T16705] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.346467][T16705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 639.356991][T16705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 639.379106][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.386335][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.396063][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.403273][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.485832][ T30] audit: type=1326 audit(8277292046.510:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16956 comm="syz.8.1847" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4d257e719 code=0x0 [ 639.918534][T16705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.735678][T16705] veth0_vlan: entered promiscuous mode [ 640.786615][T16705] veth1_vlan: entered promiscuous mode [ 640.904156][T16705] veth0_macvtap: entered promiscuous mode [ 640.940907][T16705] veth1_macvtap: entered promiscuous mode [ 640.982774][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.020463][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.031980][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.070407][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.090609][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.130793][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.141119][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.170316][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.191857][T16705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.248250][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.270449][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.290704][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.310294][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.336690][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.360330][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.371011][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.390382][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.411775][T16705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.602139][T16705] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.620448][T16705] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.629232][T16705] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.660322][T16705] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.948343][ T1049] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.203677][ T1049] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.419097][ T1049] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.468018][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 642.478521][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 642.494610][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 642.526266][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 642.537211][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.537961][ T5856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 642.556472][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 642.608969][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.633858][ T1049] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.796744][T15674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.817485][T15674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.031623][ T1049] bridge_slave_1: left allmulticast mode [ 643.037346][ T1049] bridge_slave_1: left promiscuous mode [ 643.044280][ T1049] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.058601][ T1049] bridge_slave_0: left allmulticast mode [ 643.067790][ T1049] bridge_slave_0: left promiscuous mode [ 643.074699][ T1049] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.257263][ T1049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.294015][ T1049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.328625][ T1049] bond0 (unregistering): Released all slaves [ 644.414104][ T1049] HSR: left promiscuous mode [ 644.512715][ T1049] )zV: left promiscuous mode [ 644.601130][ T5856] Bluetooth: hci3: command tx timeout [ 644.854970][T17015] chnl_net:caif_netlink_parms(): no params data found [ 645.298107][T17015] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.316995][T17015] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.350734][T17015] bridge_slave_0: entered allmulticast mode [ 645.371730][T17015] bridge_slave_0: entered promiscuous mode [ 645.480696][T17015] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.487868][T17015] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.630866][T17015] bridge_slave_1: entered allmulticast mode [ 645.638144][T17015] bridge_slave_1: entered promiscuous mode [ 645.823152][T17015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.050732][T17015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.228610][ T1049] hsr_slave_0: left promiscuous mode [ 646.247460][ T1049] hsr_slave_1: left promiscuous mode [ 646.254048][ T1049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.262697][ T1049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.309894][ T1049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.319908][ T1049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.371624][ T1049] veth1_macvtap: left promiscuous mode [ 646.386250][ T1049] veth0_macvtap: left promiscuous mode [ 646.395789][ T1049] veth1_vlan: left promiscuous mode [ 646.399447][T17045] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1860'. [ 646.405915][ T1049] veth0_vlan: left promiscuous mode [ 646.680967][ T5856] Bluetooth: hci3: command tx timeout [ 647.546927][ T1049] team0 (unregistering): Port device team_slave_1 removed [ 647.663480][ T1049] team0 (unregistering): Port device team_slave_0 removed [ 648.767773][ T5856] Bluetooth: hci3: command tx timeout [ 649.036015][T17015] team0: Port device team_slave_0 added [ 649.132492][T17015] team0: Port device team_slave_1 added [ 649.275826][T17015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.290579][T17015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.330347][T17015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.371818][T17015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.378839][T17015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.405265][T17015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.650652][T17015] hsr_slave_0: entered promiscuous mode [ 649.669664][T17015] hsr_slave_1: entered promiscuous mode [ 650.844805][ T5856] Bluetooth: hci3: command tx timeout [ 651.155317][T17015] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 651.239662][T17015] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 651.329045][T17015] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 651.349072][T17015] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 651.585478][ T30] audit: type=1326 audit(8277292058.610:20): auid=4294967295 uid=13 gid=0 ses=4294967295 subj=unconfined pid=17102 comm="syz.8.1873" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4d257e719 code=0x0 [ 651.654206][T17015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.672869][T17015] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.723928][T17015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 651.734642][T17015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 651.759505][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.766775][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.776963][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.784209][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.182239][T17015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.134061][T17015] veth0_vlan: entered promiscuous mode [ 653.191224][T17015] veth1_vlan: entered promiscuous mode [ 653.265768][T17148] delete_channel: no stack [ 653.473087][T17015] veth0_macvtap: entered promiscuous mode [ 653.504406][T17015] veth1_macvtap: entered promiscuous mode [ 653.644512][T17015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.691111][T17015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.730499][T17015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.750261][T17015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.780327][T17015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.820283][T17015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.850431][T17015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.901047][T17015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.932277][T17015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.981261][T17015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.036915][T17015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.070564][T17015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.091474][T17015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.112736][T17015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.139294][T17015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.163892][T17015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.187085][T17015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.211333][T17015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.235137][T17015] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.255917][T17015] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.275016][T17015] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.305125][T17015] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.535436][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.550477][T15673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.558373][T15673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.569835][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.574461][ T29] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.743858][ T29] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.945483][ T29] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.337940][ T29] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.462281][T13634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 656.480496][T13634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 656.501100][T13634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 656.591116][T13634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 656.599173][T13634] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 656.606848][T13634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 656.712062][ T29] bridge_slave_1: left allmulticast mode [ 656.738801][ T29] bridge_slave_1: left promiscuous mode [ 656.755279][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.829597][ T29] bridge_slave_0: left allmulticast mode [ 656.836261][ T29] bridge_slave_0: left promiscuous mode [ 656.848666][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.552772][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1895'. [ 658.117505][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.173024][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.205207][ T29] bond0 (unregistering): Released all slaves [ 658.764308][T13634] Bluetooth: hci1: command tx timeout [ 659.096167][ T29] hsr_slave_0: left promiscuous mode [ 659.190384][ T29] hsr_slave_1: left promiscuous mode [ 659.220594][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.238375][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.257248][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.279102][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.344374][ T29] veth1_macvtap: left promiscuous mode [ 659.373567][ T29] veth0_macvtap: left promiscuous mode [ 659.389686][ T29] veth1_vlan: left promiscuous mode [ 659.399802][ T29] veth0_vlan: left promiscuous mode [ 660.842580][T13634] Bluetooth: hci1: command tx timeout [ 661.448413][ T29] team0 (unregistering): Port device team_slave_1 removed [ 661.681386][ T29] team0 (unregistering): Port device team_slave_0 removed [ 662.950268][T13634] Bluetooth: hci1: command tx timeout [ 664.926311][T17370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1915'. [ 665.006721][T13634] Bluetooth: hci1: command tx timeout [ 665.234655][T17219] chnl_net:caif_netlink_parms(): no params data found [ 665.610005][T17219] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.627605][T17219] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.718808][T17219] bridge_slave_0: entered allmulticast mode [ 665.727638][T17219] bridge_slave_0: entered promiscuous mode [ 665.737836][T17219] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.745428][T17219] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.753154][T17219] bridge_slave_1: entered allmulticast mode [ 665.761099][T17219] bridge_slave_1: entered promiscuous mode [ 665.902051][T17219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.952153][T17219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.077090][T17219] team0: Port device team_slave_0 added [ 666.143917][T17219] team0: Port device team_slave_1 added [ 666.317735][T17219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.345883][T17219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.432043][T17219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.550545][T17219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.557658][T17219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.672131][T17219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.859690][T17219] hsr_slave_0: entered promiscuous mode [ 666.879815][T17219] hsr_slave_1: entered promiscuous mode [ 666.902603][T17219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 666.926170][T17219] Cannot create hsr debugfs directory [ 668.031451][T17446] FAULT_INJECTION: forcing a failure. [ 668.031451][T17446] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 668.098667][T17446] CPU: 0 UID: 0 PID: 17446 Comm: syz.8.1927 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 668.109530][T17446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 668.119649][T17446] Call Trace: [ 668.122978][T17446] [ 668.125953][T17446] dump_stack_lvl+0x16c/0x1f0 [ 668.130696][T17446] should_fail_ex+0x497/0x5b0 [ 668.135437][T17446] strncpy_from_user+0x3b/0x2c0 [ 668.140388][T17446] getname_flags.part.0+0x8f/0x550 [ 668.145583][T17446] getname_flags+0x93/0xf0 [ 668.150062][T17446] user_path_at+0x24/0x60 [ 668.154456][T17446] __x64_sys_name_to_handle_at+0x19a/0x280 [ 668.160338][T17446] ? __pfx___x64_sys_name_to_handle_at+0x10/0x10 [ 668.166734][T17446] ? syscall_user_dispatch+0x77/0x140 [ 668.172194][T17446] do_syscall_64+0xcd/0x250 [ 668.176759][T17446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.182728][T17446] RIP: 0033:0x7fc4d257e719 [ 668.187200][T17446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.206866][T17446] RSP: 002b:00007fc4d332e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 668.215325][T17446] RAX: ffffffffffffffda RBX: 00007fc4d2735f80 RCX: 00007fc4d257e719 [ 668.223322][T17446] RDX: 0000000020000000 RSI: 00000000200001c0 RDI: 0000000000001010 [ 668.231319][T17446] RBP: 00007fc4d332e090 R08: 0000000000000200 R09: 0000000000000000 [ 668.239311][T17446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.247306][T17446] R13: 0000000000000000 R14: 00007fc4d2735f80 R15: 00007fff7b62e9a8 [ 668.255317][T17446] [ 671.205403][T17219] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 671.273266][T17219] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 671.313284][T17219] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 671.408552][T17219] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 671.517534][T17513] FAULT_INJECTION: forcing a failure. [ 671.517534][T17513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.575601][T17513] CPU: 1 UID: 0 PID: 17513 Comm: syz.6.1937 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 671.586459][T17513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 671.596573][T17513] Call Trace: [ 671.599892][T17513] [ 671.602872][T17513] dump_stack_lvl+0x16c/0x1f0 [ 671.607617][T17513] should_fail_ex+0x497/0x5b0 [ 671.612364][T17513] _copy_from_user+0x32/0x100 [ 671.617116][T17513] do_sys_name_to_handle+0x16c/0x650 [ 671.622478][T17513] ? kmem_cache_free+0x152/0x4b0 [ 671.627489][T17513] ? __pfx_do_sys_name_to_handle+0x10/0x10 [ 671.633384][T17513] ? putname+0x12e/0x170 [ 671.637707][T17513] __x64_sys_name_to_handle_at+0x228/0x280 [ 671.643597][T17513] ? __pfx___x64_sys_name_to_handle_at+0x10/0x10 [ 671.650004][T17513] ? syscall_user_dispatch+0x77/0x140 [ 671.655473][T17513] do_syscall_64+0xcd/0x250 [ 671.660044][T17513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.666025][T17513] RIP: 0033:0x7f9d8cb7e719 [ 671.670502][T17513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.690185][T17513] RSP: 002b:00007f9d8d98d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 671.698670][T17513] RAX: ffffffffffffffda RBX: 00007f9d8cd35f80 RCX: 00007f9d8cb7e719 [ 671.706704][T17513] RDX: 0000000020000000 RSI: 00000000200001c0 RDI: 0000000000001010 [ 671.714731][T17513] RBP: 00007f9d8d98d090 R08: 0000000000000200 R09: 0000000000000000 [ 671.722931][T17513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.730962][T17513] R13: 0000000000000000 R14: 00007f9d8cd35f80 R15: 00007ffeac41a3c8 [ 671.739101][T17513] [ 671.796826][T17219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.869723][T17219] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.902663][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.909898][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.993805][T12670] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.001008][T12670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.675179][T17219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.727161][T17219] veth0_vlan: entered promiscuous mode [ 672.739655][T17219] veth1_vlan: entered promiscuous mode [ 672.767281][T17219] veth0_macvtap: entered promiscuous mode [ 672.777158][T17219] veth1_macvtap: entered promiscuous mode [ 672.796972][T17219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.807606][T17219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.817722][T17219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.828279][T17219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.838288][T17219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.849003][T17219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.858962][T17219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.869744][T17219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.881746][T17219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.910248][T17219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.920882][T17219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.930827][T17219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.941389][T17219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.951313][T17219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.961872][T17219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.972089][T17219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.982922][T17219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.995106][T17219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.071896][T17219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.081983][T17219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.130982][T17219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.140727][T17219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.682230][T15674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.750435][T15674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.871018][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.898564][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.882803][T17577] svc: failed to register nfsdv3 RPC service (errno 111). [ 674.999566][T17577] svc: failed to register nfsaclv3 RPC service (errno 111). [ 675.029334][T17600] FAULT_INJECTION: forcing a failure. [ 675.029334][T17600] name failslab, interval 1, probability 0, space 0, times 1 [ 675.098084][T17600] CPU: 0 UID: 0 PID: 17600 Comm: syz.1.1948 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 675.108939][T17600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 675.119047][T17600] Call Trace: [ 675.122352][T17600] [ 675.125307][T17600] dump_stack_lvl+0x16c/0x1f0 [ 675.130016][T17600] should_fail_ex+0x497/0x5b0 [ 675.134722][T17600] ? fs_reclaim_acquire+0xae/0x150 [ 675.139869][T17600] should_failslab+0xc2/0x120 [ 675.144593][T17600] __kmalloc_noprof+0xcb/0x410 [ 675.149403][T17600] do_sys_name_to_handle+0x1bc/0x650 [ 675.154733][T17600] ? kmem_cache_free+0x152/0x4b0 [ 675.159710][T17600] ? __pfx_do_sys_name_to_handle+0x10/0x10 [ 675.165559][T17600] ? putname+0x12e/0x170 [ 675.169844][T17600] __x64_sys_name_to_handle_at+0x228/0x280 [ 675.175702][T17600] ? __pfx___x64_sys_name_to_handle_at+0x10/0x10 [ 675.182066][T17600] ? syscall_user_dispatch+0x77/0x140 [ 675.187492][T17600] do_syscall_64+0xcd/0x250 [ 675.192029][T17600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.197965][T17600] RIP: 0033:0x7f24f337e719 [ 675.202412][T17600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.222057][T17600] RSP: 002b:00007f24f4182038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 675.230505][T17600] RAX: ffffffffffffffda RBX: 00007f24f3535f80 RCX: 00007f24f337e719 [ 675.238504][T17600] RDX: 0000000020000000 RSI: 00000000200001c0 RDI: 0000000000001010 [ 675.246596][T17600] RBP: 00007f24f4182090 R08: 0000000000000200 R09: 0000000000000000 [ 675.254613][T17600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.262620][T17600] R13: 0000000000000000 R14: 00007f24f3535f80 R15: 00007ffffa656df8 [ 675.270637][T17600] [ 677.485705][T17650] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1952'. [ 678.514961][T17670] openvswitch: netlink: Flow actions attr not present in new flow. [ 679.012521][T17684] FAULT_INJECTION: forcing a failure. [ 679.012521][T17684] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 679.216921][T17684] CPU: 1 UID: 0 PID: 17684 Comm: syz.8.1957 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 679.227789][T17684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 679.237905][T17684] Call Trace: [ 679.241232][T17684] [ 679.244199][T17684] dump_stack_lvl+0x16c/0x1f0 [ 679.248930][T17684] should_fail_ex+0x497/0x5b0 [ 679.253662][T17684] ? fs_reclaim_acquire+0xae/0x150 [ 679.258845][T17684] should_fail_alloc_page+0xe7/0x130 [ 679.264222][T17684] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 679.270456][T17684] __alloc_pages_noprof+0x190/0x25a0 [ 679.275824][T17684] ? hlock_class+0x4e/0x130 [ 679.280402][T17684] ? __pfx_mark_lock+0x10/0x10 [ 679.285239][T17684] ? register_lock_class+0xb1/0x1240 [ 679.290623][T17684] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 679.296437][T17684] ? hlock_class+0x4e/0x130 [ 679.301004][T17684] ? __lock_acquire+0xbdd/0x3ce0 [ 679.306029][T17684] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 679.312004][T17684] ? policy_nodemask+0xea/0x4e0 [ 679.316939][T17684] alloc_pages_mpol_noprof+0x2c9/0x610 [ 679.322488][T17684] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 679.328573][T17684] ? find_held_lock+0x2d/0x110 [ 679.333418][T17684] folio_alloc_mpol_noprof+0x36/0xd0 [ 679.338795][T17684] shmem_alloc_folio+0x135/0x160 [ 679.343812][T17684] shmem_alloc_and_add_folio+0x48b/0xc00 [ 679.349517][T17684] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 679.355751][T17684] ? shmem_allowable_huge_orders+0xcd/0x3f0 [ 679.361727][T17684] shmem_get_folio_gfp+0x689/0x1530 [ 679.366996][T17684] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 679.372707][T17684] shmem_fault+0x200/0xae0 [ 679.377192][T17684] ? __pfx_shmem_fault+0x10/0x10 [ 679.382195][T17684] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 679.387910][T17684] ? rcu_is_watching+0x12/0xc0 [ 679.392736][T17684] ? trace_lock_acquire+0x14a/0x1d0 [ 679.397998][T17684] ? __pte_offset_map+0x42/0x540 [ 679.403041][T17684] ? lock_acquire+0x2f/0xb0 [ 679.407626][T17684] ? __pte_offset_map+0x42/0x540 [ 679.412631][T17684] ? __pfx_filemap_map_pages+0x10/0x10 [ 679.418159][T17684] __do_fault+0x10a/0x490 [ 679.422565][T17684] ? __pfx_filemap_map_pages+0x10/0x10 [ 679.428093][T17684] do_pte_missing+0x1a8/0x3e50 [ 679.432949][T17684] __handle_mm_fault+0x100a/0x2a10 [ 679.438143][T17684] ? __pfx_mt_find+0x10/0x10 [ 679.442800][T17684] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 679.448516][T17684] ? __pfx___handle_mm_fault+0x10/0x10 [ 679.454088][T17684] ? find_vma+0xc0/0x140 [ 679.458399][T17684] ? __pfx_find_vma+0x10/0x10 [ 679.463153][T17684] handle_mm_fault+0x3fa/0xaa0 [ 679.468014][T17684] do_user_addr_fault+0x7a3/0x13f0 [ 679.473218][T17684] exc_page_fault+0x5c/0xc0 [ 679.477801][T17684] asm_exc_page_fault+0x26/0x30 [ 679.482728][T17684] RIP: 0010:__put_user_4+0x11/0x20 [ 679.487982][T17684] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 679.507660][T17684] RSP: 0018:ffffc9000bb8fd90 EFLAGS: 00050246 [ 679.513786][T17684] RAX: 0000000000000047 RBX: 0000000000000000 RCX: 0000000000000000 [ 679.521814][T17684] RDX: 0000000000000000 RSI: ffffffff82206dc1 RDI: ffff88807d9ba4ac [ 679.529845][T17684] RBP: 000000000000000c R08: 0000000000000000 R09: fffffbfff2039d51 [ 679.537877][T17684] R10: ffffffff901cea8f R11: 0000000000000000 R12: ffff888033350600 [ 679.545910][T17684] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 679.553954][T17684] ? do_sys_name_to_handle+0x511/0x650 [ 679.559498][T17684] do_sys_name_to_handle+0x570/0x650 [ 679.564878][T17684] ? __pfx_do_sys_name_to_handle+0x10/0x10 [ 679.570770][T17684] ? putname+0x12e/0x170 [ 679.575087][T17684] __x64_sys_name_to_handle_at+0x228/0x280 [ 679.580970][T17684] ? __pfx___x64_sys_name_to_handle_at+0x10/0x10 [ 679.587384][T17684] do_syscall_64+0xcd/0x250 [ 679.591946][T17684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.597920][T17684] RIP: 0033:0x7fc4d257e719 [ 679.602388][T17684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.622061][T17684] RSP: 002b:00007fc4d330d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 679.630583][T17684] RAX: ffffffffffffffda RBX: 00007fc4d2736058 RCX: 00007fc4d257e719 [ 679.638647][T17684] RDX: 0000000020000000 RSI: 00000000200001c0 RDI: 0000000000001010 [ 679.646681][T17684] RBP: 00007fc4d330d090 R08: 0000000000000200 R09: 0000000000000000 [ 679.654711][T17684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.662749][T17684] R13: 0000000000000000 R14: 00007fc4d2736058 R15: 00007fff7b62e9a8 [ 679.670797][T17684] [ 682.197205][T17741] Process accounting resumed [ 683.764553][T17787] HfR: entered promiscuous mode [ 685.541009][T17829] [ 685.543410][T17829] ====================================================== [ 685.550469][T17829] WARNING: possible circular locking dependency detected [ 685.557529][T17829] 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 Not tainted [ 685.564683][T17829] ------------------------------------------------------ [ 685.571732][T17829] syz.1.1976/17829 is trying to acquire lock: [ 685.577814][T17829] ffff888012374d98 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x3a9/0x6a0 [ 685.587453][T17829] [ 685.587453][T17829] but task is already holding lock: [ 685.594839][T17829] ffff8880289e7858 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x86/0x140 [ 685.605626][T17829] [ 685.605626][T17829] which lock already depends on the new lock. [ 685.605626][T17829] [ 685.616075][T17829] [ 685.616075][T17829] the existing dependency chain (in reverse order) is: [ 685.625102][T17829] [ 685.625102][T17829] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 685.633838][T17829] down_write+0x93/0x200 [ 685.638644][T17829] process_measurement+0x39c/0x2370 [ 685.644396][T17829] ima_file_mmap+0x146/0x1d0 [ 685.649538][T17829] security_mmap_file+0x8bd/0x990 [ 685.655112][T17829] __do_sys_remap_file_pages+0x526/0x900 [ 685.661306][T17829] do_syscall_64+0xcd/0x250 [ 685.666355][T17829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.672811][T17829] [ 685.672811][T17829] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 685.680414][T17829] __lock_acquire+0x250b/0x3ce0 [ 685.685829][T17829] lock_acquire.part.0+0x11b/0x380 [ 685.691506][T17829] down_read_killable+0x9d/0x380 [ 685.696994][T17829] lock_mm_and_find_vma+0x3a9/0x6a0 [ 685.702748][T17829] do_user_addr_fault+0x2b5/0x13f0 [ 685.708418][T17829] exc_page_fault+0x5c/0xc0 [ 685.713476][T17829] asm_exc_page_fault+0x26/0x30 [ 685.718883][T17829] fault_in_readable+0x160/0x200 [ 685.724388][T17829] fault_in_iov_iter_readable+0x101/0x2c0 [ 685.730657][T17829] generic_perform_write+0x21b/0x920 [ 685.736493][T17829] shmem_file_write_iter+0x10e/0x140 [ 685.742338][T17829] vfs_write+0x5ae/0x1150 [ 685.747229][T17829] ksys_write+0x12f/0x260 [ 685.752120][T17829] do_syscall_64+0xcd/0x250 [ 685.757173][T17829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.763629][T17829] [ 685.763629][T17829] other info that might help us debug this: [ 685.763629][T17829] [ 685.773871][T17829] Possible unsafe locking scenario: [ 685.773871][T17829] [ 685.781349][T17829] CPU0 CPU1 [ 685.786722][T17829] ---- ---- [ 685.792105][T17829] lock(&sb->s_type->i_mutex_key#12); [ 685.797646][T17829] lock(&mm->mmap_lock); [ 685.804518][T17829] lock(&sb->s_type->i_mutex_key#12); [ 685.812529][T17829] rlock(&mm->mmap_lock); [ 685.816968][T17829] [ 685.816968][T17829] *** DEADLOCK *** [ 685.816968][T17829] [ 685.825120][T17829] 3 locks held by syz.1.1976/17829: [ 685.830329][T17829] #0: ffff8880332457b8 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24c/0x360 [ 685.839435][T17829] #1: ffff88803180c420 (sb_writers#5){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 685.848458][T17829] #2: ffff8880289e7858 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x86/0x140 [ 685.859667][T17829] [ 685.859667][T17829] stack backtrace: [ 685.865564][T17829] CPU: 1 UID: 0 PID: 17829 Comm: syz.1.1976 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 685.876363][T17829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 685.886446][T17829] Call Trace: [ 685.889741][T17829] [ 685.892688][T17829] dump_stack_lvl+0x116/0x1f0 [ 685.897412][T17829] print_circular_bug+0x419/0x5d0 [ 685.902493][T17829] check_noncircular+0x31a/0x400 [ 685.907485][T17829] ? __pfx_check_noncircular+0x10/0x10 [ 685.912981][T17829] ? hlock_class+0x4e/0x130 [ 685.917530][T17829] ? __lock_acquire+0x163e/0x3ce0 [ 685.922597][T17829] ? lockdep_lock+0xc6/0x200 [ 685.927214][T17829] ? __pfx_lockdep_lock+0x10/0x10 [ 685.932271][T17829] __lock_acquire+0x250b/0x3ce0 [ 685.937183][T17829] ? __pfx___lock_acquire+0x10/0x10 [ 685.942446][T17829] ? register_lock_class+0xb1/0x1240 [ 685.947782][T17829] ? mark_lock+0xb5/0xc60 [ 685.952154][T17829] lock_acquire.part.0+0x11b/0x380 [ 685.957305][T17829] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 685.962712][T17829] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 685.968386][T17829] ? rcu_is_watching+0x12/0xc0 [ 685.973177][T17829] ? trace_lock_acquire+0x14a/0x1d0 [ 685.978409][T17829] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 685.983823][T17829] ? lock_acquire+0x2f/0xb0 [ 685.988368][T17829] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 685.993778][T17829] down_read_killable+0x9d/0x380 [ 685.998747][T17829] ? lock_mm_and_find_vma+0x3a9/0x6a0 [ 686.004156][T17829] ? __pfx_down_read_killable+0x10/0x10 [ 686.009728][T17829] ? __pfx_search_extable+0x10/0x10 [ 686.015042][T17829] ? fault_in_readable+0x160/0x200 [ 686.020282][T17829] lock_mm_and_find_vma+0x3a9/0x6a0 [ 686.025544][T17829] do_user_addr_fault+0x2b5/0x13f0 [ 686.030714][T17829] exc_page_fault+0x5c/0xc0 [ 686.035258][T17829] asm_exc_page_fault+0x26/0x30 [ 686.040149][T17829] RIP: 0010:fault_in_readable+0x160/0x200 [ 686.045922][T17829] Code: 42 e8 45 31 f6 e8 70 36 ba ff 48 39 eb 75 13 eb 2e e8 64 36 ba ff 48 81 c3 00 10 00 00 48 39 eb 74 1d e8 53 36 ba ff 45 89 f7 <8a> 03 31 ff 44 89 fe 88 44 24 28 e8 80 38 ba ff 45 85 ff 74 d2 e8 [ 686.065566][T17829] RSP: 0018:ffffc90003d87b18 EFLAGS: 00050283 [ 686.071662][T17829] RAX: 0000000000000138 RBX: 0000000000000000 RCX: ffffc90015c1d000 [ 686.079655][T17829] RDX: 0000000000040000 RSI: ffffffff81d26f9d RDI: 0000000000000007 [ 686.087652][T17829] RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000 [ 686.095652][T17829] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000081 [ 686.103645][T17829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 686.111645][T17829] ? fault_in_readable+0x15d/0x200 [ 686.116795][T17829] ? fault_in_readable+0x15d/0x200 [ 686.121943][T17829] ? __pfx_fault_in_readable+0x10/0x10 [ 686.127449][T17829] ? find_held_lock+0x2d/0x110 [ 686.132263][T17829] ? inode_to_bdi+0x9e/0x160 [ 686.136987][T17829] fault_in_iov_iter_readable+0x101/0x2c0 [ 686.142743][T17829] generic_perform_write+0x21b/0x920 [ 686.148062][T17829] ? __mark_inode_dirty+0x6b0/0xe60 [ 686.153292][T17829] ? __pfx_generic_perform_write+0x10/0x10 [ 686.159131][T17829] ? __mark_inode_dirty+0x71a/0xe60 [ 686.164367][T17829] ? generic_update_time+0xcf/0xf0 [ 686.169509][T17829] ? mnt_put_write_access_file+0x45/0xf0 [ 686.175210][T17829] shmem_file_write_iter+0x10e/0x140 [ 686.180541][T17829] vfs_write+0x5ae/0x1150 [ 686.184901][T17829] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 686.190872][T17829] ? trace_lock_acquire+0x14a/0x1d0 [ 686.196108][T17829] ? __pfx_vfs_write+0x10/0x10 [ 686.200906][T17829] ? __pfx___mutex_lock+0x10/0x10 [ 686.205989][T17829] ksys_write+0x12f/0x260 [ 686.210440][T17829] ? __pfx_ksys_write+0x10/0x10 [ 686.215322][T17829] do_syscall_64+0xcd/0x250 [ 686.219852][T17829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.225788][T17829] RIP: 0033:0x7f24f337e719 [ 686.230228][T17829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.249951][T17829] RSP: 002b:00007f24f4140038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 686.258393][T17829] RAX: ffffffffffffffda RBX: 00007f24f3536130 RCX: 00007f24f337e719 [ 686.266386][T17829] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 686.274390][T17829] RBP: 00007f24f33f132e R08: 0000000000000000 R09: 0000000000000000 [ 686.282389][T17829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.290382][T17829] R13: 0000000000000000 R14: 00007f24f3536130 R15: 00007ffffa656df8 [ 686.298382][T17829] [ 691.170591][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.176975][ T1301] ieee802154 phy1 wpan1: encryption failed: -22