last executing test programs: 11m19.620889801s ago: executing program 0 (id=380): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) sysfs$auto(0x2, 0x1d, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x2d) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x11, 0xffffffffffffffff, 0x9b, 0x400000000004, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x2e, 0x0, 0x107) socket$nl_generic(0x10, 0x3, 0x10) kcmp$auto(0x6734a4fd, 0x5, 0x6, 0x3a56, 0x80) pidfd_open$auto(0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd77dcb7fcdf2d03000000210000000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x10000000) 11m18.525101616s ago: executing program 0 (id=386): ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x14f, 0x8}, 0x3, &(0x7f00000001c0)={0xfd7, 0x6}, &(0x7f0000000200)={0x5ce3}, 0x1200000) close_range$auto(r0, r0, 0x4000000000002) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (async) getdents64$auto(0x0, &(0x7f0000000440)={0x6, 0x4, 0x5, 0x1}, 0x2000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x200) (async) unshare$auto(0x200) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) getsockopt$auto(0x6, 0x84, 0x76, 0x0, &(0x7f00000000c0)=0x10000) (async) keyctl$auto(0xc, 0x4, 0xfffffffffffffffd, 0x7c, 0x5) sched_setaffinity$auto(0x0, 0x5, &(0x7f00000013c0)=0xffffffffffffffff) (async) sched_setaffinity$auto(0x0, 0x7, &(0x7f00000039c0)=0x2) (async) socket(0xa, 0x801, 0x106) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="f50128bd7000fbdbdf250a00000ac4af47d0a12cd95906dbe2c3eb28af5bcce2c4bdfa0813022df1424c17b30667e7d43351e905823d49d6b09e3e92af463801d623a3ec5d67901210c61c7c29b818e1a4a19c63408f7753cb677adc7bfe2bd52c323c187bb76d57b086ccf69ddacfcf45d652abf135c302741ef84fc2fa7135fe243e4438285f40eea6c0b517df6aa4e9231871ed202ad676b6f629d5bce9ba66e60c1655d170845173c7b3b3b325dc09d60c6d80832ecc8332bc7707b139783bf9090f9b2dca2d0c94f7327700"/219], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) (async) setsockopt$auto(0x3, 0x6, 0x405, 0x0, 0x8) (async) sendmsg$auto_NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="278ff973f374ac81aa05d0", @ANYBLOB="b5945c54d7467bef9c900a6244f5efc56ca8594ddacc2b6a3f57baccc546b76fbccbac39be30e9b6297cbfa372b61f5f191482fe0ef3b4781d9c87b1f5dbcca6443df5ed9b32d9b2c22ea5fa0a46097d360a981dc66f25b85d3323946e084ab6fcbdee17eac7f3c0c05bd3ee5f5ee588ff4e5ff23bd7dde4ced0e06ab9812b9d63e6af54acdc3c16734b12421919d0e2a0bf9222ff9e1b0ce5e46e15043f7f9f7f06b2ba491e5b9997746bb51a5c689a2572bade6805961e46e4a3be2cd3969529847e343b4ea5d369493cc780224934fb7566d885e7506540a6a6d55fd5bd14692c99f32d6b86201e256a3ecacd", @ANYBLOB="00022abd7000fddbdf252e000000080040000700000008006b00fffeffff"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket(0x2, 0x3, 0x7) syz_open_procfs$namespace(0x0, 0x0) (async) r3 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_PARENT(r3, 0xb701, 0x0) (async) getsockname$auto(0x3, &(0x7f0000000000)={0x9, @sockaddr_1_1}, &(0x7f0000001040)=0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00'}) 11m18.193834236s ago: executing program 0 (id=388): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) select$auto(0x3, 0x0, &(0x7f0000000100)={[0xd, 0x7, 0x0, 0xc, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x4000000000000000, 0x7, 0x4, 0x5, 0x8, 0x6]}, 0x0, 0x0) (async) close_range$auto(0x2, 0xfffffffffffff000, 0x2) (async) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) (async) remap_file_pages$auto(0x2, 0x5, 0x6d53, 0x4, 0x1) (async) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x21, &(0x7f0000000040)='!\x00', 0x1ff) (async) mmap$auto(0x6, 0x2, 0x34, 0x16, 0x9, 0x3) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) mmap$auto(0x0, 0xc8, 0xce, 0xab1, 0x401, 0x8000) (async) mlock$auto(0x29, 0x80000003) 11m17.926481043s ago: executing program 0 (id=392): socket(0xa, 0x801, 0x84) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x73) setsockopt$auto(0x400000000000003, 0xff, 0xc, 0x0, 0xfff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000280)={0x2, @sa_data_min="22c1d923cd6b4df444e9ef1b6c84"}, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) listen$auto(0x3, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto(0x3, 0x4, 0xa553) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x2, 0x13, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)={0xa, @sa_data_min="c054fdab44b93e00"}, 0x69) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x294c, 0x0, 0x8, 0xfffffffffffffffc, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000000, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40400"}, 0x55) 11m17.629320116s ago: executing program 0 (id=393): socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) mmap$auto(0x137f, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x88d0}, 0x2000c041) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) socket(0x2, 0x2, 0x0) connect$auto(r0, &(0x7f00000001c0)={0x2, @sa_data_min="fe75b17a422590dd62c212dd5354"}, 0x7fff) syslog$auto(0x3, &(0x7f0000000040)='V/\x00', 0x7ff) process_vm_writev$auto(0x0, 0x0, 0x3, 0x0, 0x4, 0x0) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x6ce, 0x85000c, 0x8, 0x9b72, 0x4, 0x8000) semctl$auto(0x1ff, 0x3, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) tkill$auto(0x1, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x3, 0x3a) pidfd_open$auto(0x1, 0x0) process_madvise$auto(0x1, 0xfffffffffffffffc, 0x0, 0x14, 0x8000000000000000) eventfd$auto(0x0) socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 11m16.601852753s ago: executing program 0 (id=397): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) clone$auto(0x200, 0x8000, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x5) keyctl$auto(0x10, 0x4, 0x5cd, 0x6, 0x1) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) shutdown$auto(0x200000003, 0x2) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000040), r0) memfd_create$auto(&(0x7f0000000000)='\x00', 0xe) mlockall$auto(0x7) open_tree$auto(0x80000000, &(0x7f00000000c0)='/\x00\x80\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x96\x8e\xd3\xb2\x03\xc4\xa6\xd4\xb6Kv0\x12\xc2O\x04\xa9\xc3\xf5\xa7\x87<\x01\xc2\xa8Y\x8c-\xd9\xd9syDZ\\\x91\x94\xd3\x18w<\x15\xdf\xfb\\T\xe9\xbc\xd5\x05\xf1\n\x0f', 0x8001) mremap$auto(0x6, 0x4, 0x9, 0x8, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) 11m16.336553968s ago: executing program 32 (id=397): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) clone$auto(0x200, 0x8000, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x5) keyctl$auto(0x10, 0x4, 0x5cd, 0x6, 0x1) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) shutdown$auto(0x200000003, 0x2) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000040), r0) memfd_create$auto(&(0x7f0000000000)='\x00', 0xe) mlockall$auto(0x7) open_tree$auto(0x80000000, &(0x7f00000000c0)='/\x00\x80\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x96\x8e\xd3\xb2\x03\xc4\xa6\xd4\xb6Kv0\x12\xc2O\x04\xa9\xc3\xf5\xa7\x87<\x01\xc2\xa8Y\x8c-\xd9\xd9syDZ\\\x91\x94\xd3\x18w<\x15\xdf\xfb\\T\xe9\xbc\xd5\x05\xf1\n\x0f', 0x8001) mremap$auto(0x6, 0x4, 0x9, 0x8, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) 8m50.818525169s ago: executing program 4 (id=1025): mmap$auto(0x5, 0x8, 0xdf, 0x16, 0x2, 0x9) (async) ioperm$auto(0xde, 0x7, 0x100402) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 64) capget$auto(0x0, 0x0) (async) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x2d, 0xc8, 0x0, 0x567) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) (async) socket(0x26, 0x80805, 0x0) (async, rerun: 64) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') (rerun: 64) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) (async) socket(0x2, 0x6, 0x0) (async) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) shutdown$auto(0x200000003, 0xb) (async) capset$auto(&(0x7f0000000040)={0x394, 0x0}, &(0x7f0000000080)={0x8000, 0x5, 0x2}) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x4, 0x0, 0x1}, 0xed7138c}, 0x2, 0x9) (async) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x7, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) (async) socket(0x25, 0x1, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x8, 0x2, 0x3) bpf$auto(0x8, &(0x7f0000000000)=@iter_create={0x2, 0xe}, 0x463) (async) bind$auto(0x7, &(0x7f0000000000)={0x1d, @sockaddr_1_1}, 0x3e) (async, rerun: 32) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6d4}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async, rerun: 32) socket(0x28, 0x5, 0x0) setsockopt$auto(0x400000000000003, 0x28, 0x0, 0x0, 0x56b) (async) get_robust_list$auto(r0, &(0x7f0000000200)=&(0x7f00000001c0)={{&(0x7f00000000c0)}, 0x2, &(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000100)}}}, &(0x7f0000000240)=0xc) io_uring_setup$auto(0x6, 0x0) vmsplice$auto(0x10000, 0xfffffffffffffffe, 0x100, 0x8000) 8m49.750399072s ago: executing program 4 (id=1028): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1000000, 0x5, 0xdf, 0x9b72, 0x5, 0x20000592) migrate_pages$auto(0x0, 0x1ff, &(0x7f0000001080)=0xffffffffffffff7f, &(0x7f00000010c0)=0x1) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) shutdown$auto(0x200000003, 0x2) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000f00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001040)={0x0, 0x23, &(0x7f0000001000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f56375f5175d7d8b49d12ad4e47ca974e223898bc7426e8a21e173992f36203091c814c7bda5dc063b65df8d62a0eaba11c732f72c2bcc0fa5849fe633f23929e4e82c3eb9124a306e2267a84316640e483a3a43da57bb53e35d52c624e1b8122a8a8f0b7828bfe2afdae19ec1df4f05dc6cf42f5d73d8fe70c6ffc2f16be48a96d0fd5d704aa169a2a8cd4a1bfa7c25bc489a05000000b08afcf138dfe8d4ede30cc8c75ae39cdbe474d366e1f548e26c7e26726d38f3a7713ab4d85c9041c753b3a2247d50dd1ffb621fd9786805d1a8e1aaa3dad24499d1c6a57a9791878db5e5fdb1b3a78fa3fbd53dd56c50d63a52", @ANYRESHEX=r2, @ANYBLOB="01002bbd7000fbdbdf250300000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8040) 8m49.035711462s ago: executing program 4 (id=1032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$auto_OVS_FLOW_CMD_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x84, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_ACTIONS={0x4}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_MASK={0x3f, 0x7, "6bbb0b2e970708006c263c8e3fb56056c25ffdc97d055339d5662ecd3ca4977aaa398ee691c9c12c42c0d88d00dcdae193a2489e21ecd9c6806b95"}, @OVS_FLOW_ATTR_MASK={0x18, 0x7, "4b25bc565576aa1e65582e31611b86621e3a1e9b"}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x2}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x84}}, 0x400d845) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x400, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x2) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x9, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40010) sendmsg$auto_NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) mq_open$auto(&(0x7f0000000000)='-[(\x06X\x93\xd2\xa8\xbc6\xc0\x9fG\x9f\xc8\x86\x8a\x1f\xd5\x97d\xc6\xb6\xfe\xae\x81\xfcW\xc4\xf6\t>fbj7\xf5\x15\xac\xb0\x11\xb54\'\x13\r\x9d7\x85^;\v\x03^=\xb6\xd5\xad\xf0\xc3K5b\xd9bIp\xb0\xb1\xcaG\xe2\x90\xa8\xdaz\xd1\xb4\x0f\x14.8J\x88}\xf3\x9f\x1f\x0fC[\x102\xee\xe3\x95\xc7\x18\xb4\xfe\xa5\xb1/\x1d\'Sg7\x9e\xf4\xaf\x99\x94d~y\x1d\xde\xd3\xc5\xb7x\x9fq\x19\x97\r\f\x95\xbd\xb5\x95H5`\xe2EB2\xbf\xce6,wk\xee\xde', 0x7fffffdf, 0x81, &(0x7f0000000140)={0x400, 0x10001, 0xffffffffffffff7c, 0x8000000000000001}) 8m48.730392554s ago: executing program 4 (id=1035): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x2240, 0x154) prctl$auto(0x1000000002f, 0xffff, 0x2, 0x9, 0x1) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x9, 0x80000001, 0x7, 0x8, 0x5, 0x5, 0x9, 0x2, 0x8, 0x5, 0xf, 0xffffffffffffffff, 0x9, 0x10001, 0x5, [0x9, 0x7f, 0x77, 0x1, 0xa, 0xe06, 0x400, 0x3, 0x80000000, 0x8, 0x3, 0xfffffffffffffff9, 0x0, 0x3, 0x8, 0x1, 0x6, 0x8, 0xea8, 0x8, 0x5, 0x9a2, 0x5, 0x1, 0x2d47, 0xd, 0x5, 0x2, 0x800, 0x8000000000000000, 0x2ab, 0x8, 0x7ff, 0x1, 0x1, 0x3, 0xffffffffffff0000, 0x6b, 0xfffffffffffffff9, 0x4, 0x2ba, 0x10001, 0xf, 0xffffffffffffff26, 0x9, 0x7fffffff, 0x6, 0x7d, 0xdc]}, 0x800, 0x0) poll$auto(&(0x7f0000000080)={0x2, 0x0, 0x1a}, 0xff, 0x1) 8m48.342760668s ago: executing program 4 (id=1037): prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setreuid$auto(0x15, 0x5) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffe, @_sigpoll={0x52, 0x7}}}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) tkill$auto(0x1, 0x9) prctl$auto(0x1000000003b, 0x6, 0x8, 0x5, 0x10004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) 8m46.301790152s ago: executing program 4 (id=1044): socket(0xa, 0x801, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0xfffffffd, &(0x7f0000000000)={0x3, 0x800, 0x9, 0x12ea, 0xf9, 0x80, 0x8, [0x7, 0x0, 0x7], {0x2, 0x5, 0x8, 0x5, 0x45, 0x8, 0x8, 0x1, 0x4}, {0x101, 0x2009, 0x1ff, 0x9, 0x1, 0x1000, 0x9, 0xff, 0x2}}) close_range$auto(0x6, 0xb0, 0x6) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) preadv$auto(0x2000000000000c8, 0x0, 0x81, 0x7ebf, 0x0) mmap$auto(0x0, 0x198, 0xe5, 0x9b76, 0x2, 0x108000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x6, 0x84) socket(0xa, 0x5, 0x0) socket(0xa, 0x3, 0x6) ioperm$auto(0x1000, 0x40, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x45, 0x0) fsopen$auto(0x0, 0x1) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) setreuid$auto(0x0, 0x20000000004) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) setns(r0, 0x40000000) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) 8m45.898381541s ago: executing program 33 (id=1044): socket(0xa, 0x801, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0xfffffffd, &(0x7f0000000000)={0x3, 0x800, 0x9, 0x12ea, 0xf9, 0x80, 0x8, [0x7, 0x0, 0x7], {0x2, 0x5, 0x8, 0x5, 0x45, 0x8, 0x8, 0x1, 0x4}, {0x101, 0x2009, 0x1ff, 0x9, 0x1, 0x1000, 0x9, 0xff, 0x2}}) close_range$auto(0x6, 0xb0, 0x6) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) preadv$auto(0x2000000000000c8, 0x0, 0x81, 0x7ebf, 0x0) mmap$auto(0x0, 0x198, 0xe5, 0x9b76, 0x2, 0x108000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x6, 0x84) socket(0xa, 0x5, 0x0) socket(0xa, 0x3, 0x6) ioperm$auto(0x1000, 0x40, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x45, 0x0) fsopen$auto(0x0, 0x1) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) setreuid$auto(0x0, 0x20000000004) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) setns(r0, 0x40000000) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) 5m39.309880378s ago: executing program 2 (id=1857): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0x6, 0x3) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000040)=[0x1, 0x4, 0x0, 0x7, 0x9c2, 0x6, 0x600], 0x7, 0x0, 0x1, &(0x7f0000000180)=[0x5], 0x2, 0x9}, 0x2}, 0x8, 0x6) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0xffffd, 0x0) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="09ff7f0000000100"}, 0x55) sendto$auto(0x3, 0x0, 0x8, 0xe, &(0x7f0000000140)={0x2, @sockaddr_1_1}, 0x1c) mount$auto(0x0, &(0x7f0000000100), 0x0, 0xdad, 0x0) unshare$auto(0x200) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) setrlimit$auto(0x9, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) clone$auto(0xfffffffe20000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xfa6) 5m37.799659386s ago: executing program 2 (id=1861): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_SET(0xffffffffffffffff, 0x0, 0x20040810) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, 0x0, 0x4001) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setfsuid$auto(0x10) open_by_handle_at$auto(r2, 0x0, 0xfffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24008b36a29ae06babcb020ed3c62fee5f8d0000", @ANYRES16=r1, @ANYBLOB="010029bd7020fddbdf251400000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40080) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40088d4) 5m37.592657387s ago: executing program 2 (id=1863): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x6fe, 0x3, &(0x7f0000000000)={0x2, 0x7}, &(0x7f0000000080)={0x3, 0x10}) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)={0x1, @sockaddr_1_1}, 0xd) bind$auto(0x2, &(0x7f00000001c0)={0x1, @sockaddr_1_1}, 0xb) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fchown$auto(0x5, 0x8, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) ioctl$auto(0x3, 0x80000541b, 0x38) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x2, 0x2, 0x8000000000000000, 0x9f, 0x7, 0x6) 5m36.616238952s ago: executing program 2 (id=1867): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x800000000000008, 0xc, 0x9, 0x3, 0x6, 0x1, 0x40009, 0x5e582972, 0x4000000000000000, 0x14, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (fail_nth: 19) shutdown$auto(0x200000003, 0x2) 5m35.886952135s ago: executing program 2 (id=1868): r0 = socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) setrlimit$auto(0x1000000007, 0x0) (async) setrlimit$auto(0x1000000007, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) (async) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r0, 0x0, 0x90) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) open(&(0x7f0000000800)='./file0\x00', 0x103c40, 0x50) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x4, 0x1, 0xf, 0xffffffffffffffff, 0x0) (async) getsockopt$auto(0x4, 0x1, 0xf, 0xffffffffffffffff, 0x0) socket(0x28, 0x80000, 0x4) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x100, 0x8, 0x25dfdbfc, {}, [@ETHTOOL_A_FEC_HEADER={0x7, 0x1, "65efbe"}, @ETHTOOL_A_FEC_HEADER={0x7, 0x1, "eb0f63"}, @ETHTOOL_A_FEC_HEADER={0x7, 0x1, "4eeb67"}, @ETHTOOL_A_FEC_HEADER={0x7, 0x1, "54bbfc"}, @ETHTOOL_A_FEC_HEADER={0x7, 0x1, "86a44e"}, @ETHTOOL_A_FEC_HEADER={0x7, 0x1, "5fed46"}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x4a, 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x2}, @HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) 5m35.453812718s ago: executing program 2 (id=1870): mmap$auto(0x400000000000000, 0x3, 0xffff, 0x9b72, 0x800, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x1000000008, 0x2, 0x9b72, 0x2, 0x0) ioperm$auto(0x7, 0x6, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffff7fffff0008, 0xf) inotify_rm_watch$auto(0xffffffffffffffff, 0x84e4) mincore$auto(0x0, 0x8000000000005a, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mknod$auto(&(0x7f0000000400)=':#\xe9\xe7f\x05\xcc$\x94\x81\x06B\x89?\xf3\xc4/\x82\xf6\xd6y?\x80\xdd5X\x1c\xdc\x9d\xe3\a\xdd\x16\xc3=\a\xc2\x9b\xf1a3ZF]\xbb\xee\xc1u\x9b\xfe\x88(\xf7U\xba\x01\xe8\xf8:\xacD\xea\x9aL\xa6\xf1\xe1\xd7\xed\xf8 \xcc\xc6\x9c=.\xa0\x15)\nJ6\x19\xab8\x9f\x12@2CJ\x88\xb1\xc1\xb2\x9fqu\x1d\xd3\x8de\x06\x97\xef\x87\xbf\x05e\xe5g\x8a\xa7\x00\xb9\x8a\x06\x0e!\xde\x03!|\xfc\t\xd2\x8e\xe4[\xaf\xc7\x99\xffx\xff\xa0\xd3\x9ap3\xf8\x1c\x1b\fR\x96c\xf9\xe4o1t[;\x93\xa3\x02\xa7G\x1e\x9c\x9bW-\xbe]\x9f\xb4\xa2\b\x06bw8\x88\xbf\xc4)\xfeE56', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) shutdown$auto(0x200000003, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000002c0), r0) sendmsg$auto_GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="01022bbd7000"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r0) r2 = open(0x0, 0x707602, 0xe1d2b27bdc14aabc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_7={@btf_id=0x6, 0x7, 0x1}, 0x1ff) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000001f00)='[&\x00', 0xfffffffffffffff8) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) mmap$auto(0x4, 0x8, 0x8005, 0x4000010, 0x1e8a, 0x8000000000000000) r4 = socket(0x2, 0x1, 0x106) mmap$auto(0x1002, 0x0, 0x53, 0x1f, 0x8, 0xd3) sendmsg$auto_OVS_DP_CMD_SET(r4, 0x0, 0x20040810) connect$auto(0x3, 0x0, 0x55) 5m20.354892222s ago: executing program 34 (id=1870): mmap$auto(0x400000000000000, 0x3, 0xffff, 0x9b72, 0x800, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x1000000008, 0x2, 0x9b72, 0x2, 0x0) ioperm$auto(0x7, 0x6, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffff7fffff0008, 0xf) inotify_rm_watch$auto(0xffffffffffffffff, 0x84e4) mincore$auto(0x0, 0x8000000000005a, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mknod$auto(&(0x7f0000000400)=':#\xe9\xe7f\x05\xcc$\x94\x81\x06B\x89?\xf3\xc4/\x82\xf6\xd6y?\x80\xdd5X\x1c\xdc\x9d\xe3\a\xdd\x16\xc3=\a\xc2\x9b\xf1a3ZF]\xbb\xee\xc1u\x9b\xfe\x88(\xf7U\xba\x01\xe8\xf8:\xacD\xea\x9aL\xa6\xf1\xe1\xd7\xed\xf8 \xcc\xc6\x9c=.\xa0\x15)\nJ6\x19\xab8\x9f\x12@2CJ\x88\xb1\xc1\xb2\x9fqu\x1d\xd3\x8de\x06\x97\xef\x87\xbf\x05e\xe5g\x8a\xa7\x00\xb9\x8a\x06\x0e!\xde\x03!|\xfc\t\xd2\x8e\xe4[\xaf\xc7\x99\xffx\xff\xa0\xd3\x9ap3\xf8\x1c\x1b\fR\x96c\xf9\xe4o1t[;\x93\xa3\x02\xa7G\x1e\x9c\x9bW-\xbe]\x9f\xb4\xa2\b\x06bw8\x88\xbf\xc4)\xfeE56', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) shutdown$auto(0x200000003, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000002c0), r0) sendmsg$auto_GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="01022bbd7000"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r0) r2 = open(0x0, 0x707602, 0xe1d2b27bdc14aabc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_7={@btf_id=0x6, 0x7, 0x1}, 0x1ff) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000001f00)='[&\x00', 0xfffffffffffffff8) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) mmap$auto(0x4, 0x8, 0x8005, 0x4000010, 0x1e8a, 0x8000000000000000) r4 = socket(0x2, 0x1, 0x106) mmap$auto(0x1002, 0x0, 0x53, 0x1f, 0x8, 0xd3) sendmsg$auto_OVS_DP_CMD_SET(r4, 0x0, 0x20040810) connect$auto(0x3, 0x0, 0x55) 26.2058139s ago: executing program 1 (id=3155): mmap$auto(0x0, 0x401, 0x4000000000df, 0x17, 0x80000010006, 0x0) mmap$auto(0x7, 0x7, 0x5, 0x19, 0x8bf3, 0x6) ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x6}, 0x3, &(0x7f0000000040)={0x100000000, 0x5}, &(0x7f0000000080)={0x1}, 0x5) write$auto(r0, &(0x7f00000000c0)='\x00', 0x1ff) 25.831642844s ago: executing program 1 (id=3159): io_uring_setup$auto(0x3, &(0x7f0000000000)={0x2, 0x3db, 0x6, 0x7, 0x2, 0x3, 0xffffffffffffffff, [0x1e2, 0xc, 0xf5a2], {0x1, 0x8, 0x0, 0x4, 0x3, 0x0, 0x2, 0x800, 0x7}, {0x9, 0x8, 0x10001, 0xfff, 0x8000, 0x1, 0x2, 0xfe3, 0x8b8}}) timerfd_settime$auto(r0, 0xc2b, &(0x7f00000002c0)={{0x401, 0x99}, {0x4, 0xfffffffffffffffd}}, &(0x7f0000000300)={{0x67, 0x5}, {0x8001, 0x8}}) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000000c0), 0xffffffffffffffff) open(&(0x7f0000000000)='./cgroup\x00', 0x6d4d03, 0x29) syz_genetlink_get_family_id$auto_802_15_4_MAC(0x0, 0xffffffffffffffff) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001380)={&(0x7f00000013c0)={0x70, r1, 0x100, 0x70bd29, 0x25dfcbff, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x401}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x2}, @OVS_VPORT_ATTR_UPCALL_STATS={0x4b, 0xa, "ab89978e6d5ddeea992086b09204c6cb5cd279ab77dc90a7d63acbd7e01658615eb12c9a9131756be9e25f1732c00eeb92dc900ee16fa602f3a344bcb1eff504fd7b232f61b930"}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000000) socket(0x2b, 0x4, 0x9) rseq$auto(&(0x7f0000000340)={0x10000, 0x6, 0x8000, 0x0, 0x8, 0x6, "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"}, 0x0, 0x3, 0x9) 25.360309624s ago: executing program 1 (id=3161): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r1, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0xb6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x40004) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xf8, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_FEC_MODES={0xb1, 0x2, "2c78bbd486144602543afaeb48d47db230b6fccb9f80b12beea70a54c3483404b46defc5a6c58345e6c94e7db5b8ab5f5221193805b2ef79d3446602cfc96a7d1658196a32c8dd8df733ce0a63af950057b5c92dc5f5b4999bb85648256f90341a3b7337d7f730259c684b365df552f8adf3c94f9bda3ce361db0a26c6f35395b710a25d8eb22e1727e6d0b07c5aeceae60bc34f49c784c0ebeebf540cb0452b506f03373588ee9395ea65b508"}, @ETHTOOL_A_FEC_MODES={0x2d, 0x2, "3b6dbb442d4da77fbd1c9d22056a193ed43e12dafea2be2deaca9fdc7232db838b4b0bfc8d0000008d"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4014}, 0x4800) 22.393825619s ago: executing program 3 (id=3172): epoll_create$auto(0x4) mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x2a4, 0x8000) (async) setfsuid$auto(0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x123) (async, rerun: 32) getdents64$auto(0x0, 0x0, 0x18) (async, rerun: 32) getdents$auto(0x0, 0x0, 0x100) r0 = socket(0xa, 0x801, 0x84) (async) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async, rerun: 32) close_range$auto(0x0, 0x1c94, 0x2) (async, rerun: 32) socket(0x2, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getcwd$auto(0x0, 0xffffffffffffffff) (async) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xfff) (async, rerun: 64) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x5) (rerun: 64) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)') (async, rerun: 64) listen$auto(0x3, 0x81) (async, rerun: 64) socket(0xf, 0x800, 0xe2) (async) write$auto(0x3, 0x0, 0x81) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x8, 0x7a9, 0x8, 0x50, 0x7, 0x5) ioctl$auto(0x3, 0xffffffff80088a02, 0x1) (async, rerun: 64) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000000), r0) (rerun: 64) 21.086592936s ago: executing program 3 (id=3175): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x9) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x6, 0x4, 0x0, 0xfb3) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) ioctl$auto(r0, 0xffffffff, 0x6) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) 18.018881784s ago: executing program 1 (id=3176): r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x5d2, 0x2, 0x40008000) (async) shutdown$auto(0x200000003, 0x2) (async) io_uring_setup$auto(0x6, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) socket(0x23, 0x80805, 0x0) (async) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) (async) mmap$auto(0x0, 0x8, 0x80000000df, 0x9b72, 0x2, 0x8000) io_submit$auto(0x6, 0x7f, &(0x7f0000000040)=&(0x7f0000000000)={0x6fffffffffffff, 0xb, 0x10001, 0x3, 0x2, 0x3b, 0xfffffffffffffc00, 0x9, 0xfff, 0x0, 0x6}) (async) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5ec20000", @ANYRES16=r2, @ANYBLOB="000828bd7000fcdbdf252c00000008000300010000000700010048391000070002002d2c000007000100fbb5b6000500020000000000080003003fc1ffff0d0002002d69212b2a3a2c2a00000000070001007fd24200"], 0x5c}, 0x1, 0x0, 0x0, 0x200049c0}, 0x10000841) (async) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) (async) connect$auto(0x3, &(0x7f00000018c0)={0x2, @sa_data_min="915ba9fec23ea3df94bb303b2f9d"}, 0x55) 17.690010003s ago: executing program 1 (id=3177): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) r1 = socket(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x8000000000000001, 0x26, 0x8) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) fcntl$auto(0x8000000000000001, 0x6, 0x2) fcntl$auto(0x8000000000000001, 0x24, 0x8) shutdown$auto(r1, 0x6) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r1) 17.281139513s ago: executing program 1 (id=3178): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) socket(0x2, 0x1, 0x0) syz_clone(0xcc81455747ec94b6, 0x0, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000100)={0x2, @sockaddr_1_1={"7749d39b9a6e235a4af910d1408e0de612a904fa51410be9c10f89095980e89fbc9ddb3f50860e198d515c52ff0241f18b3cec6d313e160ebfc815f211672a1c1c92387e6e8826eaf902f2415843c9d4baffc57acd60887544ee0c7c1688f0ceb9813116969153847f76711aa15506216671fa50ef11a75e63607f03dc3f883f5cf7ce36eaa915bd9175c854d06d317560f402"}}, 0x6b) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) socket(0x23, 0x80805, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x1e, 0x0, &(0x7f0000000080)=0x9c8) statx$auto(0xffffff9c, 0x0, 0x2001000, 0x0, 0x0) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0xd6, 0x2, 0x8000) clone$auto(0x400000000d0, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x9) write$auto(0x3, 0x0, 0x8000fdef) socket(0x2, 0x3, 0xa) setsockopt$auto(0x400000000000003, 0xff, 0x24, 0x0, 0xfff) lgetxattr$auto(0x0, &(0x7f00000004c0)='\x00\x8a\x04\x8da\xd1\x0f*5#\xa9\xfdg\xe3\xc5\xad\xa5\x04\xa2\xa2~l\xfek|\xe3me%\xf1\xfc\x8f\xc5\'\xb4\x85\xb5U\xff=\x9a\x8e\x88\xb4\xb9\x9d\xd6\x1c\x11\xa0 z\xd6\x94&&\x18\xa2b.\xef\ba!N\x80H\xdeU\x16\xb6\xbd*\xe6\xcb\r\x1b_;\xf6\xac\xb6Qx\x99\xe4\x16\xa2^\xa7\xa3\xec:[B2vn\xfeq=H0d\x17:m\x13B!;\xf2\xff\xd0\xc6u\xe2\xac|\x0fo\x1c\f\xd4O\xaeS\xfc\xa2\x8e\xd9\'\xf9U\xe7K\v\x04\x17\x96N\xef\xe0\x7f\xac\xf8z\xa4\x8ce\x9d\xea3!!2;\xea\xf0M\xf1\x0e\xcb\x1a\xf3S^\xe9\x1d\x89\xd8;\xd3/\xe8\x1c\x9fK\fvX\xb4\x004\x95\x9a\xb6\xc5}\x18\x9f\tX\xc6\xf2\xc6\xc7\x05\xe7^\xc1\xbc\x87\xe4@\xd0\xdd\x12q\xabk4\xf4\x93\x9f\xe4/\xe2\x01\x84Q\x1d.\x02\xd1\xd3\xe1t|F\xf0\x14\x92H*.\x99U\xcf\xccn\xf4\x95\xde\x84\xcf.\xa1\xf8j\x18\xeb?\xd6\x92\xb8\xa7\xbc\x17\"0\x12\xb1t\x93\x9a\xec\xce\x0ef\v\xe9k\xf3\xe7\xf5\xd46\r\xa6\xe1\xa4\xfdq\x85\xba\x88;\xc5\x01\xfc\xd192%\n\xee\x00\x00Jh\x88u\xc2y\x1c\x80\b\x8b\xd1|\x18\xb6\xfd:F~\xb3\xe6y\xb1r\x8cm\"\x01]\x10\xaf\xf8\xe3\x8a\t\x1c\x19y\xbf\xae\x9a\xb9\x13N\tk\xb84\xde\xea\x8b\xef\xa8>XY)\xe7{\x9e\xba\xf8\'b\xd9\xc5x\x86\xe2\xc11\x14\xa7-$>\bY\x1f\xd7\xec\xbfE\xd5\x8e\xa6\x186\xd5\x84F{{j\x97\xa4\x92\xcfK\xfc5\xe9\xfcMj\xa2c\x0f\xbd\xd5\x1f\x96\x102\xbe\af\'\xb8\x8a\x9fN\xd1\x19\f\xe9D\xb7\xb2%\x15\x98\x00\x00\x00\x00\x00\x00\x00\x00\x004\x1b\xe6\x8d\xf0de\xbewL\x8e\xfe\xb8\x80\x17_^u\'\xb3r\xaa\x15L\xb6\xef\xe0l\x8aLwm\x12\x1b\xfd\xeb\xe1k\xbd\xb1\x899_\xded\xa2>\xe8!h\xac(z\xd9\x1e;\xad\x01\xa4\x13S\xec{\xdf\xe1r\xc8\xc3\x06\x18\xa0:V \x96\xfc\xf9 H\x96B\xd62R\x1d\xc6\x98_Q\xc9\xdev\xf6=a\xc5,w\xe2\xc7\xff\x917\xfd\x84\xdb\xbdDj\x11\xc0\xb4\x91\bm\xd2\xd1h\xbf4\x92\\\x90y\x00\x00\x00\x00\x00\x00', 0x0, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 5.77244261s ago: executing program 3 (id=3175): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x9) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x6, 0x4, 0x0, 0xfb3) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) ioctl$auto(r0, 0xffffffff, 0x6) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) 5.770564806s ago: executing program 5 (id=3193): r0 = socket(0xa, 0x3, 0x2f) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x7, 0x207, 0x7, 0xc, 0x1, 0x0, 0x8000000000000001, 0x2800000000000002, 0x9, 0xde582971, 0xff, 0x9, 0x4, 0xffff, 0x8, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) unshare$auto(0x200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) setresuid$auto(0x8, 0x1, 0x731) clone$auto(0xfffffffe20000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xfa6) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14e1"], 0x14}, 0x1, 0x0, 0x0, 0x200408d5}, 0x8800) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x2) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4045880) 5.596215938s ago: executing program 3 (id=3196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1, 0x100000001, 0x63, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x8, 0x5, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x9, 0x61, 0x103}) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x8, 0x0) socket(0x2, 0x6, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1={"59c7"}}, 0x6b) listen$auto(0x3, 0x83) close_range$auto(0x2, 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0xa, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$auto(0x3, 0x8b0b, 0x91) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mmap$auto(0x0, 0xe, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000100), 0x0, 0x100000, 0x0) clone$auto(0x646a8daf, 0x6, 0x0, 0x0, 0xb) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf2502000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x803}, 0x80) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x7}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2f, 0x7d, "69869a6546dec6f758965ace87c6dc17b85a8cfb1ce407bd03d60e0ed40d0f87778d2be6070cf0cf4e1500"}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) 5.406482346s ago: executing program 6 (id=3197): socket(0x2, 0x2, 0x88) ioperm$auto(0x7, 0x6, 0x2) clone$auto(0x12051c, 0x40000006, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) setresuid$auto(0x2, 0x5, 0x200) kill$auto(0x0, 0x3f) socket(0xa, 0x6, 0x0) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x6, 0x0) connect$auto(0x3, 0x0, 0x6) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8003) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x2b, 0x1, 0x1) getsockopt$auto(0x4, 0x11e, 0x7, 0xfffffffffffffffc, 0x0) 4.688478549s ago: executing program 5 (id=3198): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)={0x4, @sa_data_min="0000008000"}, 0x46b) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = gettid() sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x11c, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x40}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x7fff}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3ff}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x3ff}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xd8, 0x2b, "e433f1f1012dcba99e53729ddd7f48e5096b919dd2d2059f97045d63363a137f4454966d22a678a3978b70e0c45db6de20114737902eeb455a09bd88602b11d549888de4c28db772b774fb6cb3403aaa2d0d7b6cd15fc86b211e656f518e4364d075f93559c115f0cd98d47466487cc56aba6c789049eac3bcf3f6fc376e73dbe8978de3724383d0eb17a8e13a427541192b054a249ab962566bf93305b271a34ccfefa687d23b5c999d69dbb5163ff67cb5bcd90c601e7cd142977cdf9403a6b51767259f5687935e6bea1614cba1493ac18bb3"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48045) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) 4.500670941s ago: executing program 3 (id=3199): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x200000000000000, 0x957f, 0x4000000000e5, 0x11, 0x401, 0x3) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="6a2f7ff43519eb7100"}, 0x55) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x2080, 0xf, 0x0, 0x4) listen$auto(0x3, 0x83) shutdown$auto(0x200000003, 0x2) socketpair$auto(0x7, 0x5, 0x444, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x6, 0x6, 0x7f, 0x18, 0x100000000, 0x100000001) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) fanotify_init$auto(0x5, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x10c) pwritev2$auto(0x4, &(0x7f0000000100)={&(0x7f0000000140), 0x1}, 0x4, 0x4, 0x9f4, 0x22) r0 = socket$nl_generic(0x10, 0x3, 0x10) setresgid$auto(0x0, 0x7fffffffffffffff, 0xe6) mknod$auto(&(0x7f0000000180)='\xea\';B!\x9bL\x06h\xeb9\x17\xf8/E', 0x209, 0xfffffff9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000140)=&(0x7f0000000100)='^^/}\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) 4.455082153s ago: executing program 6 (id=3200): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) (async) io_uring_setup$auto(0x8, 0x0) r0 = socket(0x2a, 0x6, 0x4) mmap$auto(0x0, 0x5072, 0xdf, 0x10, 0x8, 0x8000) (async) io_uring_register$auto(r0, 0xf, &(0x7f0000000080), 0x7f) r1 = socket(0x28, 0x5, 0x0) (async) settimeofday$auto(&(0x7f0000000180)={0x1ed5d7403, 0x1}, 0x0) connect$auto(r1, &(0x7f0000000000)={0x2, @sa_data_min="6f63395f7adc3e54b8a10db5ef20"}, 0x6) (async) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) (async) connect$auto(0x3, &(0x7f0000000040)={0x28, @sa_data_min=' \x00'}, 0x54) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x3, 0x0, 0xfffffffffffffffd) (async) kexec_load$auto(0x8, 0xc, 0x0, 0x0) 4.195038089s ago: executing program 5 (id=3201): socket(0xa, 0x1, 0x84) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0x201, 0x800000000000008, 0xc, 0x9, 0x3, 0x6, 0x1, 0x40009, 0x5e582972, 0x4000000000000000, 0x14, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') umount2$auto(&(0x7f0000000040)='.\x00', 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) futex_wait$auto(&(0x7f0000000040)=[0x4, 0xffffffffffff2a5c, 0x10], 0x0, 0x2, 0x5c, 0x0, 0x7) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) madvise$auto(0x0, 0x200007, 0x8) socket(0xa, 0x5, 0x0) sendto$auto(0x3, 0x0, 0x8, 0xe, &(0x7f0000000140)={0x2, @sockaddr_1_1}, 0x1c) 3.894635332s ago: executing program 6 (id=3202): mmap$auto(0x0, 0xcd, 0x3, 0x40eb1, 0x4221b690, 0x300000000000) socket(0xa, 0x6, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r0, 0x5) readlinkat$auto(r0, 0x0, 0x0, 0x8000001) (async) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)={0x1, @sockaddr_1_1}, 0xb) (async) bind$auto(0x2, &(0x7f00000001c0)={0x1, @sockaddr_1_1}, 0xb) (async) connect$auto(0x3, &(0x7f0000000040)={0x1, @sockaddr_1_1}, 0x54) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mincore$auto(0x1000, 0x8001, 0x0) (async) fcntl$auto(0x8000000000000001, 0x26, 0x8) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) (async) select$auto(0xb, 0x0, 0x0, &(0x7f0000000180)={[0x8, 0xffffffff, 0x20000000006, 0x15, 0x6, 0x1, 0x4, 0x1, 0x100000000000e, 0xb, 0x2dde, 0x2, 0xfffffffffffffffa, 0xab, 0x8000000000000, 0x6]}, 0x0) close_range$auto(r1, 0x8, 0x2) (async) socket(0x10, 0x2, 0xc) (async) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) (async) request_key$auto(&(0x7f0000000140)='.^@%\x00', 0x0, 0x0, 0x2) fcntl$auto(0x8000000000000001, 0x26, 0x3) 2.793989961s ago: executing program 6 (id=3203): mmap$auto(0x0, 0xe985, 0xdf, 0xeb1, 0x2, 0x8000) (async) r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000005c0)={0x404100, 0xbed2cc35b1123915, 0x27}, 0x18) close_range$auto(r0, 0xa, 0x7) socket(0xa, 0x3, 0x87) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x974, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x4000000000000000, 0x9, 0x3, 0x200, 0x8, 0x6]}, 0x0, 0x0) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) write$auto(0x3, 0x0, 0xfdef) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1, 0x2, 0x0) socket(0x2b, 0x1, 0x1) (async) setsockopt$auto(0x4, 0x0, 0x80, 0xfffffffffffffffc, 0x1003f) socket(0x15, 0x4, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) (async) r2 = syz_clone(0x2000, &(0x7f0000000080)="1570063a9619212421a6da8fffada60b6902d25e8e57ac4a136dfcd5fa816b70", 0x20, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)="74f2460b234bf3eae66c6e7447cf67a3399134f5ec36aca5a7b48e07866a91c4c50fd3a2f9f568a0095ca2f0e5f67b5a4c9ede2f8c497a") get_robust_list$auto(r2, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) (async) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x24, 0x1, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd77dcb7fcdf2d030000003f00000003"], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x10000000) (async) ioperm$auto(0x7, 0x6, 0x2) (async) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) write$auto(0x3, 0x0, 0xfdef) write$auto(r1, &(0x7f0000000000)='\x00', 0x0) 2.398851257s ago: executing program 5 (id=3204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) socket(0x10, 0x2, 0x14) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r2, 0x104000000000010e, 0xb, 0x0, 0x400) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010326bd7000fedbdf250c00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) epoll_pwait2$auto(0x1, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd, 0xffffffffffffffff, 0x6) lsm_set_self_attr$auto(0x1, &(0x7f0000000100)={0x6d, 0x100000bade, 0x80}, 0x7f, 0x0) 2.144718092s ago: executing program 35 (id=3178): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) socket(0x2, 0x1, 0x0) syz_clone(0xcc81455747ec94b6, 0x0, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000100)={0x2, @sockaddr_1_1={"7749d39b9a6e235a4af910d1408e0de612a904fa51410be9c10f89095980e89fbc9ddb3f50860e198d515c52ff0241f18b3cec6d313e160ebfc815f211672a1c1c92387e6e8826eaf902f2415843c9d4baffc57acd60887544ee0c7c1688f0ceb9813116969153847f76711aa15506216671fa50ef11a75e63607f03dc3f883f5cf7ce36eaa915bd9175c854d06d317560f402"}}, 0x6b) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) socket(0x23, 0x80805, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x1e, 0x0, &(0x7f0000000080)=0x9c8) statx$auto(0xffffff9c, 0x0, 0x2001000, 0x0, 0x0) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0xd6, 0x2, 0x8000) clone$auto(0x400000000d0, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x9) write$auto(0x3, 0x0, 0x8000fdef) socket(0x2, 0x3, 0xa) setsockopt$auto(0x400000000000003, 0xff, 0x24, 0x0, 0xfff) lgetxattr$auto(0x0, &(0x7f00000004c0)='\x00\x8a\x04\x8da\xd1\x0f*5#\xa9\xfdg\xe3\xc5\xad\xa5\x04\xa2\xa2~l\xfek|\xe3me%\xf1\xfc\x8f\xc5\'\xb4\x85\xb5U\xff=\x9a\x8e\x88\xb4\xb9\x9d\xd6\x1c\x11\xa0 z\xd6\x94&&\x18\xa2b.\xef\ba!N\x80H\xdeU\x16\xb6\xbd*\xe6\xcb\r\x1b_;\xf6\xac\xb6Qx\x99\xe4\x16\xa2^\xa7\xa3\xec:[B2vn\xfeq=H0d\x17:m\x13B!;\xf2\xff\xd0\xc6u\xe2\xac|\x0fo\x1c\f\xd4O\xaeS\xfc\xa2\x8e\xd9\'\xf9U\xe7K\v\x04\x17\x96N\xef\xe0\x7f\xac\xf8z\xa4\x8ce\x9d\xea3!!2;\xea\xf0M\xf1\x0e\xcb\x1a\xf3S^\xe9\x1d\x89\xd8;\xd3/\xe8\x1c\x9fK\fvX\xb4\x004\x95\x9a\xb6\xc5}\x18\x9f\tX\xc6\xf2\xc6\xc7\x05\xe7^\xc1\xbc\x87\xe4@\xd0\xdd\x12q\xabk4\xf4\x93\x9f\xe4/\xe2\x01\x84Q\x1d.\x02\xd1\xd3\xe1t|F\xf0\x14\x92H*.\x99U\xcf\xccn\xf4\x95\xde\x84\xcf.\xa1\xf8j\x18\xeb?\xd6\x92\xb8\xa7\xbc\x17\"0\x12\xb1t\x93\x9a\xec\xce\x0ef\v\xe9k\xf3\xe7\xf5\xd46\r\xa6\xe1\xa4\xfdq\x85\xba\x88;\xc5\x01\xfc\xd192%\n\xee\x00\x00Jh\x88u\xc2y\x1c\x80\b\x8b\xd1|\x18\xb6\xfd:F~\xb3\xe6y\xb1r\x8cm\"\x01]\x10\xaf\xf8\xe3\x8a\t\x1c\x19y\xbf\xae\x9a\xb9\x13N\tk\xb84\xde\xea\x8b\xef\xa8>XY)\xe7{\x9e\xba\xf8\'b\xd9\xc5x\x86\xe2\xc11\x14\xa7-$>\bY\x1f\xd7\xec\xbfE\xd5\x8e\xa6\x186\xd5\x84F{{j\x97\xa4\x92\xcfK\xfc5\xe9\xfcMj\xa2c\x0f\xbd\xd5\x1f\x96\x102\xbe\af\'\xb8\x8a\x9fN\xd1\x19\f\xe9D\xb7\xb2%\x15\x98\x00\x00\x00\x00\x00\x00\x00\x00\x004\x1b\xe6\x8d\xf0de\xbewL\x8e\xfe\xb8\x80\x17_^u\'\xb3r\xaa\x15L\xb6\xef\xe0l\x8aLwm\x12\x1b\xfd\xeb\xe1k\xbd\xb1\x899_\xded\xa2>\xe8!h\xac(z\xd9\x1e;\xad\x01\xa4\x13S\xec{\xdf\xe1r\xc8\xc3\x06\x18\xa0:V \x96\xfc\xf9 H\x96B\xd62R\x1d\xc6\x98_Q\xc9\xdev\xf6=a\xc5,w\xe2\xc7\xff\x917\xfd\x84\xdb\xbdDj\x11\xc0\xb4\x91\bm\xd2\xd1h\xbf4\x92\\\x90y\x00\x00\x00\x00\x00\x00', 0x0, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 2.098376484s ago: executing program 6 (id=3206): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) nanosleep$auto(&(0x7f0000000d40)={0x4, 0xffffffffffffffff}, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4851}, 0x20000001) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) close_range$auto(0x2, 0x8000, 0x0) r0 = socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) socket(0xa, 0x1, 0x6) shutdown$auto(r0, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) listen$auto(0x3, 0x400000) memfd_create$auto(&(0x7f00000000c0)='#)\xa6-\x00', 0x5) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0x1}, 0x10a, 0x0, 0x0, 0x3ff}, 0xed7138c}, 0x200, 0x0) bind$auto(0x3, &(0x7f0000000040)={0xa, @sa_data_min="001000"}, 0x69) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x1, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0xfff5}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NFSD_A_POOL_MODE_MODE={0x7, 0x1, '!%\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x5}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x6}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x100000}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x80) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1000}, @NFSD_A_SERVER_SCOPE={0x9, 0x4, '#)\xa6-\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$auto_GTP_CMD_ECHOREQ(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="4141472000a900100000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x800) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 1.794944598s ago: executing program 5 (id=3207): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x44000) (async) socket(0x2b, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) (async) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x840000000002, 0x3, 0xff) (async) socket(0x10, 0x2, 0x0) (async) socket(0xa, 0x5, 0x0) (async) socket(0x1d, 0x3, 0x1) getsockopt$auto(0x6, 0x65, 0x8, 0xffffffffffffffff, 0x0) (async) bpf$auto(0x6, &(0x7f0000000180)=@bpf_attr_7={@prog_id=0x200, 0x3, 0x10000}, 0x2fb) (async) getrandom$auto(0x0, 0x6000000, 0x3) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x88d0}, 0x2000c041) (async) r0 = socket(0x2, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) recvfrom$auto(r0, 0x0, 0x800000000e, 0xbbe, 0x0, 0xfffffffffffffffd) (async) write$auto(0x3, 0x0, 0xfffffdef) shutdown$auto(0x200000003, 0x2) (async) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x7) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') connect$auto(r1, &(0x7f0000000040)={0xffff, @sa_data_min="9feec08aed25464ad1e441441ef2"}, 0x55) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendfile$auto(0x1, 0x3, 0x0, 0xc01) 961.036668ms ago: executing program 6 (id=3208): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) iopl$auto(0x3) prctl$auto(0x10000000016, 0x1, 0x4, 0x5, 0x0) msgctl$auto(0x7, 0x3, &(0x7f0000000180)={{0x1, 0xffffffffffffffff, 0x0, 0xfffffa9b, 0x2, 0x4, 0x4}, 0x0, 0x0, 0x8000, 0x8, 0x5, 0x294, 0xa, 0x4, 0xd, 0x5, 0x2, 0x3ff}) r0 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) futex$auto(0x0, 0x0, 0x2948, 0x0, 0x0, 0x9) rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xdfffffff, 0x2}, 0x8100, 0x0, 0x8000008) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x9, 0x8000) mmap$auto(0x0, 0x2020009, 0xe, 0xeb1, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clock_settime$auto(0x3, 0x0) ioctl$auto(0x3, 0x541b, 0x38) socket(0x10, 0x2, 0xc) mseal$auto(0x1ffff000, 0x7dda, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getgroups$auto(0xd, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_MAC802154_HWSIM(&(0x7f0000000040), 0xffffffffffffffff) mbind$auto(0x0, 0x2, 0x1, &(0x7f0000002100)=0x4, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="dbfd000000000000000000000a"], 0xfdef}, 0x1, 0x0, 0x0, 0x20008000}, 0x2000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) 246.562148ms ago: executing program 5 (id=3209): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) socket(0xa, 0x5, 0x0) unshare$auto(0x40000080) mknod$auto(0x0, 0xc9, 0xc8) mmap$auto(0x9, 0x8, 0xdf, 0x9b7d, 0x2, 0x8000) nanosleep$auto(&(0x7f0000000000)={0x180000000000, 0x9}, 0x0) mmap$auto(0x0, 0x1000, 0xdf, 0x9b72, 0x0, 0x8000) setfsgid$auto(0x9) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x100000, 0x0, 0x5, 0x0) socket(0x11, 0x3, 0x2) add_key$auto(0x0, 0x0, 0x0, 0x6, 0x100) r0 = socket(0x3008bcb91a0c5d7d, 0x3, 0x1) socket(0x20, 0x801, 0x106) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x8915, 0x91) socket(0x2, 0x1, 0x106) unshare$auto(0x40000080) mmap$auto(0x200000007, 0xa, 0x4, 0x13, 0x8001, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xfffffffffffffffd, 0x40000008000) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) epoll_create1$auto(0x8000000000000000) mremap$auto(0x0, 0x8000000000000006, 0x3fd6, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) 0s ago: executing program 3 (id=3210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7020f8dbdf2501000000", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB="08000900a3"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) socket(0xa, 0x1, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x22240, 0x155) r3 = socket(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYBLOB="13042bbd7000fbdbdf250900000008000300", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7020f8dbdf2501000000", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB="08000900a3"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) (async) socket(0xa, 0x1, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) (async) io_uring_setup$auto(0x6, 0x0) (async) read$auto(0x3, 0x0, 0x80) (async) close_range$auto(0x2, 0x8000, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) open(0x0, 0x22240, 0x155) (async) socket(0xa, 0x2, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) sendmsg$auto_NL80211_CMD_NEW_KEY(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYBLOB="13042bbd7000fbdbdf250900000008000300", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x0) (async) kernel console output (not intermixed with test programs): [ 531.459520][T16087] __sys_sendmsg+0x117/0x1f0 [ 531.464160][T16087] ? __pfx___sys_sendmsg+0x10/0x10 [ 531.469326][T16087] ? __fget_files+0x244/0x3f0 [ 531.474070][T16087] do_syscall_64+0xcd/0x250 [ 531.478616][T16087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.484561][T16087] RIP: 0033:0x7f420fd7e719 [ 531.489019][T16087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.508689][T16087] RSP: 002b:00007f420e1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.517134][T16087] RAX: ffffffffffffffda RBX: 00007f420ff35f80 RCX: 00007f420fd7e719 [ 531.525114][T16087] RDX: 0000000000004000 RSI: 0000000020000c00 RDI: 0000000000000003 [ 531.533104][T16087] RBP: 00007f420e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 531.541112][T16087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.549113][T16087] R13: 0000000000000000 R14: 00007f420ff35f80 R15: 00007ffe8e545328 [ 531.557112][T16087] [ 540.512258][T16277] can: request_module (can-proto-0) failed. [ 542.297091][ T1155] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.522631][ T1155] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.806528][ T1155] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.121386][ T1155] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.415920][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 543.433107][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 543.576010][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 543.585300][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 543.593006][ T5153] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 543.600582][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 543.773858][ T1155] bridge_slave_1: left allmulticast mode [ 543.779587][ T1155] bridge_slave_1: left promiscuous mode [ 543.832564][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.882700][ T1155] bridge_slave_0: left allmulticast mode [ 543.891407][ T1155] bridge_slave_0: left promiscuous mode [ 543.911528][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.533784][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.584362][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.606084][ T1155] bond0 (unregistering): Released all slaves [ 545.681561][ T5153] Bluetooth: hci1: command tx timeout [ 546.186606][T16341] chnl_net:caif_netlink_parms(): no params data found [ 546.442935][ T1155] hsr_slave_0: left promiscuous mode [ 546.464859][ T1155] hsr_slave_1: left promiscuous mode [ 546.497869][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.534736][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.658844][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.693496][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.731935][ T1155] veth1_macvtap: left promiscuous mode [ 546.751818][ T1155] veth0_macvtap: left promiscuous mode [ 546.757888][ T1155] veth1_vlan: left promiscuous mode [ 546.763542][ T1155] veth0_vlan: left promiscuous mode [ 547.537392][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 547.596375][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 547.753469][ T5153] Bluetooth: hci1: command tx timeout [ 548.195991][T16400] delete_channel: no stack [ 548.294276][T16341] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.301435][T16341] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.343415][T16341] bridge_slave_0: entered allmulticast mode [ 548.350490][T16341] bridge_slave_0: entered promiscuous mode [ 548.409778][T16413] netlink: 'syz.3.2069': attribute type 3 has an invalid length. [ 548.418568][T16341] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.425833][T16341] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.433081][T16341] bridge_slave_1: entered allmulticast mode [ 548.440309][T16341] bridge_slave_1: entered promiscuous mode [ 548.442107][T16413] netlink: 'syz.3.2069': attribute type 3 has an invalid length. [ 548.486464][T16413] netlink: 'syz.3.2069': attribute type 9 has an invalid length. [ 548.563897][T16411] svc: failed to register nfsdv3 RPC service (errno 111). [ 548.577051][T16341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.608092][T16341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.683930][T16411] svc: failed to register nfsaclv3 RPC service (errno 111). [ 548.784990][T16341] team0: Port device team_slave_0 added [ 548.818596][T16341] team0: Port device team_slave_1 added [ 548.969936][T16341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.982026][T16341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.043460][T16341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.089111][T16341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.107907][T16341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.159897][T16341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.409434][T16341] hsr_slave_0: entered promiscuous mode [ 549.421024][T16341] hsr_slave_1: entered promiscuous mode [ 549.427830][T16341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.445989][T16341] Cannot create hsr debugfs directory [ 549.871972][ T5153] Bluetooth: hci1: command tx timeout [ 550.260964][T16455] HfR: entered promiscuous mode [ 550.313889][T16483] openvswitch: HfR: Dropping previously announced user features [ 550.947090][T16341] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 550.965729][T16341] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 550.987056][T16341] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 551.023768][T16341] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 551.143025][T16341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.161210][T16341] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.191029][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.198233][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.221393][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.228593][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.267378][T16341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.915907][ T5153] Bluetooth: hci1: command tx timeout [ 552.112740][T16341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.202715][T16341] veth0_vlan: entered promiscuous mode [ 553.281978][T16341] veth1_vlan: entered promiscuous mode [ 553.514441][T16341] veth0_macvtap: entered promiscuous mode [ 553.649124][T16341] veth1_macvtap: entered promiscuous mode [ 553.845003][T16341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.902531][T16341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.922927][T16341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.957504][T16341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.985210][T16341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.012206][T16341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.037243][T16341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.064656][T16341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.093340][T16341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.119119][T16341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.153600][T16341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.183417][T16341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.207255][T16341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.238934][T16341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.258202][T16584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2088'. [ 554.292128][T16341] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.323324][T16341] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.345726][T16341] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.369144][T16341] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.573310][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.581180][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.700705][ T6224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.763818][ T6224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.644386][T16614] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2091'. [ 556.311942][T16651] delete_channel: no stack [ 556.954214][T16684] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2102'. [ 556.956306][T16682] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 557.009018][T16682] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 557.372615][T16692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.280746][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.288425][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.353797][T15032] Bluetooth: hci0: command 0x0406 tx timeout [ 565.412261][T16926] team0: entered promiscuous mode [ 565.418518][T16926] team_slave_0: entered promiscuous mode [ 565.428067][T16926] team_slave_1: entered promiscuous mode [ 565.536842][T16923] team0: left promiscuous mode [ 565.605962][T16923] team_slave_0: left promiscuous mode [ 565.635653][T16923] team_slave_1: left promiscuous mode [ 567.657551][ T1070] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.793617][ T1070] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.883022][ T1070] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.918445][T15032] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 567.929142][T15032] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 567.938944][T15032] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 567.947805][T15032] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 567.956041][T15032] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 567.968337][T15032] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 568.191869][ T1070] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.550616][ T1070] bridge_slave_1: left allmulticast mode [ 568.561386][ T1070] bridge_slave_1: left promiscuous mode [ 568.596430][ T1070] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.647362][ T1070] bridge_slave_0: left allmulticast mode [ 568.668964][ T1070] bridge_slave_0: left promiscuous mode [ 568.691651][ T1070] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.000602][ T5153] Bluetooth: hci1: command tx timeout [ 570.181087][ T1070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.207712][ T1070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.248265][ T1070] bond0 (unregistering): Released all slaves [ 570.401050][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2152'. [ 570.466813][T16992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2155'. [ 570.482286][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2152'. [ 570.508439][T16974] chnl_net:caif_netlink_parms(): no params data found [ 572.029341][T17024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2160'. [ 572.079937][ T5153] Bluetooth: hci1: command tx timeout [ 572.208790][T16974] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.216166][T16974] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.241935][T16974] bridge_slave_0: entered allmulticast mode [ 572.253091][T16974] bridge_slave_0: entered promiscuous mode [ 572.416078][T16974] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.443363][T17034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2162'. [ 572.443842][T16974] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.524633][T16974] bridge_slave_1: entered allmulticast mode [ 572.561844][T16974] bridge_slave_1: entered promiscuous mode [ 572.869071][T16974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.950463][T16974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.070833][T17044] FAULT_INJECTION: forcing a failure. [ 573.070833][T17044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.202244][T17044] CPU: 0 UID: 0 PID: 17044 Comm: syz.5.2164 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 573.213083][T17044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 573.223181][T17044] Call Trace: [ 573.226487][T17044] [ 573.229443][T17044] dump_stack_lvl+0x16c/0x1f0 [ 573.234163][T17044] should_fail_ex+0x497/0x5b0 [ 573.238880][T17044] _copy_to_user+0x32/0xd0 [ 573.243344][T17044] simple_read_from_buffer+0xd0/0x160 [ 573.248767][T17044] proc_fail_nth_read+0x198/0x270 [ 573.253863][T17044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 573.259461][T17044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 573.265056][T17044] vfs_read+0x1df/0xbe0 [ 573.269284][T17044] ? __fget_files+0x23a/0x3f0 [ 573.273996][T17044] ? fdget_pos+0x24c/0x360 [ 573.278452][T17044] ? __pfx_lock_release+0x10/0x10 [ 573.283517][T17044] ? trace_lock_acquire+0x14a/0x1d0 [ 573.288758][T17044] ? __pfx_vfs_read+0x10/0x10 [ 573.293508][T17044] ? __pfx___mutex_lock+0x10/0x10 [ 573.298588][T17044] ? __fget_files+0x244/0x3f0 [ 573.303348][T17044] ksys_read+0x12f/0x260 [ 573.307627][T17044] ? __pfx_ksys_read+0x10/0x10 [ 573.312460][T17044] do_syscall_64+0xcd/0x250 [ 573.317008][T17044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.322963][T17044] RIP: 0033:0x7f420fd7d15c [ 573.327415][T17044] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 573.347070][T17044] RSP: 002b:00007f420e1d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 573.355529][T17044] RAX: ffffffffffffffda RBX: 00007f420ff36058 RCX: 00007f420fd7d15c [ 573.363545][T17044] RDX: 000000000000000f RSI: 00007f420e1d50a0 RDI: 0000000000000005 [ 573.372169][T17044] RBP: 00007f420e1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 573.380174][T17044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.388182][T17044] R13: 0000000000000000 R14: 00007f420ff36058 R15: 00007ffe8e545328 [ 573.396293][T17044] [ 573.451094][T16974] team0: Port device team_slave_0 added [ 573.826480][T16974] team0: Port device team_slave_1 added [ 574.153278][ T5153] Bluetooth: hci1: command tx timeout [ 574.332029][ T1070] hsr_slave_0: left promiscuous mode [ 574.344085][ T1070] hsr_slave_1: left promiscuous mode [ 574.360160][ T1070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.368127][ T1070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.400297][ T1070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.411335][ T1070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.471114][ T1070] veth1_macvtap: left promiscuous mode [ 574.494040][ T1070] veth0_macvtap: left promiscuous mode [ 574.513401][ T1070] veth1_vlan: left promiscuous mode [ 574.532317][ T1070] veth0_vlan: left promiscuous mode [ 575.353009][ T1070] team0 (unregistering): Port device team_slave_1 removed [ 575.404790][ T1070] team0 (unregistering): Port device team_slave_0 removed [ 575.906288][T16974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.913644][T16974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.940205][T16974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.975975][T16974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.982985][T16974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.009254][T16974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.122029][T16974] hsr_slave_0: entered promiscuous mode [ 576.146431][T16974] hsr_slave_1: entered promiscuous mode [ 576.171539][T16974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 576.194017][T16974] Cannot create hsr debugfs directory [ 576.239315][ T5153] Bluetooth: hci1: command tx timeout [ 577.639947][T16974] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 577.773600][T16974] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 577.797258][T16974] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 577.823309][T16974] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 578.094886][T16974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.121285][T16974] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.165710][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.172850][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.207404][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.214691][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.111371][T16974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.270125][T17173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2178'. [ 579.349230][T17160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2178'. [ 579.764901][T16974] veth0_vlan: entered promiscuous mode [ 579.801069][T16974] veth1_vlan: entered promiscuous mode [ 579.870821][T16974] veth0_macvtap: entered promiscuous mode [ 579.909545][T16974] veth1_macvtap: entered promiscuous mode [ 579.956190][T17202] can: request_module (can-proto-3) failed. [ 579.970616][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.020987][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.049960][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.087065][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.108197][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.133576][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.156617][T16974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.311264][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.343225][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.366616][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.403246][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.433572][T16974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.455828][T16974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.485108][T16974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.574464][T16974] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.599957][T16974] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.633653][T16974] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.653196][T16974] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.760899][ T1155] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.950615][ T1155] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.215340][ T1155] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.241844][T15032] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 581.273726][T15032] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 581.283216][T15032] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 581.291636][T15032] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 581.301260][T15032] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 581.309208][T15032] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 581.395321][ T1155] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.703984][ T6225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.711869][ T6225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.949578][ T1155] bridge_slave_1: left allmulticast mode [ 581.959220][ T1155] bridge_slave_1: left promiscuous mode [ 581.973470][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.990414][ T1155] bridge_slave_0: left allmulticast mode [ 581.999240][ T1155] bridge_slave_0: left promiscuous mode [ 582.005587][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.258766][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2191'. [ 582.814770][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.836507][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.848330][ T1155] bond0 (unregistering): Released all slaves [ 582.958677][ T6221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.974568][ T1155] .': left promiscuous mode [ 582.979828][ T6221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.353838][ T5153] Bluetooth: hci0: command tx timeout [ 583.914621][T17240] chnl_net:caif_netlink_parms(): no params data found [ 584.355032][T17310] netlink: 'syz.3.2200': attribute type 1 has an invalid length. [ 584.373303][T17310] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2200'. [ 584.388570][ T1155] hsr_slave_0: left promiscuous mode [ 584.391095][T17310] Invalid ELF header magic: != ELF [ 584.420062][ T1155] hsr_slave_1: left promiscuous mode [ 584.490540][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.514900][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.539567][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.567487][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.673979][ T1155] veth1_macvtap: left promiscuous mode [ 584.689807][ T1155] veth0_macvtap: left promiscuous mode [ 584.701972][ T1155] veth1_vlan: left promiscuous mode [ 584.723415][ T1155] veth0_vlan: left promiscuous mode [ 585.443286][ T5153] Bluetooth: hci0: command tx timeout [ 586.389204][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 586.492278][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 587.520250][ T5153] Bluetooth: hci0: command tx timeout [ 587.541486][T17362] netlink: 334 bytes leftover after parsing attributes in process `syz.6.2210'. [ 587.556860][T17317] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2199'. [ 587.572407][T17319] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2199'. [ 587.713821][T17240] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.720976][T17240] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.766180][T17240] bridge_slave_0: entered allmulticast mode [ 587.790032][T17240] bridge_slave_0: entered promiscuous mode [ 587.793328][T17369] RDS: rds_bind could not find a transport for ::ffff:100.97.116.97, load rds_tcp or rds_rdma? [ 587.813988][T17240] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.821222][T17240] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.858881][T17240] bridge_slave_1: entered allmulticast mode [ 587.869657][T17240] bridge_slave_1: entered promiscuous mode [ 588.034538][T17240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.073106][T17240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.097896][T17377] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2212'. [ 588.214356][T17240] team0: Port device team_slave_0 added [ 588.222980][T17240] team0: Port device team_slave_1 added [ 588.373911][T17240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.381224][T17240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.454304][T17240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.496893][T17240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.521446][T17240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.556933][T17240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.003988][T17240] hsr_slave_0: entered promiscuous mode [ 589.015562][T17240] hsr_slave_1: entered promiscuous mode [ 589.028076][T17240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.055800][T17240] Cannot create hsr debugfs directory [ 589.594839][ T5153] Bluetooth: hci0: command tx timeout [ 591.077554][T17240] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 591.173490][T17240] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 591.192085][T17240] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 591.222562][T17240] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 591.463045][T17240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.507955][T17240] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.535209][T12935] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.542360][T12935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.590320][T12935] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.597578][T12935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.044869][T17240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.702730][T17240] veth0_vlan: entered promiscuous mode [ 592.785381][T17240] veth1_vlan: entered promiscuous mode [ 592.865784][T17240] veth0_macvtap: entered promiscuous mode [ 592.924998][T17240] veth1_macvtap: entered promiscuous mode [ 592.997356][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.046941][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.073315][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.133359][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.161045][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.189253][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.225088][T17240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.257700][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.284587][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.323349][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.354589][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.378611][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.413185][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.444633][T17240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.486522][T17240] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.523263][T17240] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.535449][T17240] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.563363][T17240] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.881054][T12935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.900879][T12935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.964814][T12935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.972683][T12935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.692319][T17611] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2252'. [ 597.834468][T17649] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2259'. [ 598.680491][T17673] netlink: 'syz.1.2261': attribute type 6 has an invalid length. [ 598.741616][T17673] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2261'. [ 598.799152][T17677] netlink: 'syz.1.2261': attribute type 6 has an invalid length. [ 598.850459][T17677] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2261'. [ 600.966560][T17693] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 601.053300][T17693] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 601.199661][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 602.432379][T17734] netlink: 229 bytes leftover after parsing attributes in process `syz.5.2274'. [ 602.454809][T17719] Invalid ELF header magic: != ELF [ 604.163043][T17469] syz.3.2231 (17469) used greatest stack depth: 19968 bytes left [ 604.470062][T17750] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2277'. [ 604.783714][T17753] Process accounting resumed [ 617.393456][T17999] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2343'. [ 618.574838][T18034] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2352'. [ 618.603274][T18034] openvswitch: netlink: ufid size 88 bytes exceeds the range (1, 16) [ 618.611416][T18034] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 619.066179][T18043] nbd: must specify a size in bytes for the device [ 619.462956][T18057] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2359'. [ 622.597417][T18103] nbd: must specify at least one socket [ 623.181408][T18119] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2381'. [ 623.218024][T18121] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2381'. [ 623.333348][T18122] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2381'. [ 624.296473][T18152] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2387'. [ 624.511495][T18166] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2391'. [ 624.721706][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.728133][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.808130][ T1155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.902189][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 625.918079][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 625.931853][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 625.953331][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 625.973278][ T5153] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 625.989514][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 626.435562][ T1155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.991952][ T1155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.528088][ T1155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.603610][T18226] ptrace attach of "./syz-executor exec"[12493] was attempted by "./syz-executor exec"[18226] [ 627.782935][T18193] chnl_net:caif_netlink_parms(): no params data found [ 628.073452][T15032] Bluetooth: hci2: command tx timeout [ 628.213729][T18193] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.220878][T18193] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.240016][T18193] bridge_slave_0: entered allmulticast mode [ 628.254670][T18193] bridge_slave_0: entered promiscuous mode [ 628.279079][T18193] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.306129][T18193] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.353409][T18193] bridge_slave_1: entered allmulticast mode [ 628.360555][T18193] bridge_slave_1: entered promiscuous mode [ 628.433423][ T1155] bridge_slave_1: left allmulticast mode [ 628.439229][ T1155] bridge_slave_1: left promiscuous mode [ 628.469387][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.498264][ T1155] bridge_slave_0: left allmulticast mode [ 628.518609][ T1155] bridge_slave_0: left promiscuous mode [ 628.537042][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.153964][T15032] Bluetooth: hci2: command tx timeout [ 630.424508][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.503752][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.577279][ T1155] bond0 (unregistering): Released all slaves [ 630.665542][T18193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.721200][T18193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.930944][T18193] team0: Port device team_slave_0 added [ 631.124726][T18193] team0: Port device team_slave_1 added [ 631.537857][T18193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.554141][T18193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.613355][T18193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.715655][T18193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.722666][T18193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.786669][T18193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.858396][ T1155] hsr_slave_0: left promiscuous mode [ 631.869219][ T1155] hsr_slave_1: left promiscuous mode [ 631.875494][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.899540][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.927393][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.935871][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.976793][ T1155] veth1_macvtap: left promiscuous mode [ 631.982384][ T1155] veth0_macvtap: left promiscuous mode [ 631.992020][T18291] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2418'. [ 632.003422][ T1155] veth1_vlan: left promiscuous mode [ 632.019015][ T1155] veth0_vlan: left promiscuous mode [ 632.233476][T15032] Bluetooth: hci2: command tx timeout [ 633.304096][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 633.449584][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 634.313381][T15032] Bluetooth: hci2: command tx timeout [ 634.321697][T18193] hsr_slave_0: entered promiscuous mode [ 634.338640][T18193] hsr_slave_1: entered promiscuous mode [ 634.345244][T18193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 634.352975][T18193] Cannot create hsr debugfs directory [ 634.359302][T18291] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2418'. [ 636.772786][T18193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 636.825702][T18193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 636.846980][T18193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 636.876285][T18193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 637.109697][T18193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.166963][T18193] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.195218][T18359] delete_channel: no stack [ 637.207896][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.215095][ T6221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.263660][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.270818][ T6221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.447643][T18193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 637.739364][T18193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.812813][T18193] veth0_vlan: entered promiscuous mode [ 637.858443][T18193] veth1_vlan: entered promiscuous mode [ 637.929486][T18193] veth0_macvtap: entered promiscuous mode [ 637.978245][T18193] veth1_macvtap: entered promiscuous mode [ 638.012779][T18193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.028943][T18193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.047314][T18193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.071612][T18193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.099974][T18193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.118920][T18193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.164315][T18193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.193381][T18193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.209261][T18193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.221001][T18193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.237918][T18193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.267069][T18193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.281919][T18193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.301568][T18193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.339981][T18193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.369009][T18193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.392551][T18193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.405684][T18193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.631390][ T6213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.683256][ T6213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.761845][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.792247][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.296178][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.157083][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.343843][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 642.355353][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 642.363657][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 642.372972][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 642.382794][ T5153] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 642.392751][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 642.800694][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.218303][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.829860][T18504] chnl_net:caif_netlink_parms(): no params data found [ 643.888487][ T11] bridge_slave_1: left allmulticast mode [ 643.907373][ T11] bridge_slave_1: left promiscuous mode [ 643.948458][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.151698][ T11] bridge_slave_0: left allmulticast mode [ 644.202233][ T11] bridge_slave_0: left promiscuous mode [ 644.227581][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.473442][ T5153] Bluetooth: hci2: command tx timeout [ 646.553243][ T5153] Bluetooth: hci2: command tx timeout [ 648.633337][ T5153] Bluetooth: hci2: command tx timeout [ 650.713349][ T5153] Bluetooth: hci2: command tx timeout [ 651.901954][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.985946][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.065621][ T11] bond0 (unregistering): Released all slaves [ 652.254228][T18572] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 652.299924][T18572] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 652.401799][T18592] nfsd: Unknown parameter 'i ]*' [ 653.132801][T18504] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.143365][T18504] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.163337][T18504] bridge_slave_0: entered allmulticast mode [ 653.188671][T18504] bridge_slave_0: entered promiscuous mode [ 653.269701][ T11] hsr_slave_0: left promiscuous mode [ 653.284006][ T11] hsr_slave_1: left promiscuous mode [ 653.334621][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.352317][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.382203][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.391359][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.441714][ T11] veth1_macvtap: left promiscuous mode [ 653.452292][ T11] veth0_macvtap: left promiscuous mode [ 653.462612][ T11] veth1_vlan: left promiscuous mode [ 653.472573][ T11] veth0_vlan: left promiscuous mode [ 654.405026][T18613] svc: failed to register nfsdv3 RPC service (errno 111). [ 654.447046][T18613] svc: failed to register nfsaclv3 RPC service (errno 111). [ 654.928811][ T11] team0 (unregistering): Port device team_slave_1 removed [ 655.018201][ T11] team0 (unregistering): Port device team_slave_0 removed [ 656.125453][T18504] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.141852][T18504] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.149642][T18504] bridge_slave_1: entered allmulticast mode [ 656.179406][T18504] bridge_slave_1: entered promiscuous mode [ 656.360519][T18504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.414245][T18504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.637085][T18504] team0: Port device team_slave_0 added [ 656.649983][T18504] team0: Port device team_slave_1 added [ 656.765225][T18504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.772213][T18504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.855511][T18504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.905788][T18504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.912793][T18504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.953619][T18504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.152523][T18504] hsr_slave_0: entered promiscuous mode [ 657.170356][T18504] hsr_slave_1: entered promiscuous mode [ 657.202960][T18504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.227539][T18504] Cannot create hsr debugfs directory [ 659.927734][T18504] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 659.966009][T18504] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 660.108574][T18504] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 660.164674][T18504] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 661.117401][T18504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.312093][T18504] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.363895][T12935] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.371059][T12935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.480618][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.487829][ T6213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.015966][T18504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.036001][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2498'. [ 662.138550][T18504] veth0_vlan: entered promiscuous mode [ 662.185424][T18504] veth1_vlan: entered promiscuous mode [ 662.295275][T18504] veth0_macvtap: entered promiscuous mode [ 662.320907][T18504] veth1_macvtap: entered promiscuous mode [ 662.370762][T18504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.400874][T18504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.423663][T18504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.443262][T18504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.457770][T18504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.476095][T18504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.510451][T18504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.594732][T18504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.609061][T18504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.630305][T18504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.646546][T18504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.660509][T18799] ptrace attach of "./syz-executor exec"[16974] was attempted by "xȹck;\x0a\x075\x1b=?u?>ˤA)ט.8mW,'uum2\x0c\x0crwjd4rGg-sU5>ݢQS:\x22Kb>T4T*{˾\x0d\x223nʯht_뀛\x0aiA /V[Mb`4Sd/`!۪`9r4lGf\x0d[)a\x07GT9Eګ?!> T4Bn^6O=O9lyEnfq:ŀ3@uQ!@+\x0d\x07d\x0cmh\x07\x0a(%!$أ7xթ>m݁lfJU=\x1bef=Ҽ`LY5zKo\x07t\x5c/2q?¡ިZE6^BQ&l !\x0d.lq&j\x0a޿SZsɒgyBfp}+s{C|Z4b)W@AZqH+vWXn\x07`=aߖC#C'Sھ`g\x07ӨV\x09_LZ\x1bJLz0ms#w\x0d҃I\x0b‹'G̓@cwoUrB&A]K@o&\x22axhUK2:[ uQ\x0a#6ըP ?ۻdDi'IM9 [ 662.663245][T18504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.838062][T18504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.864303][T18504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.909208][T18504] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.943296][T18504] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.952065][T18504] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.968668][T18504] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.233469][ T6225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.253302][T18828] ptrace attach of "./syz-executor exec"[16974] was attempted by "͈v)J/cd9b\x07u\x22iv勅qL2uM֒\x0aқ#Fs| ưtcfi05 /NgDM:oYŃ&i\x1b +''nؿs2sUѢJT*Z-cA9N\x0aD~Zho'E~`uJ#)|hƌf~5J}+Su'qJTiAGSL~_LU! *9,&5V.u(B]Xh,heuoeP\x07?@T>w$2[!VTDe}Oф:f5}1SΕj<лgfEgF͚})%\x0b#xl(40]Xdi+Z,V.\x0ago\x09*⦜ߑwg`LynJ}٢2u:ڤ'SN#:ӕFܧ2󱯋WœfpM+;gx%Je&iL?GeܰںY)=S=Bi$ǺxFǹknC9L'ꩉGlRz(o/>RᏝBNt\x09e>\x09,ݞ'\x0a\x09T\x22R&Z{SRؿ<y XzB\x0bftf@ͧ]Lj`ƲdS3W9w`,,B#4?$86|,W%^SlqJy^\x079QMi8mj\x0bK|/|m!9:1Ξ\x07,OpJ j@_gv\x5c&8K>k8=\x0aUE1LgEKnZ9kpl.Oe^cs)WB\x0a<M@ȞSb|QKDi3ʐ(m [ 663.263237][ T6225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.591484][T18837] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2505'. [ 663.678618][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.696098][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.759846][T18845] netlink: 'syz.3.2505': attribute type 7 has an invalid length. [ 663.793666][T18837] netlink: 'syz.3.2505': attribute type 7 has an invalid length. [ 664.074680][T18837] .': entered promiscuous mode [ 665.173771][T18888] netlink: 'syz.5.2512': attribute type 11 has an invalid length. [ 665.191642][T18888] netlink: 'syz.5.2512': attribute type 11 has an invalid length. [ 666.035591][T18910] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2516'. [ 666.064580][T18910] netlink: 'syz.5.2516': attribute type 11 has an invalid length. [ 666.675899][ T29] audit: type=1326 audit(4294967319.740:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18924 comm="syz.5.2519" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbedb37e719 code=0x0 [ 671.447393][ T29] audit: type=1326 audit(4294967324.510:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.1.2532" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2ffd7e719 code=0x0 [ 672.493563][T18991] nbd: must specify at least one socket [ 673.274741][T19004] nbd: must specify at least one socket [ 674.301265][ T6224] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.566980][ T6224] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.748085][ T6224] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.948914][ T6224] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.992970][T15032] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 675.008024][T15032] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 675.017254][T15032] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 675.025409][T15032] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 675.033065][T15032] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 675.040514][T15032] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 675.550117][ T6224] bridge_slave_1: left allmulticast mode [ 675.563225][ T6224] bridge_slave_1: left promiscuous mode [ 675.584319][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.634729][ T6224] bridge_slave_0: left allmulticast mode [ 675.646290][ T6224] bridge_slave_0: left promiscuous mode [ 675.671503][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.355130][ T6224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.367137][ T6224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.379161][ T6224] bond0 (unregistering): Released all slaves [ 676.486955][ T6224] )zV: left promiscuous mode [ 676.574550][T19038] chnl_net:caif_netlink_parms(): no params data found [ 676.620520][ T6224] HfR: left promiscuous mode [ 676.685652][T19092] ptrace attach of "./syz-executor exec"[16974] was attempted by "./syz-executor exec"[19092] [ 676.734372][T19092] netlink: zone id is out of range [ 676.739625][T19092] netlink: zone id is out of range [ 676.752317][ T6224] .': left promiscuous mode [ 676.762104][T19092] netlink: zone id is out of range [ 676.775676][T19092] netlink: zone id is out of range [ 676.806104][T19092] netlink: zone id is out of range [ 676.811360][T19092] netlink: zone id is out of range [ 676.840680][T19092] netlink: zone id is out of range [ 676.846907][T19092] netlink: zone id is out of range [ 676.854394][T19092] netlink: zone id is out of range [ 676.864523][T19038] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.871684][T19038] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.879323][T19092] netlink: zone id is out of range [ 676.903840][T19038] bridge_slave_0: entered allmulticast mode [ 676.924954][T19038] bridge_slave_0: entered promiscuous mode [ 677.022464][T19038] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.042681][T19038] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.060720][T19038] bridge_slave_1: entered allmulticast mode [ 677.074485][T19038] bridge_slave_1: entered promiscuous mode [ 677.113240][T15032] Bluetooth: hci3: command tx timeout [ 677.376914][T19038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.416576][T19038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.813929][T19038] team0: Port device team_slave_0 added [ 677.941665][T19038] team0: Port device team_slave_1 added [ 678.101169][T19038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.142502][T19038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.209726][T19038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.267007][T19038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.289976][T19038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.332435][T19038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.470330][T19141] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2563'. [ 678.500000][T19141] veth0_macvtap: entered allmulticast mode [ 678.880251][T19038] hsr_slave_0: entered promiscuous mode [ 678.900017][T19038] hsr_slave_1: entered promiscuous mode [ 678.923565][T19038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 678.931176][T19038] Cannot create hsr debugfs directory [ 679.193204][T15032] Bluetooth: hci3: command tx timeout [ 679.304452][ T6224] hsr_slave_0: left promiscuous mode [ 679.334196][ T6224] hsr_slave_1: left promiscuous mode [ 679.340419][ T6224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.353190][ T6224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.376131][ T6224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.391760][ T6224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.441921][ T6224] veth1_macvtap: left promiscuous mode [ 679.466923][ T6224] veth0_macvtap: left promiscuous mode [ 679.472600][ T6224] veth1_vlan: left promiscuous mode [ 679.508500][ T6224] veth0_vlan: left promiscuous mode [ 680.885221][ T6224] team_slave_1 (unregistering): left promiscuous mode [ 680.907869][ T6224] team0 (unregistering): Port device team_slave_1 removed [ 680.994646][ T6224] team_slave_0 (unregistering): left promiscuous mode [ 681.006119][ T6224] team0 (unregistering): Port device team_slave_0 removed [ 681.279619][T15032] Bluetooth: hci3: command tx timeout [ 683.356157][T15032] Bluetooth: hci3: command tx timeout [ 683.887130][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 683.895975][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 683.911987][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 683.932142][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 683.954948][ T5153] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 683.963525][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 684.678694][ T6224] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.901304][ T6224] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.955117][T19038] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 684.971808][T19218] chnl_net:caif_netlink_parms(): no params data found [ 685.022416][T19038] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 685.105672][ T6224] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.146804][T19038] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 685.157508][T19038] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 685.296100][ T6224] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.619069][T19218] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.644809][T19218] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.672405][T19218] bridge_slave_0: entered allmulticast mode [ 685.679946][T19218] bridge_slave_0: entered promiscuous mode [ 685.696257][T19218] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.707549][T19218] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.716946][T19218] bridge_slave_1: entered allmulticast mode [ 685.724702][T19218] bridge_slave_1: entered promiscuous mode [ 685.829728][ T6224] bridge_slave_1: left allmulticast mode [ 685.840564][ T6224] bridge_slave_1: left promiscuous mode [ 685.857967][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.904275][ T6224] bridge_slave_0: left allmulticast mode [ 685.913728][ T6224] bridge_slave_0: left promiscuous mode [ 685.919512][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.994294][T15032] Bluetooth: hci1: command tx timeout [ 686.157337][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.164238][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.173969][ T6224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.178262][T19294] CIFS mount error: No usable UNC path provided in device string! [ 687.178262][T19294] [ 687.212395][ T6224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.233858][ T6224] bond0 (unregistering): Released all slaves [ 687.240534][T19294] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 687.266448][T19218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.334879][T19293] can: request_module (can-proto-5) failed. [ 687.353936][T19218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.485871][T19218] team0: Port device team_slave_0 added [ 687.510378][T19218] team0: Port device team_slave_1 added [ 687.734639][T19218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.741647][T19218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.780757][T19218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.794686][T19218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.801666][T19218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.835920][T19218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.023715][T19038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.073388][T15032] Bluetooth: hci1: command tx timeout [ 688.233584][T19218] hsr_slave_0: entered promiscuous mode [ 688.257377][T19218] hsr_slave_1: entered promiscuous mode [ 688.265554][T19320] netlink: 'syz.5.2586': attribute type 11 has an invalid length. [ 688.282051][T19038] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.606607][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.613813][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.673243][ T6224] hsr_slave_0: left promiscuous mode [ 688.693473][ T6224] hsr_slave_1: left promiscuous mode [ 688.733278][ T6224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.746544][ T6224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.781804][ T6224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.789432][ T6224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.822832][ T6224] veth1_macvtap: left promiscuous mode [ 688.843774][ T6224] veth1_vlan: left promiscuous mode [ 688.849128][ T6224] veth0_vlan: left promiscuous mode [ 690.169132][T15032] Bluetooth: hci1: command tx timeout [ 690.427259][ T6224] team0 (unregistering): Port device team_slave_1 removed [ 690.562034][ T6224] team0 (unregistering): Port device team_slave_0 removed [ 691.261583][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.268764][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.793887][T19038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 692.214112][T19038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.233766][T15032] Bluetooth: hci1: command tx timeout [ 692.261197][T19218] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 692.278891][T19218] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 692.311530][T19218] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 692.374992][T19218] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 692.435040][T19038] veth0_vlan: entered promiscuous mode [ 692.460925][T19038] veth1_vlan: entered promiscuous mode [ 692.540113][T19218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.561234][T19218] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.576389][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.583564][ T6221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.606095][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.613297][ T6221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.670652][T19038] veth0_macvtap: entered promiscuous mode [ 692.736128][T19038] veth1_macvtap: entered promiscuous mode [ 692.822908][T19038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.863298][T19038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.873942][T19038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.884990][T19038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.902425][T19038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.919145][T19038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.939785][T19038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.952195][T19038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.967719][T19038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.980421][T19038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.057966][T19038] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.087167][T19038] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.130014][T19038] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.143311][T19038] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.552764][T19218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.593818][T12928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.595094][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.609689][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.614709][T12928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.776862][T19419] netlink: 229 bytes leftover after parsing attributes in process `syz.1.2602'. [ 694.029913][T19218] veth0_vlan: entered promiscuous mode [ 694.042243][T19218] veth1_vlan: entered promiscuous mode [ 694.072298][T19218] veth0_macvtap: entered promiscuous mode [ 694.082008][T19218] veth1_macvtap: entered promiscuous mode [ 694.113468][T19218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.140686][T19218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.151290][T19218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.174891][T19218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.196006][T19218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.219904][T19218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.241869][T19218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.255566][T19218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.266293][T19218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.276756][T19218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.315250][T19218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.335258][T19218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.375364][T19218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.405171][T19218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.470211][T19218] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.493298][T19218] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.502060][T19218] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.518903][T19218] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.720910][T12928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.745549][T12928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.807406][ T6225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.853258][ T6225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.224396][T19485] bridge0: port 3(syz_tun) entered blocking state [ 696.232007][T19485] bridge0: port 3(syz_tun) entered disabled state [ 696.253657][T19485] syz_tun: entered allmulticast mode [ 696.260694][T19485] syz_tun: entered promiscuous mode [ 696.311798][T19485] bridge0: port 3(syz_tun) entered blocking state [ 696.318802][T19485] bridge0: port 3(syz_tun) entered forwarding state [ 696.420979][T19484] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2616'. [ 699.416195][T19570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2638'. [ 699.967065][T19583] netlink: 'syz.3.2641': attribute type 282 has an invalid length. [ 701.236898][ T3558] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.594522][T13143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 701.611204][T13143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 701.619915][T13143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 701.635067][T13143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 701.645567][T13143] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 701.653260][T13143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 701.767177][ T3558] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.018412][ T3558] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.216233][ T3558] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.667986][ T3558] bridge_slave_1: left allmulticast mode [ 702.685197][ T3558] bridge_slave_1: left promiscuous mode [ 702.695828][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.739440][ T3558] bridge_slave_0: left allmulticast mode [ 702.747777][ T3558] bridge_slave_0: left promiscuous mode [ 702.776974][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.593505][ T5153] Bluetooth: hci0: command 0x0406 tx timeout [ 703.753442][T15032] Bluetooth: hci3: command tx timeout [ 703.892401][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.936354][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.965349][ T3558] bond0 (unregistering): Released all slaves [ 703.990966][T19641] chnl_net:caif_netlink_parms(): no params data found [ 704.260676][T19684] HSR: entered promiscuous mode [ 704.552887][T19641] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.574933][T19641] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.582209][T19641] bridge_slave_0: entered allmulticast mode [ 704.600608][T19641] bridge_slave_0: entered promiscuous mode [ 704.639133][T19641] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.658890][T19641] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.668219][T19641] bridge_slave_1: entered allmulticast mode [ 704.683265][T19641] bridge_slave_1: entered promiscuous mode [ 704.986283][T19641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.031087][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 705.045278][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 705.056047][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 705.065905][T19641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.082742][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 705.090451][ T5153] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 705.098398][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 705.126087][ T3558] hsr_slave_0: left promiscuous mode [ 705.155546][ T3558] hsr_slave_1: left promiscuous mode [ 705.182024][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.212393][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.224686][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.232246][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.309998][ T3558] veth1_macvtap: left promiscuous mode [ 705.319942][ T3558] veth0_macvtap: left promiscuous mode [ 705.333291][ T3558] veth1_vlan: left promiscuous mode [ 705.338643][ T3558] veth0_vlan: left promiscuous mode [ 705.839234][T15032] Bluetooth: hci3: command tx timeout [ 706.778883][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 706.878862][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 707.201696][T15032] Bluetooth: hci0: command tx timeout [ 707.914927][T15032] Bluetooth: hci3: command tx timeout [ 708.472370][T19641] team0: Port device team_slave_0 added [ 708.485539][T19641] team0: Port device team_slave_1 added [ 708.578133][T19641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.603906][T19641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.658185][T19641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.695281][T19641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.702785][T19641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.799204][T19641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.960531][T19641] hsr_slave_0: entered promiscuous mode [ 708.989667][T19641] hsr_slave_1: entered promiscuous mode [ 709.014546][T19641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 709.022166][T19641] Cannot create hsr debugfs directory [ 709.273505][T15032] Bluetooth: hci0: command tx timeout [ 709.690993][ T3558] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.820443][ T3558] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.994214][T15032] Bluetooth: hci3: command tx timeout [ 710.002706][ T3558] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.194379][T19710] chnl_net:caif_netlink_parms(): no params data found [ 710.270570][ T3558] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.400163][T19810] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2688'. [ 710.587891][T19710] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.609279][T19710] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.634723][T19710] bridge_slave_0: entered allmulticast mode [ 710.650789][T19710] bridge_slave_0: entered promiscuous mode [ 710.878652][T19710] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.899028][T19710] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.919203][T19710] bridge_slave_1: entered allmulticast mode [ 710.929807][T19710] bridge_slave_1: entered promiscuous mode [ 711.005554][T19710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.100314][T19710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.149262][ T3558] bridge_slave_1: left allmulticast mode [ 711.166441][ T3558] bridge_slave_1: left promiscuous mode [ 711.172226][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.216341][ T3558] bridge_slave_0: left allmulticast mode [ 711.222060][ T3558] bridge_slave_0: left promiscuous mode [ 711.229381][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.353491][T15032] Bluetooth: hci0: command tx timeout [ 712.046336][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.079322][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.125598][ T3558] bond0 (unregistering): Released all slaves [ 712.205375][T19710] team0: Port device team_slave_0 added [ 712.394302][T19710] team0: Port device team_slave_1 added [ 712.480054][T19710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.503067][T19710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.558763][T19710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.574780][T19710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.581777][T19710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.608055][T19710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.690453][T19641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 712.701699][T19641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 712.722182][T19641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 712.824436][T19710] hsr_slave_0: entered promiscuous mode [ 712.879367][T19710] hsr_slave_1: entered promiscuous mode [ 712.904434][T19710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 712.921050][T19710] Cannot create hsr debugfs directory [ 712.929372][T19641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 713.432721][T15032] Bluetooth: hci0: command tx timeout [ 714.615362][ T3558] hsr_slave_0: left promiscuous mode [ 714.625555][ T3558] hsr_slave_1: left promiscuous mode [ 714.668427][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.686432][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.709129][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.734874][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.762096][ T3558] veth1_macvtap: left promiscuous mode [ 714.778042][ T3558] veth0_macvtap: left promiscuous mode [ 714.783847][ T3558] veth1_vlan: left promiscuous mode [ 714.792785][ T3558] veth0_vlan: left promiscuous mode [ 716.413289][ T3558] team0 (unregistering): Port device team_slave_1 removed [ 716.535726][ T3558] team0 (unregistering): Port device team_slave_0 removed [ 716.835813][T19916] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2704'. [ 717.083878][T19917] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2704'. [ 717.140849][T19917] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2704'. [ 717.182529][T19917] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2704'. [ 717.191976][T19917] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2704'. [ 717.996365][ T29] audit: type=1804 audit(4294967313.291:61): pid=19923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2706" name="#)-\&[}" dev="mqueue" ino=77733 res=1 errno=0 [ 717.996370][T19923] kernel read not supported for file /#)-\&[} (pid: 19923 comm: syz.6.2706) [ 718.051539][ T29] audit: type=1800 audit(4294967313.341:62): pid=19923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2706" name="#)-\&[}" dev="mqueue" ino=77733 res=0 errno=0 [ 718.140278][T19641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.244862][T19641] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.381420][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.388627][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.443852][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.450996][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.600518][T19710] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 718.723157][T19710] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 718.747021][T19710] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 718.970709][T19710] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 719.281371][T19710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.367852][T19710] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.428060][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.435294][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.463265][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.470412][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.537754][T19641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.707530][T19641] veth0_vlan: entered promiscuous mode [ 719.744656][T19641] veth1_vlan: entered promiscuous mode [ 719.815031][T19641] veth0_macvtap: entered promiscuous mode [ 719.855384][T19641] veth1_macvtap: entered promiscuous mode [ 719.955160][T19641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.985098][T19641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.022100][T19641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.050068][T19641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.076047][T19641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.155031][T19641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.166609][T19641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.177327][T19641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.188387][T19641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.200854][T19641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.269049][T19641] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.285157][T19641] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.321846][T19641] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.330627][T19641] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.414539][T19710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.692349][ T6225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.728446][ T6225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.847661][ T6214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.872093][ T6214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.015026][T19998] raw_sendmsg: syz.1.2714 forgot to set AF_INET. Fix it! [ 721.112204][T19710] veth0_vlan: entered promiscuous mode [ 721.149565][T19710] veth1_vlan: entered promiscuous mode [ 721.221266][T19710] veth0_macvtap: entered promiscuous mode [ 721.240822][T19710] veth1_macvtap: entered promiscuous mode [ 721.289901][T19710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.304513][T19710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.316496][T19710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.330992][T19710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.376091][T19710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.412754][T19710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.448590][T19710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.497181][T19710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.533198][T19710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.557525][T19710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.590151][T19710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.616474][T19710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.641710][T19710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.673130][T19710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.717949][T19710] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.742354][T19710] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.759554][T19710] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.777679][T19710] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.622990][ T6213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.630897][ T6213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.746649][ T6225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.760865][ T6225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.085483][T20080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2724'. [ 723.179534][T20080] HfR: entered promiscuous mode [ 724.321607][T20132] nfsd: Unknown parameter 'IPVS' [ 726.998475][T20237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2757'. [ 728.151522][T20263] Invalid ELF header magic: != ELF [ 730.652435][T20346] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2786'. [ 730.731921][T20348] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2786'. [ 732.420713][T20380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.402192][T20582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2842'. [ 743.227319][T20629] kernel read not supported for file /#)-\&[} (pid: 20629 comm: syz.3.2852) [ 743.238931][ T29] audit: type=1804 audit(4294967338.514:63): pid=20629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2852" name="#)-\&[}" dev="mqueue" ino=81223 res=1 errno=0 [ 743.285956][ T29] audit: type=1800 audit(4294967338.574:64): pid=20629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2852" name="#)-\&[}" dev="mqueue" ino=81223 res=0 errno=0 [ 743.534912][T20638] TCP: TCP_TX_DELAY enabled [ 743.612892][T20638] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 743.645973][T20638] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 743.736343][T20642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2857'. [ 743.864749][ T29] audit: type=1804 audit(4294967339.144:65): pid=20626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2852" name="#)-\&[}" dev="mqueue" ino=81223 res=1 errno=0 [ 743.891167][ T29] audit: type=1804 audit(4294967339.144:66): pid=20626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2852" name="#)-\&[}" dev="mqueue" ino=81223 res=1 errno=0 [ 745.628218][ T29] audit: type=1326 audit(4294967340.914:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20704 comm="syz.6.2874" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d0457e719 code=0x0 [ 745.840341][ T29] audit: type=1326 audit(4294967341.134:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20704 comm="syz.6.2874" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d0457e719 code=0x0 [ 747.091646][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2884'. [ 747.115407][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2884'. [ 747.138989][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2884'. [ 747.163776][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2884'. [ 747.228844][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2884'. [ 747.256888][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2884'. [ 747.289551][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2884'. [ 747.346844][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2884'. [ 747.599992][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.606366][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.716617][T20766] bridge0: port 3(syz_tun) entered blocking state [ 747.726148][T20766] bridge0: port 3(syz_tun) entered disabled state [ 747.766064][T20766] syz_tun: entered allmulticast mode [ 747.825873][T20766] syz_tun: entered promiscuous mode [ 747.892589][T20766] bridge0: port 3(syz_tun) entered blocking state [ 747.899216][T20766] bridge0: port 3(syz_tun) entered forwarding state [ 748.774820][T20794] HfR: entered promiscuous mode [ 750.802739][T20856] netlink: 'syz.5.2910': attribute type 1 has an invalid length. [ 750.822096][T20856] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2910'. [ 750.844889][T20859] netlink: 'syz.3.2911': attribute type 11 has an invalid length. [ 752.429148][T20891] FAULT_INJECTION: forcing a failure. [ 752.429148][T20891] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 752.477896][T20891] CPU: 0 UID: 0 PID: 20891 Comm: syz.3.2919 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 752.488730][T20891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 752.498826][T20891] Call Trace: [ 752.502129][T20891] [ 752.505083][T20891] dump_stack_lvl+0x16c/0x1f0 [ 752.509813][T20891] should_fail_ex+0x497/0x5b0 [ 752.514525][T20891] ? fs_reclaim_acquire+0xae/0x150 [ 752.519703][T20891] should_fail_alloc_page+0xe7/0x130 [ 752.525032][T20891] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 752.531222][T20891] ? __pfx_mark_lock+0x10/0x10 [ 752.536036][T20891] ? find_held_lock+0x2d/0x110 [ 752.540830][T20891] __alloc_pages_noprof+0x190/0x25a0 [ 752.546131][T20891] ? is_bpf_text_address+0x8a/0x1a0 [ 752.551335][T20891] ? __pfx_lock_release+0x10/0x10 [ 752.556378][T20891] ? __pfx_mark_lock+0x10/0x10 [ 752.561162][T20891] ? hlock_class+0x4e/0x130 [ 752.565669][T20891] ? mark_lock+0xb5/0xc60 [ 752.570005][T20891] ? __lock_acquire+0xbdd/0x3ce0 [ 752.574967][T20891] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 752.580700][T20891] ? __lock_acquire+0x163e/0x3ce0 [ 752.585759][T20891] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 752.591697][T20891] ? policy_nodemask+0xea/0x4e0 [ 752.596574][T20891] alloc_pages_mpol_noprof+0x2c9/0x610 [ 752.602084][T20891] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 752.608096][T20891] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 752.613755][T20891] folio_alloc_mpol_noprof+0x36/0xd0 [ 752.619058][T20891] vma_alloc_folio_noprof+0xee/0x1b0 [ 752.624350][T20891] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 752.630247][T20891] ? find_held_lock+0x2d/0x110 [ 752.635026][T20891] do_pte_missing+0x202d/0x3e70 [ 752.639892][T20891] ? lock_vma_under_rcu+0x13e/0x980 [ 752.645110][T20891] __handle_mm_fault+0x100a/0x2a10 [ 752.650240][T20891] ? __pfx_lock_release+0x10/0x10 [ 752.655272][T20891] ? lock_vma_under_rcu+0x13e/0x980 [ 752.660578][T20891] ? __pfx___handle_mm_fault+0x10/0x10 [ 752.666071][T20891] handle_mm_fault+0x3fa/0xaa0 [ 752.670855][T20891] do_user_addr_fault+0x60d/0x13f0 [ 752.675990][T20891] exc_page_fault+0x5c/0xc0 [ 752.680506][T20891] asm_exc_page_fault+0x26/0x30 [ 752.685389][T20891] RIP: 0033:0x7f4a07e4942b [ 752.689833][T20891] Code: 00 00 00 48 8d 3d 05 38 19 00 48 89 c1 31 c0 e8 9b 5a ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 39 38 19 00 48 89 34 24 48 8b 14 24 48 8b [ 752.709462][T20891] RSP: 002b:00007f4a08e18fb0 EFLAGS: 00010202 [ 752.715541][T20891] RAX: 0000000000000000 RBX: 00007f4a08135f80 RCX: 0000000000000000 [ 752.723523][T20891] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 752.731497][T20891] RBP: 00007f4a08e1a090 R08: 0000000000000000 R09: 0000000000000000 [ 752.739494][T20891] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 752.747490][T20891] R13: 0000000000000000 R14: 00007f4a08135f80 R15: 00007ffd115f3b18 [ 752.755508][T20891] [ 752.771013][T20891] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 752.854468][T20899] net_ratelimit: 8 callbacks suppressed [ 752.854490][T20899] netlink: get zone limit has 4 unknown bytes [ 757.758033][T20950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2931'. [ 757.845636][T20952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2931'. [ 758.548969][T20968] Invalid ELF header magic: != ELF [ 760.636076][T21063] svc: failed to register nfsdv3 RPC service (errno 111). [ 760.696494][T21063] svc: failed to register nfsaclv3 RPC service (errno 111). [ 761.169216][ T29] audit: type=1326 audit(4294967356.466:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21080 comm="syz.3.2960" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a07f7e719 code=0x0 [ 761.727161][T21104] svc: failed to register nfsdv3 RPC service (errno 111). [ 761.753036][T21104] svc: failed to register nfsaclv3 RPC service (errno 111). [ 762.325664][T21107] netlink: 'syz.5.2966': attribute type 11 has an invalid length. [ 762.334103][T21107] netlink: 'syz.5.2966': attribute type 11 has an invalid length. [ 762.984594][T21011] bridge0: port 3(syz_tun) entered disabled state [ 763.032109][T21011] syz_tun (unregistering): left allmulticast mode [ 763.041972][T21011] syz_tun (unregistering): left promiscuous mode [ 763.049001][T21011] bridge0: port 3(syz_tun) entered disabled state [ 763.481169][T21162] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2976'. [ 763.554519][T21162] svc: failed to register nfsdv3 RPC service (errno 111). [ 763.571802][T21162] svc: failed to register nfsaclv3 RPC service (errno 111). [ 763.918943][T21136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.081316][T21136] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.282680][T21136] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.448691][T21136] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.609246][T21183] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 764.620848][T15032] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 764.634282][T15032] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 764.645455][T15032] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 764.646064][T21183] svc: failed to register nfsdv3 RPC service (errno 111). [ 764.672667][T15032] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 764.687938][T15032] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 764.695586][T15032] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 764.729584][T21183] svc: failed to register nfsaclv3 RPC service (errno 111). [ 764.844796][T21136] bridge_slave_1: left allmulticast mode [ 764.850879][T21136] bridge_slave_1: left promiscuous mode [ 764.861578][T21136] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.874852][T21136] bridge_slave_0: left allmulticast mode [ 764.888386][T21136] bridge_slave_0: left promiscuous mode [ 764.900686][T21136] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.841657][T21136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.897514][T21136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.929131][T21136] bond0 (unregistering): Released all slaves [ 766.126348][T21136] HSR: left promiscuous mode [ 766.237264][T21136] HfR: left promiscuous mode [ 766.712510][T21228] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 766.775399][T21228] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 766.786930][ T5153] Bluetooth: hci2: command tx timeout [ 767.036047][T21187] chnl_net:caif_netlink_parms(): no params data found [ 767.256810][T21136] hsr_slave_0: left promiscuous mode [ 767.264655][T21136] hsr_slave_1: left promiscuous mode [ 767.356115][T21136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.364516][T21136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.395208][T21136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.426480][T21136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.485965][T21255] GUP no longer grows the stack in syz.5.2993 (21255): 14000-41000 (4000) [ 767.505500][T21136] veth1_macvtap: left promiscuous mode [ 767.508934][T21255] CPU: 0 UID: 0 PID: 21255 Comm: syz.5.2993 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 767.521817][T21255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 767.522753][T21136] veth0_macvtap: left promiscuous mode [ 767.531886][T21255] Call Trace: [ 767.531898][T21255] [ 767.531908][T21255] dump_stack_lvl+0x16c/0x1f0 [ 767.531943][T21255] gup_vma_lookup+0x1d2/0x220 [ 767.531980][T21255] __get_user_pages+0x236/0x3b50 [ 767.558002][T21255] ? __pfx___get_user_pages+0x10/0x10 [ 767.563444][T21255] __gup_longterm_locked+0x22e/0x1b90 [ 767.566505][T21136] veth1_vlan: left promiscuous mode [ 767.568853][T21255] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 767.568896][T21255] ? __pfx___gup_longterm_locked+0x10/0x10 [ 767.574274][T21136] veth0_vlan: left promiscuous mode [ 767.579713][T21255] ? rwsem_read_trylock+0x12d/0x250 [ 767.579746][T21255] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 767.579769][T21255] ? process_vm_rw_core.constprop.0+0x40d/0x9f0 [ 767.607827][T21255] pin_user_pages_remote+0xee/0x150 [ 767.613083][T21255] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 767.618946][T21255] ? down_read+0xc9/0x330 [ 767.623322][T21255] process_vm_rw_core.constprop.0+0x439/0x9f0 [ 767.629448][T21255] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 767.636110][T21255] process_vm_rw+0x301/0x360 [ 767.640752][T21255] ? __pfx_process_vm_rw+0x10/0x10 [ 767.645906][T21255] ? __pfx_futex_wake+0x10/0x10 [ 767.650797][T21255] ? up_write+0x1b2/0x520 [ 767.655175][T21255] ? __pfx___do_sys_mremap+0x10/0x10 [ 767.660513][T21255] ? xfd_validate_state+0x5d/0x180 [ 767.665679][T21255] ? rcu_is_watching+0x12/0xc0 [ 767.670491][T21255] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 767.676163][T21255] ? do_syscall_64+0x91/0x250 [ 767.680885][T21255] ? lockdep_hardirqs_on+0x7c/0x110 [ 767.686135][T21255] do_syscall_64+0xcd/0x250 [ 767.690681][T21255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.696627][T21255] RIP: 0033:0x7fc868b7e719 [ 767.701075][T21255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.720736][T21255] RSP: 002b:00007fc8699cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 767.729196][T21255] RAX: ffffffffffffffda RBX: 00007fc868d35f80 RCX: 00007fc868b7e719 [ 767.737207][T21255] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000107 [ 767.745299][T21255] RBP: 00007fc868bf1616 R08: 0000000000000006 R09: 0000000000000000 [ 767.753311][T21255] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 767.761319][T21255] R13: 0000000000000000 R14: 00007fc868d35f80 R15: 00007ffd65739868 [ 767.769342][T21255] [ 768.866910][ T5153] Bluetooth: hci2: command tx timeout [ 769.704071][T21136] team0 (unregistering): Port device team_slave_1 removed [ 769.819491][T21136] team0 (unregistering): Port device team_slave_0 removed [ 770.947691][ T5153] Bluetooth: hci2: command tx timeout [ 771.286421][T21187] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.295693][T21187] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.317110][T21187] bridge_slave_0: entered allmulticast mode [ 771.324662][T21187] bridge_slave_0: entered promiscuous mode [ 771.369374][T21187] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.416460][T21187] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.446595][T21187] bridge_slave_1: entered allmulticast mode [ 771.468272][T21187] bridge_slave_1: entered promiscuous mode [ 771.576025][T21187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.615028][T21187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.763151][T21187] team0: Port device team_slave_0 added [ 771.806046][T21187] team0: Port device team_slave_1 added [ 771.883458][T21187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.901813][T21187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.976329][T21187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.022970][T21187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.040942][T21187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.086397][T21187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.377760][T21187] hsr_slave_0: entered promiscuous mode [ 772.422415][T21187] hsr_slave_1: entered promiscuous mode [ 772.453760][T21187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 772.467854][T21187] Cannot create hsr debugfs directory [ 772.515510][T21367] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3018'. [ 773.026638][ T5153] Bluetooth: hci2: command tx timeout [ 773.354137][T21187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 773.387651][T21187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 773.405871][T21187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 773.421221][T21187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 773.621155][T21187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.631519][T21408] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3025'. [ 773.678270][T21187] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.727873][T21136] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.735025][T21136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.774043][T21136] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.781242][T21136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.196161][T21187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.304007][T21187] veth0_vlan: entered promiscuous mode [ 774.340762][T21187] veth1_vlan: entered promiscuous mode [ 774.445251][T21187] veth0_macvtap: entered promiscuous mode [ 774.465636][T21187] veth1_macvtap: entered promiscuous mode [ 774.522783][T21187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.553139][T21187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.594702][T21187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.636920][T21187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.656798][T21187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.686413][T21187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.720997][T21187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.756247][T21187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.788082][T21187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.832051][T21187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.875582][T21187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.899767][T21187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.937722][T21187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.977786][T21187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.020673][T21187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.053429][T21187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.076497][T21187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.085263][T21187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.350081][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.385843][T12932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.395967][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.412125][T12932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.856818][T21478] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3035'. [ 776.566849][T21504] cgroup: fork rejected by pids controller in /syz1 [ 776.591558][T21545] sctp: [Deprecated]: syz.6.3043 (pid 21545) Use of int in max_burst socket option deprecated. [ 776.591558][T21545] Use struct sctp_assoc_value instead [ 776.744220][T21545] netlink: 229 bytes leftover after parsing attributes in process `syz.6.3043'. [ 778.078974][T21697] can: request_module (can-proto-5) failed. [ 788.824871][T21870] could not allocate digest TFM handle [ 788.995723][T21877] could not allocate digest TFM handle [ 791.807166][T21944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3113'. [ 796.953895][ T29] audit: type=1800 audit(4294967392.250:70): pid=22009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3128" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 799.690848][T22057] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 799.726779][T22057] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 801.026148][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.167785][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.350398][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.492758][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.633531][T15032] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 801.643793][T15032] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 801.653578][T15032] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 801.673204][T15032] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 801.681891][T15032] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 801.693996][T15032] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 801.812561][ T35] bridge_slave_1: left allmulticast mode [ 801.830277][ T35] bridge_slave_1: left promiscuous mode [ 801.836065][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.897693][ T35] bridge_slave_0: left allmulticast mode [ 801.903418][ T35] bridge_slave_0: left promiscuous mode [ 801.932113][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.041810][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.088780][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.122749][ T35] bond0 (unregistering): Released all slaves [ 803.283564][ T35] HfR: left promiscuous mode [ 803.749648][T15032] Bluetooth: hci1: command tx timeout [ 804.191947][ T35] hsr_slave_0: left promiscuous mode [ 804.226562][ T35] hsr_slave_1: left promiscuous mode [ 804.301178][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.321441][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.378865][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.390127][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.474437][ T35] veth1_macvtap: left promiscuous mode [ 804.487001][ T35] veth0_macvtap: left promiscuous mode [ 804.495063][ T35] veth1_vlan: left promiscuous mode [ 804.505462][ T35] veth0_vlan: left promiscuous mode [ 805.828696][T15032] Bluetooth: hci1: command tx timeout [ 806.225584][ T35] team0 (unregistering): Port device team_slave_1 removed [ 806.420370][ T35] team0 (unregistering): Port device team_slave_0 removed [ 806.995596][T22204] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3168'. [ 807.908424][T15032] Bluetooth: hci1: command tx timeout [ 808.783312][T22085] chnl_net:caif_netlink_parms(): no params data found [ 809.032167][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.039315][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.611700][T22085] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.620170][T22085] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.637458][T22085] bridge_slave_0: entered allmulticast mode [ 809.677546][T22085] bridge_slave_0: entered promiscuous mode [ 809.694456][T22085] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.703247][T22085] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.730275][T22085] bridge_slave_1: entered allmulticast mode [ 809.741439][T22085] bridge_slave_1: entered promiscuous mode [ 809.864601][T22085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.973270][T22085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.992885][T15032] Bluetooth: hci1: command tx timeout [ 810.086713][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 810.106490][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 810.114952][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 810.119046][T22085] team0: Port device team_slave_0 added [ 810.123016][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 810.148284][ T5153] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 810.157510][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 810.283520][T22085] team0: Port device team_slave_1 added [ 810.492216][T22085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.514443][T22085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 810.561897][T22085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.603640][T22085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.622235][T22085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 810.654772][T22085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.752969][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.299351][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.420842][T22085] hsr_slave_0: entered promiscuous mode [ 811.477555][T22085] hsr_slave_1: entered promiscuous mode [ 811.684868][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.868383][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.120430][T22256] chnl_net:caif_netlink_parms(): no params data found [ 812.226692][ T5153] Bluetooth: hci3: command tx timeout [ 812.520785][ T35] bridge_slave_1: left allmulticast mode [ 812.543217][ T35] bridge_slave_1: left promiscuous mode [ 812.567234][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.586770][ T35] bridge_slave_0: left allmulticast mode [ 812.592480][ T35] bridge_slave_0: left promiscuous mode [ 812.655169][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.759622][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.784923][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.814231][ T35] bond0 (unregistering): Released all slaves [ 814.268793][T22256] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.275942][T22256] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.310758][ T5153] Bluetooth: hci3: command tx timeout [ 814.330468][T22256] bridge_slave_0: entered allmulticast mode [ 814.384405][T22256] bridge_slave_0: entered promiscuous mode [ 814.512743][T22256] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.529489][T22256] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.548155][T22256] bridge_slave_1: entered allmulticast mode [ 814.555247][T22256] bridge_slave_1: entered promiscuous mode [ 814.660472][ T35] hsr_slave_0: left promiscuous mode [ 814.669189][ T35] hsr_slave_1: left promiscuous mode [ 814.675237][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.696495][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.704508][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.726660][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.759045][ T35] veth1_macvtap: left promiscuous mode [ 814.764647][ T35] veth0_macvtap: left promiscuous mode [ 814.786848][ T35] veth1_vlan: left promiscuous mode [ 814.792546][ T35] veth0_vlan: left promiscuous mode [ 815.985208][ T35] team0 (unregistering): Port device team_slave_1 removed [ 816.099625][ T35] team0 (unregistering): Port device team_slave_0 removed [ 816.403983][ T5153] Bluetooth: hci3: command tx timeout [ 817.244175][T22256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.273556][T22256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.409118][T22256] team0: Port device team_slave_0 added [ 817.433703][T22256] team0: Port device team_slave_1 added [ 817.576002][T22256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.588535][T22256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.637921][T22256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.668459][T22256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.675454][T22256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.726340][T22256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.942113][T22256] hsr_slave_0: entered promiscuous mode [ 817.955465][T22256] hsr_slave_1: entered promiscuous mode [ 817.966656][T22256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 817.974277][T22256] Cannot create hsr debugfs directory [ 818.166421][T22085] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 818.186208][T22085] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 818.220109][T22085] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 818.235522][T22085] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 818.466778][ T5153] Bluetooth: hci3: command tx timeout [ 818.664416][T22085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.733456][T22085] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.842198][ T6214] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.849447][ T6214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.899975][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.907179][ T6214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.318220][T22256] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 819.369544][T22256] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 819.418201][T22256] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 819.497241][T22256] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 819.573262][T22085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.789781][T22256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.849444][T22256] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.896178][T21130] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.903456][T21130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.003519][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.010769][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.103836][T22256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 820.142524][T22256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 820.315954][T22358] kernel read not supported for file /#E-\yċF B|ctpL#kZrV]Le- m,oOɧ (pid: 22358 comm: syz.5.3188) [ 820.370757][T22085] veth0_vlan: entered promiscuous mode [ 820.422008][T22085] veth1_vlan: entered promiscuous mode [ 820.483046][ T29] audit: type=1800 audit(4294967415.780:71): pid=22358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3188" name=23452D5CF886C079018CC48BB4CA46A30B427C08A3A663917418DE704C23A8FD90F26B5AA17256B65D4C652D0C1A6DBE2CE66F4FC9A7 dev="mqueue" ino=89350 res=0 errno=0 [ 820.562347][T22085] veth0_macvtap: entered promiscuous mode [ 820.598707][T22085] veth1_macvtap: entered promiscuous mode [ 820.644189][T22085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.678520][T22085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.727697][T22085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 820.755486][T22085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.783694][T22085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.823399][T22085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.856506][T22085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.886554][T22085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.906638][T22085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.947871][T22085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.962932][T22256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.003349][T22085] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.036304][T22085] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.045092][T22085] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.078594][T22085] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.329964][T22256] veth0_vlan: entered promiscuous mode [ 821.354816][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.390433][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.448120][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.459643][T22256] veth1_vlan: entered promiscuous mode [ 821.466679][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.572299][T22256] veth0_macvtap: entered promiscuous mode [ 821.584624][T22256] veth1_macvtap: entered promiscuous mode [ 821.648644][T22256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 821.676423][T22256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.708663][T22256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 821.738796][T22256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.776318][T22256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 821.796435][T22256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.838605][T22256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.873771][T22256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.936455][T22256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.959470][T22256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.006398][T22256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.056497][T22256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.086347][T22256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.098186][T22256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.146081][T22256] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.184568][T22256] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.220404][T22256] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.263328][T22256] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.527578][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.535439][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.692738][ T6229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.706579][ T6229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.013684][T15032] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 829.028352][T15032] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 829.038249][T15032] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 829.067097][T15032] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 829.080487][T15032] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 829.089215][T15032] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 829.627312][T22562] chnl_net:caif_netlink_parms(): no params data found [ 829.729091][ T29] audit: type=1326 audit(8277292038.560:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22569 comm="syz.6.3208" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f724177e719 code=0x0 [ 830.372867][T22562] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.390626][T22562] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.426535][T22562] bridge_slave_0: entered allmulticast mode [ 830.433708][T22562] bridge_slave_0: entered promiscuous mode [ 830.475771][T22562] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.506405][T22562] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.513705][T22562] bridge_slave_1: entered allmulticast mode [ 830.545567][T22562] bridge_slave_1: entered promiscuous mode [ 830.730663][T22584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3210'. [ 830.885584][T22584] HfR: entered promiscuous mode [ 830.949787][T22562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.980165][T22562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.151576][ T968] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 831.164251][ T968] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 831.172676][ T968] CPU: 0 UID: 0 PID: 968 Comm: kworker/0:2 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 831.183424][ T968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 831.193481][ T968] Workqueue: events swap_reclaim_work [ 831.198870][ T968] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x1c0 [ 831.205816][ T968] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 fe 48 83 c7 08 48 83 ec 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 19 01 00 00 48 89 f2 48 8b 4e 08 48 b8 00 00 00 [ 831.225416][ T968] RSP: 0018:ffffc90003ddfc30 EFLAGS: 00010202 [ 831.231472][ T968] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88803074b878 [ 831.239442][ T968] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000008 [ 831.247400][ T968] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 831.255359][ T968] R10: 0000000000000001 R11: 000000000000004f R12: dffffc0000000000 [ 831.263321][ T968] R13: ffffffffffffffb8 R14: ffff88803074b800 R15: ffffc900031d6000 [ 831.271280][ T968] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 831.280210][ T968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 831.286791][ T968] CR2: 00007f3ffcccd990 CR3: 000000005d60c000 CR4: 00000000003526f0 [ 831.294758][ T968] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 831.302797][ T968] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 831.310779][ T968] Call Trace: [ 831.314050][ T968] [ 831.316970][ T968] ? die_addr+0x3b/0xa0 [ 831.321147][ T968] ? exc_general_protection+0x155/0x230 [ 831.326692][ T968] ? asm_exc_general_protection+0x26/0x30 [ 831.332418][ T968] ? __list_del_entry_valid_or_report+0x20/0x1c0 [ 831.338738][ T968] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 831.344095][ T968] swap_reclaim_full_clusters+0x109/0x460 [ 831.349817][ T968] swap_reclaim_work+0x2e/0x40 [ 831.354571][ T968] process_one_work+0x958/0x1b30 [ 831.359511][ T968] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 831.365141][ T968] ? __pfx_process_one_work+0x10/0x10 [ 831.370508][ T968] ? assign_work+0x1a0/0x250 [ 831.375091][ T968] worker_thread+0x6c8/0xf00 [ 831.379703][ T968] ? __kthread_parkme+0x148/0x220 [ 831.384738][ T968] ? __pfx_worker_thread+0x10/0x10 [ 831.389843][ T968] kthread+0x2c1/0x3a0 [ 831.393915][ T968] ? _raw_spin_unlock_irq+0x23/0x50 [ 831.399108][ T968] ? __pfx_kthread+0x10/0x10 [ 831.403715][ T968] ret_from_fork+0x45/0x80 [ 831.408135][ T968] ? __pfx_kthread+0x10/0x10 [ 831.412718][ T968] ret_from_fork_asm+0x1a/0x30 [ 831.417477][ T968] [ 831.420479][ T968] Modules linked in: [ 831.424974][ T968] ---[ end trace 0000000000000000 ]--- [ 831.432606][ T968] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x1c0 [ 831.439612][ T968] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 fe 48 83 c7 08 48 83 ec 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 19 01 00 00 48 89 f2 48 8b 4e 08 48 b8 00 00 00 [ 831.459562][ T968] RSP: 0018:ffffc90003ddfc30 EFLAGS: 00010202 [ 831.465617][ T968] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88803074b878 [ 831.473826][ T968] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000008 [ 831.481825][ T968] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 831.489903][ T968] R10: 0000000000000001 R11: 000000000000004f R12: dffffc0000000000 [ 831.497892][ T968] R13: ffffffffffffffb8 R14: ffff88803074b800 R15: ffffc900031d6000 [ 831.505849][ T968] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 831.514835][ T968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 831.521432][ T968] CR2: 00007f3ffcccd990 CR3: 000000005d60c000 CR4: 00000000003526f0 [ 831.529417][ T968] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 831.537490][ T968] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 831.545453][ T968] Kernel panic - not syncing: Fatal exception [ 831.551776][ T968] Kernel Offset: disabled [ 831.556186][ T968] Rebooting in 86400 seconds..