last executing test programs: 16.840907757s ago: executing program 3 (id=15): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x7000000, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0) r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x101000, 0x0) listen$auto(r5, 0x5) recvmmsg$auto(r1, &(0x7f0000000500)={{0x0, 0x4, 0x0, 0x5, 0x0, 0x2, 0x8}, 0xd1}, 0x10a, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) shutdown$auto(0xffffffffffffffff, 0x2) read$auto_rng_chrdev_ops_core(r1, 0x0, 0x0) mmap$auto(0xfffffffffffffffc, 0x8, 0x8, 0x7fffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(0xffffffffffffffff, 0x80044dfe, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x3ff, 0x0) mmap$auto(0x0, 0x40009, 0xe1, 0x1de, 0x7, 0x27fff) setfsgid$auto(0xee00) listen$auto(0x3, 0x3) 15.853538391s ago: executing program 3 (id=37): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) r0 = open(0x0, 0x22240, 0x55) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) statx$auto(r0, 0x0, 0x2001003, 0x4005, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (fail_nth: 1) 15.718270273s ago: executing program 3 (id=38): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0x40000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 15.442154168s ago: executing program 3 (id=39): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f00000000c0)=0xe5) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) unshare$auto(0x200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') readahead$auto(r0, 0x7ff, 0x26) setns(r1, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x8000, &(0x7f0000000640)={0x1, 0x4, 0x100000, @raw=0xf980}, 0x283) 15.119287945s ago: executing program 3 (id=41): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) write$auto(0xca, 0x0, 0x2d9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/open_files\x00', 0xd00, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x7ff, &(0x7f0000000000)="27c2afced1ba09d463134c74d41ad8b7e455c6616636a461636ab88c934d8ea703b7e977da82e36504c017be5967e15b9b4452f41acc34a2") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) write$auto(0x0, 0x0, 0x0) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000300)={0x2c, r2, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x9, 0x4, 0x0, 0x1, [@generic="ac00fc008f"]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x2a8, r4, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_SCAN_SSIDS={0x28c, 0x2d, 0x0, 0x1, [@nested={0x4, 0x4d}, @nested={0x4, 0xdf}, @nested={0x277, 0x5f, 0x0, 0x1, [@generic="d707c3af5d005134b37a55b7dfd0f915d919b7e9015eb08d4ea1d01605713cb0c43ae3d677fa97962e69913a26a281dc5425f0bd1575d8b9ec9c8c43d68ddd21", @typed={0x8, 0xfd, 0x0, 0x0, @u32=0x68}, @generic="5cb6522e550946a4de342e8801d1c6d398ab002d2bf63f32e5797ab4358c096faccabf24d348b86155490118ce8d91c540ea8420d11dad492fe1df9a0892fa5e9a63dd4b0b36969b7b9e6891d4018f671a0672b3876a0ea963aec832dc4afbcf58110e8d542611bf191492166b1ebe5d7bc8673f0b574fe10eb1784510a0c08ea95b8120935c5e2e15c8b89d40cb277b8b8e661d7f0104a694d81bed4a58e7342de89b79bf33033694557cbaca1e6b80e3cba7598a33cfa60cc298d800f8867675e7a4f788fbd2ef155edcbb8563f0526328cbedaad94a720543e6b83b5e86f8989ee08a7cfcce3d8b750d0ed9871ff32f830b77b207", @generic="4d5d1ef0cad5110926bb12330bf2eb601cb4edf81401767487fcd053f8a5a76ba40755b818caaf1c0c99262721ab932add1f9bc7d1496137d2f5aba023f7c0b3b44af3f49539d0cc3b57c2dcaf61", @generic="ea7c2483f9018ca1a30b9275d8b5d3d6afbb88ce386a044411ba8407fe5dfd45620925f9e470677eae939cc49b73145c092b5bd64b58516c0c0367db2088f3dd702f17bb9b5d06fc9dc7c28e64f2e88b10768215d116ce94a719221a3b4a97daff8e4783a553a127d11db02e759f4ac59a4c486841fa43deef95a3d90a7792a679634725bfa758831c587760ceb1865d8ce5971f358254926d977d59389c5e5e6835849364bdd6fdd8cfacaadd3a809ab317c161fdf234b45a65d4ebd3f48d774908aa7ebae80b977895ce1db82941f6fe1e33ead1cb57f6570a385e7b5e6f", @nested={0x8, 0x41, 0x0, 0x1, [@nested={0x4, 0xb0}]}]}, @typed={0x4, 0xe4, 0x0, 0x0, @binary}, @nested={0x4, 0x101}]}]}, 0x2a8}}, 0x4000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x214000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/249, 0xf9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000000c0), r6) sendmsg$auto_SMC_NETLINK_DUMP_UEID(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000", @ANYRES16=r7, @ANYBLOB="15032bbd7000fcdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008805}, 0x40c0) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000129bd7000fddbdf25110000001d3f3934feaba9b3a94067f3fd3aa1d83ca5f7d36271411078e8080648b33b91d5c445b7c63720af01f840a15f54191978d6af6135ddaffed688f70614c630925552a0b28e1d64a084b9a2e5"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 14.833414442s ago: executing program 3 (id=42): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) read$auto_urandom_fops_random(r0, &(0x7f0000000540)=""/4096, 0x1000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0xd13d) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x3, 0xb, 0x55becab1, 0x5, 0x0) mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) setrlimit$auto(0x0, &(0x7f0000000040)={0x1, 0xfb3}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x55) setresuid$auto(0x0, 0x0, 0x200) syz_clone3(&(0x7f0000000200)={0x1e5885280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) kill$auto(0x0, 0x21) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) mmap$auto(0x8, 0x4020006, 0x8, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x800, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xee46}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) wait4$auto(0x0, 0xfffffffffffffffc, 0x60000003, 0x0) read$auto(r3, 0x0, 0x20) 13.37572629s ago: executing program 0 (id=46): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x4b72, r2) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe3102, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24000000) r5 = socket(0x11, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nbd(0x0, r6) sendmsg$auto_NBD_CMD_STATUS(r6, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002000)={0x14, r7, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4008050) getsockopt$auto(r5, 0x107, 0x1, 0x0, 0x0) madvise$auto(0x0, 0x240007, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r8 = socket(0x2, 0x1, 0x20000) sendmmsg$auto(r8, 0x0, 0x5, 0x7) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r0, 0x0, 0x8100000049, 0x1) 12.529045866s ago: executing program 0 (id=48): r0 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) readv$auto(r0, &(0x7f00000018c0)={&(0x7f0000001880), 0x1}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x40000000029, 0x19, 0xfffffffffffffffe, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) r1 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_options\x00', 0x80201, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x3, 0x2c) r6 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000000c0), 0xffffffffffffffff) msgctl$auto_MSG_INFO(0xb, 0xc, &(0x7f00000001c0)={{0x3, 0x0, 0xee00, 0x2, 0x4, 0x0, 0x5}, 0x0, &(0x7f0000000180)=0x3, 0x2, 0x7, 0x6, 0x9, 0xb3f, 0x3, 0x6, 0x9, @raw=0x7, @raw=0x4}) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000051c0)=ANY=[@ANYBLOB="048e0000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESDEC=r5, @ANYRES32=r5, @ANYBLOB="000000a41098804a3c4f40e1dbe542830552ab8c5c070b25ad50dd5b37c776ea133170f25e653b4af8a54f8174246b02b29ea4f921e5ecede484624edc6b0cb8e3a559b2cd3f2d4dec93ce97358e5778d897968ffad0b4085422131175c961a4c91ad2cb0c6b99b13410c2ed278cef152a87e04bb4c7fc7a1124ad3bb10e5633d21bffb80490d1b61b2b6ed385b132bf49e2d6ad7c1b121f837088cbd51c83f3b5b0c060c56ffcc85d77e4b8dd80bc48d8effa8bdc4db4d3b162fd3df99e85fddac854c97a9f47550eba3f50f6fb343eedf6c43eceeb4fc5bb2fe60b631528bd38826651d45ff2ce7a6ef80a71ffdab4704f871a38b784b9752391495391b65a16d0142cff781bf024871a6381568f209fa8646e61ad2f9b5e5af6ab8c26ba2e44ea7d79b4ae70e815ccffca1a635d7932d62837abca28d4ae1cc31456c7ee975c5e26b0bc7f3a4a38d84e883c2b1336e1e3655ea8f6697f868662aa520d579bd7a638704dba1540be87228b6d2f99237954c96d8aa2b7e3a09930e0d641d37e5f85c8e7917fbc0dd6966b9d001e42a10f611d70396b62891f8c8beae06c2b4675e00891ba8c4c0d637a7722755144f5ff80bf393e2717b092287ed7e3cf39344d28c83199600e5221911a2bb6e3a21106253c05b62282c7ff6156b13bf5ea6ee16c16349138008dc4a9539d9e61eb24f48e4f49726396e4bf90aefc1ee9f0291305cf2381f1d7513c3b421d00c89b7b13207bf2b91a05dcf4069ed56f800025461c35b38ea51790cd8c3c32a8bb19c420ed18546941c1acfdcb8f8792d635bdb555b2b1a79bf5b827b339aa76071445af3ffd55a3f3cb28b242f7e5a24455a1801d32a64083dbac038cd90e36ae1463c185f616cc85818c2ad2b8937ecc95d56d71fa19eeffc622e65237d4daf827bf6c440a2a356eeac8c6ba3bc44fcd5e6feffcf5eb086ff9ba01f823227adb3cdf4eca031ca32f56aeb22c954aee81bcdea73490812665b307c5bdaf5e23979636ae5e4d766c4a6e6485f3ac1ae4ba7374c72150aad83cd4b58648432c5fb7463c85fd7f35b801c0cc62e12c46534e214ce9638b18a7e947a5838b498b7ddb32c9190d91ab7036c588b339793cbb86c5764468eaf59100701397335794d0a4beee1b0a5b049fde6ad2bfb3989f47d0785246863eedb35c0f3b1bf5d600866c8aa50d3c70eb682b556bdbb8fc8d3b2c612b16c46bfdcebee3f0afcda6793c3265f44ae58b9453701f3a06f9376624f1dd594d3efeabc43d6d97582a9cd3f7db45c7ac96a8a5e316d4753ea9678d9cc890831e92f5c6aa70b822a0144378ef63033f52555b9de172ef804164a2762fd2761486873b51d6b8701536d4b8027987a5363370a11b23de4954a0f59e869ff616f6bc7745def5285845fbf190ad38265c83d5e5928a163bc5f341123324998afdbb1d8e8f39c2040f2446da03a198984420cda89dca3fbe9adace01632d5bb70f80f2e23f2a0c7f88e619cd652f1f5d97cc9b816da11814c86f74ede59289bb13a05b323fec3d9f6b2f7c1251370033f56de196cfb1504940ceccc9f2f4ea77969eabdc60f1dc407c91a61dd5fd55d7a8754c91b62418d39bd8f74ea216f93d57ac1180991a396a00ecc7422ce0214eb6fd47669267ec86ea6b62e7b12ea92c99fb1d5f474f41d9cefb287854dd95b00d3fc31be898b976986b6598f9e6bc4405845d85fb9b20bd1ef30c1a72d9254435389a7d9d08d758449be7ef6737ce0e5d12a72d898f1aea002fa6d7ca787ec7b5833ac6a17b4ce0f11e0036b6e07b96954b80cad09afa0ff6c7eb6534adffd66a4c8621ab336819b2c151db24f1235576eb545d2ac42ff3c55f977d6086c4f2edbede3f58ab747be40ed9c6e749ea93d15fedec2b46ddecc94fb8b71a444ad0f7999eda68f7eefd6cce10a859a5862180ded06cae779b97efc45a16546fd01d40b0ac3c88d128a1c830ca205990831b4dedde3687482588e7330c4ee273bbb82b72b76c8438f8a43dbfa060e274b199a0fc83865345c3fcc2056039e8389b34d2a6378d4ab07b9644a9b325058f0af7db24042e19b7579d6747380c11351822394f6ae81a4f0c40f724ed4480a6cb029e83769829624545ef9dc583c25e1214d609a950d36da6ee5f3fd90e6566400e4ad4162f8c4ceb0502913243aea6437fd6e8a0db67b20ce98f372b8edc638076eaf0d3c17282ebd92fe89609de9d79c98ba95cf6794ea2784765553603ff7cdbe8a935241d4ed4cdc0df006a73206f4617a74480774182a3e00b61ebdbb4ce478c15272d132bfbfe22b2a8144af13dca424d876d36ee353572bdc5bd43b027df9d3292eb669550b188e2fe2f5079ee1be7e86e4cd89f5cedf85b20f1e16c2ece5886a4f658c1d864d4b9d2f197e3a7a60682935337a38f04cb8fce532ed3af32d27d83987f27f0f827ebc789235b66b36c27b5bb53318af3765e95da220b726fce4acf030354ba0c2cbf671924a1f58100e5e9080016e82fb0528576b26c8bac0ff369f0a0144674ea88b72debfb174e4e0df0fec846c38370682a2c2a6beb4803336e9c7788702bdc9c519d6701a8b5ae846e70c949da307416d7fe41acacd7db33d7e5859338a2a8ee3d20ae82c7325e236fd79f6a2ec5ebc115b64aefb705919772151a7151786acb719599db8a39941236d3607c44aec0738ecd066e46b4b697abb23166e1fb95093b254408a2149e7c72eb97db1034c061a9e6793a0dc07bd5d59a93b58c263db1133b362b3d2667f7610ced47bf4432e4622b961e052784d7ee42cbd23b7fc826a523c2fef1efe27eb90b69a7c9b928f20b211aa676b3a04a5e3c0378ba722682ac784dddc39ee285b6543cfcf8f8cccc1f4a8dd53b967e846c3d4ec312ab34108c6dae4ea05d524781b3a11cab8a1e9eaebcbcf6f2f372523c09b620e42acaa8743c62428d24986e1c88eb83c86750cae1d24433044639241d97d20e8ecacd399a9a5d54c183e18583aa522b8298e181fca387ef9011067452fc248a6f30571e05c45d8e6e8ded3273d9c8275be1af955a4df91952752a67d4a9554c557396567c6c6a8037d25e128d2400d3df2960eb403f25c0e38bbed4a08f396ba8d114c0cc1d06e8802568c0554cdb15596c329e9cefef0573ca3b8f247438e945e1f6dbf8ad1dd4e847740c4525300007ad3d8ee4e8d3eade8e22746a20faffff5b9b08c25e9c0f9736dc6066b2ce47748ee57cac1c25877c0f151460cdb19ebeb62d357c411811d8a3e1dec8de3a0264ba415d8073dad6df00db9114d375e627d11723aa5e1b270d903b41145a8860839647d5b25c6e68721fdca590f526b8e3067339b4042c232d1daebb3e3f1d52af4d06e800d1764a7524bf99a06c2099aee89e9e3dde1ff7731b43e70de099824a2f2f48d772c05bceea623853387d0133c24fa1cf00fa98d79df3307dc98a6e55bd191757130535f713b7397687179e0beec1ecf341ae2eab40fa673194922977160cbded12bcdad570bd2d8dc338a33436cb7a3e07dc726285f17c97065484a8fe1c64889edf1fbe768c12fb9db778b328f176fe7c0b946001fbb0ef18b3450c9b95a8c93d3471a92aec6887a464e183aab923a2141386946956d45893b114ca55d4335c01190754a3761c5d9005df2526b8324d63f294e149a7a44a3cc5810741788ed64aa979641109f5b33add35d9d1740a7394e225bcae1bd59d5cc2450270dcafcf328898607ce1c1667250a9c05e9ca6455319f8fe16406a23bf0acf566bde9091af315c00293b2711d8890dbeac71bd6c70e0dce3b96e2b9fa3025fd377f553e809251730aaac82fa4b022508b211da9a399888e04a3e3ad15809134193dd52fefab5002acfca6a9889b297eed4a47a4ada4430b49d97190e3d5992f02d501def686eb11bb8d146f02e5cd1f1137e5436e6b06c44bf4a6b3b5c88f7b8d9e8d401bd50ac24996da48203d97f62138416cd31fd89bd853f45d5b94200d172af2ceddda438facc529cb54f6eaac2e82abd7ad10d5e2d84a37ec99b1ee9c8f91097c170d85cb4820300f5e663e8dca24a3bed725940b040726fa8818251c3be4d2027981b5e35d2c27ba24ffb81fc30a558f1e844603c425aa99fa075b46402bc1c1a2029f8f8d9a8543d99a532a16d8e88efacd73eec3b6a4f8299380ca405812319dbd852fcc05ffe21c65be56547b1a958142c5335de66eac1189eb2730e9a12ac11830eada0e3dfa7f2f1b7fbdf311a311ef1281c6db6d84a310bfcc61d1c7cec0b36121b16d5ea518c3f8c5440ce201ee901464e0fe84f107b9cb28f0a2ad6673b1ca87ffbf8c1f352fa94e579c6dc16b0ebfcec1e009e38142d50966ed171288a0bd3f97bb2cd090e5d76379ceced34ca4f06bdec48eaa30ad317a9de4cb25c59f1ccd5b9969f1b8114d211b96f0f14cc05385daf33f219a82b7084724b147821e4036b9da9f9140c6305fb7ce1ef343a1fafc78ca71a0f5364c5d6d16302590aef9803b35eb83aa4809bdb1c340a7f0cb50b42a07df391031aad7319fc65d398263b50f5311d8a5fce11de1910f5b8fc0195011795fd5be30c5e5642f681dce0ad8dcf179fcc5d11c25e110fb5e065c5098225ed0a079fb1c24723da70c3ca627af2515795c7b0d33fcaa938db89eccde81acc8942758e53eb13044a93b729430131f1fb91e39a13a0a564a1e5c40f00c4fcf3be36ca19fc663c27c3cbc5d6cbb116ccb7889828eaab1b253be91c4c6cbbbf719194c00b62a14ea488b9dc56a37b6bbe8f32391800dbc52b283382990dc6358c2025d2fba478ccacf98e71cc657829d1ca53b5f6f2278e830888194576aaa188abe37fb3560d3478aaa9cfcdd8731a7b1a285c697efd26ad008fded467681d1da7322853598d4894ecb3f67a5868698d45a173d9f5ecf750be55e9d72dd9d77bc265d99e0cb191d02b39378ed35a3668c393374c5664098efc9ae8692141ead02ac13f6dd2c52660cd2bd0018ebe025bce4248a045e363b5b2635f70a1a1672dbca71861e9e0e3d02b5bf565c520e4da2c87633cea39515bb5f4ebcc5697361057e553fb38c613b4ffb391d5930f729cd79eddbc0bb4611c58defce3c7f4cd83828fd3c933e7723942b7d627827fd6d6477ce64c4beff68e73a8d7c557eaca7aa7de43b5b5b26bcf55fe9bbeb5b5463184e11924f6385e4572d5a421b8616448d1698bca2343bdfd5479b0a4514aa41d3a78ec8d10cd44d06598de991ddf3006c404cb673d95a705fab3eb38c5343dd7b3464da9672b9e0203fbc7c27f90c619c038ba1b056570699cd2ce0abc30457424bb79e50112ac0eb21b6e72ad8322c20fdea28bb11c3bdaf1fff4f259b9459e2ee2fbe4ed6da04395d7abdcb69900a2d9c1d44cbbf2577db21736f897ddf15c5ed931772ffbbefce02113f1675b21fb6f29e24649488f935236d0cc79e4674db0234364be97d7236ae01956df16345fa7de3d8f7e53d83c8c1ca85f5eb94624194a40a608fe91aa14cca3a30f9d4c5f18bd0b39385ef340212ad21bc689dbc50c8a7956555a160cb41a0e9b83b2a904684ffb168a335f211138ac6fd2ce2d1cd1699176753f68f8e670c61d5f11bb35b2fb844e2e5e71cd8a41ee8115889ec039fe1ccb4203c0cf387d4cf8fefbc05efc8542f12133d7989074c82c3ba961906c762eac4394e978f1b51844b55db8f057a46ed0f2368a57b881e847e5c8ff3ceb6c482089d7ca3c6acfd35c5a76d7edd05735547235018df78b520345202745434c9bc938b24315d29bef63d26e58b4c238783e29c1cbea3618afe74b9ec3e48fa77639ab52d68c2e3aa0f20e64b4910eef91152ae4f8a44e3ae2a714e17202a2f07f8373e2098a9fec8c4a01c6e702cb31ab2a86eccebc060a3268c3f37778e77bf9f57289baa9340df629b2fd9932ab5f85b11c690f16c046f0a2abf54f80a3450b07cbec4fb8ff0e1c73649f52b0aca533c55ee878abb0bd98489c35e802b29848cf3e24ece475619e7cb3d17eadd216cdd33c02ae442d453f16aa392a7f794a6e3495818ea0f233faf84052f001913ef1a25a698e597bf36844317f9d3706f0f0961b052716cec341b7d386b63055079990984e8b341e009d8010380588be4ed1940c39e87efd68a02ea81cdfe8a0a6ab9417e37d703b1d7a50d5d07d05a58b5d6a6d60d2c332322755e72dc78b222cf9ac5403e3730ad37e83cb278d7bfa17994115834bc4763c3b76ca5fbba1d5e52427f22346dcfca9db2545e9aedd1afb99c3e5efe7a1cac2433d021c0ddf05da700d194b4956eec44449f48c79f7d99dcfb8e055f75fe0d48a5aa329dcd4a86e7a2daac46bfbec4b3cc3ef938d775360a8e6e89501bfbdd2802e31650d0e487dcdcf47a40fd018d3092c95ba8730dc6fbfb5574995943b2c356c89a18b831aa4684fbcbcc49c8b6fb6", @ANYRESDEC=r2, @ANYBLOB="520142809039b79280a7e57e543bd29df02f20c78d01463887c97f8e17036e95148f4a477ff7e8d4c2ab5939e704ee284198dbb3d981b2b02ae2f7e7de64476c632ec8c861f36f4115ad8f9da617d22891ab9997aabc249b5d600800de00", @ANYRES32, @ANYRES16=r2, @ANYBLOB="04005a800c00160007000000000000001f01d680040081800800d800000000000400400004002f800c", @ANYRESOCT=r6, @ANYBLOB="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", @ANYBLOB, @ANYRES32=r5, @ANYBLOB="05ecf01584e085eddd414df06a60e84ce9c2e86bf091b80d2e6cdcfbea87903646afefef61e1bcbdd9d081060000008a146316712613a8e37def4e1b0d89b736d044586429a42744f1520eb529999024b700"/97, @ANYRES32=r7, @ANYBLOB="08001900", @ANYBLOB, @ANYBLOB="532bc3aa0d9983010c39f8361085f1b9bacd60715863bbc6bc11aa9c752e03528ca0ae24771ed3c823fc0ebb0608796b0a4511ca43b158ab38a66bb1d139e28a9d6b899b9a71142da3f875cb30c13c5e47aaa82af89dc3b5e6d2243b73714aa455", @ANYRES32, @ANYBLOB="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"], 0x8e04}, 0x1, 0x0, 0x0, 0x800}, 0x890) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) write$auto(r1, 0x0, 0x2) r8 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r8, &(0x7f0000000180)=""/250, 0xfa) fcntl$auto(r8, 0x400, 0x0) mmap$auto(0x720, 0x400008, 0xdf, 0x13, 0x2, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r9 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r9, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, 0x6) mmap$auto(0x0, 0xda, 0x1, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r9, 0x7a6, 0x0) 12.31235551s ago: executing program 0 (id=49): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0x40000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 12.15604389s ago: executing program 0 (id=50): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f00000000c0)=0xe5) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) unshare$auto(0x200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') readahead$auto(r0, 0x7ff, 0x26) setns(r1, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x8000, &(0x7f0000000640)={0x1, 0x4, 0x100000, @raw=0xf980}, 0x283) 12.018582031s ago: executing program 0 (id=51): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) ioctl$auto(0x3, 0x5420, 0x38) (fail_nth: 2) 11.687693075s ago: executing program 0 (id=53): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_VHOST_SET_VRING_CALL2(0xffffffffffffffff, 0x4008af21, &(0x7f0000000000)={0x3, r0}) write$auto(r1, 0x0, 0x9) ioctl$auto(0x3, 0x4b70, r0) mmap$auto(0x0, 0x4, 0x4000000000e0, 0x40eb1, 0x401, 0x300000000000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/031/001\x00', 0x507380, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$auto(0x2, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x2b, 0x2000a, 0xdf, 0xeb5, 0xffffffffffffffff, 0xffffffffffffffff) sysfs$auto(0x2, 0x26, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) io_uring_setup$auto(0x6, 0x0) 2.707401234s ago: executing program 1 (id=75): mmap$auto(0x0, 0x200006, 0x2, 0xfff, 0x602, 0x300000000000) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000001640), r1) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="cbb926a67000fcdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0xc4) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x4, 0x0) listmount$auto(&(0x7f0000000100)={0xba, @inferred, 0xffffffffffffffff, 0xfff7fffffffffff4, 0x9}, 0x0, 0x3, 0x2001) pread64$auto(0xffffffffffffffff, 0x0, 0x800003, 0x273) r3 = ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, &(0x7f0000000440)=0x1) lseek$auto(r3, 0x7, 0x8000) madvise$auto_MADV_PAGEOUT(0x2000000000000d, 0x1, 0x15) r4 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000001240)='\t', 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getdents$auto(r5, 0x0, 0x5de9) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) open(&(0x7f0000000080)='./file0\x00', 0x311840, 0x20) open(&(0x7f0000000140)='./cgroup/file0\x00', 0x2040, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r6 = open(&(0x7f0000000000)='./cgroup\x00', 0x90a00, 0x64) fchdir$auto(r6) mount$auto(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(0x0, 0x4) socket(0x2, 0x3, 0xa) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2, 0x1000000004, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x4, 0x0, 0x81, 0x0, 0x10000) 2.525532584s ago: executing program 2 (id=76): mmap$auto(0x0, 0x4020009, 0x7, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0) pread64$auto(r0, 0x0, 0x8100000049, 0x1) (fail_nth: 5) 2.509581469s ago: executing program 1 (id=77): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttyS2\x00', 0x20540, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_score_adj\x00', 0x142, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xfa}, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) getsockopt$auto_SO_PASSCRED(r0, 0x1, 0x10, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0xffff722b) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vgem/gem_names\x00', 0x62000, 0x0) close_range$auto(0x2, 0x8, 0xfffffffc) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x18, 0xa, 0x1) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$auto(0x3, 0x80045500, 0x38) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r1, 0x3b8c, 0x38) socket(0x3, 0x2, 0x2) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x90043, 0x0) fcntl$auto_F_SETPIPE_SZ(r2, 0x407, 0x7) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0xffffffffffffffff, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x81, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0x4, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffe00"}, 0x1c) 1.926705174s ago: executing program 2 (id=78): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 1.878761514s ago: executing program 2 (id=79): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x1, 0x20000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x1, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) r2 = prctl$auto(0x4e, 0x1, 0x0, 0x1, 0x0) read$auto_mISDN_fops_timerdev(r2, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x10002, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="686435a3", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000080004000900000008000200", @ANYRES32=0x0, @ANYBLOB="0800040073"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x10, 0x2, 0x0) 1.573677307s ago: executing program 1 (id=80): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffdb5, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r1) read$auto(r1, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x1cc, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x69ca}, @NL802154_ATTR_SEC_DEVICE={0x184, 0x2e, 0x0, 0x1, [@typed={0x8, 0x71, 0x0, 0x0, @fd=r1}, @nested={0x176, 0xb6, 0x0, 0x1, [@nested={0x4, 0x21}, @typed={0x8, 0x14b, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x14, 0x0, 0x0, @u32=0x80000001}, @generic="a1f8028b559bd6bb8e12eed39c49471b127ccc8aabf1af40f4ebfa2ff2851c3d5545bf58e082e8dfe22ced453fdab8c23ca01663f1aad9eea1a83d9f443104dba449cfda15ca93f0d6ad5b2421301ce3962bdb81849f0ed338086bddbbd2bab1f1932462d4a56c3de0", @generic="02197897cabc7553c7c891b84b74e03a6e44383ce8869365c9fbca20904cc38cfd7a95788f2f4182ca9c7ad3d8db1b8340506ddde966256a41795a1af88aadb47c2773a9342008138b512f4d2cba48b7f584ef92b85ccc7daffb8336e5c8f3bc93523a0ca8a3ebd15e1c5b97527b9d992b527edbc8b14aab8b9fa12dee3f22570d2a47b6f922aa581ba0d58c0489021ce62d5f06a9372c14978bae6ff047bbfdfffe026b7d023ed3df11ab96a9468a2152a19bd7f86393132e4321ed45bcb38300f19c0952fbbb61f4503bab65b9bd0518498c12db505262836f7cb2a1cef2daf8b547a025", @typed={0xc, 0x52, 0x0, 0x0, @u64=0xfff}, @nested={0x4, 0x99}]}]}, @NL802154_ATTR_WPAN_PHY_NAME={0xc, 0x2, 'nl80211\x00'}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x40}, @NL802154_ATTR_PID={0x8}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000005c0), r0) sendmsg$auto_IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r3, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000040) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000000), r0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.284937451s ago: executing program 1 (id=81): syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x10001, 0x8, 0x400000040eb1, 0xffffffffffffffff, 0x300000000000) (async) madvise$auto(0x7, 0x80000000, 0x17) (async) mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb) (async) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0xf}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40900, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8000000000007, 0xd, 0x35b2f44e, 0x948b, 0x7, 0x6, 0x3, 0x2, 0x65, 0x8000001f, 0x10001000, 0x6d3e, 0xffff, 0x8, 0x8]}, 0x0) (async) sendmsg$auto(0xffffffffffffffff, 0x0, 0x1) statmount$auto(&(0x7f0000000140)={0x9, @inferred=r2, 0x2, 0x3ff, 0x7f}, &(0x7f0000000440)={0x6, 0x6, 0x53, 0x4, 0x3, 0x101, 0x2, 0x40003, 0x5, 0xffffffff80000001, 0x57d6, 0x8, 0x3, 0x1, 0x8, 0x3, 0x1, 0x8001, 0x400, 0x1ff, 0xfff, 0xd8, 0x4, 0xffffffff, 0x7fff, 0xbef3, 0x411, 0x7, 0x0, 0x7, 0x7, [0x6, 0x7f, 0xbce7, 0x80000599, 0x56, 0x7, 0x6, 0x8, 0xffffffffffffffff, 0x0, 0x200000000000, 0x2, 0x1, 0x9, 0x100, 0x40004545, 0x4, 0xcd, 0xb, 0xf5fd, 0x7, 0x4, 0x3, 0x1fc, 0x2, 0x5, 0x8, 0x4, 0x4, 0x7fffffff, 0xffffffffd776536d, 0x0, 0x7, 0x80, 0x6, 0x8, 0x7, 0x4, 0xffc0000000000000, 0x1, 0x9, 0x8, 0x80000001], "73e9b0abe71d1e2aee680f7f0e812f294220578764aaba215588c48129939d0d8c6c8dcb488aeb5a653cee9f3407b9069269771811ce667d8ed9be2acd3e8d086701b3f03b438bda6b30b8ab183e2ad4220f1bc6f555e6bda8a270b5dc2c67dfe0f7795a"}, 0x40, 0x36) (async) select$auto(0x6, &(0x7f00000000c0)={[0xeeda, 0x6, 0x100000001, 0x9, 0x6, 0x35db354a00, 0x2, 0x3, 0x4, 0x4618ecd2, 0x3, 0x5, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xc7}) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x104, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) unshare$auto(0x40000080) (async) socket(0x27, 0x5, 0x7) (async) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r2) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) (async) r3 = socket(0x2b, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x89b0, &(0x7f0000000140)={'vlan0\x00'}) 1.011753407s ago: executing program 1 (id=82): openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) socket(0x1d, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) socket(0x1a, 0x5, 0xfffffffd) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$auto(r1, 0x0, 0x4, 0x0, 0x0) sendmsg$auto_IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5b1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048804}, 0xc004) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x90, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x8000) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x100) 882.853334ms ago: executing program 2 (id=83): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) r0 = open(0x0, 0x22240, 0x55) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) statx$auto(r0, 0x0, 0x2001003, 0x4005, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1f, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 525.972489ms ago: executing program 2 (id=84): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r0, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x60840, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x88c00, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_WRITEI_FRAMES2(r1, 0x40184150, &(0x7f0000000080)={0x3ff, &(0x7f0000000240), 0x2}) 275.068841ms ago: executing program 2 (id=85): migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x10, 0x3e, 0x0, 0x0, 0x9) socketpair$auto(0x1, 0x2, 0x7, 0x0) open(0x0, 0x22240, 0x155) open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1c0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) getdents64$auto(r1, &(0x7f0000000f40)={0x309, 0x7, 0xffff, 0x7}, 0x200c8) io_uring_enter$auto(r0, 0x8, 0x4, 0x6, &(0x7f0000000100)="45a5a791b0ca9885fb327463b04788e01b55ab37c6d73d3d27679d236296eb528f826d841d7087548888e37886ba329815f4d3b3fbac343876d5e105b150a1d216b5ce31506fd333cb1922cbc99daa52be7fd222c72f9816fc36f168ccd85a258335", 0x1000000000) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SOUND_OLD_MIXER_INFO2(r2, 0x80304d65, &(0x7f0000000040)="78ce673cb7ba50624c71d049a3af4824094f11539eb24649c05d6a4a0ea8724ecb26696773c70b8c3db86a23f1bee7a43379d1230d1e5ad00e5e2543b1323185c89fa392dfda4268b78158b7ce0ab643d0e45831709a7a28d3325cf6b19eaf11c08183056178e04201693c1e0fb32323e9117ab414649c32aec4c4ff1341aec140e281afe018c5d1ee") close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 1 (id=86): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop1/queue/scheduler\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='7\x00\xb1\x9a\xc0\xf9\xc0e\xd2T\xbe\xb6I\x9d\xd9\x18\xf5\x91\xbfq\xfe\xf2\x9a\x02\x9fC0xb\xccW(\xc1n+\n|5\xa5\x9c=^\xf1\x11H\x1c\xf73\x16\xd2\a\xfaw\xcc\xf1\xff7\xab\xa1\xeaF\x04\x17\x99\xd3\xd1\x83\xccG^\xbbdC\x8a\n\x88\xbcW@+\xafD\xd1\x8a\xc13W\xf66\x86\xe5\xee\xa7\x1d\x0f\x90\x00\xcf\xdb\xf5\xbf\xd4\xc8\x84\xb3\xeeb\xb0\xc7kN\x80\x93\xfd\x89\xe1\xc9tp\xd4jm\x7f\xf0a\xc3\x02\x14\xcf\xcf\\e!\a\x82\t,\xa7\x00\xbd&\xcax\xf8P\xc1\x8f\x87\x83\x0f\x93z', 0x81) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x8, 0x2, 0x10011, 0x5, 0x0) (async) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) (async) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) (async) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) (async) ioctl$auto(0x3, 0x894b, 0x38) (async) semget$auto(0x0, 0x13c, 0x1ff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_PNETID_ADD(r2, &(0x7f0000000780)={0x0, 0xfffffffffffffe46, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000e", @ANYRES16=0x0, @ANYBLOB="01002cbd700001dcdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40d0) (async) futex_wake$auto(0x0, 0x7, 0x0, 0x82) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/ptp/ptp0/clock_name\x00', 0x800, 0x0) read$auto(r3, 0x0, 0x4) (async) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x8000, 0x36ec}, 0x1, 0x0) semctl$auto(0x0, 0x9, 0x0, 0x2) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_SET_BSS(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0204}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x20008000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) (async) write$auto(r0, &(0x7f0000000140)='/dev/audio1\x00', 0x100100a3d4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) kill$auto(0x0, 0x15) (async, rerun: 64) sendfile$auto(r5, r5, &(0x7f0000000040)=0x8010, 0x1) (rerun: 64) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. syzkaller login: [ 78.712453][ T5833] cgroup: Unknown subsys name 'net' [ 78.868752][ T5833] cgroup: Unknown subsys name 'cpuset' [ 78.877576][ T5833] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.355513][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.867718][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.868178][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.893988][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.894301][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.902496][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.909744][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.935247][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.942506][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.949938][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.956188][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.957629][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.966179][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.972038][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.979250][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.992911][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.000771][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.009772][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.017564][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.026269][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.065019][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.564007][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 83.684237][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 83.730326][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 83.741542][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 83.861009][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.869394][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.878608][ T5842] bridge_slave_0: entered allmulticast mode [ 83.886164][ T5842] bridge_slave_0: entered promiscuous mode [ 83.937568][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.944933][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.952233][ T5842] bridge_slave_1: entered allmulticast mode [ 83.959880][ T5842] bridge_slave_1: entered promiscuous mode [ 84.004456][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.011683][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.021127][ T5845] bridge_slave_0: entered allmulticast mode [ 84.028268][ T5845] bridge_slave_0: entered promiscuous mode [ 84.037550][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.044835][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.052034][ T5845] bridge_slave_1: entered allmulticast mode [ 84.060111][ T5845] bridge_slave_1: entered promiscuous mode [ 84.071571][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.078767][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.086034][ T5850] bridge_slave_0: entered allmulticast mode [ 84.092999][ T5850] bridge_slave_0: entered promiscuous mode [ 84.134027][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.141497][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.149503][ T5850] bridge_slave_1: entered allmulticast mode [ 84.157314][ T5850] bridge_slave_1: entered promiscuous mode [ 84.167643][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.215337][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.227744][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.237056][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.244235][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.252685][ T5849] bridge_slave_0: entered allmulticast mode [ 84.260164][ T5849] bridge_slave_0: entered promiscuous mode [ 84.293637][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.313346][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.321933][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.329451][ T5849] bridge_slave_1: entered allmulticast mode [ 84.336826][ T5849] bridge_slave_1: entered promiscuous mode [ 84.346687][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.394174][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.407747][ T5842] team0: Port device team_slave_0 added [ 84.417018][ T5845] team0: Port device team_slave_0 added [ 84.451889][ T5842] team0: Port device team_slave_1 added [ 84.460002][ T5845] team0: Port device team_slave_1 added [ 84.468615][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.533386][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.556841][ T5850] team0: Port device team_slave_0 added [ 84.576483][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.583459][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.609621][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.634894][ T5850] team0: Port device team_slave_1 added [ 84.641362][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.648410][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.674476][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.687654][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.695871][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.721988][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.736551][ T5849] team0: Port device team_slave_0 added [ 84.753563][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.761268][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.787496][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.809197][ T5849] team0: Port device team_slave_1 added [ 84.849549][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.857104][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.883523][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.911745][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.919293][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.945921][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.959503][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.966644][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.993115][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.021549][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.029574][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.055850][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.075815][ T5856] Bluetooth: hci3: command tx timeout [ 85.075853][ T5846] Bluetooth: hci0: command tx timeout [ 85.086964][ T51] Bluetooth: hci2: command tx timeout [ 85.124452][ T5842] hsr_slave_0: entered promiscuous mode [ 85.131185][ T5842] hsr_slave_1: entered promiscuous mode [ 85.154779][ T5846] Bluetooth: hci1: command tx timeout [ 85.224854][ T5845] hsr_slave_0: entered promiscuous mode [ 85.231109][ T5845] hsr_slave_1: entered promiscuous mode [ 85.237908][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 85.243698][ T5845] Cannot create hsr debugfs directory [ 85.266231][ T5849] hsr_slave_0: entered promiscuous mode [ 85.272554][ T5849] hsr_slave_1: entered promiscuous mode [ 85.278834][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 85.284582][ T5849] Cannot create hsr debugfs directory [ 85.318529][ T5850] hsr_slave_0: entered promiscuous mode [ 85.325523][ T5850] hsr_slave_1: entered promiscuous mode [ 85.331560][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 85.338754][ T5850] Cannot create hsr debugfs directory [ 85.755028][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.771080][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.783191][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.803463][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.883136][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.905263][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.934119][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.958290][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.032787][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.070439][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.080802][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.109935][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.160234][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.179400][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.193041][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.210275][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.225990][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.266045][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.279209][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.330481][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.337859][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.349160][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.356321][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.396268][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.443440][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.450570][ T2897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.459881][ T2897] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.467052][ T2897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.591223][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.644483][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.692064][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.699291][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.746309][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.753503][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.791169][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.897165][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.938558][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.945783][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.991256][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.998485][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.119248][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.164767][ T5846] Bluetooth: hci3: command tx timeout [ 87.168103][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.170190][ T5846] Bluetooth: hci0: command tx timeout [ 87.182757][ T51] Bluetooth: hci2: command tx timeout [ 87.234890][ T51] Bluetooth: hci1: command tx timeout [ 87.433862][ T5842] veth0_vlan: entered promiscuous mode [ 87.508473][ T5842] veth1_vlan: entered promiscuous mode [ 87.537181][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.547273][ T5845] veth0_vlan: entered promiscuous mode [ 87.580254][ T5845] veth1_vlan: entered promiscuous mode [ 87.650394][ T5842] veth0_macvtap: entered promiscuous mode [ 87.677544][ T5842] veth1_macvtap: entered promiscuous mode [ 87.719135][ T5849] veth0_vlan: entered promiscuous mode [ 87.740957][ T5845] veth0_macvtap: entered promiscuous mode [ 87.749679][ T5849] veth1_vlan: entered promiscuous mode [ 87.767267][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.782673][ T5845] veth1_macvtap: entered promiscuous mode [ 87.816469][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.829169][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.840220][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.850799][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.861475][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.870238][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.920791][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.946744][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.954593][ T5849] veth0_macvtap: entered promiscuous mode [ 87.977769][ T5849] veth1_macvtap: entered promiscuous mode [ 87.989988][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.000804][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.010899][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.019787][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.109038][ T5850] veth0_vlan: entered promiscuous mode [ 88.128000][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.148766][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.153022][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.170662][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.203223][ T5850] veth1_vlan: entered promiscuous mode [ 88.212212][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.221559][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.230851][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.239671][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.319274][ T4186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.328164][ T4186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.353341][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.364347][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.433271][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.456358][ T5850] veth0_macvtap: entered promiscuous mode [ 88.471952][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.474768][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.521556][ T5850] veth1_macvtap: entered promiscuous mode [ 88.548224][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.561488][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.619845][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.650141][ T801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.664058][ T801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.689197][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.715899][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.728593][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.742674][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.755362][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.775136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.179055][ T801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.205398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.235227][ T51] Bluetooth: hci3: command tx timeout [ 89.240680][ T51] Bluetooth: hci2: command tx timeout [ 89.246491][ T5846] Bluetooth: hci0: command tx timeout [ 89.264252][ T801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.314866][ T51] Bluetooth: hci1: command tx timeout [ 89.400057][ T801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.415511][ T801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.195440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 90.505561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.604932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 91.015004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 91.015124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 91.326445][ T51] Bluetooth: hci3: command tx timeout [ 91.331937][ T51] Bluetooth: hci2: command tx timeout [ 91.337594][ T5846] Bluetooth: hci0: command tx timeout [ 91.377520][ T5977] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.395129][ T51] Bluetooth: hci1: command tx timeout [ 91.462331][ T5983] netlink: 22784 bytes leftover after parsing attributes in process `syz.2.11'. [ 91.834078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.891508][ T921] cfg80211: failed to load regulatory.db [ 91.965321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.973970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.148240][ T801] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.377875][ T801] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.621675][ T801] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.716765][ T5995] can: request_module (can-proto-0) failed. [ 92.828049][ T801] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.209520][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.220388][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.233723][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.246645][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.258488][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.375205][ T801] bridge_slave_1: left allmulticast mode [ 93.391496][ T801] bridge_slave_1: left promiscuous mode [ 93.463485][ T801] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.600595][ T801] bridge_slave_0: left allmulticast mode [ 93.620027][ T801] bridge_slave_0: left promiscuous mode [ 93.652995][ T801] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.202673][ T6017] netlink: 22784 bytes leftover after parsing attributes in process `syz.0.21'. [ 94.392865][ T6019] FAULT_INJECTION: forcing a failure. [ 94.392865][ T6019] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 94.413292][ T6019] CPU: 1 UID: 0 PID: 6019 Comm: syz.0.23 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 94.413330][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.413346][ T6019] Call Trace: [ 94.413355][ T6019] [ 94.413368][ T6019] dump_stack_lvl+0x16c/0x1f0 [ 94.413407][ T6019] should_fail_ex+0x512/0x640 [ 94.413447][ T6019] should_fail_alloc_page+0xe7/0x130 [ 94.413482][ T6019] prepare_alloc_pages+0x3c2/0x610 [ 94.413518][ T6019] ? rcu_is_watching+0x12/0xc0 [ 94.413550][ T6019] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 94.413587][ T6019] ? kvm_sched_clock_read+0x11/0x20 [ 94.413614][ T6019] ? sched_clock+0x38/0x60 [ 94.413644][ T6019] ? sched_clock_cpu+0x6c/0x530 [ 94.413678][ T6019] ? lock_acquire+0x179/0x350 [ 94.413715][ T6019] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 94.413743][ T6019] ? __lock_acquire+0x622/0x1c90 [ 94.413790][ T6019] ? __lock_acquire+0x622/0x1c90 [ 94.413827][ T6019] ? __lock_acquire+0x622/0x1c90 [ 94.413859][ T6019] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.413899][ T6019] ? policy_nodemask+0xea/0x4e0 [ 94.413933][ T6019] alloc_pages_mpol+0x1fb/0x550 [ 94.413964][ T6019] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 94.414005][ T6019] folio_alloc_mpol_noprof+0x36/0x2f0 [ 94.414044][ T6019] vma_alloc_folio_noprof+0xed/0x1e0 [ 94.414077][ T6019] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 94.414108][ T6019] ? find_held_lock+0x2b/0x80 [ 94.414136][ T6019] ? __handle_mm_fault+0x1092/0x5490 [ 94.414166][ T6019] __handle_mm_fault+0x2f21/0x5490 [ 94.414200][ T6019] ? __pfx___handle_mm_fault+0x10/0x10 [ 94.414223][ T6019] ? __pte_offset_map_lock+0x174/0x310 [ 94.414253][ T6019] ? find_held_lock+0x2b/0x80 [ 94.414287][ T6019] ? find_held_lock+0x2b/0x80 [ 94.414324][ T6019] ? follow_page_pte+0x3af/0x14c0 [ 94.414368][ T6019] handle_mm_fault+0x589/0xd10 [ 94.414398][ T6019] __get_user_pages+0x589/0x3b80 [ 94.414443][ T6019] ? __pfx_mt_find+0x10/0x10 [ 94.414478][ T6019] ? __pfx___get_user_pages+0x10/0x10 [ 94.414528][ T6019] populate_vma_page_range+0x278/0x3a0 [ 94.414567][ T6019] ? __pfx_populate_vma_page_range+0x10/0x10 [ 94.414601][ T6019] ? __pfx_find_vma_intersection+0x10/0x10 [ 94.414638][ T6019] ? do_mmap+0x69c/0x1210 [ 94.414675][ T6019] __mm_populate+0x1d8/0x380 [ 94.414710][ T6019] ? __pfx___mm_populate+0x10/0x10 [ 94.414749][ T6019] ? up_write+0x1b2/0x520 [ 94.414776][ T6019] vm_mmap_pgoff+0x362/0x450 [ 94.414812][ T6019] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 94.414850][ T6019] ? __x64_sys_futex+0x1e0/0x4c0 [ 94.414881][ T6019] ? __x64_sys_futex+0x1e9/0x4c0 [ 94.414913][ T6019] ksys_mmap_pgoff+0x7d/0x5c0 [ 94.414944][ T6019] ? xfd_validate_state+0x61/0x180 [ 94.414984][ T6019] __x64_sys_mmap+0x125/0x190 [ 94.415026][ T6019] do_syscall_64+0xcd/0x490 [ 94.415062][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.415087][ T6019] RIP: 0033:0x7f72a398e9a9 [ 94.415117][ T6019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.415141][ T6019] RSP: 002b:00007f72a4827038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 94.415166][ T6019] RAX: ffffffffffffffda RBX: 00007f72a3bb5fa0 RCX: 00007f72a398e9a9 [ 94.415183][ T6019] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 94.415197][ T6019] RBP: 00007f72a3a10d69 R08: 0000000000000002 R09: 0000000000008000 [ 94.415209][ T6019] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 94.415220][ T6019] R13: 0000000000000000 R14: 00007f72a3bb5fa0 R15: 00007ffee2124408 [ 94.415247][ T6019] [ 94.940019][ T801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.975521][ T801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.009777][ T801] bond0 (unregistering): Released all slaves [ 95.316131][ T51] Bluetooth: hci3: command tx timeout [ 95.857930][ T801] hsr_slave_0: left promiscuous mode [ 95.877225][ T6042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.25'. [ 95.934722][ T801] hsr_slave_1: left promiscuous mode [ 95.941417][ T801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.988072][ T801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.056356][ T801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.063816][ T801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.168609][ T801] veth1_macvtap: left promiscuous mode [ 96.174434][ T801] veth0_macvtap: left promiscuous mode [ 96.224880][ T801] veth1_vlan: left promiscuous mode [ 96.230376][ T801] veth0_vlan: left promiscuous mode [ 96.542153][ T6053] netlink: 22784 bytes leftover after parsing attributes in process `syz.0.29'. [ 96.830855][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.845608][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.854797][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.865926][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.873624][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.127428][ T801] team0 (unregistering): Port device team_slave_1 removed [ 97.157445][ T801] team0 (unregistering): Port device team_slave_0 removed [ 97.404985][ T5846] Bluetooth: hci3: command tx timeout [ 97.429999][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.462615][ T6042] bridge_slave_1 (unregistering): left allmulticast mode [ 97.470192][ T6042] bridge_slave_1 (unregistering): left promiscuous mode [ 97.477577][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.538504][ T6042] Zero length message leads to an empty skb [ 97.544801][ T6009] chnl_net:caif_netlink_parms(): no params data found [ 97.809038][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.856113][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.863370][ T6009] bridge_slave_0: entered allmulticast mode [ 97.900166][ T6009] bridge_slave_0: entered promiscuous mode [ 97.934218][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.962784][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.972201][ T6009] bridge_slave_1: entered allmulticast mode [ 97.982695][ T6009] bridge_slave_1: entered promiscuous mode [ 98.161959][ T6009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.241287][ T6009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.490803][ T6009] team0: Port device team_slave_0 added [ 98.519558][ T6009] team0: Port device team_slave_1 added [ 98.791907][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.802697][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.813864][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.826185][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.834197][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.915750][ T51] Bluetooth: hci1: command tx timeout [ 98.944153][ T801] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.015379][ T6009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.026125][ T6009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.052520][ T6009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.116181][ T6009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.124906][ T6009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.175009][ T6009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.260639][ T801] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.289552][ T6058] chnl_net:caif_netlink_parms(): no params data found [ 99.397524][ T801] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.442095][ T6009] hsr_slave_0: entered promiscuous mode [ 99.453989][ T6009] hsr_slave_1: entered promiscuous mode [ 99.463695][ T6009] debugfs: 'hsr0' already exists in 'hsr' [ 99.472302][ T6009] Cannot create hsr debugfs directory [ 99.477865][ T51] Bluetooth: hci3: command tx timeout [ 99.576282][ T801] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.876891][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.884082][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.905381][ T6058] bridge_slave_0: entered allmulticast mode [ 99.913273][ T6058] bridge_slave_0: entered promiscuous mode [ 99.949675][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.968638][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.984946][ T6058] bridge_slave_1: entered allmulticast mode [ 99.995193][ T6058] bridge_slave_1: entered promiscuous mode [ 100.385935][ T6058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.477093][ T801] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.515940][ T6058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.673141][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.681952][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.693473][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.702414][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.711081][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.741277][ T801] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.772899][ T6058] team0: Port device team_slave_0 added [ 100.788805][ T6084] chnl_net:caif_netlink_parms(): no params data found [ 100.803263][ T6058] team0: Port device team_slave_1 added [ 100.893648][ T801] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.915105][ T51] Bluetooth: hci2: command tx timeout [ 100.995078][ T51] Bluetooth: hci1: command tx timeout [ 100.996039][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.010285][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.036582][ T6058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.051374][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.061361][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.087590][ T6058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.147441][ T801] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.368431][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.387274][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.394532][ T6084] bridge_slave_0: entered allmulticast mode [ 101.405949][ T6084] bridge_slave_0: entered promiscuous mode [ 101.426412][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.433579][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.445664][ T6084] bridge_slave_1: entered allmulticast mode [ 101.453520][ T6084] bridge_slave_1: entered promiscuous mode [ 101.555835][ T51] Bluetooth: hci3: command tx timeout [ 101.583742][ T6058] hsr_slave_0: entered promiscuous mode [ 101.590577][ T6058] hsr_slave_1: entered promiscuous mode [ 101.598024][ T6058] debugfs: 'hsr0' already exists in 'hsr' [ 101.603790][ T6058] Cannot create hsr debugfs directory [ 101.634805][ T6084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.692792][ T6084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.859691][ T801] bridge_slave_1: left allmulticast mode [ 101.865847][ T801] bridge_slave_1: left promiscuous mode [ 101.872344][ T801] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.882974][ T801] bridge_slave_0: left allmulticast mode [ 101.888944][ T801] bridge_slave_0: left promiscuous mode [ 101.894748][ T801] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.905811][ T801] bridge_slave_1: left allmulticast mode [ 101.911458][ T801] bridge_slave_1: left promiscuous mode [ 101.917432][ T801] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.929460][ T801] bridge_slave_0: left allmulticast mode [ 101.935567][ T801] bridge_slave_0: left promiscuous mode [ 101.941256][ T801] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.215761][ T801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.227143][ T801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.237618][ T801] bond0 (unregistering): Released all slaves [ 102.424391][ T801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.441082][ T801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.452211][ T801] bond0 (unregistering): Released all slaves [ 102.498594][ T6084] team0: Port device team_slave_0 added [ 102.512966][ T6084] team0: Port device team_slave_1 added [ 102.622623][ T6009] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.640358][ T6084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.647667][ T6084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.674526][ T6084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.691706][ T6009] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.714147][ T6084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.725657][ T6084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.752116][ T6084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.756954][ T51] Bluetooth: hci0: command tx timeout [ 102.785731][ T6009] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.797889][ T6009] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.927754][ T6084] hsr_slave_0: entered promiscuous mode [ 102.934368][ T6084] hsr_slave_1: entered promiscuous mode [ 102.940817][ T6084] debugfs: 'hsr0' already exists in 'hsr' [ 102.946865][ T6084] Cannot create hsr debugfs directory [ 102.995166][ T5846] Bluetooth: hci2: command tx timeout [ 103.060579][ T6112] chnl_net:caif_netlink_parms(): no params data found [ 103.075242][ T5846] Bluetooth: hci1: command tx timeout [ 103.347940][ T801] hsr_slave_0: left promiscuous mode [ 103.353779][ T801] hsr_slave_1: left promiscuous mode [ 103.360671][ T801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.371959][ T801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.380533][ T801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.388150][ T801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.402819][ T801] hsr_slave_0: left promiscuous mode [ 103.410525][ T801] hsr_slave_1: left promiscuous mode [ 103.417182][ T801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.424585][ T801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.432560][ T801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.440480][ T801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.466412][ T801] veth1_macvtap: left promiscuous mode [ 103.472543][ T801] veth0_macvtap: left promiscuous mode [ 103.481470][ T801] veth1_vlan: left promiscuous mode [ 103.487203][ T801] veth0_vlan: left promiscuous mode [ 103.493471][ T801] veth1_macvtap: left promiscuous mode [ 103.499061][ T801] veth0_macvtap: left promiscuous mode [ 103.504732][ T801] veth1_vlan: left promiscuous mode [ 103.510474][ T801] veth0_vlan: left promiscuous mode [ 103.922694][ T801] team0 (unregistering): Port device team_slave_1 removed [ 103.953742][ T801] team0 (unregistering): Port device team_slave_0 removed [ 104.459699][ T801] team0 (unregistering): Port device team_slave_1 removed [ 104.492237][ T801] team0 (unregistering): Port device team_slave_0 removed [ 104.781279][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.788924][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.796220][ T6112] bridge_slave_0: entered allmulticast mode [ 104.803225][ T6112] bridge_slave_0: entered promiscuous mode [ 104.835002][ T5846] Bluetooth: hci0: command tx timeout [ 104.851383][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.860274][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.869645][ T6112] bridge_slave_1: entered allmulticast mode [ 104.877746][ T6112] bridge_slave_1: entered promiscuous mode [ 104.934370][ T6112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.949828][ T6112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.016931][ T6112] team0: Port device team_slave_0 added [ 105.056369][ T6112] team0: Port device team_slave_1 added [ 105.085047][ T5846] Bluetooth: hci2: command tx timeout [ 105.100636][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.107885][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.134343][ T6112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.148918][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.156126][ T5846] Bluetooth: hci1: command tx timeout [ 105.162074][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.189560][ T6112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.254456][ T6009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.312444][ T6112] hsr_slave_0: entered promiscuous mode [ 105.319013][ T6112] hsr_slave_1: entered promiscuous mode [ 105.326694][ T6112] debugfs: 'hsr0' already exists in 'hsr' [ 105.332581][ T6112] Cannot create hsr debugfs directory [ 105.425091][ T6009] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.483060][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.490263][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.532596][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.539874][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.731911][ T2897] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.795569][ T6084] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.821829][ T6084] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.857531][ T2897] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.882168][ T6084] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.901883][ T6084] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.945337][ T2897] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.005496][ T2897] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.072655][ T6058] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.101915][ T6058] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.114222][ T6058] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.139967][ T6009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.155499][ T6058] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.415094][ T2897] bridge_slave_0: left allmulticast mode [ 106.420789][ T2897] bridge_slave_0: left promiscuous mode [ 106.432971][ T2897] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.883481][ T2897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.896662][ T2897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.912643][ T2897] bond0 (unregistering): Released all slaves [ 106.919350][ T5846] Bluetooth: hci0: command tx timeout [ 107.027390][ T6009] veth0_vlan: entered promiscuous mode [ 107.155426][ T5846] Bluetooth: hci2: command tx timeout [ 107.179676][ T6084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.201855][ T6009] veth1_vlan: entered promiscuous mode [ 107.371845][ T6084] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.397732][ T6058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.457389][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.464576][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.483593][ T6009] veth0_macvtap: entered promiscuous mode [ 107.513710][ T2897] hsr_slave_0: left promiscuous mode [ 107.521819][ T2897] hsr_slave_1: left promiscuous mode [ 107.528408][ T2897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.536904][ T2897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.549256][ T2897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.557680][ T2897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.582291][ T2897] veth1_macvtap: left promiscuous mode [ 107.591724][ T2897] veth0_macvtap: left promiscuous mode [ 107.599002][ T2897] veth1_vlan: left promiscuous mode [ 107.604368][ T2897] veth0_vlan: left promiscuous mode [ 108.172716][ T2897] team0 (unregistering): Port device team_slave_1 removed [ 108.223896][ T2897] team0 (unregistering): Port device team_slave_0 removed [ 108.611067][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.618224][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.632580][ T6009] veth1_macvtap: entered promiscuous mode [ 108.742551][ T6058] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.778949][ T6112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.794810][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.801990][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.850703][ T6112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.867387][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.874580][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.907154][ T6112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.926017][ T6112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.965461][ T6009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.995364][ T5846] Bluetooth: hci0: command tx timeout [ 109.038811][ T6009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.097672][ T6009] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.118244][ T6009] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.134780][ T6009] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.143525][ T6009] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.430042][ T6112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.506120][ T6084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.526961][ T6112] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.558851][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.566069][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.592453][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.612608][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.628870][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.636081][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.724546][ T4186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.747149][ T4186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.781578][ T6084] veth0_vlan: entered promiscuous mode [ 109.849570][ T6084] veth1_vlan: entered promiscuous mode [ 109.939673][ T6058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.013899][ T6084] veth0_macvtap: entered promiscuous mode [ 110.070324][ T6084] veth1_macvtap: entered promiscuous mode [ 110.145218][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 110.208649][ T6084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.259672][ T6058] veth0_vlan: entered promiscuous mode [ 110.287920][ T6084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.337165][ T6084] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.349246][ T6084] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.359284][ T6084] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.372677][ T6084] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.386841][ T6058] veth1_vlan: entered promiscuous mode [ 110.478585][ T6112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.620551][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.631848][ T6058] veth0_macvtap: entered promiscuous mode [ 110.666107][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.699528][ T6058] veth1_macvtap: entered promiscuous mode [ 110.758117][ T6112] veth0_vlan: entered promiscuous mode [ 110.783268][ T6112] veth1_vlan: entered promiscuous mode [ 110.800943][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.803830][ T6058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.836702][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.861080][ T6058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.888487][ T6058] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.898916][ T6058] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.908579][ T6058] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.909955][ T6249] FAULT_INJECTION: forcing a failure. [ 110.909955][ T6249] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.919033][ T6058] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.936909][ T6249] CPU: 0 UID: 0 PID: 6249 Comm: syz.3.37 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 110.936942][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.936956][ T6249] Call Trace: [ 110.936964][ T6249] [ 110.936973][ T6249] dump_stack_lvl+0x16c/0x1f0 [ 110.937010][ T6249] should_fail_ex+0x512/0x640 [ 110.937044][ T6249] _copy_from_user+0x2e/0xd0 [ 110.937078][ T6249] copy_msghdr_from_user+0x98/0x160 [ 110.937111][ T6249] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 110.937148][ T6249] ? __pfx__kstrtoull+0x10/0x10 [ 110.937180][ T6249] ___sys_sendmsg+0xfe/0x1d0 [ 110.937213][ T6249] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.937259][ T6249] ? find_held_lock+0x2b/0x80 [ 110.937307][ T6249] __sys_sendmmsg+0x200/0x420 [ 110.937342][ T6249] ? __pfx___sys_sendmmsg+0x10/0x10 [ 110.937384][ T6249] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.937429][ T6249] ? fput+0x70/0xf0 [ 110.937458][ T6249] ? ksys_write+0x1ac/0x250 [ 110.937488][ T6249] ? __pfx_ksys_write+0x10/0x10 [ 110.937518][ T6249] __x64_sys_sendmmsg+0x9c/0x100 [ 110.937549][ T6249] ? lockdep_hardirqs_on+0x7c/0x110 [ 110.937576][ T6249] do_syscall_64+0xcd/0x490 [ 110.937609][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.937633][ T6249] RIP: 0033:0x7fe554f8e9a9 [ 110.937658][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.937679][ T6249] RSP: 002b:00007fe555e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 110.937702][ T6249] RAX: ffffffffffffffda RBX: 00007fe5551b5fa0 RCX: 00007fe554f8e9a9 [ 110.937718][ T6249] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 110.937732][ T6249] RBP: 00007fe555e28090 R08: 0000000000000000 R09: 0000000000000000 [ 110.937746][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.937759][ T6249] R13: 0000000000000000 R14: 00007fe5551b5fa0 R15: 00007ffc9b930f38 [ 110.937790][ T6249] [ 111.062355][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 111.119240][ T6252] netlink: 25 bytes leftover after parsing attributes in process `syz.3.38'. [ 111.230209][ T6112] veth0_macvtap: entered promiscuous mode [ 111.272083][ T6112] veth1_macvtap: entered promiscuous mode [ 111.338799][ T6255] netlink: 22784 bytes leftover after parsing attributes in process `syz.0.32'. [ 111.372419][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.411617][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.461875][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.511576][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.528886][ T6112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.541278][ T6112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.551667][ T6112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.564516][ T6112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.582786][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.591560][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.781052][ T801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.803198][ T801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.857327][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.884933][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.950871][ T801] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.227020][ T801] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.533757][ T801] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.746366][ T801] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.804931][ T6273] FAULT_INJECTION: forcing a failure. [ 112.804931][ T6273] name fail_futex, interval 1, probability 0, space 0, times 1 [ 112.865086][ T6273] CPU: 0 UID: 0 PID: 6273 Comm: syz.0.44 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 112.865126][ T6273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.865140][ T6273] Call Trace: [ 112.865149][ T6273] [ 112.865159][ T6273] dump_stack_lvl+0x16c/0x1f0 [ 112.865198][ T6273] should_fail_ex+0x512/0x640 [ 112.865236][ T6273] get_futex_key+0x1d0/0x1540 [ 112.865273][ T6273] ? __pfx_get_futex_key+0x10/0x10 [ 112.865304][ T6273] ? css_rstat_updated+0x9d/0xd30 [ 112.865350][ T6273] futex_wait_setup+0x84/0x510 [ 112.865398][ T6273] __futex_wait+0x194/0x2f0 [ 112.865445][ T6273] ? __pfx___futex_wait+0x10/0x10 [ 112.865480][ T6273] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 112.865516][ T6273] ? __pfx_futex_wake_mark+0x10/0x10 [ 112.865557][ T6273] ? plist_check_head+0xa3/0x150 [ 112.865581][ T6273] ? find_held_lock+0x2b/0x80 [ 112.865621][ T6273] futex_wait+0xe8/0x380 [ 112.865657][ T6273] ? __pfx_futex_wait+0x10/0x10 [ 112.865703][ T6273] ? rcu_is_watching+0x12/0xc0 [ 112.865730][ T6273] ? kasan_quarantine_put+0x10a/0x240 [ 112.865757][ T6273] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.865791][ T6273] do_futex+0x229/0x350 [ 112.865824][ T6273] ? __pfx_do_futex+0x10/0x10 [ 112.865865][ T6273] __x64_sys_futex+0x1e0/0x4c0 [ 112.865900][ T6273] ? __pfx_raw_ioctl+0x10/0x10 [ 112.865926][ T6273] ? __pfx___x64_sys_futex+0x10/0x10 [ 112.865971][ T6273] do_syscall_64+0xcd/0x490 [ 112.866007][ T6273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.866032][ T6273] RIP: 0033:0x7f3d9dd8e9a9 [ 112.866052][ T6273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.866075][ T6273] RSP: 002b:00007f3d9ecdb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.866098][ T6273] RAX: ffffffffffffffda RBX: 00007f3d9dfb5fa8 RCX: 00007f3d9dd8e9a9 [ 112.866115][ T6273] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3d9dfb5fa8 [ 112.866130][ T6273] RBP: 00007f3d9dfb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 112.866146][ T6273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3d9dfb5fac [ 112.866161][ T6273] R13: 0000000000000000 R14: 00007ffe1f3c8ce0 R15: 00007ffe1f3c8dc8 [ 112.866192][ T6273] [ 112.923483][ T6275] can: request_module (can-proto-0) failed. [ 112.926623][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.106990][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.170505][ T6273] team0: entered allmulticast mode [ 113.177483][ T6273] team_slave_0: entered allmulticast mode [ 113.194802][ T6273] team_slave_1: entered allmulticast mode [ 113.407236][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.419530][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.428608][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.430072][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.430818][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.510841][ T801] bridge_slave_1: left allmulticast mode [ 113.510895][ T801] bridge_slave_1: left promiscuous mode [ 113.511096][ T801] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.545976][ T801] bridge_slave_0: left allmulticast mode [ 113.546004][ T801] bridge_slave_0: left promiscuous mode [ 113.546216][ T801] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.551174][ T6287] can: request_module (can-proto-0) failed. [ 114.291414][ T6302] netlink: 22784 bytes leftover after parsing attributes in process `syz.0.48'. [ 114.435583][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 114.454950][ T6305] netlink: 25 bytes leftover after parsing attributes in process `syz.0.49'. [ 114.609381][ T801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.624575][ T801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.639477][ T801] bond0 (unregistering): Released all slaves [ 115.365911][ T801] hsr_slave_0: left promiscuous mode [ 115.379687][ T801] hsr_slave_1: left promiscuous mode [ 115.398550][ T801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.409964][ T801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.427133][ T801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.451556][ T801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.530757][ T801] veth1_macvtap: left promiscuous mode [ 115.559149][ T5846] Bluetooth: hci3: command tx timeout [ 115.565839][ T801] veth0_macvtap: left promiscuous mode [ 115.571538][ T801] veth1_vlan: left promiscuous mode [ 115.584812][ T801] veth0_vlan: left promiscuous mode [ 116.050969][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.063903][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.071769][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.080511][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.099755][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.383988][ T6340] netlink: 22784 bytes leftover after parsing attributes in process `syz.2.57'. [ 116.497943][ T801] team0 (unregistering): Port device team_slave_1 removed [ 116.568988][ T801] team0 (unregistering): Port device team_slave_0 removed [ 116.582272][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 116.592202][ T6345] netlink: 25 bytes leftover after parsing attributes in process `syz.2.59'. [ 117.514185][ T6281] chnl_net:caif_netlink_parms(): no params data found [ 117.644964][ T5846] Bluetooth: hci3: command tx timeout [ 118.186439][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.196236][ T5846] Bluetooth: hci2: command tx timeout [ 118.202835][ T6281] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.240427][ T6281] bridge_slave_0: entered allmulticast mode [ 118.258563][ T6281] bridge_slave_0: entered promiscuous mode [ 118.282984][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.290326][ T6281] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.297601][ T6281] bridge_slave_1: entered allmulticast mode [ 118.305907][ T6281] bridge_slave_1: entered promiscuous mode [ 118.613055][ T1326] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.716384][ T30] audit: type=1800 audit(1753814872.819:2): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.65" name="lu_gp_id" dev="configfs" ino=11007 res=0 errno=0 [ 118.766144][ T6281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.812066][ T6281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.839934][ T6333] chnl_net:caif_netlink_parms(): no params data found [ 118.850838][ T6388] netlink: 22784 bytes leftover after parsing attributes in process `syz.2.66'. [ 118.880874][ T1326] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.054516][ T1326] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.172774][ T6281] team0: Port device team_slave_0 added [ 119.186694][ T6395] FAULT_INJECTION: forcing a failure. [ 119.186694][ T6395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.251375][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz.2.68 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 119.251410][ T6395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.251424][ T6395] Call Trace: [ 119.251433][ T6395] [ 119.251442][ T6395] dump_stack_lvl+0x16c/0x1f0 [ 119.251483][ T6395] should_fail_ex+0x512/0x640 [ 119.251519][ T6395] _copy_from_user+0x2e/0xd0 [ 119.251554][ T6395] vmci_host_unlocked_ioctl+0x1123/0x2040 [ 119.251589][ T6395] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 119.251622][ T6395] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.251661][ T6395] ? do_vfs_ioctl+0x128/0x14f0 [ 119.251696][ T6395] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 119.251752][ T6395] ? __fget_files+0x20e/0x3c0 [ 119.251781][ T6395] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 119.251815][ T6395] __x64_sys_ioctl+0x18b/0x210 [ 119.251852][ T6395] do_syscall_64+0xcd/0x490 [ 119.251885][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.251910][ T6395] RIP: 0033:0x7f42c6f8e9a9 [ 119.251934][ T6395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.251960][ T6395] RSP: 002b:00007f42c7e03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.251982][ T6395] RAX: ffffffffffffffda RBX: 00007f42c71b5fa0 RCX: 00007f42c6f8e9a9 [ 119.251999][ T6395] RDX: 0000000000000000 RSI: 00000000000007a6 RDI: 0000000000000003 [ 119.252013][ T6395] RBP: 00007f42c7e03090 R08: 0000000000000000 R09: 0000000000000000 [ 119.252027][ T6395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.252040][ T6395] R13: 0000000000000000 R14: 00007f42c71b5fa0 R15: 00007fff9650a758 [ 119.252073][ T6395] [ 119.302162][ T1326] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.498003][ T6281] team0: Port device team_slave_1 added [ 119.708144][ T6281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.715345][ T5846] Bluetooth: hci3: command tx timeout [ 119.725422][ T6281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.751558][ T6281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.764282][ T6281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.771843][ T6281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.798767][ T6281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.937566][ T6407] random: crng reseeded on system resumption [ 120.279689][ T5846] Bluetooth: hci2: command tx timeout [ 120.287892][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.307689][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.339027][ T6333] bridge_slave_0: entered allmulticast mode [ 120.356043][ T6333] bridge_slave_0: entered promiscuous mode [ 120.566930][ T6281] hsr_slave_0: entered promiscuous mode [ 120.580038][ T6281] hsr_slave_1: entered promiscuous mode [ 120.734418][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.742377][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.755853][ T6333] bridge_slave_1: entered allmulticast mode [ 120.771345][ T6333] bridge_slave_1: entered promiscuous mode [ 120.860338][ T1326] bridge_slave_1: left allmulticast mode [ 120.874818][ T1326] bridge_slave_1: left promiscuous mode [ 120.880679][ T1326] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.930636][ T1326] bridge_slave_0: left allmulticast mode [ 120.960736][ T1326] bridge_slave_0: left promiscuous mode [ 120.973528][ T1326] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.604547][ T1326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.635248][ T1326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.646986][ T1326] bond0 (unregistering): Released all slaves [ 121.780948][ T6333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.795394][ T5846] Bluetooth: hci3: command tx timeout [ 121.987362][ T6333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.123504][ T6333] team0: Port device team_slave_0 added [ 122.179005][ T6333] team0: Port device team_slave_1 added [ 122.309621][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.317888][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.354732][ T5846] Bluetooth: hci2: command tx timeout [ 122.375518][ T6333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.395768][ T1326] hsr_slave_0: left promiscuous mode [ 122.402771][ T1326] hsr_slave_1: left promiscuous mode [ 122.408850][ T1326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.416644][ T1326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.427199][ T1326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.435244][ T1326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.453152][ T1326] veth1_macvtap: left promiscuous mode [ 122.458876][ T1326] veth0_macvtap: left promiscuous mode [ 122.468338][ T1326] veth1_vlan: left promiscuous mode [ 122.475925][ T1326] veth0_vlan: left promiscuous mode [ 123.246699][ T1326] team_slave_1 (unregistering): left allmulticast mode [ 123.264057][ T1326] team0 (unregistering): Port device team_slave_1 removed [ 123.304277][ T1326] team_slave_0 (unregistering): left allmulticast mode [ 123.320454][ T1326] team0 (unregistering): Port device team_slave_0 removed [ 123.648778][ T1326] team0 (unregistering): left allmulticast mode [ 123.709437][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.718704][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.744862][ T6333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.241646][ T6333] hsr_slave_0: entered promiscuous mode [ 124.249641][ T6333] hsr_slave_1: entered promiscuous mode [ 124.262085][ T6469] FAULT_INJECTION: forcing a failure. [ 124.262085][ T6469] name failslab, interval 1, probability 0, space 0, times 1 [ 124.264566][ T6333] debugfs: 'hsr0' already exists in 'hsr' [ 124.291418][ T6333] Cannot create hsr debugfs directory [ 124.303319][ T6469] CPU: 1 UID: 0 PID: 6469 Comm: syz.2.76 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 124.303351][ T6469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.303364][ T6469] Call Trace: [ 124.303372][ T6469] [ 124.303381][ T6469] dump_stack_lvl+0x16c/0x1f0 [ 124.303417][ T6469] should_fail_ex+0x512/0x640 [ 124.303445][ T6469] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 124.303476][ T6469] should_failslab+0xc2/0x120 [ 124.303503][ T6469] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 124.303529][ T6469] ? __pmd_alloc+0xbf/0x930 [ 124.303573][ T6469] __pmd_alloc+0xbf/0x930 [ 124.303600][ T6469] ? find_held_lock+0x2b/0x80 [ 124.303626][ T6469] __handle_mm_fault+0xaac/0x5490 [ 124.303659][ T6469] ? __pfx___handle_mm_fault+0x10/0x10 [ 124.303679][ T6469] ? __pfx_mt_find+0x10/0x10 [ 124.303732][ T6469] ? find_vma+0xbf/0x140 [ 124.303762][ T6469] ? __pfx_find_vma+0x10/0x10 [ 124.303795][ T6469] handle_mm_fault+0x589/0xd10 [ 124.303818][ T6469] ? __pkru_allows_pkey+0x51/0xb0 [ 124.303850][ T6469] do_user_addr_fault+0x7a6/0x1370 [ 124.303887][ T6469] ? rcu_is_watching+0x12/0xc0 [ 124.303917][ T6469] exc_page_fault+0x5c/0xb0 [ 124.303946][ T6469] asm_exc_page_fault+0x26/0x30 [ 124.303968][ T6469] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 124.303992][ T6469] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 124.304012][ T6469] RSP: 0018:ffffc9000394fb08 EFLAGS: 00050202 [ 124.304030][ T6469] RAX: 2020203a30202020 RBX: 0000000000000028 RCX: 0000000000000028 [ 124.304044][ T6469] RDX: ffffed100db18406 RSI: ffff88806d8c2001 RDI: 0000000000000000 [ 124.304058][ T6469] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100db18405 [ 124.304072][ T6469] R10: ffff88806d8c2028 R11: 0000000000000001 R12: ffffc9000394fd98 [ 124.304086][ T6469] R13: 0000000000000028 R14: ffff88806d8c2001 R15: 00007ffffffff000 [ 124.304119][ T6469] _copy_to_iter+0x383/0x16f0 [ 124.304155][ T6469] ? find_held_lock+0x2b/0x80 [ 124.304182][ T6469] ? traverse.part.0.constprop.0+0x2c0/0x640 [ 124.304220][ T6469] ? __pfx__copy_to_iter+0x10/0x10 [ 124.304252][ T6469] ? do_raw_spin_unlock+0x172/0x230 [ 124.304277][ T6469] ? _raw_spin_unlock+0x28/0x50 [ 124.304302][ T6469] ? traverse.part.0.constprop.0+0x2c5/0x640 [ 124.304350][ T6469] seq_read_iter+0x719/0x12c0 [ 124.304401][ T6469] proc_reg_read_iter+0x21d/0x310 [ 124.304433][ T6469] vfs_read+0x8bc/0xc60 [ 124.304464][ T6469] ? __pfx_vfs_read+0x10/0x10 [ 124.304485][ T6469] ? find_held_lock+0x2b/0x80 [ 124.304527][ T6469] __x64_sys_pread64+0x1eb/0x250 [ 124.304558][ T6469] ? __pfx___x64_sys_pread64+0x10/0x10 [ 124.304597][ T6469] do_syscall_64+0xcd/0x490 [ 124.304626][ T6469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.304648][ T6469] RIP: 0033:0x7f42c6f8e9a9 [ 124.304666][ T6469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.304686][ T6469] RSP: 002b:00007f42c7e03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 124.304707][ T6469] RAX: ffffffffffffffda RBX: 00007f42c71b5fa0 RCX: 00007f42c6f8e9a9 [ 124.304722][ T6469] RDX: 0000008100000049 RSI: 0000000000000000 RDI: 0000000000000003 [ 124.304737][ T6469] RBP: 00007f42c7e03090 R08: 0000000000000000 R09: 0000000000000000 [ 124.304750][ T6469] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 124.304763][ T6469] R13: 0000000000000000 R14: 00007f42c71b5fa0 R15: 00007fff9650a758 [ 124.304791][ T6469] [ 124.660001][ T5846] Bluetooth: hci2: command tx timeout [ 125.207741][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 125.242202][ T6485] netlink: 306 bytes leftover after parsing attributes in process `syz.1.80'. [ 125.278817][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 125.296423][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 125.373494][ T6281] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 125.446052][ T6281] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 125.469972][ T6281] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 125.507722][ T6281] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 125.792571][ T6281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.851355][ T6281] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.877534][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.884729][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.937277][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.944420][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.075078][ T6333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.179191][ T6333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.278307][ T6333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.332413][ T6333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.823694][ T6333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.878961][ T6533] [ 126.881336][ T6533] ====================================================== [ 126.888362][ T6533] WARNING: possible circular locking dependency detected [ 126.895398][ T6533] 6.16.0-syzkaller-00857-gced1b9e0392d #0 Not tainted [ 126.902172][ T6533] ------------------------------------------------------ [ 126.909198][ T6533] syz.1.86/6533 is trying to acquire lock: [ 126.915013][ T6533] ffff888142bbad28 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x103/0x400 [ 126.924452][ T6533] [ 126.924452][ T6533] but task is already holding lock: [ 126.931821][ T6533] ffff888142bba7e8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 126.943066][ T6533] [ 126.943066][ T6533] which lock already depends on the new lock. [ 126.943066][ T6533] [ 126.953465][ T6533] [ 126.953465][ T6533] the existing dependency chain (in reverse order) is: [ 126.962487][ T6533] [ 126.962487][ T6533] -> #3 (&q->q_usage_counter(io)#18){++++}-{0:0}: [ 126.971102][ T6533] blk_alloc_queue+0x619/0x760 [ 126.976403][ T6533] blk_mq_alloc_queue+0x172/0x280 [ 126.981948][ T6533] __blk_mq_alloc_disk+0x29/0x120 [ 126.987494][ T6533] loop_add+0x490/0xb70 [ 126.992166][ T6533] loop_init+0x164/0x270 [ 126.996929][ T6533] do_one_initcall+0x120/0x6e0 [ 127.002216][ T6533] kernel_init_freeable+0x5c2/0x900 [ 127.007936][ T6533] kernel_init+0x1c/0x2b0 [ 127.012794][ T6533] ret_from_fork+0x5d7/0x6f0 [ 127.017909][ T6533] ret_from_fork_asm+0x1a/0x30 [ 127.023191][ T6533] [ 127.023191][ T6533] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 127.030405][ T6533] fs_reclaim_acquire+0x102/0x150 [ 127.035983][ T6533] prepare_alloc_pages+0x162/0x610 [ 127.041619][ T6533] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 127.048120][ T6533] __alloc_pages_noprof+0xb/0x1b0 [ 127.053664][ T6533] pcpu_populate_chunk+0x110/0xb00 [ 127.059293][ T6533] pcpu_alloc_noprof+0x86a/0x1470 [ 127.064841][ T6533] xt_percpu_counter_alloc+0x13e/0x1b0 [ 127.070831][ T6533] find_check_entry.constprop.0+0xbc/0x9b0 [ 127.077163][ T6533] translate_table+0xc98/0x1720 [ 127.082534][ T6533] ipt_register_table+0x102/0x430 [ 127.088077][ T6533] iptable_mangle_table_init+0x40/0x60 [ 127.094059][ T6533] xt_find_table_lock+0x2e4/0x520 [ 127.099607][ T6533] xt_request_find_table_lock+0x28/0xf0 [ 127.105671][ T6533] get_info+0x190/0x610 [ 127.110344][ T6533] do_ipt_get_ctl+0x169/0xa10 [ 127.115543][ T6533] nf_getsockopt+0x79/0xe0 [ 127.120483][ T6533] ip_getsockopt+0x18c/0x1e0 [ 127.125595][ T6533] tcp_getsockopt+0x9e/0x100 [ 127.130707][ T6533] do_sock_getsockopt+0x34a/0x440 [ 127.136247][ T6533] __sys_getsockopt+0x123/0x1b0 [ 127.141620][ T6533] __x64_sys_getsockopt+0xbd/0x160 [ 127.147254][ T6533] do_syscall_64+0xcd/0x490 [ 127.152280][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.158691][ T6533] [ 127.158691][ T6533] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 127.166426][ T6533] __mutex_lock+0x199/0xb90 [ 127.171459][ T6533] pcpu_alloc_noprof+0xb4c/0x1470 [ 127.177002][ T6533] sbitmap_init_node+0x2fd/0x770 [ 127.182544][ T6533] sbitmap_queue_init_node+0x41/0x560 [ 127.188431][ T6533] blk_mq_init_tags+0x12d/0x2b0 [ 127.193803][ T6533] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 127.199867][ T6533] blk_mq_init_sched+0x30c/0x610 [ 127.205332][ T6533] elevator_switch+0x1e1/0x7f0 [ 127.210631][ T6533] elevator_change+0x2ac/0x400 [ 127.215919][ T6533] elevator_set_default+0x2c4/0x360 [ 127.221642][ T6533] blk_register_queue+0x393/0x4f0 [ 127.227192][ T6533] __add_disk+0x74a/0xf00 [ 127.232040][ T6533] add_disk_fwnode+0x13f/0x5d0 [ 127.237323][ T6533] nbd_dev_add+0x783/0xbb0 [ 127.242268][ T6533] nbd_init+0x181/0x320 [ 127.247030][ T6533] do_one_initcall+0x120/0x6e0 [ 127.252314][ T6533] kernel_init_freeable+0x5c2/0x900 [ 127.258036][ T6533] kernel_init+0x1c/0x2b0 [ 127.262893][ T6533] ret_from_fork+0x5d7/0x6f0 [ 127.268010][ T6533] ret_from_fork_asm+0x1a/0x30 [ 127.273302][ T6533] [ 127.273302][ T6533] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 127.281128][ T6533] __lock_acquire+0x126f/0x1c90 [ 127.286505][ T6533] lock_acquire+0x179/0x350 [ 127.291533][ T6533] __mutex_lock+0x199/0xb90 [ 127.296557][ T6533] elevator_change+0x103/0x400 [ 127.301850][ T6533] elv_iosched_store+0x2eb/0x3a0 [ 127.307312][ T6533] queue_attr_store+0x26b/0x310 [ 127.312687][ T6533] sysfs_kf_write+0xf2/0x150 [ 127.317798][ T6533] kernfs_fop_write_iter+0x354/0x510 [ 127.323694][ T6533] vfs_write+0x6c4/0x1150 [ 127.328541][ T6533] ksys_write+0x12a/0x250 [ 127.333389][ T6533] do_syscall_64+0xcd/0x490 [ 127.338416][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.344825][ T6533] [ 127.344825][ T6533] other info that might help us debug this: [ 127.344825][ T6533] [ 127.355048][ T6533] Chain exists of: [ 127.355048][ T6533] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#18 [ 127.355048][ T6533] [ 127.368794][ T6533] Possible unsafe locking scenario: [ 127.368794][ T6533] [ 127.376236][ T6533] CPU0 CPU1 [ 127.381590][ T6533] ---- ---- [ 127.386945][ T6533] lock(&q->q_usage_counter(io)#18); [ 127.392321][ T6533] lock(fs_reclaim); [ 127.398842][ T6533] lock(&q->q_usage_counter(io)#18); [ 127.406749][ T6533] lock(&q->elevator_lock); [ 127.411344][ T6533] [ 127.411344][ T6533] *** DEADLOCK *** [ 127.411344][ T6533] [ 127.419486][ T6533] 7 locks held by syz.1.86/6533: [ 127.424416][ T6533] #0: ffff88802adca9b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 127.433485][ T6533] #1: ffff888036802428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 127.442464][ T6533] #2: ffff88806031d488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 127.452234][ T6533] #3: ffff8880262cb1e8 (kn->active#67){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 127.462270][ T6533] #4: ffff888142bcf368 (&set->update_nr_hwq_lock){.+.+}-{4:4}, at: elv_iosched_store+0x337/0x3a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 127.472996][ T6533] #5: ffff888142bba7e8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 127.484715][ T6533] #6: ffff888142bba820 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 127.496663][ T6533] [ 127.496663][ T6533] stack backtrace: [ 127.502553][ T6533] CPU: 1 UID: 0 PID: 6533 Comm: syz.1.86 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 127.502577][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.502589][ T6533] Call Trace: [ 127.502598][ T6533] [ 127.502606][ T6533] dump_stack_lvl+0x116/0x1f0 [ 127.502636][ T6533] print_circular_bug+0x275/0x350 [ 127.502663][ T6533] check_noncircular+0x14c/0x170 [ 127.502692][ T6533] __lock_acquire+0x126f/0x1c90 [ 127.502722][ T6533] lock_acquire+0x179/0x350 [ 127.502746][ T6533] ? elevator_change+0x103/0x400 [ 127.502774][ T6533] ? __pfx___might_resched+0x10/0x10 [ 127.502798][ T6533] __mutex_lock+0x199/0xb90 [ 127.502823][ T6533] ? elevator_change+0x103/0x400 [ 127.502849][ T6533] ? elevator_change+0x103/0x400 [ 127.502876][ T6533] ? __pfx___mutex_lock+0x10/0x10 [ 127.502901][ T6533] ? blk_mq_cancel_work_sync+0xd8/0x110 [ 127.502923][ T6533] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 127.502947][ T6533] ? elevator_change+0x103/0x400 [ 127.502973][ T6533] elevator_change+0x103/0x400 [ 127.503000][ T6533] elv_iosched_store+0x2eb/0x3a0 [ 127.503028][ T6533] ? __pfx_elv_iosched_store+0x10/0x10 [ 127.503059][ T6533] ? __mutex_trylock_common+0xe9/0x250 [ 127.503086][ T6533] ? __pfx_elv_iosched_store+0x10/0x10 [ 127.503114][ T6533] queue_attr_store+0x26b/0x310 [ 127.503138][ T6533] ? __pfx_queue_attr_store+0x10/0x10 [ 127.503161][ T6533] ? __lock_acquire+0x622/0x1c90 [ 127.503186][ T6533] ? xfs_rtrmapbt_maxlevels_ondisk+0x1f/0xa0 [ 127.503218][ T6533] ? find_held_lock+0x2b/0x80 [ 127.503238][ T6533] ? sysfs_file_kobj+0xe4/0x290 [ 127.503257][ T6533] ? __pfx_queue_attr_store+0x10/0x10 [ 127.503279][ T6533] sysfs_kf_write+0xf2/0x150 [ 127.503298][ T6533] kernfs_fop_write_iter+0x354/0x510 [ 127.503324][ T6533] ? __pfx_sysfs_kf_write+0x10/0x10 [ 127.503343][ T6533] vfs_write+0x6c4/0x1150 [ 127.503363][ T6533] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 127.503390][ T6533] ? __pfx___mutex_lock+0x10/0x10 [ 127.503417][ T6533] ? __pfx_vfs_write+0x10/0x10 [ 127.503442][ T6533] ksys_write+0x12a/0x250 [ 127.503461][ T6533] ? __pfx_ksys_write+0x10/0x10 [ 127.503483][ T6533] do_syscall_64+0xcd/0x490 [ 127.503508][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.503528][ T6533] RIP: 0033:0x7f7bf9b8e9a9 [ 127.503547][ T6533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.503564][ T6533] RSP: 002b:00007f7bfa972038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.503582][ T6533] RAX: ffffffffffffffda RBX: 00007f7bf9db5fa0 RCX: 00007f7bf9b8e9a9 [ 127.503595][ T6533] RDX: 0000000000000081 RSI: 0000200000000140 RDI: 0000000000000003 [ 127.503606][ T6533] RBP: 00007f7bf9c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 127.503617][ T6533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.503627][ T6533] R13: 0000000000000000 R14: 00007f7bf9db5fa0 R15: 00007ffda43cdc68 [ 127.503645][ T6533] [ 127.801747][ T6333] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.813866][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.821048][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.899668][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.906847][ T4186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.652109][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.720969][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.822866][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.879120][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.010108][ T36] bridge_slave_1: left allmulticast mode [ 129.019248][ T36] bridge_slave_1: left promiscuous mode [ 129.028420][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.041271][ T36] bridge_slave_0: left allmulticast mode [ 129.049998][ T36] bridge_slave_0: left promiscuous mode [ 129.056014][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.246855][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.261763][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.272346][ T36] bond0 (unregistering): Released all slaves [ 129.477317][ T36] hsr_slave_0: left promiscuous mode [ 129.483145][ T36] hsr_slave_1: left promiscuous mode [ 129.489274][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.498807][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.506805][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.514224][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.527509][ T36] veth1_macvtap: left promiscuous mode [ 129.533050][ T36] veth0_macvtap: left promiscuous mode [ 129.539047][ T36] veth1_vlan: left promiscuous mode [ 129.544518][ T36] veth0_vlan: left promiscuous mode [ 129.724288][ T36] team0 (unregistering): Port device team_slave_1 removed [ 129.752802][ T36] team0 (unregistering): Port device team_slave_0 removed [ 130.367346][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.410657][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.450352][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.501531][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.804253][ T36] bridge_slave_1: left allmulticast mode [ 130.810890][ T36] bridge_slave_1: left promiscuous mode [ 130.816892][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.825715][ T36] bridge_slave_0: left allmulticast mode [ 130.831382][ T36] bridge_slave_0: left promiscuous mode [ 130.837394][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.846851][ T36] bridge_slave_1: left allmulticast mode [ 130.852504][ T36] bridge_slave_1: left promiscuous mode [ 130.858351][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.867010][ T36] bridge_slave_0: left allmulticast mode [ 130.872664][ T36] bridge_slave_0: left promiscuous mode [ 130.878649][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.887666][ T36] bridge_slave_1: left allmulticast mode [ 130.893391][ T36] bridge_slave_1: left promiscuous mode [ 130.899219][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.907483][ T36] bridge_slave_0: left allmulticast mode [ 130.913598][ T36] bridge_slave_0: left promiscuous mode [ 130.920402][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.031968][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.041765][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.051847][ T36] bond0 (unregistering): Released all slaves [ 131.110407][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.120261][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.131026][ T36] bond0 (unregistering): Released all slaves [ 131.259184][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.269529][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.278963][ T36] bond0 (unregistering): Released all slaves [ 131.538800][ T36] hsr_slave_0: left promiscuous mode [ 131.546411][ T36] hsr_slave_1: left promiscuous mode [ 131.552163][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.560828][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.570631][ T36] hsr_slave_0: left promiscuous mode [ 131.577435][ T36] hsr_slave_1: left promiscuous mode [ 131.583537][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.591073][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.598890][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.606406][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.616445][ T36] hsr_slave_0: left promiscuous mode [ 131.622036][ T36] hsr_slave_1: left promiscuous mode [ 131.627761][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.636735][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.648150][ T36] veth1_macvtap: left promiscuous mode [ 131.653632][ T36] veth0_macvtap: left promiscuous mode [ 131.659455][ T36] veth1_vlan: left promiscuous mode [ 131.664790][ T36] veth0_vlan: left promiscuous mode [ 131.796987][ T36] team0 (unregistering): Port device team_slave_1 removed [ 131.814141][ T36] team0 (unregistering): Port device team_slave_0 removed [ 131.959663][ T36] team0 (unregistering): Port device team_slave_1 removed [ 131.980665][ T36] team0 (unregistering): Port device team_slave_0 removed [ 132.108451][ T36] team0 (unregistering): Port device team_slave_1 removed [ 132.126326][ T36] team0 (unregistering): Port device team_slave_0 removed [ 132.846198][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.852543][ T1300] ieee802154 phy1 wpan1: encryption failed: -22