last executing test programs: 4m18.98658144s ago: executing program 3 (id=494): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20006, 0x10000000000df, 0xeb2, 0x401, 0x8000) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) r1 = socket(0x2, 0x6, 0x0) setsockopt$auto(r1, 0x10d, 0xb, 0x0, 0x17) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x18, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="09ff7f0000000100"}, 0x55) socket(0x10, 0x3, 0xa) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x12c, r3, 0xf01, 0x70bdac, 0x25dfdbfe, {}, [@NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x6, 0x127, 0xfffb}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x40}, @NL80211_ATTR_IE={0x106, 0x2a, "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"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setreuid$auto(0x3, 0x7) socket(0x22, 0x3, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x8000) mprotect$auto(0x1ffff000, 0x7ffffffffffffffe, 0xd) r4 = socket(0xa, 0x801, 0x84) getsockopt$auto(r4, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0xc0) sendto$auto(0x3, 0x0, 0x8, 0xe, &(0x7f0000000140)={0x2, @sockaddr_1_1}, 0x1c) 4m17.641955785s ago: executing program 3 (id=500): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) keyctl$auto(0x10, 0xfffffffe, 0x100400, 0x0, 0xe) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) 4m17.39868633s ago: executing program 3 (id=503): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x6, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) preadv2$auto(0x8000000000000001, &(0x7f0000000040)={&(0x7f0000000000), 0x9}, 0x0, 0x0, 0x1, 0x6) (async) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x49, &(0x7f0000000040)='!\x00', 0x1ff) (async) setsockopt$auto(0x1, 0x1, 0x10, &(0x7f0000000040)='\x00\x15\x8d\xca`\xbcgY\xd2w\xf6\xaedN\xfb\xc2_\xf54\xb4z\n*\xaaL\'\xab>q\x9e\xdd`\x84_\r\xc2\x17\xb1\xaf\xd2\f\xfd[Iy\xbb*$\xec\xca\x8b\xde\xdcV@\x04+\x00'/82, 0xba) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r0) 4m17.124554158s ago: executing program 3 (id=507): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) mlockall$auto(0x3) prctl$auto(0x23, 0xc, 0x84d5, 0x96f, 0x0) io_uring_setup$auto(0x6, 0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) r0 = socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x10, 0xc) poll$auto(0x0, 0x2, 0x43) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x88d0}, 0x2000c041) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) shutdown$auto(0x200000003, 0x2) mlockall$auto(0x3) 4m13.460962636s ago: executing program 3 (id=517): close_range$auto(0x2, 0xfffffffffffff000, 0x2) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) creat$auto(&(0x7f0000000500)='XF\b\x13\x00', 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(&(0x7f0000001000)=0x1) socket(0x2, 0x1, 0x0) socket(0xa, 0x801, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x10000c, 0x9, 0x0, 0xc}, 0x283) clone$auto(0x1ff, 0x0, &(0x7f0000000200)=0x717, 0x0, 0xffffffffffffff06) socket(0x20, 0xa, 0x8) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) mount$auto(&(0x7f0000000100)='veth1_to_team\x00', &(0x7f00000000c0)='q[,&*}\x00', 0x0, 0x5, 0x0) socket(0x1, 0x1, 0x1) bind$auto(0x3, &(0x7f0000000140)={0x1, @sa_data_min="af7af2952a203b6cdd8c8f51372e"}, 0xd) ioctl$auto(r0, 0xfffffffd, 0x8000000000000001) 4m13.273617295s ago: executing program 3 (id=518): socket(0xa, 0x2, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0xf14, 0xf4240}, 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x5, 0x200, 0x1000000000, 0x7, 0x7, 0x3, 0x6, 0x2, 0x10000000000, 0x10000005e58296f, 0x1e, 0x7, 0x4ebf, 0x7, 0x8, 0x6]}, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) bpf$auto(0x5, 0x0, 0x100) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0xa, 0xa, 0x9b72, 0x1, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8005, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) timer_create$auto(0x2, 0x0, 0x0) mmap$auto(0x0, 0x400000000001, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) add_key$auto(&(0x7f00000002c0)='\'/{#/`%)^\')[}\x00', 0x0, 0x0, 0xb, 0xf75a0000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x700fc00) epoll_create1$auto(0x0) socket(0xa, 0x805, 0x102) mmap$auto(0x0, 0x2000202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xff00) 3m58.061237298s ago: executing program 32 (id=518): socket(0xa, 0x2, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0xf14, 0xf4240}, 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x5, 0x200, 0x1000000000, 0x7, 0x7, 0x3, 0x6, 0x2, 0x10000000000, 0x10000005e58296f, 0x1e, 0x7, 0x4ebf, 0x7, 0x8, 0x6]}, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) bpf$auto(0x5, 0x0, 0x100) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0xa, 0xa, 0x9b72, 0x1, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8005, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) timer_create$auto(0x2, 0x0, 0x0) mmap$auto(0x0, 0x400000000001, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) add_key$auto(&(0x7f00000002c0)='\'/{#/`%)^\')[}\x00', 0x0, 0x0, 0xb, 0xf75a0000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x700fc00) epoll_create1$auto(0x0) socket(0xa, 0x805, 0x102) mmap$auto(0x0, 0x2000202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xff00) 3m20.359823133s ago: executing program 2 (id=618): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f0000000100)='/\x00', &(0x7f0000000000)={0xc, 0x7, "6d962c000400003344980946"}, &(0x7f0000001180), 0x200) epoll_create$auto(0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_pwait$auto(r0, &(0x7f0000000040)={0x3ff, 0x3}, 0xff, 0x2, &(0x7f0000000080)={0x2}, 0x3ff) socket(0x2, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0xc03) 3m20.182598265s ago: executing program 2 (id=619): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0xffffffffffffffff, 0xa, 0x646) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80000, 0x0) (async) socket(0x1e, 0x1, 0x0) (async) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) (async) open(&(0x7f0000000000)='./file0\x00', 0xa240, 0x15e) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async) close_range$auto(0x2, 0x8000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7ffe) (async) futex$auto(0x0, 0x6, 0x4, 0x0, 0x0, 0x80000002) (async) ioperm$auto(0x7, 0x6, 0x5) (async) io_getevents$auto(0x75, 0x3, 0x7, 0x0, 0x0) accept$auto(0x5, 0x0, &(0x7f0000000040)=0x6f) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) ppoll$auto(0x0, 0x26, &(0x7f0000000040)={0x80000001, 0x9}, 0x0, 0xffffffffffffffff) (async) socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000881}, 0x8010) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) (async) socket(0x2, 0x80002, 0x73) (async) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) (async) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async) getsockopt$auto(0x3, 0x8000001, 0x1c, 0x0, 0x0) socket(0x1e, 0x1, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) 3m19.215655353s ago: executing program 2 (id=622): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) mq_open$auto(0x0, 0x3ff, 0x7, &(0x7f0000000140)={0x7, 0x2f05, 0xe6b, 0x4}) r0 = socket$nl_generic(0x10, 0x3, 0x10) futex$auto(&(0x7f0000000000)=0x7, 0x9, 0x7, &(0x7f0000000080)={0x1, 0x9}, 0x0, 0x10001) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000a00), r0) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HWSIM_ATTR_RADIO_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sa_data_min="020a2f88bf2b43f71e5ceaf3cddc"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) setsockopt$auto(0x3, 0x1, 0x19, 0xffffffffffffffff, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x70000f5) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004994}, 0x4000884) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r4, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x5}, @GTPA_MS_ADDRESS={0x8, 0x5, 0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, {@u6_addr8="28f6b27d3e1628fd7e4e9819b3fd269d"}}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008040) 3m18.084761112s ago: executing program 2 (id=623): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8814}, 0x20008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) socket(0x25, 0x1, 0x3) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fddbdf251200000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) 3m17.507138542s ago: executing program 2 (id=624): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x1004, 0x8000, 0x40eb2, 0x402, 0x300000000000) tkill$auto(0x1, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f0000000080)={0x37c, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_QOS_MAP={0xda, 0xc7, "5b577ee84d8c457ed9c7022b28397bd9fa51473d129f8d580a81c3e182692d2cbc343263e17d3e3b688217d1fc324f0ce244d035abd0b86501a9643c6a0acfc6c02ed4677b6777cad791104915c62e8d51dd879eb10505a5f66599129c5bb973011bb81adeaaa0c7966e57d4e1b70daeac2e4592027cb72100a9aec93ef0dcdf23818d2aa353b092a0eae35510d71eb316ba9f549591aef297f8fb319327d9460877732962d811bda1564a293141988919ffa4979fdfa863b546dfd3b147af398a69aa4d56a897dfee775f45e28b6694dbebeb8ce2a3"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MLO_TTLM_DLINK={0xb9, 0x148, "8b3972023cf563010c7214d3db53d2a31fdb5e7cfcf5fea2f9446fea3d57ca577281bfa7cb82df2e6d1bc9273e3d42f370188b61afa7d1ce0b93fc0270d76c5f7809f21bd2e792d4f7aa44a3afcb96425e883f01477a11cd5a9a0a77fad2010b2d8a1caf0ccd9e9f7080223968bea081ee72e398efdbb4edae801ebe54d31d66ee9a5e2699d04fd528973d86c9d060eac950fc38a7accf0a5b255b4ea8d1fc08631a0338104ccf11caf7719330c967aed2d8795981"}, @NL80211_ATTR_FILS_ERP_RRK={0x3f, 0xfc, "8694feeaa04b821ef47f72093770627b8d44d79a0fdf67f3499e8ce28c525e0b86a269c93b7a1ac93dea3930fa85908f432190ce77c685eeb4c91c"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x40}, @NL80211_ATTR_EHT_CAPABILITY={0xff, 0x136, "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"}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x75, 0xbb, "f6b962b99741971986fffccb92b0262d6079a10232ed529e4d643b3db4f1c816107354b2c5ac668ac8f4f644700c3003f5993f13513c2841801fce5e4f468a6b2ae1502701e5932829b571ebcc7707be727377211c06a1b4d2c7299bbb1127779e5d5945a3a3813ff3ff57abe3ded2a9b0"}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x2}]}, 0x37c}, 0x1, 0x0, 0x0, 0xc695f7367f83f319}, 0x20000814) 3m16.287005012s ago: executing program 2 (id=625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000280), r0) shutdown$auto(r0, 0x88) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000000340)={0x0, 0x59, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0xb01, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x10000) 3m15.881611377s ago: executing program 33 (id=625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000280), r0) shutdown$auto(r0, 0x88) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000000340)={0x0, 0x59, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0xb01, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x10000) 2m32.89310623s ago: executing program 4 (id=738): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) mq_open$auto(0x0, 0x3ff, 0x7, &(0x7f0000000140)={0x7, 0x2f05, 0xe6b, 0x4}) r0 = socket$nl_generic(0x10, 0x3, 0x10) futex$auto(&(0x7f0000000000)=0x7, 0x9, 0x7, &(0x7f0000000080)={0x1, 0x9}, 0x0, 0x10001) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000a00), r0) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HWSIM_ATTR_RADIO_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sa_data_min="020a2f88bf2b43f71e5ceaf3cddc"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) setsockopt$auto(0x3, 0x1, 0x19, 0xffffffffffffffff, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x70000f5) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100250000004000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x20004994}, 0x4000884) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r4, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x5}, @GTPA_MS_ADDRESS={0x8, 0x5, 0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, {@u6_addr8="28f6b27d3e1628fd7e4e9819b3fd269d"}}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008040) 2m31.471191281s ago: executing program 4 (id=744): personality$auto(0xfffffffc) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) set_mempolicy$auto(0x3, &(0x7f00000001c0)=0xfffffffffffffffd, 0xe4b) execve$auto(&(0x7f0000000040)='ns/time_for_children\x00', &(0x7f0000000140)=&(0x7f0000000100)='\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000080)='}[,f\x00\x00v\xac\x03l\xe9I\x15{\xad \x13 \xf0\x17\xdfI\x82z\xf0', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) clone$auto(0xfffffffe20000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xfa6) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(0x0, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb4, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) select$auto(0x85, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x8000000000, 0x6}) syz_genetlink_get_family_id$auto_gtp(0x0, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0xfffffffffffffffc, 0xfffffffffffeffff, 0x15) mmap$auto(0x4, 0x7, 0xae1, 0x19, 0x9bca, 0xffffffffffffff7f) r2 = socket(0x29, 0x5, 0x0) write$auto(0x3, 0x0, 0xfffffdef) sendmmsg$auto(r2, 0x0, 0x9a6, 0x3ec0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8000, 0x0) keyctl$auto(0xe, 0x2, 0x16efae4c, 0x8000005092, 0x61f93bdb) keyctl$auto(0x10, 0x4, 0x5cd, 0x6, 0x1) 2m31.048727851s ago: executing program 4 (id=746): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_HSR(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_LIST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@HSR_A_IFINDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004841}, 0x20000890) madvise$auto(0x0, 0xffffffffffff0005, 0x19) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) mmap$auto(0x200000000000000, 0x100000000, 0xffffffffffffffff, 0x8800000000eb1, 0xfffffffffffffffa, 0x3) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x60) socket(0x6, 0x2, 0xb) ioctl$auto(0xc8, 0x400454d1, 0x5c8d) 2m29.862305391s ago: executing program 4 (id=750): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0xe983, 0xdd, 0xeb1, 0xff, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fde1df250200000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00a\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) socket(0x21, 0x2, 0x2) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r4 = socket(0xa, 0x2, 0x3a) socket(0x2b, 0x1, 0x1) listen$auto(0x3, 0x81) r5 = socket(0x11, 0x2, 0x300) setsockopt$auto(r5, 0x107, 0x18, 0x0, 0x6) fcntl$getown(r5, 0x9) close_range$auto(0x2, 0x8000, 0x0) setsockopt$auto(r4, 0x29, 0x18, &(0x7f0000000140)='\xec\xe8\x83\x8e}\x9d\xb0\x046\x85\xa0\xa0\x81s^\x13\xee\x80\x16lz[+\x99vZ}P\x8aw\xcf;w\xb0\xc2M\x9e\xbd^Z\xea\xd0/\xa8\x11]\f\xfe\x0fC\xc5|~^\x12\x06\'\x84\xe7\xe8\x19\x1e\x88\x8b\xfay\x0e\xd3\xae+\x86m\xb1\xa6\x04\xf7S\xb43i\xf5\n6\x17\xaf\xdf\x8f\xc5\x81O\xd7\x14)6\xafl\xb1U6\x8dT\xb1v/\xec\xfc*\x0eK\xb9\x06\xa2\x95\x80\xb8\x8f\x9b!p\xf9\x9c\xb5)\xc7\xfe\x91\x12d_!\xb6f\x19\xc5Z\\H6M\xc0\x13I\xa3\x8c\xe4\x12!\xf7M\x86\xd5!d\xa2x\xd4\x05h\xad\xdbPM\xda{q\xce~', 0x1ff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'}) mount$auto(0x0, &(0x7f0000000000)='\xa2\xbeR\x97\xbc\xa3`\x10yOJ\x8a\xcd*\xd3\xb9\xf3`\xb2e\x129=\x1e\x9f\x18\xc4\xbe>\xb2\xfd\xa9j>R\x0f\xfd\xdc\xdd\xba\xd4[[K\x06-\x92\xd8\xcbc\xdf\xb2\x12\xde0\x8d97l\b\xa5}i\x8c\bE\xa7\x80\xfb\x18\x9f\x9e\x1e\xba\xb4\xb8\x88G\xac\xe2', &(0x7f0000000140)='!\xec_\xfd\x15St\x04\xba\x15%\xdb\xb4l\x85\x16\bB\x9c=\x15\xc8\x83~\xdd\xfd\xcbnf9^\x00\x1f\xf5k\xed\xf2c\xe6\x949f7\'n\x19\x1b\x99\x1d\xdcl\xa0+\x90I\xceS\xd6\x00\xef\xa2{n*\xa7\xa4\x01\x14%\x94\xa9\x8f\xa8N|\x0e\x908>1\x19\xcc\x9aO\\+\xb2\xa5\xae\x1d#D9(\x8c\xf8\xcf\xe3\xbb<\xbd:i\x84\xad\x0f\xd8y\xa1)\xb1\x88\xa6\xf06@\x87\xa1\xdd\xa1&\x9e\xeaY\xf4\xce_\xca\x1b\xa6\x80P\xb1\xd1\xdf\xf1\x91\xcc\xaf6\x12\xb1\xa5\x12*\xb5n\xa3+*\xdd\xfd9\xad\xdbG=\xd3\xab\xd8Fs\xc7\x7f\x99\x8c\xda\xc1\f:\xe1*\xfa\xee\x87\x1b\xb4\x0f\xa4o\xfc\x10\x8b\xbb)%.{\xc1av\x03\xc7\x91\xe8\xce{\xe1L\x88\n_@3\xef\xc2\x12\xb3\xad\x9f\xb4>B\xa3\xf4\xac\xf0\xf5T\x90\xf4\x8d\xdeg', 0xfd, 0x0) mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0) memfd_create$auto(&(0x7f00000002c0)='IPVS\x00', 0x1) mount$auto(0x0, &(0x7f0000000240)='}[,&*}\x00', 0x0, 0x7f, &(0x7f00000002c0)) socket(0x11, 0x7fffe, 0x4) 2m29.431800985s ago: executing program 4 (id=751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_ACTIONS={0x4}]}, 0x20}}, 0x4000) 2m29.124286105s ago: executing program 4 (id=752): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0x0) setsockopt$auto(0x4, 0x0, 0x485, 0xfffffffffffffffe, 0x2000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xaf2c, 0x400000000004, 0x4000000000df, 0x40eb2, 0x7, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xb0000001) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x27, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x4800, 0x47) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x10000c, 0x9, 0x0, 0xc}, 0x283) clone$auto(0x1ff, 0x0, &(0x7f0000000200)=0x717, 0x0, 0xffffffffffffff06) socket(0x20, 0xa, 0x8) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) mount$auto(&(0x7f0000000100)='veth1_to_team\x00', 0x0, 0x0, 0x5, 0x0) socket(0x18, 0x2, 0x3) bind$auto(0x3, &(0x7f0000000140)={0x1, @sa_data_min="af7af2952a203b6cdd8c8f51372e"}, 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x13, 0x3, 0x80000000) ioctl$auto(r0, 0xfffffffd, 0x8000000000000001) 2m13.767020392s ago: executing program 34 (id=752): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0x0) setsockopt$auto(0x4, 0x0, 0x485, 0xfffffffffffffffe, 0x2000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xaf2c, 0x400000000004, 0x4000000000df, 0x40eb2, 0x7, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xb0000001) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x27, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x4800, 0x47) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x10000c, 0x9, 0x0, 0xc}, 0x283) clone$auto(0x1ff, 0x0, &(0x7f0000000200)=0x717, 0x0, 0xffffffffffffff06) socket(0x20, 0xa, 0x8) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) mount$auto(&(0x7f0000000100)='veth1_to_team\x00', 0x0, 0x0, 0x5, 0x0) socket(0x18, 0x2, 0x3) bind$auto(0x3, &(0x7f0000000140)={0x1, @sa_data_min="af7af2952a203b6cdd8c8f51372e"}, 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x13, 0x3, 0x80000000) ioctl$auto(r0, 0xfffffffd, 0x8000000000000001) 25.690255134s ago: executing program 0 (id=978): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) madvise$auto(0x0, 0x2000040080000004, 0xe) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) clone$auto(0x0, 0x6, 0x0, 0x0, 0xd47) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8850}, 0x4004080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setreuid$auto(0x15, 0x5) rt_sigpending$auto(&(0x7f0000000040)={0x6}, 0xc) fcntl$auto(0x3, 0x400, 0x1) setuid$auto(0xe) open(&(0x7f0000000000)='./file0\x00', 0xe600, 0x20) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) 24.421823076s ago: executing program 0 (id=981): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x23) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) setuid$auto(0x800000000008) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bond0\x00'}) clone3$auto(0x0, 0x1000) setsockopt$auto(r0, 0x29, 0x49, &(0x7f0000000040)='!\x00', 0x1ff) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x800000000000008, 0xc, 0x9, 0x3, 0x6, 0x1, 0x40009, 0x5e582972, 0x4000000000000000, 0x14, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 23.263596986s ago: executing program 1 (id=984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000980)={&(0x7f0000000080)={0x900, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_IE_RIC={0x83c, 0xb2, "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"}, @NL80211_ATTR_VENDOR_DATA={0x72, 0xc5, "e7ea6f708a3d0cdfe847d0b9c09ca0af85fe26cb51c35f83e931930c8ffb136b186491b085ecfc1de772b9594510dda63fc0758dd57eafcf21e6d549a5f59392e40b142c9d35b7413b7b8a8b929d26d6deed3fab884ee9d41888074d0f65d448b5428fce122989cd749fea58080f"}, @NL80211_ATTR_HE_CAPABILITY={0x32, 0x10d, "2de824c78cf369e651d12e0680026033336cb4a4ba4a77c5afd5353c3b80caead3c126cbf771c28e2d86bbc20d81"}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x6}]}, 0x900}}, 0x8040) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000a40), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'team_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'veth1_virt_wifi\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b40)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b80)={'gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000bc0)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x5c, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r3}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r4}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r5}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r6}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r7}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r8}]}, 0x5c}}, 0x10) getcpu$auto(&(0x7f0000000d00)=0x2, &(0x7f0000000d40)=0x7, &(0x7f0000000d80)={[0x1ff, 0x3, 0x5eaf0000000000, 0xd, 0x6, 0x100, 0x8, 0xfff, 0x100000000, 0x8, 0x7ff, 0x1, 0x61, 0x5, 0x3, 0x3]}) r9 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000e40), r0) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x50, r9, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_BLA_CRC={0x6, 0x22, 0x10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0xe578}, @BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, "02256caf21cf"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)={0x12c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x8d, 0x3, "fe481a3156f9a6b3f17e832e2041efce1ceabf6777b38032469266c3617d47e808e9e270d447dfcf8915ee65d111b1c4426a133a5dbd2af58a15c338c47fc90753b19087c89dd847d00fb0b4b8730962d2c3d80f6c99400577c1f6393ebc9fe3039a93c2938889f4ba40ed5ec676b37520b554c8b05fa304cad4fca4a41e8ce4f8ad914ac4fe7394ea"}, @IPVS_CMD_ATTR_DAEMON={0x6d, 0x3, "7ff6e2bfa576e5c5dd58a66ac70f634021b0c013b7dab9c04ee88f29572753de2476c135cfddb6f5668fe5df784ff161896bdb67e69dfec57846f0162b5c3fd043bbdbc94561ce2fea778a13d8bd6f08c92bb1cbfb0fc7a32659c14dc5cab61d6655aaa2f730d94812"}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffe}]}, 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x4000803) r10 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000011c0), r0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xb4, r10, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x6}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_COORDINATOR={0x68, 0x1e, "20b3f5a0f2df4badb93f4a12efb62bad3e5bb29d86fadfde85f145ff7d8bd3cc98763502f5b68a5b61e5038bd3dcc71cddc7d31fd6d85fb77d2be7e58b4fe94c154f7677657cbf0400fe4cd59efbb5785589b675fc5b2858a3239fec20f23e4f38ffbf44"}, @NL802154_ATTR_WPAN_PHY_NAME={0xb, 0x2, 'dummy0\x00'}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x5}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0xb4}}, 0x4085) mremap$auto(0xae3, 0xabb7, 0x6, 0x7, 0x4) fsopen$auto(&(0x7f0000001340)='\x00', 0x4) io_uring_setup$auto(0xe4, &(0x7f0000001380)={0x3, 0x14000, 0xfffffdb2, 0xa8, 0x8, 0x80000001, r0, [0x8, 0xffffddbf, 0xff], {0x3ff, 0x8, 0x2, 0x1, 0x8, 0x7f0d, 0x2, 0x4, 0xd}, {0x6, 0x400, 0x1, 0x1, 0x5, 0x1000, 0x8, 0x8, 0x1ff}}) r11 = open$dir(&(0x7f0000001400)='./file0\x00', 0x60a002, 0x80) bind$auto(r11, &(0x7f0000001440)={0x1, @sa_data_min="704e7859816a631fcbe3b7a703bf"}, 0xac9) r12 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000014c0), r0) r13 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001500)='ns/time_for_children\x00') sendmsg$auto_GTP_CMD_ECHOREQ(r0, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x38, r12, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, {@u6_addr8="e2e5c6a6e9391bf57567e457d9d4b711"}}, @GTPA_O_TEI={0x8, 0x9, 0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r13}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0xc040) getsockname$auto(r0, &(0x7f0000001600)={0x400, @sa_data_min="ea48ce09e592be4b10eb865f6333"}, &(0x7f0000001640)=0xe86c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001680)={'batadv_slave_0\x00'}) clone$auto(0x735b, 0x1, &(0x7f00000016c0)=0x6, &(0x7f0000001700)=0x6c, 0x5) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r14, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x5c, 0x0, 0x200, 0x70bd2c, 0xffffff80, {}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x2}, @NL80211_ATTR_SSID={0x19, 0x34, "e9a217704b4e779f491b6c078d00dbe2f2aa784f95"}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x3}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x9}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008095}, 0x34) 23.100101188s ago: executing program 0 (id=986): mmap$auto(0x0, 0x7, 0x7, 0xeb1, 0x7fffffff, 0x48000) r0 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="01002abd77dcb7fcdf2d030000003f00000000ff"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x10000040) (async) sendmsg$auto_CTRL_CMD_GETFAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="01002abd77dcb7fcdf2d030000003f00000000ff"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x10000040) ioperm$auto(0x4, 0xbc6, 0x10081) readlinkat$auto(0xffffffffffffffff, 0x0, 0x0, 0x80) unshare$auto(0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400000020009, 0xdf, 0x8010, 0x401, 0x8) clone$auto(0x3, 0x1000009, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xa) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r2, 0x0, 0x20) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x6) (async) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x6) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), r1) mq_notify$auto(0x5cf5, &(0x7f00000006c0)={@sival_ptr=0x0, 0x3, 0x2, @_sigev_thread={0x0, 0x0}}) close_range$auto(0x2, 0x8000, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x2, 0x743043f3) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0xa) semctl$auto(0x1ff, 0x2, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(&(0x7f00000000c0), &(0x7f0000000100)=0x3, 0x3) (async) lsm_list_modules$auto(&(0x7f00000000c0), &(0x7f0000000100)=0x3, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x9, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x2240, 0x154) sysfs$auto(0x4, 0x3, 0x0) (async) sysfs$auto(0x4, 0x3, 0x0) epoll_create$auto(0x1) 22.170018078s ago: executing program 1 (id=987): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x5, 0x10000001, 0x0, 0x0, 0x7ffffffd) stat$auto(0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x28, 0x5, 0x0) socket(0xa, 0x801, 0x106) r0 = getpgrp(0x0) move_pages$auto(r0, 0xd3, &(0x7f0000000080)=&(0x7f0000000040)=[0x7, 0xd, 0x161cc928, 0x7fffffff, 0x1000], &(0x7f0000000140)=0x6df, &(0x7f0000000180)=0x10000, 0x9) setsockopt$auto(0x1, 0x1, 0x25, &(0x7f0000000000)='\x00', 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) socket(0xa, 0x801, 0x106) mknod$auto(&(0x7f0000000180)='\xb2{(\\)[{[\x00', 0x2d, 0x8) setfsuid$auto(0x2) setresuid$auto(0x0, 0x0, 0x4) truncate$auto(&(0x7f0000000440)='\xb2{(\\)[{[\x00', 0xe9) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) pselect6$auto(0x2, 0x0, &(0x7f00000000c0)={[0x1, 0xb44f, 0x2e9, 0x1, 0xfffffffff0000000, 0x0, 0x1, 0x4, 0x1, 0x7, 0x557, 0x4, 0x10003, 0x2e0, 0xffffffffffffffff, 0x1]}, 0x0, 0x0, &(0x7f0000000280)) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x62) getresuid$auto(0x0, 0x0, 0x0) mmap$auto(0x8, 0x5, 0x7, 0x17, 0x80, 0x1) 21.619790834s ago: executing program 0 (id=988): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x8000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8949}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x44, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_TSINFO_HEADER={0x7, 0x1, "d576f9"}, @ETHTOOL_A_TSINFO_HEADER={0x7, 0x1, "f33680"}, @ETHTOOL_A_TSINFO_HEADER={0x7, 0x1, "c64b56"}, @ETHTOOL_A_TSINFO_HEADER={0x7, 0x1, "61853f"}, @ETHTOOL_A_TSINFO_HEADER={0x7, 0x1, "7ee870"}, @ETHTOOL_A_TSINFO_HEADER={0x7, 0x1, "b9ef3a"}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x40800) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x801, 0x84) socket(0x2, 0x1, 0x0) setsockopt$auto(0x1, 0x1, 0x28, &(0x7f0000000000)='\x00', 0xbb) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYBLOB=' \x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x800c}, 0x40000) 21.416397793s ago: executing program 5 (id=989): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) timer_create$auto(0xb, &(0x7f00000001c0)={@sival_ptr=0x0, 0xd19, 0x1, @_sigev_thread={0x0, 0x0}}, 0x0) timer_gettime$auto(0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe80000000000100"}, 0x55) r0 = socket(0x2, 0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x4242, 0xe1d2b27bdc14aabe) syncfs$auto(r0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400006, 0xdf, 0x809b72, 0x2, 0x8000) getsockopt$auto(0x6, 0x84, 0x71, 0x0, &(0x7f00000000c0)=0x10000) mmap$auto(0xffffffffffffffff, 0x6, 0x3, 0x9b72, 0xffffffffffffffff, 0x4) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) keyctl$auto(0x1d, 0x725fffffffb, 0x69c9, 0x2, 0x6) 20.970385275s ago: executing program 0 (id=990): mmap$auto(0x0, 0x4000a, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000000, 0x9) write$auto(0x6, 0x0, 0x100000001) mmap$auto(0x0, 0x400008, 0x10000000000000e0, 0x9b72, 0x2, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) gettid() socket(0xa, 0x3, 0x33) vmsplice$auto(0x2, &(0x7f00000000c0)={&(0x7f0000000000), 0x7ff}, 0x8000000000000001, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x7, 0x0, 0x401) mmap$auto(0x0, 0x8, 0x72, 0x8b72, 0x8f1, 0x8000) r0 = socket(0xa, 0x5, 0x0) poll$auto(&(0x7f0000000000)={r0, 0x4, 0x1000}, 0x7, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) dup2$auto(0x0, 0x4) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) getsockopt$auto(r1, 0x84, 0x83, 0x0, &(0x7f00000000c0)=0x50000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) semctl$auto(0x5, 0x8ecf, 0x7, 0x100) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x8, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xc57138c}, 0x9a6, 0xe000) fanotify_init$auto(0x5, 0x2000000000002) 18.414873576s ago: executing program 0 (id=991): mlockall$auto(0x7) shmat$auto(0x6, &(0x7f0000000100)='\x00', 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x100000000000007, 0x0) fsopen$auto(0x0, 0x1) mlockall$auto(0x4) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x7, 0xfffffffffffffff8, 0x2) socket(0x840000000002, 0x3, 0xff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008051}, 0x24008014) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) unshare$auto(0x4) move_pages$auto(0x0, 0x400000000004, 0x0, &(0x7f0000000180)=0x3, 0x0, 0x2) mlockall$auto(0x7) (async) shmat$auto(0x6, &(0x7f0000000100)='\x00', 0x9) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) sysfs$auto(0x2, 0x100000000000007, 0x0) (async) fsopen$auto(0x0, 0x1) (async) mlockall$auto(0x4) (async) close_range$auto(0x2, 0x8000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x7, 0xfffffffffffffff8, 0x2) (async) socket(0x840000000002, 0x3, 0xff) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008051}, 0x24008014) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) unshare$auto(0x4) (async) move_pages$auto(0x0, 0x400000000004, 0x0, &(0x7f0000000180)=0x3, 0x0, 0x2) (async) 17.521808514s ago: executing program 1 (id=992): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x8200, 0x1001, 0x8, 0x1000000f, 0x66b, 0x0, 0x5}, 0x6f4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) writev$auto(0x5, &(0x7f0000000100)={0x0, 0x7}, 0x201) vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x80000000002}, 0x3, 0x4) r0 = socket(0x1d, 0x2, 0x6) fanotify_init$auto(0x5, 0x2) write$auto(0x3, 0x0, 0x81) setsockopt$auto(r0, 0x6a, 0x4, 0xffffffffffffffff, 0x40003) ioperm$auto(0x7, 0x6, 0x2) add_key$auto(0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0) ioperm$auto(0x5, 0xfff, 0x3ff) 16.849284353s ago: executing program 6 (id=994): ioperm$auto(0x3, 0x6, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) socket(0xa, 0x2, 0x0) madvise$auto(0xd, 0xdc, 0x3) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf2514000004040007"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40) syz_genetlink_get_family_id$auto_TIPCv2(0x0, r0) mmap$auto(0x0, 0x400006, 0xdf, 0x809b72, 0x2, 0x8000) socket(0x25, 0x1, 0x0) mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, 0xa0, 0x8000) connect$auto(0x3, &(0x7f0000000000)={0x7f}, 0x52) mmap$auto(0x0, 0x80000001, 0xa9, 0xeb2, 0x40000000000a6, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000001100)='ns/uts\x00') mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x1d, 0x3, 0x1) mremap$auto(0x6, 0x0, 0x7d7a, 0x3, 0x840d) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) futex_waitv$auto(&(0x7f0000000000)={0x0, 0xfffffffffffffff9, 0x2}, 0x1, 0x0, 0x0, 0x0) 14.316889233s ago: executing program 6 (id=995): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) (async) fsopen$auto(0x0, 0x1) (async, rerun: 64) close_range$auto(0x1, 0x8000, 0x0) (rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) (async) setsockopt$auto(0x4, 0x6a, 0x1, 0x0, 0xe) keyctl$auto(0x2000000000000016, 0xfeffffffffffff, 0xfffffffffffffffc, 0x1, 0xc) (async) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000840), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), r3) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x1c, r4, 0x41, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) statx$auto(0x17, &(0x7f0000001500)='/\x00', 0x800, 0x5, &(0x7f0000001540)={0x6, 0x3, 0x1, 0x7, 0x2, 0x6, 0xfc00, 0x6, 0x9, 0x7, 0x400000000008, 0xe53, {0x7ffffffffffffffe, 0x8, 0x8}, {0x8, 0xfffffffd, 0x400}, {0x1fe, 0x8, 0xb}, {0x4, 0x80000001, 0x4}, 0x6, 0x5, 0x3, 0x8000, 0xba, 0x2, 0xe, 0xa000000000, 0x6, 0x2, 0x4000, 0x6, [0x7ff, 0x0, 0x3, 0x7d0e, 0xfa, 0x2e40529d, 0x3, 0x6, 0x31]}) (async) sendmsg$auto_NETDEV_CMD_NAPI_GET0(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250b00000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0aefaa01e292a37c557b3b9ff034b82bde4b4c330d4c28222583a292a1c28b1afa2fbc55665260b0071342675d650f9df7cb504bb078"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080) 12.703761704s ago: executing program 6 (id=996): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x2, 0x697b}, 0xed7138c}, 0x9a6, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010029bd5000fbdbdf250c27000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20018048}, 0x0) sendmsg$auto_NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xf8}, @NL80211_ATTR_MAC={0x14, 0x6, "65aa1565a019a4fb5249619d0cf71670"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040800}, 0x41) madvise$auto(0x0, 0x20200, 0x15) recvmsg$auto(0x4, 0x0, 0x33c) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r5, 0xb01, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/net\x00') setresuid$auto(0x60, 0x1000, 0x8000) setns(r6, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', 0x0) 12.37404523s ago: executing program 5 (id=997): socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0xfffffffffffffffe, 0x10002, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x0, 0x8000000000005b, 0xfffffffffffffffc) socket(0x2, 0x1, 0x106) getsockopt$auto(0x6, 0x11c, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffd) socket(0x2, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioperm$auto(0xfffffffffffffffe, 0x10002, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mincore$auto(0x0, 0x8000000000005b, 0xfffffffffffffffc) (async) socket(0x2, 0x1, 0x106) (async) getsockopt$auto(0x6, 0x11c, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffd) (async) 11.799257125s ago: executing program 5 (id=998): mmap$auto(0x0, 0x8, 0xdf, 0x209b72, 0x4e477f5a, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd70a43400003a7b00000008000300", @ANYRES32=r4], 0x1c}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pim6reg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_vlan\x00', 0x0}) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042abd7000fcdbdf25010000fe07000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x20040841) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) ioctl$auto(0x3, 0x8915, 0x93) r7 = socket(0xa, 0x3, 0xff) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x7, 0x207, 0x7, 0xc, 0x9, 0x0, 0x8000000000000001, 0x2800000000000002, 0x9, 0xde582971, 0xff, 0x9, 0x4, 0xffff, 0x8, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(0x200000000000003, 0x1, 0x29, 0x0, 0x300) sendmsg$auto_IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x5d}, 0x1, 0x0, 0x0, 0x4000}, 0x4045880) 10.94580503s ago: executing program 5 (id=999): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000) prctl$auto(0x1d, 0xfffffffffffffffb, 0x8, 0x10000005, 0xfffffffffffffff9) poll$auto(0x0, 0x2, 0xc) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) clone$auto(0xa0001fe, 0x2ffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd, 0xbf) 10.819730197s ago: executing program 6 (id=1000): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$auto(0x3, 0x0, 0x6b) connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x8ba, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) rt_sigaction$auto(0xffffffff, 0x0, 0x0, 0x8) unshare$auto(0x40000080) mmap$auto(0x0, 0x400009, 0xdf, 0x9b71, 0x2, 0x8000) brk$auto(0xffffffffffffff66) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000000)={'ip6gre0\x00'}) mmap$auto(0x8, 0x2020006, 0x1000000003, 0xeb1, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = socket(0x3, 0x8, 0xff) close_range$auto(r0, 0x8, 0xe61) bpf$auto(0x6, &(0x7f0000000140)=@iter_create={r1, 0x2}, 0x3ff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0xa, 0x3, 0x3a) setsockopt$auto(r1, 0x29, 0xd0, 0x0, 0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) 10.067938682s ago: executing program 5 (id=1001): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x5, 0x10000001, 0x0, 0x0, 0x7ffffffd) stat$auto(0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x28, 0x5, 0x0) socket(0xa, 0x801, 0x106) r0 = getpgrp(0x0) move_pages$auto(r0, 0xd3, &(0x7f0000000080)=&(0x7f0000000040)=[0x7, 0xd, 0x161cc928, 0x7fffffff, 0x1000], &(0x7f0000000140)=0x6df, &(0x7f0000000180)=0x10000, 0x9) setsockopt$auto(0x1, 0x1, 0x25, &(0x7f0000000000)='\x00', 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) socket(0xa, 0x801, 0x106) mknod$auto(&(0x7f0000000180)='\xb2{(\\)[{[\x00', 0x2d, 0x8) setfsuid$auto(0x2) setresuid$auto(0x0, 0x0, 0x4) truncate$auto(&(0x7f0000000440)='\xb2{(\\)[{[\x00', 0xe9) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) pselect6$auto(0x2, 0x0, &(0x7f00000000c0)={[0x1, 0xb44f, 0x2e9, 0x1, 0xfffffffff0000000, 0x0, 0x1, 0x4, 0x1, 0x7, 0x557, 0x4, 0x10003, 0x2e0, 0xffffffffffffffff, 0x1]}, 0x0, 0x0, &(0x7f0000000280)) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x62) getresuid$auto(0x0, 0x0, 0x0) mmap$auto(0x8, 0x5, 0x7, 0x17, 0x80, 0x1) 7.801627586s ago: executing program 1 (id=1002): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) mq_open$auto(0x0, 0x3ff, 0x7, &(0x7f0000000140)={0x7, 0x2f05, 0xe6b, 0x4}) r0 = socket$nl_generic(0x10, 0x3, 0x10) futex$auto(&(0x7f0000000000)=0x7, 0x9, 0x7, &(0x7f0000000080)={0x1, 0x9}, 0x0, 0x10001) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mlock$auto(0xfbe8, 0x4) sendmmsg$auto(r0, &(0x7f0000000300)={{&(0x7f0000000180)=[0x3], 0x5, &(0x7f0000000280)={&(0x7f0000000200)=[0x70000000, 0x9, 0x7, 0x7f, 0xb, 0x5, 0x400, 0xd, 0x3], 0x28000000}, 0x1000, &(0x7f00000002c0)=[0x101, 0x4, 0x5, 0x7f, 0x100, 0x3], 0x5e, 0x7}, 0x2}, 0x4, 0x4) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000a00), r0) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf250600000008000a0000e724f2"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sa_data_min="020a2f88bf2b43f71e5ceaf3cddc"}, 0x55) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) setsockopt$auto(0x3, 0x1, 0x19, 0xffffffffffffffff, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x70000f5) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100250000004000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x20004994}, 0x4000884) r6 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r6, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x5}, @GTPA_MS_ADDRESS={0x8, 0x5, 0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, {@u6_addr8="28f6b27d3e1628fd7e4e9819b3fd269d"}}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008040) 7.170727499s ago: executing program 6 (id=1003): socket(0xa, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x270, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TCP_METRICS_ATTR_SADDR_IPV4={0x0, 0xb, @multicast1}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @multicast2}, @TCP_METRICS_ATTR_ADDR_IPV6={0xfe, 0x2, "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"}, @TCP_METRICS_ATTR_SADDR_IPV4={0x43, 0xb, @multicast1}, @TCP_METRICS_ATTR_SADDR_IPV6={0xf8, 0xc, "f32d2eed7322b5d083a689c1480c99657faee28083965b4b71106abdad00be2382e70469a948e3d266386a6d185044b8690c6a31d4f800f1d1e22fb5446c8c1275e96c89bddfe7ef042c698406bb5bf13151461f9ad1f8179dfd3b11460a477019289079e773c17a000662373845392c6575adb6ff078a7940fe9df670684f3c24203a250e3795efb289be3a8621704d9b66399a3980869f9f6757e1832db9101983949b6d6a2ce67781baa9d47c0ebf9fa6e3487a3d65760d059a6500fdb88cf79068ea8586463f3936b2835a6e0b9e381c5a569598eeb6a14dc344f2748feafc804a0e5dc07b221646a880247cbf6a78a301fc"}, @TCP_METRICS_ATTR_SADDR_IPV6={0x4c, 0xc, "37da0ed655b34f4b4d08309562396efd6cbb1cb990ea86c635d135a4e58477ca6a71c1048ac868ea8ccb74d74ea3248f46d42ba2e2602183a2ecf0a20a262a8fb094dd900105828b"}]}, 0x270}, 0x1, 0x0, 0x0, 0x24004010}, 0x40000c0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000032, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x10, 0x0, 0x40020000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x973, 0x9, 0x5, 0x6, 0x718, 0x9, 0x5e58296f, 0x0, 0x1b, 0x800003, 0x200, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) 6.806844238s ago: executing program 5 (id=1004): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) modify_ldt$auto(0x5, 0x0, 0x8) r0 = socket(0xa, 0x2, 0x88) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) select$auto(0x5, 0x0, &(0x7f0000000100)={[0x4000000000000009, 0x200, 0x0, 0x8000000000000201, 0xa, 0x3, 0x6, 0x7, 0xd886, 0x5e58296b, 0x341, 0x41, 0x7, 0x200, 0x8, 0xc]}, 0x0, 0x0) setsockopt$auto(r0, 0x7, 0x7fff, 0x0, 0x2) ioperm$auto(0x6, 0x10001, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) connect$auto(0x3, 0x0, 0x55) mknod$auto(&(0x7f00000000c0)=',\x00', 0x7, 0x8) link$auto(&(0x7f00000001c0)=',\x00', &(0x7f0000000200)=',%/\x00') write$auto(r0, 0x0, 0xfdef) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) statmount$auto(&(0x7f0000000240)={0x18c, 0x7, 0x6, 0x8, 0xa5c}, &(0x7f0000000280)={0xc, 0x7, 0x5, 0x1, 0xf4, 0x8, 0x7, 0x8, 0x9, 0x30be, 0x1, 0x5, 0x4, 0x5, 0x8, 0x28000000, 0x9, 0x6, 0x8, 0xda, [0x5, 0x6, 0xc00e, 0xfffffffffffffffd, 0x6, 0x8, 0x7d62, 0x1ff, 0x1, 0x4, 0x6, 0xe4, 0x400, 0x2ee, 0x9, 0x6, 0x7ff, 0xfff, 0x1, 0xffffffffffff354d, 0x22, 0xffffffff, 0x1ff, 0x1, 0x0, 0x1, 0x7fffffffffffffff, 0x580, 0x5, 0x1ff, 0x7, 0xb8e, 0x0, 0x100000001, 0x4, 0x0, 0x3, 0xffffffff, 0x135, 0x638, 0x3, 0x100000001, 0xfffffffffffff801, 0x6bba, 0x5, 0x6, 0x7fffffffffffffff, 0x4, 0x2], "1341bff05301aa23329ac5ec105598dff1a36d9ffb2742e65431867d6e985bb1f2c673e6e3e4970df4ab561fe023d3c5be16ae7e0ba8195fc0ea705ef342f6e0d86cc6cb701969dde2780e25effe6d352e021b9aa420dd1f7cadeed25115a70e4e9eeb98fd4c692d"}, 0x1, 0x1000) r1 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000040), r0) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8008002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x604c}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0xfffe}, @IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x80000000}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x5}, @IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_SC_NONE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x4080) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) connect$auto(r2, &(0x7f00000005c0)={0x7, @sockaddr_1_1={"bf803c754fa25b1f193afa465665da705525c1a5683b8b5d5c452d7e8f1f33f8250149b7919ea88f6206328205f58459ba96e52c6345f9c59c254a3eb0c0a66e72d5102fce037faa8fca0bfe3cd8da1933cc4ec7fd46808d6afdc25f3863f63c1e0afdb9831caab4f867035cac9da9be4853f881a9e20fbac94b3dfcd54be2e1ee280d405a63e85d43"}}, 0x56) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000500), r0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'nr0\x00'}) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="9e35c1dc48f88c4b7800496c17", @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf25040000000800040028a03942"], 0x1c}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0x23, 0x0, 0x28) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 4.810026184s ago: executing program 1 (id=1005): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x2000000) r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) sendmsg$auto_IPVS_CMD_NEW_DEST(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x4000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = open(0x0, 0x100, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_GET0(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, r5, 0x301, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x64004080) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x427}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) close_range$auto(0x2, 0xfffffffffffff000, 0x2) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) creat$auto(&(0x7f0000000040)='X))\x00', 0x5) ioctl$auto(r2, 0x4c06, 0x0) 3.018145183s ago: executing program 35 (id=991): mlockall$auto(0x7) shmat$auto(0x6, &(0x7f0000000100)='\x00', 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x100000000000007, 0x0) fsopen$auto(0x0, 0x1) mlockall$auto(0x4) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x7, 0xfffffffffffffff8, 0x2) socket(0x840000000002, 0x3, 0xff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008051}, 0x24008014) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) unshare$auto(0x4) move_pages$auto(0x0, 0x400000000004, 0x0, &(0x7f0000000180)=0x3, 0x0, 0x2) mlockall$auto(0x7) (async) shmat$auto(0x6, &(0x7f0000000100)='\x00', 0x9) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) sysfs$auto(0x2, 0x100000000000007, 0x0) (async) fsopen$auto(0x0, 0x1) (async) mlockall$auto(0x4) (async) close_range$auto(0x2, 0x8000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x7, 0xfffffffffffffff8, 0x2) (async) socket(0x840000000002, 0x3, 0xff) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008051}, 0x24008014) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) unshare$auto(0x4) (async) move_pages$auto(0x0, 0x400000000004, 0x0, &(0x7f0000000180)=0x3, 0x0, 0x2) (async) 521.349µs ago: executing program 1 (id=1007): mprotect$auto(0x1ffff000, 0x8000000000000001, 0x0) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000080), 0xffffffffffffffff) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x80000001, 0x4}, 0x77, 0x0, 0x0, 0x62bb) mlockall$auto(0x7) keyctl$auto(0x2000000000000018, 0xffffffffbffffffd, 0x0, 0x400000000000005, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x40001, 0x86) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sethostname$auto(0x0, 0x7) madvise$auto(0x0, 0x2000040080000004, 0xe) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) ioperm$auto(0x400000800, 0x7, 0xd) prctl$auto(0x8, 0x101, 0x2, 0x80, 0x18000000000000) capset$auto(0x0, 0xfffffffffffffffe) adjtimex$auto(0x0) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x4, 0x1, 0x400, 0x7, 0x1005, 0x7, 0x7, [0x200, 0x2e9, 0x8], {0x0, 0x1, 0x5, 0x7, 0x5, 0x5, 0x1, 0xfffffffc, 0x4}, {0x0, 0x1000fff, 0xffff7fff, 0x2, 0xa, 0x7, 0x3, 0x0, 0x3}}) prctl$auto(0xfffffffa, 0x140, 0x8, 0x10001, 0x8000000000000001) clone$auto(0x80000001, 0x10000000000fa, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x5) socket(0x1d, 0x2, 0x2) connect$auto(0x3, &(0x7f0000000180)={0x21, @sockaddr_1_1}, 0x54) 0s ago: executing program 6 (id=1008): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd36, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0xfa}]}, 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) (async, rerun: 32) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x11, &(0x7f0000000040)='!\x00', 0x1ff) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x3, 0xff) socket(0xa, 0x801, 0x84) getsockopt$auto(0x100000006, 0x0, 0x5, 0xfffffffffffffffe, 0x0) (async) r3 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140006000000bd7a6902d82417df00002797de526e462ace872f8f66d8a817d8bce48e5e6f599c3df6f4870000000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): ge_slave_1) entered blocking state [ 69.312097][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.319462][ T5838] bridge_slave_1: entered allmulticast mode [ 69.326033][ T5838] bridge_slave_1: entered promiscuous mode [ 69.340910][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 69.405009][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.448344][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.468521][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.476082][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.484003][ T5837] bridge_slave_0: entered allmulticast mode [ 69.491475][ T5837] bridge_slave_0: entered promiscuous mode [ 69.498314][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.505603][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.515483][ T5843] bridge_slave_0: entered allmulticast mode [ 69.522487][ T5843] bridge_slave_0: entered promiscuous mode [ 69.545034][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.552337][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.560372][ T5837] bridge_slave_1: entered allmulticast mode [ 69.567751][ T5837] bridge_slave_1: entered promiscuous mode [ 69.574645][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.584527][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.592175][ T5843] bridge_slave_1: entered allmulticast mode [ 69.598845][ T5843] bridge_slave_1: entered promiscuous mode [ 69.607883][ T5838] team0: Port device team_slave_0 added [ 69.647415][ T5838] team0: Port device team_slave_1 added [ 69.656088][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.663495][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.671124][ T5836] bridge_slave_0: entered allmulticast mode [ 69.677736][ T5836] bridge_slave_0: entered promiscuous mode [ 69.687013][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.708615][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.726063][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.733285][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.743308][ T5836] bridge_slave_1: entered allmulticast mode [ 69.750092][ T5836] bridge_slave_1: entered promiscuous mode [ 69.760375][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.771012][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.824139][ T5843] team0: Port device team_slave_0 added [ 69.831001][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.837969][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.864837][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.878658][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.890544][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.907633][ T5843] team0: Port device team_slave_1 added [ 69.916736][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.923777][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.949971][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.994150][ T5837] team0: Port device team_slave_0 added [ 70.017430][ T5836] team0: Port device team_slave_0 added [ 70.025511][ T5837] team0: Port device team_slave_1 added [ 70.043796][ T5838] hsr_slave_0: entered promiscuous mode [ 70.050209][ T5838] hsr_slave_1: entered promiscuous mode [ 70.058296][ T5836] team0: Port device team_slave_1 added [ 70.080476][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.087456][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.113881][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.126274][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.133742][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.160810][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.190758][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.197737][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.228867][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.262014][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.271487][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.297688][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.326597][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.333605][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.359542][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.372306][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.379452][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.405447][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.489208][ T5837] hsr_slave_0: entered promiscuous mode [ 70.495301][ T5837] hsr_slave_1: entered promiscuous mode [ 70.501717][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.509949][ T5837] Cannot create hsr debugfs directory [ 70.519187][ T5843] hsr_slave_0: entered promiscuous mode [ 70.525466][ T5843] hsr_slave_1: entered promiscuous mode [ 70.532091][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.539812][ T5843] Cannot create hsr debugfs directory [ 70.605872][ T5836] hsr_slave_0: entered promiscuous mode [ 70.612570][ T5836] hsr_slave_1: entered promiscuous mode [ 70.618711][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.627199][ T5836] Cannot create hsr debugfs directory [ 70.709394][ T5847] Bluetooth: hci1: command tx timeout [ 70.767960][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.778905][ T5847] Bluetooth: hci2: command tx timeout [ 70.813649][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.835016][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.858997][ T5847] Bluetooth: hci0: command tx timeout [ 70.859511][ T54] Bluetooth: hci3: command tx timeout [ 70.877055][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.904177][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.925464][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.934909][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.952594][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.988257][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.004025][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.023819][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.053597][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.103866][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.113907][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.136500][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.147585][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.264055][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.302072][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.316488][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.331620][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.371282][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.379013][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.402250][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.415506][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.430039][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.437137][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.452014][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.468094][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.477227][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.484353][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.513010][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.520148][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.529594][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.536666][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.564642][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.571899][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.582666][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.589964][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.610663][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.617778][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.672627][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.682423][ T5836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.689453][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.707887][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.028257][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.055046][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.111774][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.145333][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.162734][ T5838] veth0_vlan: entered promiscuous mode [ 72.206270][ T5838] veth1_vlan: entered promiscuous mode [ 72.236428][ T5836] veth0_vlan: entered promiscuous mode [ 72.245487][ T5843] veth0_vlan: entered promiscuous mode [ 72.258420][ T5837] veth0_vlan: entered promiscuous mode [ 72.278602][ T5836] veth1_vlan: entered promiscuous mode [ 72.291734][ T5843] veth1_vlan: entered promiscuous mode [ 72.320824][ T5837] veth1_vlan: entered promiscuous mode [ 72.345343][ T5836] veth0_macvtap: entered promiscuous mode [ 72.353739][ T5843] veth0_macvtap: entered promiscuous mode [ 72.368506][ T5836] veth1_macvtap: entered promiscuous mode [ 72.384152][ T5838] veth0_macvtap: entered promiscuous mode [ 72.398558][ T5843] veth1_macvtap: entered promiscuous mode [ 72.416683][ T5838] veth1_macvtap: entered promiscuous mode [ 72.455062][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.467572][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.478566][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.493721][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.511872][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.521598][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.532669][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.543530][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.554048][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.567456][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.577709][ T5837] veth0_macvtap: entered promiscuous mode [ 72.590031][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.599085][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.607769][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.616651][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.627749][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.641353][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.653278][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.662043][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.673424][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.683338][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.694550][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.706133][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.719420][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.728148][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.737495][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.746971][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.767109][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.778581][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.780336][ T54] Bluetooth: hci1: command tx timeout [ 72.789922][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.802009][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.813094][ T5837] veth1_macvtap: entered promiscuous mode [ 72.841703][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.852749][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.863480][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.863561][ T54] Bluetooth: hci2: command tx timeout [ 72.874385][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.889918][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.902788][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.915129][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.939139][ T54] Bluetooth: hci3: command tx timeout [ 72.944577][ T5847] Bluetooth: hci0: command tx timeout [ 72.971115][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.983680][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.994044][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.006614][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.016788][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.028156][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.040217][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.071640][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.080926][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.090238][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.100800][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.145969][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.157442][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.195386][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.203412][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.228266][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.244397][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.302098][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.320955][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.328540][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.342393][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.355513][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.390392][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.398253][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.472555][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.482920][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.575774][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.586331][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.916042][ T5908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 74.003317][ T29] audit: type=1326 audit(1731448030.369:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.0.1" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ab0d7e719 code=0x0 [ 74.595284][ T5920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6'. [ 74.862267][ T5847] Bluetooth: hci1: command tx timeout [ 74.867909][ T5926] Zero length message leads to an empty skb [ 74.939390][ T5847] Bluetooth: hci2: command tx timeout [ 75.019269][ T5847] Bluetooth: hci0: command tx timeout [ 75.024763][ T5847] Bluetooth: hci3: command tx timeout [ 75.209816][ T5934] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.363624][ T5946] process 'syz.1.14' launched ':,' with NULL argv: empty string added [ 75.439576][ T5950] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 76.515451][ T5970] syz.3.21(5970): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 76.940632][ T5847] Bluetooth: hci1: command tx timeout [ 77.024397][ T5847] Bluetooth: hci2: command tx timeout [ 77.100422][ T5847] Bluetooth: hci3: command tx timeout [ 77.109389][ T54] Bluetooth: hci0: command tx timeout [ 77.626520][ T5980] FAULT_INJECTION: forcing a failure. [ 77.626520][ T5980] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 77.695528][ T5980] CPU: 1 UID: 0 PID: 5980 Comm: syz.0.25 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 77.706109][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 77.716206][ T5980] Call Trace: [ 77.719514][ T5980] [ 77.722470][ T5980] dump_stack_lvl+0x16c/0x1f0 [ 77.727195][ T5980] should_fail_ex+0x497/0x5b0 [ 77.731917][ T5980] _copy_to_user+0x32/0xd0 [ 77.736380][ T5980] simple_read_from_buffer+0xd0/0x160 [ 77.741802][ T5980] proc_fail_nth_read+0x198/0x270 [ 77.746875][ T5980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.752469][ T5980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.758058][ T5980] vfs_read+0x1df/0xbe0 [ 77.762247][ T5980] ? __fget_files+0x23a/0x3f0 [ 77.766958][ T5980] ? fdget_pos+0x24c/0x360 [ 77.771417][ T5980] ? __pfx_lock_release+0x10/0x10 [ 77.776489][ T5980] ? trace_lock_acquire+0x14a/0x1d0 [ 77.781720][ T5980] ? __pfx_vfs_read+0x10/0x10 [ 77.786429][ T5980] ? __pfx___mutex_lock+0x10/0x10 [ 77.791505][ T5980] ? __fget_files+0x244/0x3f0 [ 77.796236][ T5980] ksys_read+0x12f/0x260 [ 77.800513][ T5980] ? __pfx_ksys_read+0x10/0x10 [ 77.805307][ T5980] ? syscall_user_dispatch+0x77/0x140 [ 77.810731][ T5980] do_syscall_64+0xcd/0x250 [ 77.815270][ T5980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.821201][ T5980] RIP: 0033:0x7f4ab0d7d15c [ 77.825656][ T5980] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 77.845293][ T5980] RSP: 002b:00007f4ab1b72030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.853752][ T5980] RAX: ffffffffffffffda RBX: 00007f4ab0f35f80 RCX: 00007f4ab0d7d15c [ 77.861755][ T5980] RDX: 000000000000000f RSI: 00007f4ab1b720a0 RDI: 0000000000000003 [ 77.869758][ T5980] RBP: 00007f4ab1b72090 R08: 0000000000000000 R09: 0000000000000000 [ 77.877764][ T5980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.885771][ T5980] R13: 0000000000000000 R14: 00007f4ab0f35f80 R15: 00007ffd59bec728 [ 77.893798][ T5980] [ 78.855261][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.30'. [ 79.273215][ T5997] netlink: 296 bytes leftover after parsing attributes in process `syz.0.31'. [ 80.685867][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 80.919212][ T6041] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.842015][ T6063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.42'. [ 81.911535][ T969] cfg80211: failed to load regulatory.db [ 82.248899][ T6065] mmap: syz.0.44 (6065) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.527492][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 88.405362][ T6193] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 88.433204][ T6193] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 90.112759][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 94.293132][ T6258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.911416][ T6311] FAULT_INJECTION: forcing a failure. [ 95.911416][ T6311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.109012][ T6311] CPU: 1 UID: 0 PID: 6311 Comm: syz.2.102 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 96.119667][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 96.129751][ T6311] Call Trace: [ 96.133056][ T6311] [ 96.136007][ T6311] dump_stack_lvl+0x16c/0x1f0 [ 96.140723][ T6311] should_fail_ex+0x497/0x5b0 [ 96.145431][ T6311] _copy_from_user+0x2e/0xd0 [ 96.150056][ T6311] copy_msghdr_from_user+0x99/0x160 [ 96.155293][ T6311] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 96.161138][ T6311] ? find_held_lock+0x2d/0x110 [ 96.165952][ T6311] ___sys_sendmsg+0xff/0x1e0 [ 96.170581][ T6311] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.175847][ T6311] ? fdget+0x176/0x210 [ 96.179950][ T6311] __sys_sendmsg+0x117/0x1f0 [ 96.184575][ T6311] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.189744][ T6311] do_syscall_64+0xcd/0x250 [ 96.194279][ T6311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.200215][ T6311] RIP: 0033:0x7f703ff7e719 [ 96.204655][ T6311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.224308][ T6311] RSP: 002b:00007f7040c92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.232763][ T6311] RAX: ffffffffffffffda RBX: 00007f7040135f80 RCX: 00007f703ff7e719 [ 96.240774][ T6311] RDX: 0000000000000040 RSI: 0000000020001400 RDI: 0000000000000003 [ 96.248777][ T6311] RBP: 00007f7040c92090 R08: 0000000000000000 R09: 0000000000000000 [ 96.256776][ T6311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.264775][ T6311] R13: 0000000000000000 R14: 00007f7040135f80 R15: 00007fffe56d54a8 [ 96.272796][ T6311] [ 96.870558][ T6317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.103'. [ 97.729295][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.105'. [ 99.508335][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'. [ 100.111020][ T6366] kexec: Could not allocate control_code_buffer [ 100.170580][ T6373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.116'. [ 104.600664][ T6433] FAULT_INJECTION: forcing a failure. [ 104.600664][ T6433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.624262][ T6433] CPU: 0 UID: 0 PID: 6433 Comm: syz.1.129 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 104.634918][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 104.645001][ T6433] Call Trace: [ 104.648303][ T6433] [ 104.651254][ T6433] dump_stack_lvl+0x16c/0x1f0 [ 104.655968][ T6433] should_fail_ex+0x497/0x5b0 [ 104.660678][ T6433] _copy_from_iter+0x29b/0x1400 [ 104.665577][ T6433] ? __pfx__copy_from_iter+0x10/0x10 [ 104.670896][ T6433] ? __virt_addr_valid+0x1a4/0x590 [ 104.676047][ T6433] ? __virt_addr_valid+0x5e/0x590 [ 104.681128][ T6433] ? __phys_addr_symbol+0x30/0x80 [ 104.686194][ T6433] ? __check_object_size+0x488/0x710 [ 104.691518][ T6433] netlink_sendmsg+0x813/0xd70 [ 104.696325][ T6433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.701673][ T6433] ____sys_sendmsg+0x9ae/0xb40 [ 104.706482][ T6433] ? copy_msghdr_from_user+0x10b/0x160 [ 104.711984][ T6433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.717309][ T6433] ? find_held_lock+0x2d/0x110 [ 104.722115][ T6433] ___sys_sendmsg+0x135/0x1e0 [ 104.726820][ T6433] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.732075][ T6433] ? fdget+0x176/0x210 [ 104.736172][ T6433] __sys_sendmsg+0x117/0x1f0 [ 104.740792][ T6433] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.745970][ T6433] do_syscall_64+0xcd/0x250 [ 104.750514][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.756444][ T6433] RIP: 0033:0x7f610c57e719 [ 104.760882][ T6433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.780519][ T6433] RSP: 002b:00007f610d329038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.788967][ T6433] RAX: ffffffffffffffda RBX: 00007f610c735f80 RCX: 00007f610c57e719 [ 104.796969][ T6433] RDX: 0000000000000040 RSI: 0000000020001400 RDI: 0000000000000003 [ 104.804961][ T6433] RBP: 00007f610d329090 R08: 0000000000000000 R09: 0000000000000000 [ 104.812956][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.820952][ T6433] R13: 0000000000000000 R14: 00007f610c735f80 R15: 00007ffcdc9c6cd8 [ 104.828964][ T6433] [ 106.661637][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.137'. [ 110.533411][ T29] audit: type=1326 audit(8277292063.325:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.1.152" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f610c57e719 code=0x0 [ 110.579160][ T29] audit: type=1326 audit(8277292063.325:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.1.152" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f610c57e719 code=0x0 [ 112.138474][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 114.387998][ T6568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.161'. [ 114.640867][ T6571] nbd: must specify at least one socket [ 115.190234][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.200131][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.223703][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.249112][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.259004][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 115.266389][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.491345][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.906306][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.553064][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.343156][ T5847] Bluetooth: hci3: command tx timeout [ 117.474000][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.714842][ T6591] chnl_net:caif_netlink_parms(): no params data found [ 118.455370][ T6591] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.483832][ T6591] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.509429][ T6591] bridge_slave_0: entered allmulticast mode [ 118.547215][ T6591] bridge_slave_0: entered promiscuous mode [ 118.603141][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.621260][ T6591] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.628514][ T6591] bridge_slave_1: entered allmulticast mode [ 118.651519][ T6591] bridge_slave_1: entered promiscuous mode [ 118.884543][ T6647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.179'. [ 119.186360][ T6591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.227003][ T35] bridge_slave_1: left allmulticast mode [ 119.235488][ T35] bridge_slave_1: left promiscuous mode [ 119.252239][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.418904][ T5847] Bluetooth: hci3: command tx timeout [ 119.489686][ T35] bridge_slave_0: left allmulticast mode [ 119.510168][ T35] bridge_slave_0: left promiscuous mode [ 119.515944][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.498953][ T5847] Bluetooth: hci3: command tx timeout [ 122.159203][ T6688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.191'. [ 123.355252][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.430038][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 123.508905][ T6699] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 123.554363][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.579109][ T5847] Bluetooth: hci3: command tx timeout [ 123.687012][ T35] bond0 (unregistering): Released all slaves [ 123.897259][ T6591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.738559][ T6591] team0: Port device team_slave_0 added [ 125.126340][ T6591] team0: Port device team_slave_1 added [ 125.790275][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.805023][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.889038][ T6591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.985361][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.998927][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.078873][ T6591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.235104][ T35] hsr_slave_0: left promiscuous mode [ 126.264024][ T35] hsr_slave_1: left promiscuous mode [ 126.279676][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.307531][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.370238][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.377695][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.573952][ T35] veth1_macvtap: left promiscuous mode [ 126.580369][ T35] veth0_macvtap: left promiscuous mode [ 126.585998][ T35] veth1_vlan: left promiscuous mode [ 126.599185][ T35] veth0_vlan: left promiscuous mode [ 128.582032][ T35] team0 (unregistering): Port device team_slave_1 removed [ 128.693896][ T35] team0 (unregistering): Port device team_slave_0 removed [ 130.099210][ T6591] hsr_slave_0: entered promiscuous mode [ 130.124541][ T6591] hsr_slave_1: entered promiscuous mode [ 130.148962][ T6591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.156569][ T6591] Cannot create hsr debugfs directory [ 131.268505][ T6791] netlink: 342 bytes leftover after parsing attributes in process `syz.2.206'. [ 131.474893][ T6771] syz.2.206 (6771) used greatest stack depth: 20672 bytes left [ 133.103280][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.110408][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.038577][ T6591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 134.676575][ T6591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 134.714100][ T6591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 134.922368][ T6591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 135.164613][ T6591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.183213][ T6591] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.216725][ T6591] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.228213][ T6591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.460137][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.467970][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.494696][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.501875][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.583281][ T6876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.224'. [ 135.918339][ T6591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.025296][ T6591] veth0_vlan: entered promiscuous mode [ 136.076167][ T6591] veth1_vlan: entered promiscuous mode [ 136.190977][ T6591] veth0_macvtap: entered promiscuous mode [ 136.210871][ T6591] veth1_macvtap: entered promiscuous mode [ 136.240744][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.251296][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.261226][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.271722][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.281778][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.292709][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.305144][ T6591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.318214][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.328738][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.338584][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.349161][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.359215][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.370109][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.383291][ T6591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.394313][ T6591] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.403093][ T6591] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.411892][ T6591] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.420661][ T6591] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.450139][ T6893] netlink: 24 bytes leftover after parsing attributes in process `syz.3.225'. [ 136.840132][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.847995][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.932641][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.973232][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.389295][ T6965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.233'. [ 144.033642][ T7014] tc_dump_action: action bad kind [ 144.423457][ T7017] netlink: 334 bytes leftover after parsing attributes in process `syz.3.249'. [ 147.259677][ T7040] netlink: 342 bytes leftover after parsing attributes in process `syz.1.253'. [ 149.148290][ T7058] netlink: 172 bytes leftover after parsing attributes in process `syz.0.256'. [ 153.340758][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.267'. [ 155.269069][ T6663] syz.2.182 (6663) used greatest stack depth: 19472 bytes left [ 155.934508][ T6611] syz.2.171 (6611) used greatest stack depth: 18864 bytes left [ 159.239234][ T6537] syz.2.155 (6537) used greatest stack depth: 18832 bytes left [ 160.058336][ T7128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.274'. [ 160.132043][ T7147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.280'. [ 162.889808][ T7189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.291'. [ 163.864713][ T7202] netlink: 'syz.1.295': attribute type 6 has an invalid length. [ 163.888023][ T7202] netlink: 330 bytes leftover after parsing attributes in process `syz.1.295'. [ 164.267740][ T7258] syz.1.299 uses obsolete (PF_INET,SOCK_PACKET) [ 166.284400][ T7295] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 169.999433][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 170.023866][ T7324] ip6gre0: entered promiscuous mode [ 170.029615][ T7324] ip6gre0: entered allmulticast mode [ 170.351384][ T7332] bridge0: port 3(syz_tun) entered blocking state [ 170.358103][ T7332] bridge0: port 3(syz_tun) entered disabled state [ 170.365353][ T7332] syz_tun: entered allmulticast mode [ 170.394370][ T7332] syz_tun: entered promiscuous mode [ 170.421337][ T7332] bridge0: port 3(syz_tun) entered blocking state [ 170.428128][ T7332] bridge0: port 3(syz_tun) entered forwarding state [ 174.118217][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 176.046072][ T7457] sock: sock_set_timeout: `syz.0.345' (pid 7457) tries to set negative timeout [ 176.641289][ T7468] netlink: 229 bytes leftover after parsing attributes in process `syz.0.348'. [ 176.952198][ T7479] Invalid ELF header magic: != ELF [ 176.970713][ T7479] nfsd: Unknown parameter '' [ 177.655721][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.355'. [ 177.704064][ T7493] nbd: must specify a size in bytes for the device [ 179.509224][ T7566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.377'. [ 185.770520][ T7749] netlink: 344 bytes leftover after parsing attributes in process `syz.2.421'. [ 186.849775][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'. [ 186.858630][ T7794] ip6gre0: entered promiscuous mode [ 186.968900][ T7794] ip6gre0: entered allmulticast mode [ 188.531504][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 191.501962][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 191.508122][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 191.514945][ T5153] Bluetooth: hci0: command 0x0406 tx timeout [ 192.972176][ T7929] netlink: 344 bytes leftover after parsing attributes in process `syz.1.473'. [ 194.546031][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.553348][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.956256][ T7984] ======================================================= [ 194.956256][ T7984] WARNING: The mand mount option has been deprecated and [ 194.956256][ T7984] and is ignored by this kernel. Remove the mand [ 194.956256][ T7984] option from the mount to silence this warning. [ 194.956256][ T7984] ======================================================= [ 195.045308][ T7982] delete_channel: no stack [ 199.392558][ T7228] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.590422][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.697555][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.709532][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.718025][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.726882][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 199.734515][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.784122][ T7228] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.994740][ T7228] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.162404][ T29] audit: type=1326 audit(8277292070.350:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.0.511" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ab0d7e719 code=0x0 [ 200.267635][ T7228] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.270209][ T8082] svc: failed to register nfsdv3 RPC service (errno 111). [ 200.379206][ T8082] svc: failed to register nfsaclv3 RPC service (errno 111). [ 200.528469][ T8077] chnl_net:caif_netlink_parms(): no params data found [ 200.581137][ T7228] bridge_slave_1: left allmulticast mode [ 200.597026][ T7228] bridge_slave_1: left promiscuous mode [ 200.617573][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.682588][ T7228] bridge_slave_0: left allmulticast mode [ 200.688341][ T7228] bridge_slave_0: left promiscuous mode [ 200.694219][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.681685][ T7228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.709804][ T7228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.735649][ T7228] bond0 (unregistering): Released all slaves [ 201.823659][ T5848] Bluetooth: hci2: command tx timeout [ 201.879051][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.515'. [ 202.718012][ T8077] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.739629][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.780824][ T8077] bridge_slave_0: entered allmulticast mode [ 202.795735][ T8077] bridge_slave_0: entered promiscuous mode [ 202.817311][ T8077] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.838914][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.859553][ T8077] bridge_slave_1: entered allmulticast mode [ 202.889325][ T8077] bridge_slave_1: entered promiscuous mode [ 202.956308][ T7228] hsr_slave_0: left promiscuous mode [ 202.969796][ T7228] hsr_slave_1: left promiscuous mode [ 202.988201][ T7228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.998329][ T7228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.053756][ T7228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.066936][ T7228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.105230][ T7228] veth1_macvtap: left promiscuous mode [ 203.115570][ T7228] veth0_macvtap: left promiscuous mode [ 203.128946][ T7228] veth1_vlan: left promiscuous mode [ 203.134291][ T7228] veth0_vlan: left promiscuous mode [ 203.899010][ T5848] Bluetooth: hci2: command tx timeout [ 204.243420][ T7228] team0 (unregistering): Port device team_slave_1 removed [ 204.387354][ T7228] team0 (unregistering): Port device team_slave_0 removed [ 205.583605][ T8077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.615936][ T8077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.812651][ T8077] team0: Port device team_slave_0 added [ 205.845434][ T8077] team0: Port device team_slave_1 added [ 205.980771][ T5848] Bluetooth: hci2: command tx timeout [ 206.059081][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.066067][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.127967][ T8077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.177200][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.209152][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.279780][ T8077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.536501][ T8077] hsr_slave_0: entered promiscuous mode [ 206.564062][ T8077] hsr_slave_1: entered promiscuous mode [ 206.571076][ T8077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.578674][ T8077] Cannot create hsr debugfs directory [ 207.804768][ T8185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.529'. [ 208.059816][ T5848] Bluetooth: hci2: command tx timeout [ 208.502607][ T8191] FAULT_INJECTION: forcing a failure. [ 208.502607][ T8191] name failslab, interval 1, probability 0, space 0, times 1 [ 208.553050][ T8191] CPU: 1 UID: 0 PID: 8191 Comm: syz.0.531 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 208.563713][ T8191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 208.573799][ T8191] Call Trace: [ 208.577094][ T8191] [ 208.580049][ T8191] dump_stack_lvl+0x16c/0x1f0 [ 208.584768][ T8191] should_fail_ex+0x497/0x5b0 [ 208.589481][ T8191] ? fs_reclaim_acquire+0xae/0x150 [ 208.594634][ T8191] should_failslab+0xc2/0x120 [ 208.599356][ T8191] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 208.604767][ T8191] ? stack_depot_save_flags+0x28/0x900 [ 208.610260][ T8191] ? alloc_empty_file+0x73/0x1e0 [ 208.615255][ T8191] alloc_empty_file+0x73/0x1e0 [ 208.620065][ T8191] path_openat+0xe1/0x2d60 [ 208.624520][ T8191] ? hlock_class+0x4e/0x130 [ 208.629072][ T8191] ? __lock_acquire+0x163e/0x3ce0 [ 208.634153][ T8191] ? __pfx_path_openat+0x10/0x10 [ 208.639128][ T8191] ? __pfx___lock_acquire+0x10/0x10 [ 208.644362][ T8191] do_filp_open+0x1dc/0x430 [ 208.648893][ T8191] ? __pfx_do_filp_open+0x10/0x10 [ 208.653966][ T8191] ? _raw_spin_unlock+0x28/0x50 [ 208.658850][ T8191] ? alloc_fd+0x2d7/0x6c0 [ 208.663204][ T8191] do_sys_openat2+0x17a/0x1e0 [ 208.667896][ T8191] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.673132][ T8191] ? __fget_files+0x244/0x3f0 [ 208.677842][ T8191] __x64_sys_open+0x154/0x1e0 [ 208.682541][ T8191] ? __pfx___x64_sys_open+0x10/0x10 [ 208.687767][ T8191] do_syscall_64+0xcd/0x250 [ 208.692279][ T8191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.698205][ T8191] RIP: 0033:0x7f4ab0d7e719 [ 208.702652][ T8191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.722282][ T8191] RSP: 002b:00007f4ab1b72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 208.730709][ T8191] RAX: ffffffffffffffda RBX: 00007f4ab0f35f80 RCX: 00007f4ab0d7e719 [ 208.738687][ T8191] RDX: 000000000000012b RSI: 0000000000070000 RDI: 0000000020000000 [ 208.746661][ T8191] RBP: 00007f4ab1b72090 R08: 0000000000000000 R09: 0000000000000000 [ 208.754635][ T8191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.762612][ T8191] R13: 0000000000000001 R14: 00007f4ab0f35f80 R15: 00007ffd59bec728 [ 208.770599][ T8191] [ 208.820970][ T8077] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 208.858426][ T8077] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 208.881227][ T8077] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 208.946889][ T8077] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.190125][ T8077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.241382][ T8077] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.261096][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 209.272951][ T7228] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.280099][ T7228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.310033][ T8206] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 209.325477][ T8208] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 209.400712][ T7387] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.407868][ T7387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.585982][ T8077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.615769][ T8077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.252400][ T8077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.391364][ T8077] veth0_vlan: entered promiscuous mode [ 210.443829][ T8077] veth1_vlan: entered promiscuous mode [ 210.541255][ T8077] veth0_macvtap: entered promiscuous mode [ 210.605733][ T8077] veth1_macvtap: entered promiscuous mode [ 210.674871][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.716172][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.748867][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.791330][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.822206][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.847143][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.876844][ T8077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.914137][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.994786][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.025108][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.054557][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.085493][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.111691][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.160142][ T8077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.217116][ T8077] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.247424][ T8077] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.278886][ T8077] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.320531][ T8077] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.552967][ T7453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.591075][ T7453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.662727][ T7453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.693479][ T7453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.247932][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'. [ 215.360390][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'. [ 215.419612][ T8316] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 215.430098][ T8319] netlink: 342 bytes leftover after parsing attributes in process `syz.2.547'. [ 215.464275][ T8316] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 217.199474][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.221806][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.231379][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.240020][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.247713][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.255190][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.066663][ T8366] HfR: entered promiscuous mode [ 218.656804][ T8360] chnl_net:caif_netlink_parms(): no params data found [ 219.330942][ T8360] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.338998][ T5848] Bluetooth: hci4: command tx timeout [ 219.368934][ T8360] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.376179][ T8360] bridge_slave_0: entered allmulticast mode [ 219.417896][ T8360] bridge_slave_0: entered promiscuous mode [ 219.462132][ T8360] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.489084][ T8360] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.496363][ T8360] bridge_slave_1: entered allmulticast mode [ 219.512085][ T8360] bridge_slave_1: entered promiscuous mode [ 221.419926][ T5848] Bluetooth: hci4: command tx timeout [ 223.498980][ T5848] Bluetooth: hci4: command tx timeout [ 223.938561][ T8360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.057175][ T8360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.347162][ T8360] team0: Port device team_slave_0 added [ 224.405022][ T8360] team0: Port device team_slave_1 added [ 225.005216][ T8360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.060464][ T8360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.213640][ T8360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.305660][ T8360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.364624][ T8360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.548891][ T8360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.579234][ T5848] Bluetooth: hci4: command tx timeout [ 226.183282][ T8360] hsr_slave_0: entered promiscuous mode [ 226.341616][ T8360] hsr_slave_1: entered promiscuous mode [ 226.449191][ T8360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.495726][ T8360] Cannot create hsr debugfs directory [ 228.717463][ T8360] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.139206][ T8360] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.228597][ T8360] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 229.470386][ T8360] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 230.241318][ T8476] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[8476] [ 230.806082][ T8360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.944595][ T8360] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.038783][ T7390] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.045911][ T7390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.130460][ T7390] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.137635][ T7390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.159762][ T8360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.985244][ T8360] veth0_vlan: entered promiscuous mode [ 233.042496][ T8360] veth1_vlan: entered promiscuous mode [ 233.147496][ T8360] veth0_macvtap: entered promiscuous mode [ 233.170821][ T8360] veth1_macvtap: entered promiscuous mode [ 233.227949][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.245218][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.270044][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.301254][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.331901][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.355105][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.386664][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.418650][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.449100][ T8507] svc: failed to register nfsdv3 RPC service (errno 111). [ 233.461289][ T8360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.488506][ T8507] svc: failed to register nfsaclv3 RPC service (errno 111). [ 233.507702][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.536129][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.559061][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.579111][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.589580][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.600302][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.610194][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.620786][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.632279][ T8360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.642673][ T8360] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.651635][ T8360] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.660533][ T8360] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.669709][ T8360] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.535400][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.553784][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.722027][ T7387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.730481][ T7387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.997664][ T8556] nfsd: Unknown parameter '' [ 237.580923][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 238.150665][ T6591] bridge0: port 3(syz_tun) entered disabled state [ 238.252640][ T6591] syz_tun (unregistering): left allmulticast mode [ 238.303470][ T6591] syz_tun (unregistering): left promiscuous mode [ 238.339605][ T6591] bridge0: port 3(syz_tun) entered disabled state [ 239.603435][ T7385] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.941877][ T7385] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.197176][ T7385] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.377526][ T7385] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.526285][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.536596][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.545316][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.555951][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.565334][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 240.572894][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.878371][ T7385] bridge_slave_1: left allmulticast mode [ 240.903837][ T7385] bridge_slave_1: left promiscuous mode [ 240.919631][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.046056][ T7385] bridge_slave_0: left allmulticast mode [ 241.070351][ T7385] bridge_slave_0: left promiscuous mode [ 241.096597][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.631017][ T54] Bluetooth: hci1: command tx timeout [ 242.753614][ T8604] netlink: 334 bytes leftover after parsing attributes in process `syz.0.597'. [ 243.149148][ T7385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.209036][ T7385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.266588][ T7385] bond0 (unregistering): Released all slaves [ 244.699131][ T54] Bluetooth: hci1: command tx timeout [ 245.827306][ T8583] chnl_net:caif_netlink_parms(): no params data found [ 246.780478][ T5848] Bluetooth: hci1: command tx timeout [ 247.439939][ T7385] hsr_slave_0: left promiscuous mode [ 247.516196][ T7385] hsr_slave_1: left promiscuous mode [ 247.609144][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.616643][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.669666][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.698859][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.914209][ T7385] veth1_macvtap: left promiscuous mode [ 247.940084][ T7385] veth0_macvtap: left promiscuous mode [ 247.945715][ T7385] veth1_vlan: left promiscuous mode [ 247.989889][ T7385] veth0_vlan: left promiscuous mode [ 248.860964][ T5848] Bluetooth: hci1: command tx timeout [ 250.457348][ T7385] team0 (unregistering): Port device team_slave_1 removed [ 250.611738][ T7385] team0 (unregistering): Port device team_slave_0 removed [ 252.589436][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.610124][ T8583] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.628212][ T8583] bridge_slave_0: entered allmulticast mode [ 252.649655][ T8583] bridge_slave_0: entered promiscuous mode [ 252.681098][ T8583] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.688220][ T8583] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.705905][ T8583] bridge_slave_1: entered allmulticast mode [ 252.725856][ T8583] bridge_slave_1: entered promiscuous mode [ 252.958632][ T8583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.052134][ T8583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.197894][ T8583] team0: Port device team_slave_0 added [ 253.244169][ T8583] team0: Port device team_slave_1 added [ 253.396274][ T8583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.460340][ T8583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.505946][ T8583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.554975][ T8583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.564185][ T8583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.633584][ T8583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.823783][ T8583] hsr_slave_0: entered promiscuous mode [ 253.837811][ T8583] hsr_slave_1: entered promiscuous mode [ 253.853055][ T8583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.880491][ T8583] Cannot create hsr debugfs directory [ 254.582978][ T8711] raw_sendmsg: syz.0.615 forgot to set AF_INET. Fix it! [ 255.886847][ T8583] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 255.947601][ T8583] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 255.981094][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.987551][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.268995][ T8583] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.343150][ T8583] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.739522][ T8583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.816566][ T8583] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.866638][ T7453] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.873837][ T7453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.924741][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.931927][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.245960][ T8583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.632764][ T8583] veth0_vlan: entered promiscuous mode [ 258.654346][ T8583] veth1_vlan: entered promiscuous mode [ 259.623247][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 259.633975][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 259.642319][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 259.650459][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 259.659580][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 259.666893][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.575589][ T7228] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.742454][ T7228] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.843054][ T8583] veth0_macvtap: entered promiscuous mode [ 260.881274][ T8583] veth1_macvtap: entered promiscuous mode [ 260.954448][ T7228] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.989962][ T8583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.005805][ T8583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.018500][ T8583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.040270][ T8583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.056309][ T8583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.067262][ T8583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.083699][ T8583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.108213][ T8583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.130332][ T8583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.197004][ T7228] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.243472][ T8583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.268857][ T8583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.285325][ T8583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.296386][ T8583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.699146][ T8583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.712500][ T8583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.728841][ T8583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.740847][ T5848] Bluetooth: hci2: command tx timeout [ 261.754773][ T8583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.797358][ T8583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.927868][ T8583] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.938271][ T8583] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.953565][ T8583] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.963061][ T8583] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.246858][ T7228] bridge_slave_1: left allmulticast mode [ 262.264687][ T7228] bridge_slave_1: left promiscuous mode [ 262.274958][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.351819][ T7228] bridge_slave_0: left allmulticast mode [ 262.357525][ T7228] bridge_slave_0: left promiscuous mode [ 262.383766][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.807333][ T8767] Process accounting resumed [ 263.394395][ T7228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.416063][ T7228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.471376][ T7228] bond0 (unregistering): Released all slaves [ 263.543870][ T8762] chnl_net:caif_netlink_parms(): no params data found [ 263.765732][ T8817] cifs: Unknown parameter 'n' [ 263.819122][ T5848] Bluetooth: hci2: command tx timeout [ 264.062797][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.106407][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.197602][ T7233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.223742][ T7233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.851830][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.882473][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.898954][ T8762] bridge_slave_0: entered allmulticast mode [ 264.910371][ T8762] bridge_slave_0: entered promiscuous mode [ 265.066363][ T7228] hsr_slave_0: left promiscuous mode [ 265.093151][ T7228] hsr_slave_1: left promiscuous mode [ 265.152647][ T7228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.180087][ T7228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.235424][ T7228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.253271][ T7228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.406234][ T7228] veth1_macvtap: left promiscuous mode [ 265.426158][ T7228] veth0_macvtap: left promiscuous mode [ 265.445308][ T7228] veth1_vlan: left promiscuous mode [ 265.464174][ T7228] veth0_vlan: left promiscuous mode [ 265.899022][ T5848] Bluetooth: hci2: command tx timeout [ 267.261031][ T8873] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[8873] [ 267.738680][ T7228] team0 (unregistering): Port device team_slave_1 removed [ 267.884987][ T7228] team0 (unregistering): Port device team_slave_0 removed [ 267.981860][ T5848] Bluetooth: hci2: command tx timeout [ 269.090640][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.098208][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.106402][ T8762] bridge_slave_1: entered allmulticast mode [ 269.135369][ T8762] bridge_slave_1: entered promiscuous mode [ 269.259518][ T8762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.323473][ T8762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.488600][ T8762] team0: Port device team_slave_0 added [ 269.514948][ T8762] team0: Port device team_slave_1 added [ 269.802621][ T8762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.812046][ T8762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.857332][ T8762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.946327][ T8762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.968503][ T8762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.079537][ T8762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.213189][ T8909] syz.4.642 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 270.275864][ T8762] hsr_slave_0: entered promiscuous mode [ 270.286293][ T8762] hsr_slave_1: entered promiscuous mode [ 270.292999][ T8762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.301261][ T8762] Cannot create hsr debugfs directory [ 270.756003][ T8762] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 270.793045][ T8762] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 270.818563][ T8762] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 270.880109][ T8762] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.151055][ T8762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.220102][ T8762] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.270962][ T7385] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.278099][ T7385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.327142][ T7385] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.334330][ T7385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.731513][ T8762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.792671][ T8762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.011823][ T8762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.696519][ T8990] netlink: 334 bytes leftover after parsing attributes in process `syz.1.655'. [ 274.830254][ T8762] veth0_vlan: entered promiscuous mode [ 274.895501][ T8762] veth1_vlan: entered promiscuous mode [ 275.393601][ T8762] veth0_macvtap: entered promiscuous mode [ 275.404684][ T8762] veth1_macvtap: entered promiscuous mode [ 275.420936][ T8762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.431786][ T8762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.441896][ T8762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.452580][ T8762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.462651][ T8762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.473289][ T8762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.483330][ T8762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.493899][ T8762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.505613][ T8762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.712130][ T8762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.722813][ T8762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.732746][ T8762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.743497][ T8762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.753417][ T8762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.764250][ T8762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.774252][ T8762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.785030][ T8762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.798300][ T8762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.959355][ T8762] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.968105][ T8762] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.983777][ T8762] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.007201][ T8762] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.326470][ T9025] netlink: 'syz.4.659': attribute type 2 has an invalid length. [ 276.506147][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.659'. [ 276.801586][ T7453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.817001][ T7453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.926921][ T7453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.970104][ T7453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.365080][ T9162] netlink: 334 bytes leftover after parsing attributes in process `syz.4.686'. [ 289.797617][ T9220] : entered promiscuous mode [ 294.283239][ T9343] netlink: 172 bytes leftover after parsing attributes in process `syz.4.715'. [ 294.548935][ T9335] Process accounting resumed [ 299.927067][ T9408] netlink: 11 bytes leftover after parsing attributes in process `syz.5.728'. [ 300.336102][ T9415] netlink: 334 bytes leftover after parsing attributes in process `syz.5.730'. [ 302.455367][ T9447] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 302.532539][ T9450] FAULT_INJECTION: forcing a failure. [ 302.532539][ T9450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.747070][ T9450] CPU: 1 UID: 0 PID: 9450 Comm: syz.0.740 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 302.757714][ T9450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 302.767790][ T9450] Call Trace: [ 302.771082][ T9450] [ 302.774027][ T9450] dump_stack_lvl+0x16c/0x1f0 [ 302.778729][ T9450] should_fail_ex+0x497/0x5b0 [ 302.783431][ T9450] _copy_from_user+0x2e/0xd0 [ 302.788050][ T9450] copy_msghdr_from_user+0x99/0x160 [ 302.793285][ T9450] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 302.799131][ T9450] ? __pfx___lock_acquire+0x10/0x10 [ 302.804365][ T9450] ___sys_sendmsg+0xff/0x1e0 [ 302.808980][ T9450] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.814222][ T9450] ? lock_acquire+0x2f/0xb0 [ 302.819013][ T9450] ? __fget_files+0x40/0x3f0 [ 302.823636][ T9450] ? fdget+0x176/0x210 [ 302.827728][ T9450] __sys_sendmsg+0x117/0x1f0 [ 302.832345][ T9450] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.837484][ T9450] ? __fget_files+0x244/0x3f0 [ 302.842203][ T9450] do_syscall_64+0xcd/0x250 [ 302.846727][ T9450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.852655][ T9450] RIP: 0033:0x7f4ab0d7e719 [ 302.857088][ T9450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.877149][ T9450] RSP: 002b:00007f4ab1b72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.885587][ T9450] RAX: ffffffffffffffda RBX: 00007f4ab0f35f80 RCX: 00007f4ab0d7e719 [ 302.893584][ T9450] RDX: 0000000000004000 RSI: 0000000020000100 RDI: 0000000000000003 [ 302.901572][ T9450] RBP: 00007f4ab1b72090 R08: 0000000000000000 R09: 0000000000000000 [ 302.909558][ T9450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.917551][ T9450] R13: 0000000000000000 R14: 00007f4ab0f35f80 R15: 00007ffd59bec728 [ 302.925572][ T9450] [ 303.034836][ T9456] FAULT_INJECTION: forcing a failure. [ 303.034836][ T9456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.124176][ T9456] CPU: 1 UID: 0 PID: 9456 Comm: syz.5.743 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 303.134828][ T9456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 303.144900][ T9456] Call Trace: [ 303.148196][ T9456] [ 303.151143][ T9456] dump_stack_lvl+0x16c/0x1f0 [ 303.155852][ T9456] should_fail_ex+0x497/0x5b0 [ 303.160569][ T9456] _copy_to_user+0x32/0xd0 [ 303.165011][ T9456] simple_read_from_buffer+0xd0/0x160 [ 303.170412][ T9456] proc_fail_nth_read+0x198/0x270 [ 303.175474][ T9456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.181049][ T9456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.186620][ T9456] vfs_read+0x1df/0xbe0 [ 303.190796][ T9456] ? __fget_files+0x23a/0x3f0 [ 303.195497][ T9456] ? fdget_pos+0x24c/0x360 [ 303.199940][ T9456] ? __pfx_lock_release+0x10/0x10 [ 303.205003][ T9456] ? trace_lock_acquire+0x14a/0x1d0 [ 303.210222][ T9456] ? __pfx_vfs_read+0x10/0x10 [ 303.214914][ T9456] ? __pfx___mutex_lock+0x10/0x10 [ 303.219967][ T9456] ? __fget_files+0x244/0x3f0 [ 303.224676][ T9456] ksys_read+0x12f/0x260 [ 303.228944][ T9456] ? __pfx_ksys_read+0x10/0x10 [ 303.233737][ T9456] do_syscall_64+0xcd/0x250 [ 303.238264][ T9456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.244183][ T9456] RIP: 0033:0x7f476cf7d15c [ 303.248613][ T9456] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 303.268237][ T9456] RSP: 002b:00007f476dcc1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 303.276670][ T9456] RAX: ffffffffffffffda RBX: 00007f476d135f80 RCX: 00007f476cf7d15c [ 303.284658][ T9456] RDX: 000000000000000f RSI: 00007f476dcc10a0 RDI: 0000000000000004 [ 303.292640][ T9456] RBP: 00007f476dcc1090 R08: 0000000000000000 R09: 0000000000000000 [ 303.300628][ T9456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.308613][ T9456] R13: 0000000000000000 R14: 00007f476d135f80 R15: 00007ffc229ca9f8 [ 303.316615][ T9456] [ 305.551129][ T9502] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 305.976909][ T9491] netlink: 334 bytes leftover after parsing attributes in process `syz.5.749'. [ 306.304928][ T9518] FAULT_INJECTION: forcing a failure. [ 306.304928][ T9518] name failslab, interval 1, probability 0, space 0, times 0 [ 306.398766][ T9518] CPU: 1 UID: 0 PID: 9518 Comm: syz.5.753 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 306.409515][ T9518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 306.419593][ T9518] Call Trace: [ 306.422893][ T9518] [ 306.425837][ T9518] dump_stack_lvl+0x16c/0x1f0 [ 306.430539][ T9518] should_fail_ex+0x497/0x5b0 [ 306.435242][ T9518] ? fs_reclaim_acquire+0xae/0x150 [ 306.440384][ T9518] should_failslab+0xc2/0x120 [ 306.445097][ T9518] kmem_cache_alloc_node_noprof+0x71/0x310 [ 306.450946][ T9518] ? __alloc_skb+0x2b3/0x380 [ 306.455571][ T9518] __alloc_skb+0x2b3/0x380 [ 306.460030][ T9518] ? __pfx___alloc_skb+0x10/0x10 [ 306.464999][ T9518] ? lock_acquire+0x2f/0xb0 [ 306.469546][ T9518] netlink_alloc_large_skb+0x69/0x130 [ 306.474967][ T9518] netlink_sendmsg+0x689/0xd70 [ 306.479790][ T9518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.485212][ T9518] ____sys_sendmsg+0x9ae/0xb40 [ 306.490014][ T9518] ? copy_msghdr_from_user+0x10b/0x160 [ 306.495510][ T9518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.500848][ T9518] ? __pfx___lock_acquire+0x10/0x10 [ 306.506084][ T9518] ___sys_sendmsg+0x135/0x1e0 [ 306.510787][ T9518] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.516374][ T9518] ? lock_acquire+0x2f/0xb0 [ 306.520910][ T9518] ? __fget_files+0x40/0x3f0 [ 306.525531][ T9518] ? fdget+0x176/0x210 [ 306.529609][ T9518] __sys_sendmsg+0x117/0x1f0 [ 306.534215][ T9518] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.539331][ T9518] ? __fget_files+0x244/0x3f0 [ 306.544046][ T9518] do_syscall_64+0xcd/0x250 [ 306.548566][ T9518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.554488][ T9518] RIP: 0033:0x7f476cf7e719 [ 306.558916][ T9518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.578534][ T9518] RSP: 002b:00007f476dcc1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.586961][ T9518] RAX: ffffffffffffffda RBX: 00007f476d135f80 RCX: 00007f476cf7e719 [ 306.594942][ T9518] RDX: 0000000000004000 RSI: 0000000020000100 RDI: 0000000000000003 [ 306.602929][ T9518] RBP: 00007f476dcc1090 R08: 0000000000000000 R09: 0000000000000000 [ 306.610916][ T9518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.618898][ T9518] R13: 0000000000000000 R14: 00007f476d135f80 R15: 00007ffc229ca9f8 [ 306.626894][ T9518] [ 309.957508][ T9604] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 311.679057][ T9659] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 313.666755][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 313.725273][ T9704] ip6gre0: entered promiscuous mode [ 313.732320][ T9704] ip6gre0: entered allmulticast mode [ 313.846008][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.782'. [ 317.471300][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.493111][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.139875][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.150561][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.159212][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.167695][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.176011][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 322.183642][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 322.315440][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 322.324647][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 322.332791][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 322.348284][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 322.356518][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 322.363912][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 322.992896][ T9804] chnl_net:caif_netlink_parms(): no params data found [ 324.121378][ T9800] chnl_net:caif_netlink_parms(): no params data found [ 324.386369][ T5847] Bluetooth: hci2: command tx timeout [ 324.459674][ T5847] Bluetooth: hci3: command tx timeout [ 325.169572][ T9804] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.176715][ T9804] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.205178][ T9804] bridge_slave_0: entered allmulticast mode [ 325.521637][ T9804] bridge_slave_0: entered promiscuous mode [ 325.530188][ T9804] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.578169][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.596710][ T9804] bridge_slave_1: entered allmulticast mode [ 325.624622][ T9804] bridge_slave_1: entered promiscuous mode [ 326.070331][ T9800] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.106122][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.139983][ T9800] bridge_slave_0: entered allmulticast mode [ 326.187191][ T9800] bridge_slave_0: entered promiscuous mode [ 326.271440][ T9804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.325465][ T9804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.366923][ T9800] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.397554][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.436047][ T9800] bridge_slave_1: entered allmulticast mode [ 326.467193][ T54] Bluetooth: hci2: command tx timeout [ 326.542961][ T54] Bluetooth: hci3: command tx timeout [ 326.753794][ T9800] bridge_slave_1: entered promiscuous mode [ 326.822368][ T9800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.889468][ T9800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.108327][ T9800] team0: Port device team_slave_0 added [ 327.144687][ T9800] team0: Port device team_slave_1 added [ 328.214622][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.231089][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.292518][ T9800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.312519][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.488872][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.547225][ T54] Bluetooth: hci2: command tx timeout [ 328.563442][ T9800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.618967][ T54] Bluetooth: hci3: command tx timeout [ 328.822988][ T9800] hsr_slave_0: entered promiscuous mode [ 328.839862][ T9800] hsr_slave_1: entered promiscuous mode [ 328.938875][ T9800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.947504][ T9800] Cannot create hsr debugfs directory [ 329.332970][ T9800] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.498328][ T9800] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.650073][ T9800] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.803071][ T9800] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.100909][ T9800] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 330.152160][ T9800] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 330.184663][ T9800] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 330.210785][ T9800] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 330.287944][ T9800] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.295162][ T9800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.497826][ T9800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.568892][ T9800] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.619163][ T54] Bluetooth: hci2: command tx timeout [ 330.699423][ T54] Bluetooth: hci3: command tx timeout [ 331.242424][ T9800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.890881][ T9800] veth0_vlan: entered promiscuous mode [ 331.923913][ T9800] veth1_vlan: entered promiscuous mode [ 332.011309][ T9800] veth0_macvtap: entered promiscuous mode [ 332.059726][ T9800] veth1_macvtap: entered promiscuous mode [ 332.118270][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.147863][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.178351][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.217077][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.246831][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.277821][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.319001][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.348796][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.358644][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.422368][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.456428][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.487091][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.527604][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.558796][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.586587][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.618344][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.658887][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.690127][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.732303][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.768975][ T9800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.808445][ T9800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.849500][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.889585][ T9800] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.922153][ T9800] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.950676][ T9800] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.987615][ T9800] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.168273][ T7387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.205112][ T7387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.300519][ T7243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.320017][ T7243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.553332][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.560552][ T7233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.921657][ T9872] netlink: 'syz.1.813': attribute type 11 has an invalid length. [ 336.499800][ T9876] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 339.981493][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 341.740757][ T9921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.827'. [ 342.394614][ T9804] team0: Port device team_slave_0 added [ 342.521242][ T9804] team0: Port device team_slave_1 added [ 342.730085][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.737074][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.919030][ T9804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.018159][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.066247][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.258496][ T9804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.617376][ T9804] hsr_slave_0: entered promiscuous mode [ 343.716907][ T9804] hsr_slave_1: entered promiscuous mode [ 343.941223][ T9804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.974459][ T9804] Cannot create hsr debugfs directory [ 345.610724][ T9804] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 345.697058][ T9804] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 345.807993][ T9804] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 346.025202][ T9964] svc: failed to register nfsdv3 RPC service (errno 111). [ 346.085462][ T9964] svc: failed to register nfsaclv3 RPC service (errno 111). [ 346.094771][ T9804] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 346.404378][ T9971] netlink: 24 bytes leftover after parsing attributes in process `syz.5.837'. [ 346.498522][ T9804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.606004][ T9804] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.678412][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.685613][ T7243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.776318][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.783525][ T7243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.041074][ T9804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.209387][ T9985] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 348.599495][ T9991] netlink: 342 bytes leftover after parsing attributes in process `syz.5.842'. [ 349.171649][ T9804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.815016][ T9804] veth0_vlan: entered promiscuous mode [ 350.875357][ T9804] veth1_vlan: entered promiscuous mode [ 351.042850][ T9804] veth0_macvtap: entered promiscuous mode [ 351.149950][ T9804] veth1_macvtap: entered promiscuous mode [ 351.208187][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.279002][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.316583][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.339805][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.378983][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.438322][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.478795][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.528850][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.558830][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.598747][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.628760][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.668726][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.706005][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.745931][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.797574][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.838750][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.899850][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.928012][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.951199][T10029] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 351.984611][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.018751][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.059304][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.101886][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.142038][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.170773][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.198764][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.234091][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.287256][ T9804] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.338752][ T9804] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.347490][ T9804] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.417974][ T9804] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.690094][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.729073][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.863996][ T7228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.908815][ T7228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.294212][ T7228] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.103340][ T7228] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.578140][T10056] bridge0: port 3(bond0) entered blocking state [ 354.586031][T10056] bridge0: port 3(bond0) entered disabled state [ 354.598976][T10056] bond0: entered allmulticast mode [ 354.660272][T10056] bond_slave_0: entered allmulticast mode [ 354.679521][T10056] bond_slave_1: entered allmulticast mode [ 355.242710][T10056] bond0: entered promiscuous mode [ 355.247790][T10056] bond_slave_0: entered promiscuous mode [ 355.332685][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 355.348931][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 355.356861][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.365860][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.374176][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 355.381967][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 355.584718][T10056] bond_slave_1: entered promiscuous mode [ 355.610613][T10056] bridge0: port 3(bond0) entered blocking state [ 355.616956][T10056] bridge0: port 3(bond0) entered forwarding state [ 355.777252][ T7228] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.250942][ T7228] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.681344][T10078] netlink: 32 bytes leftover after parsing attributes in process `syz.0.862'. [ 356.904739][T10084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.861'. [ 357.416924][T10059] chnl_net:caif_netlink_parms(): no params data found [ 357.424130][ T5847] Bluetooth: hci2: command tx timeout [ 357.518118][ T7228] bridge_slave_1: left allmulticast mode [ 357.543957][ T7228] bridge_slave_1: left promiscuous mode [ 357.596966][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.688556][ T7228] bridge_slave_0: left allmulticast mode [ 357.739147][ T7228] bridge_slave_0: left promiscuous mode [ 357.772413][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.498806][ T5847] Bluetooth: hci2: command tx timeout [ 361.590762][ T5847] Bluetooth: hci2: command tx timeout [ 362.917988][ T7228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.043208][ T7228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.113094][ T7228] bond0 (unregistering): Released all slaves [ 363.143971][T10123] kexec: Could not allocate control_code_buffer [ 363.603868][T10059] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.641070][T10059] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.659275][ T5847] Bluetooth: hci2: command tx timeout [ 363.680386][T10059] bridge_slave_0: entered allmulticast mode [ 363.711719][T10059] bridge_slave_0: entered promiscuous mode [ 363.755419][T10059] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.785545][T10059] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.821633][T10059] bridge_slave_1: entered allmulticast mode [ 363.851435][T10059] bridge_slave_1: entered promiscuous mode [ 364.003518][T10059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.061058][T10059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.241427][T10059] team0: Port device team_slave_0 added [ 364.282788][T10059] team0: Port device team_slave_1 added [ 364.449492][T10059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.483305][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.601124][T10059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.650322][T10059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.700028][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.808872][T10059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.996232][T10059] hsr_slave_0: entered promiscuous mode [ 365.033667][T10059] hsr_slave_1: entered promiscuous mode [ 365.078960][T10059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.108897][T10059] Cannot create hsr debugfs directory [ 365.581773][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 367.438934][T10059] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 368.426960][T10059] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 368.672448][T10059] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 368.779709][T10059] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 369.309477][ T7228] hsr_slave_0: left promiscuous mode [ 369.478871][ T7228] hsr_slave_1: left promiscuous mode [ 369.537878][ T7228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.577631][ T7228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.591597][T10193] netlink: 24 bytes leftover after parsing attributes in process `syz.6.882'. [ 369.659825][ T7228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.712562][ T7228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.934822][ T7228] veth1_macvtap: left promiscuous mode [ 370.006001][ T7228] veth0_macvtap: left promiscuous mode [ 370.038989][ T7228] veth1_vlan: left promiscuous mode [ 370.081476][ T7228] veth0_vlan: left promiscuous mode [ 370.309360][T10202] netlink: 24 bytes leftover after parsing attributes in process `syz.6.883'. [ 371.135322][T10212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.884'. [ 373.099953][ T7228] team0 (unregistering): Port device team_slave_1 removed [ 373.340456][ T7228] team0 (unregistering): Port device team_slave_0 removed [ 374.113400][T10223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.888'. [ 374.172312][T10223] netlink: 32 bytes leftover after parsing attributes in process `syz.0.888'. [ 376.273301][T10059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.374088][T10059] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.439989][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.447162][ T7243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.604676][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.611874][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.759683][T10059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.906004][T10258] nbd: must specify a device to reconfigure [ 377.230551][T10267] netlink: 'syz.6.896': attribute type 11 has an invalid length. [ 377.250805][T10267] netlink: 264 bytes leftover after parsing attributes in process `syz.6.896'. [ 377.341818][T10265] delete_channel: no stack [ 377.525282][T10059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.916951][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.924854][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.967308][T10059] veth0_vlan: entered promiscuous mode [ 380.041945][T10059] veth1_vlan: entered promiscuous mode [ 380.166616][T10059] veth0_macvtap: entered promiscuous mode [ 380.190016][T10059] veth1_macvtap: entered promiscuous mode [ 380.211424][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.222213][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.233016][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.244456][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.254590][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.265142][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.275298][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.286193][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.296186][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.306949][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.317013][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.327550][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.339552][T10059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.349956][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.360453][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.370330][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.381239][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.391488][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.401968][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.411972][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.422603][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.432830][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.443681][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.453546][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.464265][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.475431][T10059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.561716][T10059] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.588855][T10059] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.597606][T10059] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.829010][T10059] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.108513][T10290] delete_channel: no stack [ 381.365576][ T7243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.428390][ T7243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.508893][ T7385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.530818][ T7385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.815587][ T7453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.132664][ T7453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.700949][ T7453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.249300][ T7453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.429647][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.439317][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.447304][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 384.456448][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 384.464204][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 384.471785][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 385.311994][T10318] chnl_net:caif_netlink_parms(): no params data found [ 385.736486][ T7453] bridge_slave_1: left allmulticast mode [ 385.764382][ T7453] bridge_slave_1: left promiscuous mode [ 385.826814][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.943632][ T7453] bridge_slave_0: left allmulticast mode [ 385.968540][ T7453] bridge_slave_0: left promiscuous mode [ 386.013882][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.540537][ T5847] Bluetooth: hci0: command tx timeout [ 388.619789][ T5847] Bluetooth: hci0: command tx timeout [ 389.579672][ T7453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.685904][ T7453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.733110][ T7453] bond0 (unregistering): Released all slaves [ 389.953652][ T7453] HfR: left promiscuous mode [ 390.557223][T10318] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.605866][T10318] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.656604][T10318] bridge_slave_0: entered allmulticast mode [ 390.709113][ T5847] Bluetooth: hci0: command tx timeout [ 390.728149][T10318] bridge_slave_0: entered promiscuous mode [ 390.781273][T10318] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.868753][T10318] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.876611][T10318] bridge_slave_1: entered allmulticast mode [ 390.883799][T10318] bridge_slave_1: entered promiscuous mode [ 392.800953][ T5847] Bluetooth: hci0: command tx timeout [ 393.177994][T10318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.271085][T10318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.707091][T10318] team0: Port device team_slave_0 added [ 393.885983][T10318] team0: Port device team_slave_1 added [ 393.919756][T10424] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 394.264142][ T7453] hsr_slave_0: left promiscuous mode [ 394.344172][ T7453] hsr_slave_1: left promiscuous mode [ 394.362070][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.394133][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.449612][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.478552][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.570916][ T7453] veth1_macvtap: left promiscuous mode [ 394.588897][ T7453] veth0_macvtap: left promiscuous mode [ 394.604771][ T7453] veth1_vlan: left promiscuous mode [ 394.632586][ T7453] veth0_vlan: left promiscuous mode [ 397.706483][ T7453] team0 (unregistering): Port device team_slave_1 removed [ 398.087416][ T7453] team0 (unregistering): Port device team_slave_0 removed [ 400.149775][T10318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.166169][T10318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.259181][T10318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.429312][T10318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.436299][T10318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.548768][T10318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.940334][T10318] hsr_slave_0: entered promiscuous mode [ 401.008867][T10318] hsr_slave_1: entered promiscuous mode [ 401.025332][T10318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.056583][T10318] Cannot create hsr debugfs directory [ 401.427907][T10459] netlink: zone id is out of range [ 401.467132][T10459] netlink: zone id is out of range [ 401.497306][T10459] netlink: zone id is out of range [ 401.561437][T10459] netlink: zone id is out of range [ 401.566590][T10459] netlink: zone id is out of range [ 401.660893][T10459] netlink: zone id is out of range [ 403.419757][T10318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 403.558302][T10318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 403.649862][T10318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 403.765853][T10318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 404.373231][T10318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.517907][T10318] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.589756][T10506] netlink: 24 bytes leftover after parsing attributes in process `syz.5.935'. [ 404.631634][ T7453] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.638784][ T7453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.739374][ T7453] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.746495][ T7453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.042009][T10318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.970761][T10318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.215914][T10318] veth0_vlan: entered promiscuous mode [ 406.289886][T10318] veth1_vlan: entered promiscuous mode [ 406.467270][T10318] veth0_macvtap: entered promiscuous mode [ 406.533080][T10318] veth1_macvtap: entered promiscuous mode [ 406.635489][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.703868][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.767991][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.812178][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.893611][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.923499][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.968927][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.027081][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.065173][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.126853][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.176998][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.220826][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.278416][T10318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.337995][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.407944][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.457633][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.508899][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.548705][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.594514][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.638672][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.697240][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.747594][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.788769][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.841621][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.878809][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.932263][T10318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.999627][T10318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.048705][T10318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.088931][T10318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.118247][T10318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.628536][ T7243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.695579][ T7243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.832342][ T7385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.883413][ T7385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.860801][T10565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.939'. [ 410.307213][T10571] lo: entered promiscuous mode [ 410.351154][T10571] netlink: 'syz.6.940': attribute type 46 has an invalid length. [ 410.419325][T10570] lo: left promiscuous mode [ 411.751900][T10600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.945'. [ 412.570466][T10614] netlink: 342 bytes leftover after parsing attributes in process `syz.5.947'. [ 414.281201][T10632] netlink: 24 bytes leftover after parsing attributes in process `syz.5.950'. [ 417.140708][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.6.953'. [ 417.746341][T10652] team0: entered promiscuous mode [ 417.751715][T10652] team_slave_0: entered promiscuous mode [ 417.769392][T10652] team_slave_1: entered promiscuous mode [ 418.310252][T10671] RDS: rds_bind could not find a transport for ::ffff:58.78.54.0, load rds_tcp or rds_rdma? [ 418.527362][T10665] RDS: rds_bind could not find a transport for ::ffff:58.78.54.0, load rds_tcp or rds_rdma? [ 420.098226][T10687] netlink: 342 bytes leftover after parsing attributes in process `syz.0.961'. [ 423.169836][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.6.963'. [ 423.419099][T10701] svc: failed to register nfsdv3 RPC service (errno 111). [ 423.489126][T10701] svc: failed to register nfsaclv3 RPC service (errno 111). [ 426.086295][T10727] : entered promiscuous mode [ 428.221331][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.976'. [ 428.402794][T10754] svc: failed to register nfsdv3 RPC service (errno 111). [ 428.479061][T10754] svc: failed to register nfsaclv3 RPC service (errno 111). [ 431.151612][T10781] netlink: 24 bytes leftover after parsing attributes in process `syz.5.980'. [ 438.777429][T10842] netlink: 338 bytes leftover after parsing attributes in process `syz.6.994'. [ 440.329643][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.336560][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.505543][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 447.870761][T10885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1002'. [ 451.774366][T10891] netlink: 'syz.6.1003': attribute type 11 has an invalid length. [ 451.929976][T10891] netlink: 264 bytes leftover after parsing attributes in process `syz.6.1003'. [ 455.128846][ T30] INFO: task syz.4.752:9510 blocked for more than 144 seconds. [ 455.136631][ T30] Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 455.198674][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.207393][ T30] task:syz.4.752 state:D stack:28608 pid:9510 tgid:9506 ppid:8360 flags:0x00004004 [ 455.289400][ T30] Call Trace: [ 455.292735][ T30] [ 455.295684][ T30] __schedule+0xe55/0x5740 [ 455.328661][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 455.333934][ T30] ? find_held_lock+0x2d/0x110 [ 455.358662][ T30] ? __pfx___schedule+0x10/0x10 [ 455.363778][ T30] ? schedule+0x298/0x350 [ 455.368142][ T30] ? __pfx_lock_release+0x10/0x10 [ 455.408649][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 455.413922][ T30] ? lock_acquire+0x2f/0xb0 [ 455.418455][ T30] ? schedule+0x1fd/0x350 [ 455.448695][ T30] schedule+0xe7/0x350 [ 455.452854][ T30] schedule_timeout+0x258/0x2a0 [ 455.457732][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 455.488669][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.494471][ T30] __wait_for_common+0x3e1/0x600 [ 455.521361][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 455.526813][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 455.549511][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 455.554953][ T30] wait_for_completion_state+0x1c/0x40 [ 455.568637][ T30] do_coredump+0x82f/0x4160 [ 455.573196][ T30] ? hlock_class+0x4e/0x130 [ 455.577727][ T30] ? stack_depot_save_flags+0x28/0x900 [ 455.598632][ T30] ? __pfx_do_coredump+0x10/0x10 [ 455.603624][ T30] ? kmem_cache_free+0x152/0x4b0 [ 455.618615][ T30] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 455.624471][ T30] ? do_syscall_64+0xda/0x250 [ 455.638703][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.644906][ T30] get_signal+0x237c/0x26d0 [ 455.668740][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 455.674218][ T30] ? __pfx_get_signal+0x10/0x10 [ 455.688676][ T30] ? force_sig_info_to_task+0x3a0/0x660 [ 455.694292][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 455.708934][ T30] ? __pfx_force_exit_sig+0x10/0x10 [ 455.714188][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 455.728719][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 455.734412][ T30] do_syscall_64+0xda/0x250 [ 455.748662][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.754620][ T30] RIP: 0033:0x7f818477e719 [ 455.768668][ T30] RSP: 002b:00007f81856450e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 455.777355][ T30] RAX: ffffffffffffffda RBX: 00007f8184936060 RCX: 00007f818477e719 [ 455.808651][ T30] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8184936064 [ 455.816693][ T30] RBP: 00007f8184936058 R08: 00007f8185667080 R09: 0000000000000000 [ 455.838627][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8184936064 [ 455.846666][ T30] R13: 0000000000000000 R14: 00007fff129d7610 R15: 00007fff129d76f8 [ 455.869430][ T30] [ 455.872518][ T30] [ 455.872518][ T30] Showing all locks held in the system: [ 455.899000][ T30] 3 locks held by kworker/1:0/25: [ 455.904584][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 455.927483][ T30] #1: ffffc900001f7d80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 455.937449][ T30] #2: ffffffff8ddc30f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 455.947650][ T30] 1 lock held by khungtaskd/30: [ 455.952613][ T30] #0: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 455.962670][ T30] 2 locks held by getty/5599: [ 455.967362][ T30] #0: ffff8880352a20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 455.977261][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 456.008667][ T30] 4 locks held by kworker/u8:18/7228: [ 456.014095][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 456.038654][ T30] #1: ffffc9000342fd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 456.068668][ T30] #2: ffffffff8faaf690 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 456.078082][ T30] #3: ffffffff8ddc2fc0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x700 [ 456.149229][ T30] 1 lock held by syz.3.518/8110: [ 456.154218][ T30] 1 lock held by syz.4.752/9509: [ 456.188674][ T30] 4 locks held by syz-executor/9804: [ 456.194015][ T30] 1 lock held by syz-executor/10059: [ 456.218947][ T30] #0: ffff8880b873ee98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 456.292720][T10907] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1008'. [ 456.322559][ T30] 4 locks held by syz-executor/10318: [ 456.328084][ T30] #0: ffff888044484d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 456.395318][ T30] #1: ffff888044484078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x34c/0x1260 [ 456.458663][ T30] #2: ffffffff8fd2ae48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 456.618635][ T30] #3: ffffffff8ddc30f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 456.669400][ T30] 2 locks held by syz.6.958/10681: [ 456.674556][ T30] 4 locks held by syz.6.967/10715: [ 456.743330][ T30] 3 locks held by syz.5.998/10867: [ 456.767185][ T30] 2 locks held by syz.5.999/10874: [ 456.797196][ T30] 1 lock held by syz.1.1002/10887: [ 456.829366][ T30] 2 locks held by syz.1.1007/10905: [ 456.834614][ T30] 1 lock held by syz.6.1008/10907: [ 456.897069][ T30] [ 456.918682][ T30] ============================================= [ 456.918682][ T30] [ 456.927691][ T30] NMI backtrace for cpu 1 [ 456.932038][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 456.942575][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 456.952644][ T30] Call Trace: [ 456.955934][ T30] [ 456.958888][ T30] dump_stack_lvl+0x116/0x1f0 [ 456.963590][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 456.968555][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 456.974571][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 456.980584][ T30] watchdog+0xf0c/0x1240 [ 456.984860][ T30] ? __pfx_watchdog+0x10/0x10 [ 456.989561][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 456.994793][ T30] ? __kthread_parkme+0x148/0x220 [ 456.999840][ T30] ? __pfx_watchdog+0x10/0x10 [ 457.004545][ T30] kthread+0x2c1/0x3a0 [ 457.008632][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.013853][ T30] ? __pfx_kthread+0x10/0x10 [ 457.018460][ T30] ret_from_fork+0x45/0x80 [ 457.022891][ T30] ? __pfx_kthread+0x10/0x10 [ 457.027503][ T30] ret_from_fork_asm+0x1a/0x30 [ 457.032312][ T30] [ 457.036147][ T30] Sending NMI from CPU 1 to CPUs 0: [ 457.041755][ C0] NMI backtrace for cpu 0 [ 457.041769][ C0] CPU: 0 UID: 0 PID: 8110 Comm: syz.3.518 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 457.041797][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 457.041810][ C0] RIP: 0010:sha256_transform_rorx+0x878/0x1120 [ 457.041841][ C0] Code: c1 45 01 fa 44 01 f9 01 f1 c5 bd 72 d2 0a 89 ce c4 43 7b f0 ea 19 03 5c 3c 68 c5 e5 73 d2 13 c4 43 7b f0 f2 0b 09 d6 45 89 df <41> 31 c7 c4 63 7b f0 e1 0d 45 31 f5 c5 ed 73 d2 11 45 21 d7 c4 43 [ 457.041863][ C0] RSP: 0018:ffffc900174d7200 EFLAGS: 00000206 [ 457.041883][ C0] RAX: 00000000ea423c0f RBX: 0000000010d48335 RCX: 0000000003c4882a [ 457.041898][ C0] RDX: 0000000000b22d04 RSI: 0000000003f6ad2e RDI: 0000000000000080 [ 457.041913][ C0] RBP: ffffc900174d7420 R08: 000000001b36baf3 R09: 0000000049ec60ea [ 457.041929][ C0] R10: 00000000c6d10b14 R11: 00000000875a00f2 R12: 00000000092420e2 [ 457.041944][ C0] R13: 0000000068858a63 R14: 000000006298da21 R15: 00000000875a00f2 [ 457.041959][ C0] FS: 00007fe1a55d56c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 457.041983][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.042000][ C0] CR2: 00007f9199d37a8c CR3: 0000000031ce6000 CR4: 00000000003526f0 [ 457.042015][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 457.042029][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 457.042043][ C0] Call Trace: [ 457.042050][ C0] [ 457.042059][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 457.042094][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 457.042128][ C0] ? nmi_handle+0x1a9/0x5c0 [ 457.042152][ C0] ? sha256_transform_rorx+0x878/0x1120 [ 457.042177][ C0] ? default_do_nmi+0x6a/0x160 [ 457.042206][ C0] ? exc_nmi+0x170/0x1e0 [ 457.042233][ C0] ? end_repeat_nmi+0xf/0x53 [ 457.042259][ C0] ? sha256_transform_rorx+0x878/0x1120 [ 457.042284][ C0] ? sha256_transform_rorx+0x878/0x1120 [ 457.042309][ C0] ? sha256_transform_rorx+0x878/0x1120 [ 457.042334][ C0] [ 457.042341][ C0] [ 457.042368][ C0] ? integrity_kernel_read+0x7f/0xb0 [ 457.042392][ C0] _sha256_update+0x17e/0x220 [ 457.042416][ C0] ? __pfx_sha256_transform_rorx+0x10/0x10 [ 457.042443][ C0] ima_calc_file_hash_tfm+0x302/0x3e0 [ 457.042473][ C0] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 457.042518][ C0] ? hlock_class+0x4e/0x130 [ 457.042559][ C0] ? ima_alloc_tfm+0x21d/0x2d0 [ 457.042586][ C0] ? generic_fillattr+0x663/0x8c0 [ 457.042617][ C0] ima_calc_file_hash+0x1ba/0x490 [ 457.042648][ C0] ima_collect_measurement+0x8a7/0xa10 [ 457.042678][ C0] ? process_measurement+0x70a/0x2370 [ 457.042712][ C0] ? __pfx_ima_collect_measurement+0x10/0x10 [ 457.042744][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 457.042785][ C0] ? rcu_is_watching+0x12/0xc0 [ 457.042810][ C0] ? trace_contention_end+0xea/0x140 [ 457.042845][ C0] ? is_bad_inode+0xd/0x40 [ 457.042879][ C0] ? xattr_resolve_name+0x27b/0x3f0 [ 457.042915][ C0] ? vfs_getxattr_alloc+0xf1/0x340 [ 457.042939][ C0] ? ima_get_hash_algo+0x27d/0x410 [ 457.042963][ C0] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 457.042991][ C0] ? process_measurement+0x1271/0x2370 [ 457.043017][ C0] process_measurement+0x1271/0x2370 [ 457.043048][ C0] ? __pfx_process_measurement+0x10/0x10 [ 457.043074][ C0] ? kasan_save_track+0x14/0x30 [ 457.043106][ C0] ? find_held_lock+0x2d/0x110 [ 457.043133][ C0] ? aa_file_perm+0x4c6/0xfe0 [ 457.043158][ C0] ? __pfx_lock_release+0x10/0x10 [ 457.043190][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 457.043226][ C0] ? __pfx_aa_file_perm+0x10/0x10 [ 457.043253][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 457.043290][ C0] ima_file_mmap+0x1b1/0x1d0 [ 457.043316][ C0] ? __pfx_ima_file_mmap+0x10/0x10 [ 457.043346][ C0] security_mmap_file+0x8bd/0x990 [ 457.043371][ C0] vm_mmap_pgoff+0xdb/0x360 [ 457.043406][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 457.043438][ C0] ? hugetlbfs_get_inode+0x32d/0x530 [ 457.043478][ C0] ksys_mmap_pgoff+0x1c8/0x5c0 [ 457.043509][ C0] __x64_sys_mmap+0x125/0x190 [ 457.043534][ C0] do_syscall_64+0xcd/0x250 [ 457.043558][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.043594][ C0] RIP: 0033:0x7fe1a717e719 [ 457.043612][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.043634][ C0] RSP: 002b:00007fe1a55d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 457.043654][ C0] RAX: ffffffffffffffda RBX: 00007fe1a7336130 RCX: 00007fe1a717e719 [ 457.043671][ C0] RDX: 00004000000000df RSI: 0000400000000001 RDI: 0000000000000000 [ 457.043686][ C0] RBP: 00007fe1a71f1616 R08: 0000000000000402 R09: 0000300000000000 [ 457.043701][ C0] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 457.043720][ C0] R13: 0000000000000000 R14: 00007fe1a7336130 R15: 00007ffef8161618 [ 457.043741][ C0] [ 457.566228][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 457.573117][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 457.583633][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 457.593705][ T30] Call Trace: [ 457.596994][ T30] [ 457.599945][ T30] dump_stack_lvl+0x3d/0x1f0 [ 457.604560][ T30] panic+0x71d/0x800 [ 457.608481][ T30] ? __pfx_panic+0x10/0x10 [ 457.612922][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 457.618336][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 457.624357][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 457.629755][ T30] ? watchdog+0xd76/0x1240 [ 457.634200][ T30] ? watchdog+0xd69/0x1240 [ 457.638647][ T30] watchdog+0xd87/0x1240 [ 457.642923][ T30] ? __pfx_watchdog+0x10/0x10 [ 457.647631][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 457.652862][ T30] ? __kthread_parkme+0x148/0x220 [ 457.657903][ T30] ? __pfx_watchdog+0x10/0x10 [ 457.662611][ T30] kthread+0x2c1/0x3a0 [ 457.666692][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.671916][ T30] ? __pfx_kthread+0x10/0x10 [ 457.676535][ T30] ret_from_fork+0x45/0x80 [ 457.680968][ T30] ? __pfx_kthread+0x10/0x10 [ 457.685575][ T30] ret_from_fork_asm+0x1a/0x30 [ 457.690381][ T30] [ 457.693673][ T30] Kernel Offset: disabled [ 457.698013][ T30] Rebooting in 86400 seconds..