last executing test programs: 6m20.255108274s ago: executing program 0 (id=255): socket(0xa, 0x1, 0x84) socket(0xa, 0x2, 0x0) socket(0xa, 0x1, 0x84) socket(0x2, 0x3, 0x6) setsockopt$auto(0x6, 0xff, 0x1, 0xfffffffffffffffc, 0x83) set_mempolicy$auto(0x8, &(0x7f0000000480)=0x3cf4, 0x6) clone$auto(0x4003b45, 0x5, 0xfffffffffffffffe, 0x0, 0x100000000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e"], 0x1ac}}, 0x40000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x0) socket(0xa, 0x801, 0x106) socket(0x2, 0x3, 0xa) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) 6m19.95598486s ago: executing program 0 (id=256): socket(0xa, 0x6, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x36, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0x7f, 0x9b70, 0x2, 0x8000) sysfs$auto(0x2, 0x100000000000032, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) listen$auto(0x3, 0x400000) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x7, 0x207, 0x7, 0xc, 0x9, 0x0, 0x8000000000000001, 0x2800000000000002, 0x9, 0xde582971, 0xff, 0x9, 0x4, 0xffff, 0x8, 0xb]}, 0x0, 0x0) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdd, 0x9b72, 0x1000000000000002, 0x8000) setrlimit$auto(0x1000000007, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) fspick$auto(0xffffffffffffff9c, &(0x7f0000000000)='!\x00', 0x9) 6m19.401265339s ago: executing program 0 (id=258): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x6, 0x0) (async, rerun: 64) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x1b, @new_prog_fd, 0x0, @old_prog_fd=0x100004}, 0xa2) (async, rerun: 64) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) fallocate$auto(0x8000000000000003, 0x0, 0xc, 0xcbd5c) (async) sync_file_range$auto(0x3, 0x40010800, 0x40010001, 0x4) (async, rerun: 32) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x428000, 0x0, 0x4}, 0x18) (rerun: 32) close_range$auto(r0, 0xfffffffffffff000, 0x78f) (async) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r1 = gettid() process_vm_writev$auto(r1, &(0x7f0000000640)={&(0x7f0000000080), 0x9dee}, 0x3ff, &(0x7f00000006c0)={&(0x7f00000000c0)=[0x4], 0x12}, 0x400, 0x2) clock_nanosleep$auto(0xb, 0x6, 0x0, 0xfffffffffffffffd) 6m17.95935199s ago: executing program 0 (id=264): prctl$auto(0x2, 0xd, 0x6, 0x9, 0x10001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) epoll_pwait$auto(0x7, 0xffffffffffffffff, 0x6, 0x4, 0x0, 0x4) open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x8802, 0x32) write$auto(0x3, 0x0, 0x5dc) 6m16.665394305s ago: executing program 0 (id=268): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) (rerun: 32) syz_genetlink_get_family_id$auto_HSR(&(0x7f0000000040), r0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0xec90, 0xffffffffffff0006, 0xff) (async) tkill$auto(0x1, 0x7) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="010325bf7040ffdbdf250a000000af0002006e6c383047313100a1f54851765d32f58a52bd70872f54f7ca478157383f33982b8f02da8ab566e849c5f42a9f61e056d5f5d04311f40975df6d1175bc100805969cd4a8d2811da58fb8c4a32a14a73c89351919c75b4e9b103295eb3fec1b5a7559740a2666cee0508034e05087925eb5e45900b8bc966bda504975cf7d6a13dce1f09695aca9bfb1cd522e60ceaaf52c78c68b9bd2bd2090ee532400000000"], 0xc4}, 0x1, 0x0, 0x0, 0x30000881}, 0x2c040800) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket(0xa, 0x2, 0x0) (rerun: 64) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) keyctl$auto(0x6, 0xfffffffd, 0x0, 0x0, 0x8) (async) sendmsg$auto_NL80211_CMD_NEW_KEY(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e7108dbbaa077edd1e08d7d82a89d79aec445033bbaa9d174c80d2d25e4d91e20bfa37a06023ae5068da90376165662868890e1c6fd73d50df58eff38c714be5136da593ab55410bc4d325374aa2ea8e78bddb4ada4d2dacf716a6d733f67c9a545030f016", @ANYRES16=r5, @ANYBLOB="13042bbd7000fbdbdf250b00000008000300", @ANYRES32=r6, @ANYBLOB="04000700"], 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x80) keyctl$auto(0x0, 0x7, 0x2e2000000000, 0x7, 0x4) (async) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="ad870000", @ANYRES16=r2, @ANYBLOB="100026bd7000fbdbdf2589000000040044000400cf00cc00bd004bc481255bde583654e027f3af8d5d7d63e1b39f37b5cddd1bde38f31b260fee4965a45f92540968a3bbec9ae10badf571422a3d9f326addbe2c16547013b005db11812c59dc78f85e9dee0d1199abd7451028bdf6f99b57ae95ad269222df8aaed2d15157d760a510d520261bb4156074e777621cff312ccb88e736f66eca30e81c0aae6153eeb63ef189c36c504beb57caa883d6811854c03ec8215215a201083f70206e2618df4a8f01909448a9c47d3149b855c657b0979f74c7b51e367794979f8c82bebb5905003e000b000000050008007000000008000300", @ANYRES32=r6, @ANYBLOB="0c00580003000000000000000400f400060065000700000008003f0009000000"], 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) r7 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HWSIM_ATTR_PERM_ADDR={0xa, 0x16, "56b3042c9e22"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20005811}, 0x48000) 6m14.211144598s ago: executing program 0 (id=274): setresgid$auto(0x81, 0x800000a0, 0x8) (async) r0 = socket(0x2, 0x2, 0x1) socket(0xa, 0x1, 0x84) (async) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x80000003, 0x200, 0x0, 0xe, 0x80000, 0x1, 0x6, 0x2, 0x81, 0x5e582970, 0x4000000000000000, 0x5, 0x4, 0x0, 0x8, 0x5]}, 0x0, 0x0) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) listen$auto(0x3, 0x81) (async) ioperm$auto(0x1, 0x6, 0x2) accept$auto(0x3, 0x0, 0x0) (async) exit$auto(0x7) unshare$auto(0x40000080) (async) exit$auto(0x1) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async, rerun: 64) mknod$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e', 0x7, 0x5) (async, rerun: 64) mknod$auto(&(0x7f0000000180)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e', 0x1, 0x4) (async) acct$auto(&(0x7f0000000380)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') (async, rerun: 32) acct$auto(0x0) (async, rerun: 32) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) io_uring_setup$auto(0x2d8780, &(0x7f0000000280)={0x7, 0x63, 0xa91, 0x1, 0xa8, 0x0, r0, [0x935f, 0x6, 0x12], {0x53a2, 0x80, 0x80000001, 0xf2c4, 0x999a, 0x3cce, 0x80000000, 0x6, 0x8d}, {0x4, 0xfff, 0x9, 0x101, 0x6, 0x9, 0x4, 0x3, 0xe}}) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) socket(0x15, 0x5, 0x0) socket(0x2, 0x3, 0x1) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) (async) socket(0x23, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) (async) clock_adjtime$auto(0x0, &(0x7f0000000000)={0x7, 0x8, 0x4, 0x8, 0x7fffffff, 0xffffffc0, 0x6, 0x5, 0x3, {0xfffffffa, 0x8}, 0xb9, 0x8, 0x1000, 0x2, 0xb, 0x5, 0x2000006, 0x101, 0x7fff, 0x3}) (async, rerun: 32) close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) 6m13.935370459s ago: executing program 32 (id=274): setresgid$auto(0x81, 0x800000a0, 0x8) (async) r0 = socket(0x2, 0x2, 0x1) socket(0xa, 0x1, 0x84) (async) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x80000003, 0x200, 0x0, 0xe, 0x80000, 0x1, 0x6, 0x2, 0x81, 0x5e582970, 0x4000000000000000, 0x5, 0x4, 0x0, 0x8, 0x5]}, 0x0, 0x0) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) listen$auto(0x3, 0x81) (async) ioperm$auto(0x1, 0x6, 0x2) accept$auto(0x3, 0x0, 0x0) (async) exit$auto(0x7) unshare$auto(0x40000080) (async) exit$auto(0x1) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async, rerun: 64) mknod$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e', 0x7, 0x5) (async, rerun: 64) mknod$auto(&(0x7f0000000180)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e', 0x1, 0x4) (async) acct$auto(&(0x7f0000000380)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') (async, rerun: 32) acct$auto(0x0) (async, rerun: 32) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) io_uring_setup$auto(0x2d8780, &(0x7f0000000280)={0x7, 0x63, 0xa91, 0x1, 0xa8, 0x0, r0, [0x935f, 0x6, 0x12], {0x53a2, 0x80, 0x80000001, 0xf2c4, 0x999a, 0x3cce, 0x80000000, 0x6, 0x8d}, {0x4, 0xfff, 0x9, 0x101, 0x6, 0x9, 0x4, 0x3, 0xe}}) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) socket(0x15, 0x5, 0x0) socket(0x2, 0x3, 0x1) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) (async) socket(0x23, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) (async) clock_adjtime$auto(0x0, &(0x7f0000000000)={0x7, 0x8, 0x4, 0x8, 0x7fffffff, 0xffffffc0, 0x6, 0x5, 0x3, {0xfffffffa, 0x8}, 0xb9, 0x8, 0x1000, 0x2, 0xb, 0x5, 0x2000006, 0x101, 0x7fff, 0x3}) (async, rerun: 32) close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) 4m52.655249292s ago: executing program 1 (id=690): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x14) prlimit64$auto(0x0, 0x8, &(0x7f0000002740)={0xe2, 0xfffffffffffffffd}, &(0x7f0000002780)={0x80, 0x9}) r0 = open(0x0, 0x4242, 0xe1d2b27bdc14aabc) fanotify_mark$auto(0x400000000000, 0x101, 0xdd, r0, 0x0) statx$auto(r0, 0x0, 0x1, 0x0, 0x0) write$auto(0x3, 0x0, 0x3f00) 4m52.565660516s ago: executing program 1 (id=691): r0 = socket(0xb, 0x3, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x800019b72, 0x9, 0x8000000000008000) setsockopt$auto(0x3, 0x114, 0x7, 0x0, 0xa0) getsockname$auto(r0, &(0x7f0000000240)={0x3, @sockaddr_1_1={"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"}}, &(0x7f0000000000)=0x65c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf250200000008"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) sendmsg$auto_OVS_DP_CMD_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x20008040) 4m52.386094145s ago: executing program 1 (id=693): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2c, 0x3, 0x0) poll$auto(0x0, 0x2, 0x8) getpid() syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x1fffe0000000, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mlockall$auto(0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) ioctl$auto(0xc8, 0x400454d1, 0x5c8d) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mlockall$auto(0x8000000000000001) mbind$auto(0x0, 0x7f, 0x7fff, &(0x7f0000000000)=0x8, 0xd, 0x0) unshare$auto(0x40000080) r0 = socket(0x18, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x200000e0}, 0x8080) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) mmap$auto(0xffffffffffff0000, 0x2, 0x41e23517, 0x14, 0x351, 0x1) 4m51.267722934s ago: executing program 1 (id=695): get_mempolicy$auto(0xfffffffffffffffe, 0xfffffffffffffffd, 0x2, 0x0, 0x1) get_mempolicy$auto(0x0, &(0x7f0000000140)=0x3, 0x8, 0xfffffffffffff654, 0x7) r0 = socket(0x28, 0x5, 0x0) settimeofday$auto(&(0x7f0000000180)={0x1ed5d7403, 0x1}, 0x0) ioperm$auto(0x7, 0x6, 0x2) tee$auto(0x32c8, 0x7, 0x0, 0x5) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) write$auto(0x3, 0x0, 0x10001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x4000004) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) mbind$auto(0xfffffffffffffffd, 0xff, 0x0, &(0x7f0000000000)=0x78a, 0x101, 0x4) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') r1 = socket(0xa, 0x801, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) madvise$auto(0x0, 0x2000040080000004, 0xe) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x40) socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="00000000f5ffffffffffffff00"}, 0x55) mlockall$auto(0x7) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r0, @ANYRES8=r3, @ANYRESOCT=r5], 0x2c}, 0x1, 0x0, 0x0, 0x4044000}, 0x22048814) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0xf}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x1}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x2}]}, 0x34}}, 0x20000084) 4m50.752831721s ago: executing program 1 (id=696): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r0 = open(&(0x7f00000000c0)='./file0\x00', 0xeee00, 0x31) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x12) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x40009, 0xdf, 0x18, 0x8000000000003, 0x28004) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) migrate_pages$auto(0x1, 0x9, 0x0, &(0x7f0000000840)=0x2) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x8, 0xdf, 0x29b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) setns(0xffffffffffffffff, 0x0) unshare$auto(0x40000080) clone$auto(0x80000000008001, 0x8, 0xffffffffffffffff, 0xfffffffffffffffc, 0x2) memfd_create$auto(&(0x7f00000001c0)='\x85\xf2-0\xbc\xd8d\xb3\x8e\t\x94\xe0\x8b\xe4\xfd\xc0\xb8\x9eQ\x19\xef\xa4\xb3\x9a\xc7\xcc\xf37[H\x00\xe4X;\x05\xfa\xef\xb4\n\r~Q\x1aC\xa8@l\x12v\xe0a\xa2\xedd\xc8,\xf5\xff\x1fP5;\x81\xc7\vw\xa1\xdc\a\x91\xa5\x03{j\x91#\xae.\x0e.\xc7R\x95q\xe1S\xff\xde\xf3l{ii[/\x8d\xbe}]\x8c\xac\xd5p\xeb\xc2\xd3\xea\xcc\x06\xf7}\x9b\x1c\x16w\xb0\xca\xe2Qq;\xd8*\xf2\x06\x15}Fm\br\x9f\xb7TI\xea60\x03\xf1\x05f\xd9\xd8C\x8a\xb1\xfc\xf9\xe8\x91/5\x93x\x11 \x00\x16\x12\xbc\xed\x1f\xd1R\xdb\xdf\x12\xbd\xbb\b\xb2)M:/R%\x1b\xb3M\xc7\xc9\t;\xaaJf\x99\x11\x95U\x15\xc8\xde\xef\xbe\xd9', 0x80000000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) socket(0x2, 0x5, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x210000, 0x100) setreuid$auto(0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) 4m49.209218696s ago: executing program 1 (id=707): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) (async) set_mempolicy$auto(0x8003, 0x0, 0x4) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) (async) socket(0x2, 0x1, 0x0) (async, rerun: 64) prctl$auto(0x80012, 0x800000004, 0x200000, 0x48, 0x100000001) (async, rerun: 64) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async, rerun: 32) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x5) (rerun: 32) socket(0x2, 0x1, 0x0) (async) socket(0x2b, 0x1, 0x1) (async, rerun: 64) fanotify_init$auto(0x1, 0x3) (async, rerun: 64) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x2009, 0x0, 0x5, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_GET0(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x8) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) ioctl$auto(0x3, 0x2, 0x7) (async) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) (async) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async, rerun: 64) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) (rerun: 64) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r2, 0x0, 0x20048000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1a000, 0x0) 4m48.970873037s ago: executing program 33 (id=707): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) (async) set_mempolicy$auto(0x8003, 0x0, 0x4) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) (async) socket(0x2, 0x1, 0x0) (async, rerun: 64) prctl$auto(0x80012, 0x800000004, 0x200000, 0x48, 0x100000001) (async, rerun: 64) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async, rerun: 32) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x5) (rerun: 32) socket(0x2, 0x1, 0x0) (async) socket(0x2b, 0x1, 0x1) (async, rerun: 64) fanotify_init$auto(0x1, 0x3) (async, rerun: 64) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x2009, 0x0, 0x5, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_GET0(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x8) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) ioctl$auto(0x3, 0x2, 0x7) (async) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) (async) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async, rerun: 64) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) (rerun: 64) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r2, 0x0, 0x20048000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1a000, 0x0) 4m18.863340307s ago: executing program 5 (id=812): ioperm$auto(0x90d5, 0xc, 0x2) r0 = socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x2, 0xffffffffffffffff, 0x1) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010023660b0824de32807500000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) sendmsg$auto_NL80211_CMD_DEL_KEY(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0xabbe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4001080) futex$auto(&(0x7f00000004c0)=0x5, 0x5, 0x7, &(0x7f0000000500)={0x5, 0x8}, &(0x7f0000000540), 0x7) mmap$auto(0x0, 0x1000000000, 0xf601, 0x80000010, 0x2, 0x7ffe) socket$nl_generic(0x10, 0x3, 0x10) utime$auto(&(0x7f0000001a80)='/\x00', &(0x7f0000001ac0)={0x8, 0x2}) 4m18.206977955s ago: executing program 5 (id=814): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(0xfffffffffffffffc, 0x3ff) io_uring_setup$auto(0x7, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x1000, 0x28000) mmap$auto(0x0, 0x2, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2a, 0x2, 0x6) socket(0x2, 0xa, 0xe57a) mkdir$auto(&(0x7f0000000180)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}_\xd9\xa1x\x98\x00', &(0x7f00000001c0)='nfsd\x00\xc6\xf0\xb7\x9ca-\xb4\xb7\xd9\xcc*$\n\x88\x04l\xb3@\xdf\x9d\xe3\xef\xc8\x0e\xfe\x97\xbb\xbc\xf3f\x97\xa6\x9b\x1c\xb3p\x8d\x7f\x83XR\x06\xb5\x87\xf0\x9b\x06\xcd\xa7\xb6j\x01,\x96Ug\x93\x9a\x14\x9b\xf8\x9fp\x8dC\xc697+\xd6\xe3\xf8\xa0\",\xeaXu\xa1|/\x17\xaf\xff\xd1\xe1\x14\xeeK\xbeCx\x94\x91{\xe0\xa3\x0f\x96\x9c\xd5\xdb\xe9@\x10Yh>\x107\x03p$\xe7\xc9P\x833\xd6B\x86\xd9\x93L\x85\xbd\x8a#\x1d\x94]lZ\x0ev\xd7O(\x06\x0f\x90 \x17`\xd8v\xf113\xf4\xa7\a\x1ea;\xe6\xa0\x8a\xdf\xc9\t\x8f\xe2\x02\xb5\xf4#g\xce\xb9W\x00H\xed.x\x966\x14\xbf\x83\xd8\xcbc)mr\x1cu\xa4q\xb9\x99\x8dn\x9a\xe3\x12R\x04', 0x10001, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') umount2$auto(&(0x7f0000000080)='.\x00', 0x3) setresuid$auto(0x6, 0x9, 0xfc4d) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) mmap$auto(0x0, 0x40009, 0x9, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) pselect6$auto(0x6, 0xffffffffffffffff, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x2, 0x3fd6, 0x3, 0x7fffffffb000) 4m17.747196939s ago: executing program 5 (id=816): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x5, 0x0) socket(0x1e, 0x3, 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x1, 0xdf, 0x9b75, 0x2, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0xfffffffffffff001, 0x4000000000005, 0x100000003) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) setsockopt$auto(0x3, 0x100, 0x215, 0x0, 0x28) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x8) 4m17.02473642s ago: executing program 5 (id=818): mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe80000000000100"}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) socket(0x2, 0x1, 0x106) getsockopt$auto(0x6, 0x11c, 0x4, 0xfffffffffffffffe, 0x0) r0 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r0, 0x65, 0x1, 0xffffffffffffffff, 0x0) inotify_add_watch$auto(r0, &(0x7f0000000140)='ns/pid_for_children\x00', 0x200) r1 = open(&(0x7f0000000080)='./file0\x00', 0x20c0, 0x5e) sendto$auto(r1, &(0x7f00000000c0)=[0x7, 0x800, 0x2, 0x0, 0x7, 0x0, 0x3], 0x0, 0x0, &(0x7f0000000100)={0x0, @sa_data_min="579a9b22b9bd88e402d74b91925c"}, 0x48000000) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000180)={0xa, @sockaddr_1_1={"098976d76b8292"}}, 0x55) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f00000018c0)={0x2, @sa_data_min="915bac14140ba3df94bb303b2f9d"}, 0x55) shutdown$auto(0x200000003, 0x2) write$auto(0x3, 0x0, 0x81) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4) 4m16.066602048s ago: executing program 5 (id=820): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) tkill$auto(0x80000000000001, 0x7) keyctl$auto(0x2000000000000012, 0x7fff, 0x5069, 0x1, 0x65c) (async) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x14, 0x0, 0x6) r1 = socket(0xa, 0x1, 0x84) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) bind$auto(r1, &(0x7f0000000000)={0x1, @sa_data_min="061fa6dc14894d10f1086d75d165"}, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x5, 0x0) setsockopt$auto(0x4, 0x84, 0x20, 0xfffffffffffffffe, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) connect$auto(0x3, &(0x7f0000000040)={0x5, @sockaddr_1_1={"c142a496f1ccaf6412b2c9782e085e0cfdb8be7025625a64b8562629e8a2792ac387119ced7e74851d959e030ba6472f6e8cc84c17dc06af10b56aa87c29a1a2bad5b700fcd26334b43fb4715be9babc4ec4741e63ca0402cee9ff3c83989a3d95b647ff8049943c0e3dc311272b6238a9f0fd25dae43992d2aed2b6e0728de8a3ab928b6106be9367fbbb1243e9c19fb9455f671f6c7697ce69c6509866125995e230fe0923037bfbfc05ea386d833f8a7de8e0dda46dd61d648757a6f05ada206a5907247e174232a3cd7dce1e"}}, 0x55) (async) mmap$auto(0x4, 0xffff, 0x8, 0xb1b, 0x8001, 0xff) (async) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) (async) listen$auto(0x3, 0x0) (async) listen$auto(0x3, 0x81) 4m12.650199417s ago: executing program 5 (id=821): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') fstat$auto(r0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') getdents64$auto(0x0, 0x0, 0x81) 4m12.351872162s ago: executing program 34 (id=821): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') fstat$auto(r0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') getdents64$auto(0x0, 0x0, 0x81) 38.043249305s ago: executing program 6 (id=1723): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x1, 0x106) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x29, 0x36, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) pkey_free$auto(0x89) 37.250336371s ago: executing program 6 (id=1727): writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0)=[0x4], 0x3}, 0x4) (fail_nth: 4) 36.720633007s ago: executing program 6 (id=1731): socket(0x23, 0x80805, 0x0) prctl$auto(0x1000000003e, 0x37, 0x2, 0x2, 0x2000000000000007) mmap$auto(0x0, 0x408, 0x4, 0x9b72, 0x2, 0x8000) kcmp$auto(0x1, 0x1, 0x7, 0x4, 0xe) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0xc040810) mmap$auto(0xb, 0x20026, 0x8000000000000001, 0x17, 0x5, 0x0) read$auto(0x4, 0x0, 0xfdef) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x24000800) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) select$auto(0xd, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x800000000000008, 0xc, 0x9, 0x3, 0x6, 0x800000001, 0x10000, 0x3, 0x4000000000000000, 0x18, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) socket(0x11, 0x80003, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00') setns(r1, 0x20000000) shutdown$auto(0x200000003, 0x1) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000040000fdef}, 0x1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004084}, 0x48000) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(0x0, 0xffffffffffffffff) io_uring_setup$auto(0x6, 0x0) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20005811}, 0x4005) 26.089045149s ago: executing program 6 (id=1755): shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) clone3$auto(&(0x7f00000000c0)={0x101000, 0x5, 0x40, 0x0, 0x8, 0x2, 0x3, 0x2, 0x685b, 0x7, 0x8}, 0xb03) (async) pipe$auto(&(0x7f0000000000)=0x4) (async) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async) write$auto(0x3, 0x0, 0x81) 26.08097253s ago: executing program 3 (id=1756): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000436bd7000fedbdf250200000008003c000900000008000bb4f64f5be8e568fef969ac0000e400000d8168358e23fbf6c47c07338c28866fcb4afe52fa4c386a031f8fa2f449601beb00016ae59f1b61806690abde13f47c940b53ecbef6053c004a6c73cb3d19d4530b49004e59f69bbdf22f0f00"/129], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fallocate$auto(0x1, 0xa, 0xfbf9, 0x3) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x8, 0x0) fsopen$auto(0x0, 0x1) r1 = socket(0x10, 0x2, 0x0) finit_module$auto(r0, &(0x7f0000000280)='))--{\x00', 0x2) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigtimedwait$auto(0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES16], 0x1ac}}, 0x24008090) syz_genetlink_get_family_id$auto_IPVS(&(0x7f00000001c0), r1) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000436bd7000fedbdf250200000008003c000900000008000bb4f64f5be8e568fef969ac0000e400000d8168358e23fbf6c47c07338c28866fcb4afe52fa4c386a031f8fa2f449601beb00016ae59f1b61806690abde13f47c940b53ecbef6053c004a6c73cb3d19d4530b49004e59f69bbdf22f0f00"/129], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) (async) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) fallocate$auto(0x1, 0xa, 0xfbf9, 0x3) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sysfs$auto(0x2, 0x8, 0x0) (async) fsopen$auto(0x0, 0x1) (async) socket(0x10, 0x2, 0x0) (async) finit_module$auto(r0, &(0x7f0000000280)='))--{\x00', 0x2) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) rt_sigtimedwait$auto(0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x8) (async) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES16], 0x1ac}}, 0x24008090) (async) syz_genetlink_get_family_id$auto_IPVS(&(0x7f00000001c0), r1) (async) 25.739204944s ago: executing program 2 (id=1757): mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x2a4, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r0, 0x5) ftruncate$auto(r0, 0x45d) open(&(0x7f0000000040)='./file0\x00', 0x8142, 0x4a8) getdents$auto(0x0, 0x0, 0x100) socket(0x2, 0x1, 0x0) ioctl$auto(0x1, 0x8941, 0x8) 25.657715904s ago: executing program 2 (id=1759): mmap$auto(0x0, 0x1, 0x2, 0x9b72, 0x5, 0xfffffffffffffffe) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = getpid() pidfd_open$auto(r0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/ipc\x00') socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x2) socket(0x2, 0x801, 0x100) write$auto(0x3, 0x0, 0x81) epoll_create$auto(0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x2, 0x0) socket(0x28, 0x5, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) r1 = socket(0xa, 0x5, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xe) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0x0, 0x9, 0xfffffffffffffffc, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000000, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmmsg$auto(r1, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x2, 0x697b}, 0xed713cc}, 0x9a6, 0x0) socket(0x1, 0x5, 0x0) recvmmsg$auto(0x3, 0x0, 0x8, 0x0, 0x0) 23.343088289s ago: executing program 3 (id=1763): socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x2, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc855}, 0x20000000) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000380), r0) r2 = syz_genetlink_get_family_id$auto_HSR(&(0x7f0000000640), r0) sendmsg$auto_HSR_C_GET_NODE_LIST(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x1000000000, 0x100df, 0x10, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0xd, 0x4, 'N-N]N/--\xa2'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x1020) r5 = open(&(0x7f0000000000)='./file0\x00', 0xaf44529eb48ad963, 0x17c) shmctl$auto(0x9, 0xab7, &(0x7f0000000080)={{0x400, 0x7, 0xffffffff, 0x2, 0x9, 0x7, 0x4de}, 0x8, 0x2, 0x8, 0xffff, 0x2, 0x2, 0xfff9, 0x0, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_ZERO(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x18, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000004}, 0x4800) sendmsg$auto_IPVS_CMD_SET_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5de00000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) mmap$auto(0x0, 0x4000000000020009, 0xc, 0xeb1, 0x401, 0x8000) request_key$auto(0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x801c581f, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) fchmodat2$auto(r5, &(0x7f00000001c0)='nbd\x00', 0x4deb, 0x5) memfd_secret$auto(0xffffffff) pipe2$auto(&(0x7f0000000200)=0x5, 0x400) 21.519089127s ago: executing program 3 (id=1769): connect$auto(0x3, 0x0, 0x55) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c815) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = socket(0xa, 0x801, 0x84) (async) socket(0x2, 0x1, 0x0) socket(0x1, 0x2, 0x0) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) (async) r3 = gettid() sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)={0x4a0, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x44, 0xe8, "2362521e908e40556f9bbe25c8400c8d7c29530f2bb91f87d26e04d9b3747d3a1c40734b2cc85528188c6efe0a5c06d382335cc6b00c3f3c9dee2b09170b1991"}, @NL80211_ATTR_FTM_RESPONDER={0x7, 0x10e, "76816c"}, @NL80211_ATTR_FRAME={0x346, 0x33, "77f4a297e2d3ea280e788fb4bb174281f07983062823c7aadd06a66f7d651f6404ec43ab5ff3e18e6594d718935ae2c1e3cfe8ad9c13ebf7cc3c8448061eaa7aa64106eb146d69410229464120e870c1a1f240441e33db305d0a0a150f0c29a5523f04358583f902a1a18bb57ce0333f48e29308a9fdcea154f0dcab2c96d82a67c7bdebfa38625a9f8c89f9564a0c3c73eee5d2e5c1dfcc8adb3834f9d9fca055a6b78d81ab17790ef0b84a638099ba2f42e101077805cd71d1f1f6bce01884bfebeac019b8db95e2b577a70649f6c1cee64543ba656b27900e79f56f069c28c37229f8197ffbcd8ca8341116e588294da6968e2744f25e7f1b06ee2c7edaa049d16d7ab670f3e2adbb4357b1b35ab557aae74617e4ede8a8e3e7d9b10eecbf11c8c5cb73e4cbc6c69973140fb0509fec8def4c81a5954730011ae2db7c4745a0392f21afc7b503fabeaa5419b157e9939352afe2d844392fd205ede01433bb1bb7c952c48e20bd3a32fea03104126dffff112e4743d1fa487f0795d358cd37089dfbdf8e960ef2f8137696372f5d9ca96e39c62f9055fef0ee9d0803b107ef37b70857313b646b5b89ccd16f8117555da29933d2fab82dceb2ee75541f178839a4dfe984dbb4fb90ab43d3c4abd666b4eda8052de5838564c9be6a9329a05b5f61acf317101bdf28fa298f879b65ca57f0082b272b414703a2f91bb403f24b71066a01532896eb6ce77b0d576ca23cf36762fcbb0ce08ea0d28384643e30830966d5a0659eb75bed81975c57eb2b2d325cf48e209bfd5735c4a4cf1be23283fcb23efb8bbd438472391925fb6d75644432bc1bae254821dac7cdda809601cfdd352b3482cc0153b1bf87c004239523359ebdf2768b39fec3e1a17b055169175a42ab712229d1368f1f989befb519b007f14a98f2798eda2f7c5c7cb5e1a904ddb0594d3499d158273730bdf17472a9e178fc268a0d6cc275669fdbdd9827699461d81fb7cbfc5acf59676a56885f606accac89e7537c08ec6c576f6a9cd63e2d72d8a23d90402312edc315b4a0661449443492b4f7dca6bb612f2368843cba710e7d8ad63fa45037bbed5d9b4ebe218d5208717959f607bc5dde38ed6ff06128dd287cb496a2c343187a89ce5b00ff6a4ea99006d0c6476967770662f314ee9f5c"}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x9}, @NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_VENDOR_DATA={0xda, 0xc5, "0ebe35b2ad738ba108f6dc1e1e7e8edb4c5879c47b43196fb5a937989938cff1e2a7ebfb6a30d64152ff9837f5b02c55f155a5498e2c16b7710238a902741737fbb9ea3712fa5fa87c8898dad0752e0dca3c982f5f3c2679d2012b2d2410d124308e60abcac0b5abcaa7f47406d0e0f0062669a690206288c645d9d6ee3ac323c067fd66ab3a1ff545751c62038f9fc7397fac66390832938e3012aff6c7c6bc8f9dcb529b65ce1962382f87329ea57fda995d0b424f858f6c73022531427db2d6f7c66d3c8d4c2d5487b30031a2e3c4d5a54ed0e255"}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x40080c8}, 0x4c804) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000904}, 0x48000) (async) syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) shutdown$auto(0xffffffffffffffff, 0x2) (async) open(&(0x7f0000000080)='./file0\x00', 0x400002, 0x21) (async) select$auto(0x1e0, &(0x7f00000006c0)={[0x4, 0xffffffff, 0x16d, 0x4, 0x6, 0xffffffffffffffff, 0x0, 0x4, 0x1000, 0x10ac, 0x4, 0x5, 0x4, 0x1, 0x6, 0x5d6a]}, &(0x7f0000000740)={[0x8, 0x3, 0x5f, 0x1ff, 0x1000, 0x8001, 0x54, 0x7, 0x1000, 0x10000, 0x1, 0xd5, 0x5, 0x101, 0x81]}, &(0x7f0000000880)={[0x8, 0x8, 0x7f, 0x333e9ea, 0x8, 0x8, 0x100000001, 0x5, 0xfffffffffffffff7, 0x0, 0x9, 0xfffffffffffffff3, 0x1, 0x9, 0xb4, 0x4]}, &(0x7f00000007c0)={0x8, 0x9}) (async) close_range$auto(0x2, 0x8, 0x0) 20.767799497s ago: executing program 6 (id=1770): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) newfstatat$auto(0xffffffffffffffff, 0x0, 0x0, 0xc472) mmap$auto(0x5, 0x3, 0x8, 0xfffffffffffffff7, 0xffffffffffffff01, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x20000a, 0x4) 19.471223752s ago: executing program 3 (id=1771): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) clock_nanosleep$auto(0x4, 0x62, &(0x7f0000000000)={0x5, 0x401}, &(0x7f0000000040)={0xc, 0xd17}) socket(0x1, 0x5, 0x0) io_uring_setup$auto(0x401, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) listen$auto(0x3, 0x83) setsockopt$auto(0x3, 0x1, 0x31, 0x0, 0x9) mmap$auto(0x0, 0x2030009, 0x3, 0x100000000eb1, 0xfffffff7fffffff7, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x3, 0x0, 0x0) mmap$auto(0x0, 0xe, 0x43, 0x12, 0x3, 0x8000) mprotect$auto(0x0, 0x800, 0x6) 19.437469621s ago: executing program 2 (id=1772): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) r0 = socket(0xa, 0x2, 0x88) (async) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0xfffffffffffffe01, 0x2, 0x0, 0x3dc3, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x7, 0xffffffffffffffff, 0x8, 0xcab, 0x6, 0x0, 0x4, 0x7}, 0x1000) eventfd$auto(0x200) (async) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x9, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x4000000000000000, 0x9, 0x3, 0x200, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) socket(0x2, 0x2, 0x88) (async) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c811}, 0x20008000) (async) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x0, 0x400008, 0x4, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x3f00) (async) ioctl$auto(0x3, 0x8907, 0xfffffffffffff4e0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) read$auto(0x3, 0x0, 0x80) (async) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) (async) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0x1}, 0x10a, 0x0, 0x0, 0x3ff}, 0xed7138c}, 0x200, 0x0) (async) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x80184947, 0x0) (async) vmsplice$auto(r1, &(0x7f0000000200)={&(0x7f00000001c0)=[0xb, 0x6, 0x7, 0x7, 0x1, 0x1, 0xb], 0x6}, 0x6, 0x9) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r3) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fffffff}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x300}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000227bd7000ffdbdf250200000008000200f8ff000000000800020001000000080021000500000005007b00000000000800010001800000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x850}, 0x10) (async) setreuid$auto(0x8, 0x9d7) setresuid$auto(0xffffffffffffffff, 0x8, 0xffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100000012"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) 18.881123123s ago: executing program 3 (id=1773): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000580), 0xffffffffffffffff) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) fanotify_init$auto(0x42, 0x7) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) open(0x0, 0x22240, 0x155) socket(0x2b, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949645ae42be7efdd4f"], 0x2c}, 0x1, 0x0, 0x0, 0x24004004}, 0x400c000) socket(0x2, 0x801, 0x100) (async) recvmmsg$auto(0x5, 0x0, 0x3, 0x6, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r2 = socket(0x10, 0x3, 0x6) listen$auto(0x3, 0x81) (async) ioperm$auto(0x1, 0x6, 0x2) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x2102, 0x11) (async) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xf8, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_FEC_MODES={0xb1, 0x2, "2c78bbd486144602543afaeb48d47db230b6fccb9f80b12beea70a54c3483404b46defc5a6c58345e6c94e7db5b8ab5f5221193805b2ef79d3446602cfc96a7d1658196a32c8dd8df733ce0a63af950057b5c92dc5f5b4999bb85648256f90341a3b7337d7f730259c684b365df552f8adf3c94f9bda3ce361db0a26c6f35395b710a25d8eb22e1727e6d0b07c5aeceae60bc34f49c784c0ebeebf540cb0452b506f03373588ee9395ea65b508"}, @ETHTOOL_A_FEC_MODES={0x2d, 0x2, "3be8bb442d4da77fbd1c9d22056a193ed43e12dafea2be2deaca9fdc7232db838b4b0bfc8d0000008d"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4014}, 0x4800) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) r4 = syz_genetlink_get_family_id$auto_SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x200}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20040014) (async) sysfs$auto(0x6c1a, 0x4, 0x8) (async, rerun: 32) sysfs$auto(0x2, 0x14, 0x0) (rerun: 32) 18.279177576s ago: executing program 3 (id=1774): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) bpf$auto(0x4, &(0x7f00000001c0)=@bpf_attr_1={0x3, 0xca99, @value=0x5, 0xa}, 0xc) writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0)=[0x4], 0x3}, 0x4) futex_wait$auto(&(0x7f0000000000)=[0x8001, 0x3, 0x0, 0x1a, 0x4, 0x43, 0x7, 0x1], 0x5, 0xc376, 0x8, &(0x7f0000000040)={0x4, 0x1}, 0x9) 16.378681524s ago: executing program 4 (id=1775): r0 = socket(0xa, 0x801, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000040000fdf0}, 0x1) r1 = socket(0xb, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1) socket(0x1e, 0x2, 0x14) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x155) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r4, 0x104000000000010e, 0xb, 0x0, 0x400) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010326bd7000fedbdf250c00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) epoll_ctl$auto(0x1, 0x768, 0x1, 0x0) prctl$auto(0x23, 0x7, 0x2008, 0x0, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(&(0x7f0000000080)=0xff) dup2$auto(0x5, 0x4) mmap$auto(0x5, 0x7, 0x400, 0x11, 0xa0000, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xfffffffffeff0001, 0x3ff) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x800000002, 0x8000) get_mempolicy$auto(0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x3) mmap$auto(0x8, 0xffffffffffffff5c, 0x1, 0xf713, 0xd213, 0x1) mmap$auto(0x7fef, 0x1, 0xdf, 0x9b72, 0x5, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) setsockopt$auto(r1, 0x0, 0x68, &(0x7f0000000000)='-$--\x00', 0x5) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) 16.347529428s ago: executing program 6 (id=1776): madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4000000000400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0xc) socket(0x2, 0x801, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x5, 0x0) getsockopt$auto(0x6, 0x83, 0xd, 0xfffffffffffffffe, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) truncate$auto(0x0, 0xa) r1 = socket(0x2, 0x2, 0xfffffbfd) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x89e2, 0x91) ioctl$auto(0x3, 0x89e2, 0x91) close_range$auto(r1, 0x8000, 0x0) socket(0xa, 0x5, 0x0) fcntl$auto(0xff80000000000000, 0x406, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000000), r0) socket(0x27, 0x2, 0x202) truncate$auto(&(0x7f0000000040)='#)-\\&[}\x00', 0x1f6) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(&(0x7f0000000200)='#)-\\&[}\x00', 0xde8, 0xb, 0x0) mq_getsetattr$auto(0x7, &(0x7f0000000140)={0x0, 0x2, 0x8001}, &(0x7f0000000180)={0x0, 0x4, 0x9, 0xfffffffffffffd3e}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) 14.050639326s ago: executing program 4 (id=1777): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = gettid() process_vm_writev$auto(r0, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') setuid$auto(0x0) lseek$auto(0x0, 0x80000000002b, 0x0) socket(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) sendmsg$auto_NL80211_CMD_SET_CQM(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000017c0)={0x1c, r2, 0x181, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_HEAD={0x7, 0xe, "8bfa17"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c815}, 0x40000) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x24, 0x84, "7a4416dff50fed32b5f79fc3e5163b45409e92bdf9d504e9bb05d37d1a71ea12"}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x2404c414}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) socket(0x2, 0x801, 0x100) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x8000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_SMC_GEN_NETLINK(&(0x7f0000000280), r5) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r5) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="f51b26bd7000fedbdf2507"], 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) pwrite64$auto(0xc8, &(0x7f0000000000)='S\xf9\xe9#\x10w^\fs%\x00', 0xe, 0x3) 13.92155401s ago: executing program 4 (id=1779): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0x8, 0xb, 0x2e, 0x0, 0x3}, 0x6f4) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x2c, 0x80003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x7ff, 0x3, 0x0, 0x14, 0x1, 0x8) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x88d0}, 0x2000c041) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) recvfrom$auto(0x3, 0x0, 0x2395, 0x40000100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') socket(0x2, 0x1, 0x106) setsockopt$auto(0x4, 0x1, 0x2, 0xfffffffffffffffd, 0x800000) sendfile$auto(0x1, 0x3, 0x0, 0xc01) 13.753582519s ago: executing program 4 (id=1780): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) iopl$auto(0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) (async, rerun: 32) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) mmap$auto(0x0, 0x5f, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) (async) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffe) r1 = socket(0x2, 0x2, 0x88) bind$auto(r1, &(0x7f0000000040)={0x2, @sa_data_min="f7be2676dc45d0628e74cc6e76ef"}, 0x6b) (async) mmap$auto(0x3, 0x8, 0x3ff57696, 0x9b72, 0x100003, 0x8000000000008000) (async) msync$auto(0x1ffff000, 0x80100000000002, 0x400000004) madvise$auto(0x9, 0xffffffffffff0003, 0x19) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) (async) socket(0x29, 0x2, 0x0) (async, rerun: 32) sendmmsg$auto(r1, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0x400, 0x0, 0xdd0, 0x4}, 0xed7138c}, 0x9a6, 0x9) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x23, 0x80805, 0x0) socket(0x18, 0x2, 0x1) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) madvise$auto(0x0, 0x80000001, 0x8) (async) mmap$auto(0xfffffffffffffffe, 0x20400008, 0xdf, 0x9b77, 0x6, 0x8000) (async) socket(0xa, 0x3, 0x6) 12.295214412s ago: executing program 2 (id=1781): lchown$auto(&(0x7f0000000000)='.\x00u\x9dL\xe1\x01\xf4VYt\xa1\xfd\x18\x9d\xfe\xc5$\x1dCe\x9cQ\xfe\n|\xf9i_|C\x01J\xc1KH\x14[3\x9c\xed\xd6fIL\xe0l\xb4\xe0>\x8a\xe6\'Y\xaa\x1f&\x01P\b\x1c\xb77^e\x11+0\xedL\x9b$\x13A\x8f2\x871_\x1c:\xa6 L\xa1\xe7\x88\x19\xf4K:\x9b\xbd!\x9b\x1dac J\xe2\xe1\x15\xdd\xc2\x01\x9b\xd3\x198t\x88\xaa\xfc\x87v\x82\x9e>K(Y<\xb9c\x94\xc3\xb4M]\xeb\xfa\xff\x11|\x94\xe8\xae\x9bu\xa5\xdd\xd1n.\xbd!\x7f\xb3#\x15\x13/l\xaa\rt\xd7E\x90\xeb\xde\x8b\x06Kl\x9a\x87\xea\x89[\x85\xce\xaf\x99\xa5\xeeKm\xfb\xc4\xe4\xa33\xf6\xe2{\x00\x1a\x96\xfeM\xe7h!a\xcd\x8aV\xedQ;;\x1a\xd5+\x0e\x00\xcd\x1b\xed\a\xce\x81$\xfa}\xfe\x95\bI\rM\xd1\x0e\xb4\xd7\v\xef3\x87\x92\xe7\xa6\xf4iz\xb1x]\xe6\xa5>0\xb0-\xcb\x12\"\xd0', 0x1, 0x4) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000c40), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x9}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x2ee9}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "4f1980af25430d91ee91098b88a8"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x80000) (async) mmap$auto(0x0, 0x2020008, 0xa, 0x17, 0xfffffffffffffffa, 0xffff) (async) r2 = socket(0x1, 0x2, 0x0) read$auto(0x3, 0x0, 0x7) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) (async, rerun: 64) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r3 = socket(0x21, 0x2, 0x2) socket(0x2b, 0x1, 0x1) (async, rerun: 32) connect$auto(0x3, 0xfffffffffffffffe, 0x0) (async, rerun: 32) setsockopt$auto(r3, 0x40014, 0x80000001, 0x0, 0xd20) (async) lchown$auto(&(0x7f0000000100)='}\x00', 0x7fff, 0x2c) (async) io_uring_setup$auto(0xe, &(0x7f0000000140)={0xf0, 0x58, 0x3, 0xfff, 0x2, 0x800, r2, [0x2, 0xfffffff8, 0x7ff], {0x2220, 0x1, 0xffffffff, 0x1, 0x7, 0xd, 0x0, 0x43c7, 0x8}, {0x9, 0x3, 0x8, 0x8001, 0x3, 0xc, 0x9, 0x0, 0x67}}) 8.845692837s ago: executing program 2 (id=1782): r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) symlink$auto(&(0x7f0000000100)='//^\x00', &(0x7f0000000140)='}:\x00') acct$auto(&(0x7f0000000500)='}:\x00') mkdir$auto(0x0, 0x1) mkdir$auto(&(0x7f0000000040)='MAC80211_HWSIM\x00', 0x1) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdb08000400000004000d001900010059ca93e9ec0a0a335797010099a4fee023a134f7be00000004000f00050011002effeb001f000200a310e2f4d070ee770d2d53225b7f8f2050f235c2e28617594a305e002f2a1d882e7ca67735398ca622b9337339ca46884dbefa64f529d08fdbd484d12297bb2b8ed55df25b0f898ad2852a430b32c24c04778c4bd44d5d0bbb058bc83d441fd9"], 0x60}, 0x1, 0x0, 0x0, 0x20005811}, 0x4048040) rmdir$auto(&(0x7f0000000340)='MAC80211_HWSIM\x00') socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001080), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x17, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) close_range$auto(0x0, 0xfffffffffffff000, 0x2) msgctl$auto(0x2, 0xc, &(0x7f0000000080)={{0x2, 0xf3, 0x2, 0x6, 0x9, 0x2, 0x6}, 0x0, 0x0, 0x7, 0x80000001, 0xce0a, 0xf3, 0x80, 0x412f, 0x1, 0x5, 0x9, 0x1}) socket(0xa, 0x2, 0x73) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(0x0, 0x402, 0x80000001) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') getdents64$auto(r3, 0x0, 0x3) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) 1.70562316s ago: executing program 4 (id=1783): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) clock_nanosleep$auto(0x4, 0x62, &(0x7f0000000000)={0x5, 0x401}, &(0x7f0000000040)={0xc, 0xd17}) socket(0x1, 0x5, 0x0) io_uring_setup$auto(0x401, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) listen$auto(0x3, 0x83) setsockopt$auto(0x3, 0x1, 0x31, 0x0, 0x9) mmap$auto(0x0, 0x2030009, 0x3, 0x100000000eb1, 0xfffffff7fffffff7, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x3, 0x0, 0x0) mmap$auto(0x0, 0xe, 0x43, 0x12, 0x3, 0x8000) mprotect$auto(0x0, 0x800, 0x6) 1.546704297s ago: executing program 4 (id=1784): r0 = socket(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_bond\x00'}) (async) r1 = open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x12) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) ftruncate$auto(0x3, 0x7) epoll_ctl$auto(r1, 0x59, r1, &(0x7f0000000080)={0x0, 0x10}) (async) write$auto(0x3, 0x0, 0x100082) set_mempolicy$auto(0x3, &(0x7f00000001c0)=0xfffffffffffffffd, 0xe4b) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async) open(&(0x7f0000000080)='./file0\x00', 0x22000, 0x50) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) setns(0xffffffffffffffff, 0x0) (async) unshare$auto(0x40000080) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async) madvise$auto(0x0, 0x20200, 0x15) socket(0x2, 0x5, 0x0) fcntl$auto(0x0, 0x407, 0x100000) getsockopt$auto(r1, 0xf7e, 0x5, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0x7) 463.396594ms ago: executing program 35 (id=1776): madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4000000000400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0xc) socket(0x2, 0x801, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x5, 0x0) getsockopt$auto(0x6, 0x83, 0xd, 0xfffffffffffffffe, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) truncate$auto(0x0, 0xa) r1 = socket(0x2, 0x2, 0xfffffbfd) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x89e2, 0x91) ioctl$auto(0x3, 0x89e2, 0x91) close_range$auto(r1, 0x8000, 0x0) socket(0xa, 0x5, 0x0) fcntl$auto(0xff80000000000000, 0x406, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000000), r0) socket(0x27, 0x2, 0x202) truncate$auto(&(0x7f0000000040)='#)-\\&[}\x00', 0x1f6) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(&(0x7f0000000200)='#)-\\&[}\x00', 0xde8, 0xb, 0x0) mq_getsetattr$auto(0x7, &(0x7f0000000140)={0x0, 0x2, 0x8001}, &(0x7f0000000180)={0x0, 0x4, 0x9, 0xfffffffffffffd3e}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) 0s ago: executing program 2 (id=1786): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x0) (async) getsockopt$auto(r0, 0x25, 0x17, 0xfffffffffffffffe, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) landlock_add_rule$auto(0xffffffffffffffff, 0x6, 0x0, 0x3) (async) getxattr$auto(0x0, 0x0, 0x0, 0xffffffffffffffba) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0xa, 0x5, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async, rerun: 32) io_uring_setup$auto(0x1, 0x0) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000180)={0xa, @sockaddr_1_1={"79187eae67fbcc"}}, 0x55) (async) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) kernel console output (not intermixed with test programs): 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 142.044030][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 142.054119][ T7414] Call Trace: [ 142.057423][ T7414] [ 142.060380][ T7414] dump_stack_lvl+0x16c/0x1f0 [ 142.065090][ T7414] should_fail_ex+0x497/0x5b0 [ 142.069801][ T7414] _copy_from_iter+0x29b/0x1400 [ 142.074696][ T7414] ? __pfx__copy_from_iter+0x10/0x10 [ 142.080016][ T7414] ? __virt_addr_valid+0x1a4/0x590 [ 142.085263][ T7414] ? __virt_addr_valid+0x5e/0x590 [ 142.090359][ T7414] ? __phys_addr_symbol+0x30/0x80 [ 142.095424][ T7414] ? __check_object_size+0x488/0x710 [ 142.100754][ T7414] netlink_sendmsg+0x813/0xd70 [ 142.105541][ T7414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.110903][ T7414] ____sys_sendmsg+0x9ae/0xb40 [ 142.115684][ T7414] ? copy_msghdr_from_user+0x10b/0x160 [ 142.121153][ T7414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.126743][ T7414] ? __pfx___lock_acquire+0x10/0x10 [ 142.131978][ T7414] ___sys_sendmsg+0x135/0x1e0 [ 142.136856][ T7414] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.142152][ T7414] ? lock_acquire+0x2f/0xb0 [ 142.146689][ T7414] ? __fget_files+0x40/0x3f0 [ 142.151301][ T7414] ? fdget+0x176/0x210 [ 142.155379][ T7414] __sys_sendmsg+0x117/0x1f0 [ 142.160025][ T7414] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.165148][ T7414] ? __fget_files+0x244/0x3f0 [ 142.169880][ T7414] do_syscall_64+0xcd/0x250 [ 142.174398][ T7414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.180342][ T7414] RIP: 0033:0x7f758e97e719 [ 142.184763][ T7414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.204641][ T7414] RSP: 002b:00007f758f74d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.213155][ T7414] RAX: ffffffffffffffda RBX: 00007f758eb35f80 RCX: 00007f758e97e719 [ 142.221223][ T7414] RDX: 0000000044040884 RSI: 0000000020000100 RDI: 0000000000000003 [ 142.229810][ T7414] RBP: 00007f758f74d090 R08: 0000000000000000 R09: 0000000000000000 [ 142.237790][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.245766][ T7414] R13: 0000000000000000 R14: 00007f758eb35f80 R15: 00007ffe4525d3c8 [ 142.253838][ T7414] [ 143.307798][ T7412] netlink: 'syz.1.342': attribute type 2 has an invalid length. [ 144.481279][ T7446] FAULT_INJECTION: forcing a failure. [ 144.481279][ T7446] name failslab, interval 1, probability 0, space 0, times 0 [ 144.494590][ T7446] CPU: 1 UID: 0 PID: 7446 Comm: syz.3.354 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 144.505223][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.515312][ T7446] Call Trace: [ 144.518621][ T7446] [ 144.521572][ T7446] dump_stack_lvl+0x16c/0x1f0 [ 144.526275][ T7446] should_fail_ex+0x497/0x5b0 [ 144.530983][ T7446] should_failslab+0xc2/0x120 [ 144.535695][ T7446] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 144.541083][ T7446] ? skb_clone+0x190/0x3f0 [ 144.545545][ T7446] skb_clone+0x190/0x3f0 [ 144.549821][ T7446] netlink_deliver_tap+0xb26/0xcf0 [ 144.554973][ T7446] netlink_unicast+0x5e1/0x7f0 [ 144.559780][ T7446] ? __pfx_netlink_unicast+0x10/0x10 [ 144.565094][ T7446] ? __phys_addr_symbol+0x30/0x80 [ 144.570139][ T7446] ? __check_object_size+0x488/0x710 [ 144.575443][ T7446] netlink_sendmsg+0x8b8/0xd70 [ 144.580228][ T7446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.585543][ T7446] ____sys_sendmsg+0x9ae/0xb40 [ 144.590319][ T7446] ? copy_msghdr_from_user+0x10b/0x160 [ 144.595788][ T7446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.601091][ T7446] ? __pfx___lock_acquire+0x10/0x10 [ 144.606313][ T7446] ___sys_sendmsg+0x135/0x1e0 [ 144.611002][ T7446] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.616304][ T7446] ? lock_acquire+0x2f/0xb0 [ 144.620816][ T7446] ? __fget_files+0x40/0x3f0 [ 144.625419][ T7446] ? fdget+0x176/0x210 [ 144.629516][ T7446] __sys_sendmsg+0x117/0x1f0 [ 144.634124][ T7446] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.639243][ T7446] ? __fget_files+0x244/0x3f0 [ 144.643960][ T7446] do_syscall_64+0xcd/0x250 [ 144.648557][ T7446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.654463][ T7446] RIP: 0033:0x7f758e97e719 [ 144.658881][ T7446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.678498][ T7446] RSP: 002b:00007f758f74d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.686917][ T7446] RAX: ffffffffffffffda RBX: 00007f758eb35f80 RCX: 00007f758e97e719 [ 144.694890][ T7446] RDX: 0000000044040884 RSI: 0000000020000100 RDI: 0000000000000003 [ 144.702862][ T7446] RBP: 00007f758f74d090 R08: 0000000000000000 R09: 0000000000000000 [ 144.710833][ T7446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.718894][ T7446] R13: 0000000000000000 R14: 00007f758eb35f80 R15: 00007ffe4525d3c8 [ 144.726883][ T7446] [ 146.109890][ T7495] openvswitch: HfR: Dropping previously announced user features [ 146.126891][ T7494] openvswitch: HfR: Dropping previously announced user features [ 146.151283][ T7495] netlink: 32 bytes leftover after parsing attributes in process `syz.3.367'. [ 150.459237][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.383'. [ 153.144887][ T7641] ptrace attach of "./syz-executor exec"[5838] was attempted by ""[7641] [ 153.846441][ T7659] Invalid ELF header magic: != ELF [ 155.702074][ T5848] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 157.124252][ T7774] FAULT_INJECTION: forcing a failure. [ 157.124252][ T7774] name failslab, interval 1, probability 0, space 0, times 0 [ 157.186709][ T7774] CPU: 0 UID: 0 PID: 7774 Comm: syz.4.444 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 157.197353][ T7774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 157.197384][ T7774] Call Trace: [ 157.197392][ T7774] [ 157.197402][ T7774] dump_stack_lvl+0x16c/0x1f0 [ 157.197435][ T7774] should_fail_ex+0x497/0x5b0 [ 157.223211][ T7774] ? fs_reclaim_acquire+0xae/0x150 [ 157.228371][ T7774] should_failslab+0xc2/0x120 [ 157.233099][ T7774] __kmalloc_cache_noprof+0x6b/0x310 [ 157.238432][ T7774] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 157.245848][ T7774] ? genl_start+0x1e7/0x950 [ 157.250405][ T7774] genl_start+0x1e7/0x950 [ 157.254791][ T7774] __netlink_dump_start+0x615/0x980 [ 157.260037][ T7774] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 157.265832][ T7774] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 157.272133][ T7774] ? __pfx_genl_get_cmd+0x10/0x10 [ 157.277201][ T7774] ? __pfx_genl_start+0x10/0x10 [ 157.282099][ T7774] ? __pfx_genl_dumpit+0x10/0x10 [ 157.287117][ T7774] ? __pfx_genl_done+0x10/0x10 [ 157.292021][ T7774] ? __radix_tree_lookup+0x21f/0x2c0 [ 157.297379][ T7774] genl_rcv_msg+0x470/0x800 [ 157.301939][ T7774] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.307010][ T7774] ? __pfx_netdev_nl_napi_get_dumpit+0x10/0x10 [ 157.313213][ T7774] netlink_rcv_skb+0x165/0x410 [ 157.318012][ T7774] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.323097][ T7774] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.328440][ T7774] ? down_read+0xc9/0x330 [ 157.332810][ T7774] ? __pfx_down_read+0x10/0x10 [ 157.338226][ T7774] ? netlink_deliver_tap+0x1ae/0xcf0 [ 157.343596][ T7774] genl_rcv+0x28/0x40 [ 157.347622][ T7774] netlink_unicast+0x53c/0x7f0 [ 157.352440][ T7774] ? __pfx_netlink_unicast+0x10/0x10 [ 157.357772][ T7774] ? __phys_addr_symbol+0x30/0x80 [ 157.362844][ T7774] ? __check_object_size+0x488/0x710 [ 157.368183][ T7774] netlink_sendmsg+0x8b8/0xd70 [ 157.373110][ T7774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.378455][ T7774] ____sys_sendmsg+0x9ae/0xb40 [ 157.383373][ T7774] ? copy_msghdr_from_user+0x10b/0x160 [ 157.388996][ T7774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.394556][ T7774] ? __pfx___lock_acquire+0x10/0x10 [ 157.399901][ T7774] ___sys_sendmsg+0x135/0x1e0 [ 157.404628][ T7774] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.409880][ T7774] ? lock_acquire+0x2f/0xb0 [ 157.414438][ T7774] ? __fget_files+0x40/0x3f0 [ 157.419087][ T7774] ? fdget+0x176/0x210 [ 157.423195][ T7774] __sys_sendmsg+0x117/0x1f0 [ 157.427826][ T7774] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.432973][ T7774] ? __fget_files+0x244/0x3f0 [ 157.437709][ T7774] do_syscall_64+0xcd/0x250 [ 157.442251][ T7774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.448184][ T7774] RIP: 0033:0x7f4e49b7e719 [ 157.452623][ T7774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.472274][ T7774] RSP: 002b:00007f4e4a96a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.480731][ T7774] RAX: ffffffffffffffda RBX: 00007f4e49d35f80 RCX: 00007f4e49b7e719 [ 157.488742][ T7774] RDX: 0000000044040884 RSI: 0000000020000100 RDI: 0000000000000003 [ 157.496763][ T7774] RBP: 00007f4e4a96a090 R08: 0000000000000000 R09: 0000000000000000 [ 157.504768][ T7774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.512785][ T7774] R13: 0000000000000000 R14: 00007f4e49d35f80 R15: 00007ffdf22047c8 [ 157.520897][ T7774] [ 157.751618][ T7780] netlink: 342 bytes leftover after parsing attributes in process `syz.1.445'. [ 158.043386][ T7789] svc: failed to register nfsdv3 RPC service (errno 111). [ 158.077012][ T7789] svc: failed to register nfsaclv3 RPC service (errno 111). [ 158.077956][ T7787] netlink: 'syz.4.446': attribute type 11 has an invalid length. [ 158.116884][ T7787] netlink: 'syz.4.446': attribute type 11 has an invalid length. [ 158.423664][ T7801] FAULT_INJECTION: forcing a failure. [ 158.423664][ T7801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.456837][ T7801] CPU: 1 UID: 0 PID: 7801 Comm: syz.2.453 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 158.467585][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.477673][ T7801] Call Trace: [ 158.480982][ T7801] [ 158.483948][ T7801] dump_stack_lvl+0x16c/0x1f0 [ 158.488677][ T7801] should_fail_ex+0x497/0x5b0 [ 158.493403][ T7801] _copy_to_user+0x32/0xd0 [ 158.497863][ T7801] simple_read_from_buffer+0xd0/0x160 [ 158.503288][ T7801] proc_fail_nth_read+0x198/0x270 [ 158.508435][ T7801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.514007][ T7801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.519564][ T7801] vfs_read+0x1df/0xbe0 [ 158.523732][ T7801] ? lockdep_hardirqs_on+0x7c/0x110 [ 158.528946][ T7801] ? find_held_lock+0x2d/0x110 [ 158.533810][ T7801] ? __pfx_vfs_read+0x10/0x10 [ 158.538520][ T7801] ? keyctl_watch_key+0x372/0x500 [ 158.543558][ T7801] ? __pfx_lock_release+0x10/0x10 [ 158.548605][ T7801] ? rcu_is_watching+0x12/0xc0 [ 158.553397][ T7801] ? kfree+0x274/0x4b0 [ 158.557484][ T7801] ksys_read+0x12f/0x260 [ 158.561787][ T7801] ? __pfx_ksys_read+0x10/0x10 [ 158.566633][ T7801] do_syscall_64+0xcd/0x250 [ 158.571167][ T7801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.577183][ T7801] RIP: 0033:0x7fe5a257d15c [ 158.581627][ T7801] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 158.601257][ T7801] RSP: 002b:00007fe5a32da030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.609691][ T7801] RAX: ffffffffffffffda RBX: 00007fe5a2735f80 RCX: 00007fe5a257d15c [ 158.618278][ T7801] RDX: 000000000000000f RSI: 00007fe5a32da0a0 RDI: 0000000000000006 [ 158.626264][ T7801] RBP: 00007fe5a32da090 R08: 0000000000000000 R09: 0000000000000000 [ 158.634254][ T7801] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 158.642236][ T7801] R13: 0000000000000000 R14: 00007fe5a2735f80 R15: 00007ffc66698f08 [ 158.650226][ T7801] [ 159.078976][ T7816] FAULT_INJECTION: forcing a failure. [ 159.078976][ T7816] name failslab, interval 1, probability 0, space 0, times 0 [ 159.136694][ T7816] CPU: 1 UID: 0 PID: 7816 Comm: syz.3.457 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 159.147363][ T7816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 159.157450][ T7816] Call Trace: [ 159.160752][ T7816] [ 159.163794][ T7816] dump_stack_lvl+0x16c/0x1f0 [ 159.168534][ T7816] should_fail_ex+0x497/0x5b0 [ 159.173346][ T7816] ? fs_reclaim_acquire+0xae/0x150 [ 159.178521][ T7816] should_failslab+0xc2/0x120 [ 159.183250][ T7816] kmem_cache_alloc_node_noprof+0x71/0x310 [ 159.189099][ T7816] ? __alloc_skb+0x2b3/0x380 [ 159.193735][ T7816] ? genl_start+0x1e7/0x950 [ 159.198284][ T7816] __alloc_skb+0x2b3/0x380 [ 159.203693][ T7816] ? __pfx___alloc_skb+0x10/0x10 [ 159.208749][ T7816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.214851][ T7816] netlink_dump+0x6af/0xcc0 [ 159.219379][ T7816] ? __pfx_netlink_dump+0x10/0x10 [ 159.224512][ T7816] ? kasan_save_track+0x14/0x30 [ 159.229375][ T7816] ? __kasan_kmalloc+0xaa/0xb0 [ 159.234153][ T7816] ? genl_start+0x677/0x950 [ 159.238676][ T7816] __netlink_dump_start+0x6d9/0x980 [ 159.243893][ T7816] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 159.249641][ T7816] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 159.255902][ T7816] ? __pfx_genl_get_cmd+0x10/0x10 [ 159.260950][ T7816] ? __pfx_genl_start+0x10/0x10 [ 159.265820][ T7816] ? __pfx_genl_dumpit+0x10/0x10 [ 159.270770][ T7816] ? __pfx_genl_done+0x10/0x10 [ 159.275554][ T7816] ? __radix_tree_lookup+0x21f/0x2c0 [ 159.280867][ T7816] genl_rcv_msg+0x470/0x800 [ 159.285393][ T7816] ? __pfx_genl_rcv_msg+0x10/0x10 [ 159.290432][ T7816] ? __pfx_netdev_nl_napi_get_dumpit+0x10/0x10 [ 159.296616][ T7816] netlink_rcv_skb+0x165/0x410 [ 159.301394][ T7816] ? __pfx_genl_rcv_msg+0x10/0x10 [ 159.306434][ T7816] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.311758][ T7816] ? down_read+0xc9/0x330 [ 159.316095][ T7816] ? __pfx_down_read+0x10/0x10 [ 159.320869][ T7816] ? netlink_deliver_tap+0x1ae/0xcf0 [ 159.326174][ T7816] genl_rcv+0x28/0x40 [ 159.330195][ T7816] netlink_unicast+0x53c/0x7f0 [ 159.335059][ T7816] ? __pfx_netlink_unicast+0x10/0x10 [ 159.340356][ T7816] ? __phys_addr_symbol+0x30/0x80 [ 159.345389][ T7816] ? __check_object_size+0x488/0x710 [ 159.350868][ T7816] netlink_sendmsg+0x8b8/0xd70 [ 159.356273][ T7816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.361578][ T7816] ____sys_sendmsg+0x9ae/0xb40 [ 159.366357][ T7816] ? copy_msghdr_from_user+0x10b/0x160 [ 159.371823][ T7816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.377143][ T7816] ? __pfx___lock_acquire+0x10/0x10 [ 159.382362][ T7816] ___sys_sendmsg+0x135/0x1e0 [ 159.387058][ T7816] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.392280][ T7816] ? lock_acquire+0x2f/0xb0 [ 159.396921][ T7816] ? __fget_files+0x40/0x3f0 [ 159.401531][ T7816] ? fdget+0x176/0x210 [ 159.405606][ T7816] __sys_sendmsg+0x117/0x1f0 [ 159.410224][ T7816] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.415343][ T7816] ? __fget_files+0x244/0x3f0 [ 159.420046][ T7816] do_syscall_64+0xcd/0x250 [ 159.424559][ T7816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.430474][ T7816] RIP: 0033:0x7f758e97e719 [ 159.434900][ T7816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.454530][ T7816] RSP: 002b:00007f758f74d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.462964][ T7816] RAX: ffffffffffffffda RBX: 00007f758eb35f80 RCX: 00007f758e97e719 [ 159.470944][ T7816] RDX: 0000000044040884 RSI: 0000000020000100 RDI: 0000000000000003 [ 159.478934][ T7816] RBP: 00007f758f74d090 R08: 0000000000000000 R09: 0000000000000000 [ 159.486916][ T7816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.494977][ T7816] R13: 0000000000000000 R14: 00007f758eb35f80 R15: 00007ffe4525d3c8 [ 159.502966][ T7816] [ 160.181008][ T7830] netlink: 342 bytes leftover after parsing attributes in process `syz.2.463'. [ 161.597342][ T7855] netlink: 334 bytes leftover after parsing attributes in process `syz.2.472'. [ 162.389384][ T7867] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.443014][ T7867] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.481740][ T7867] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.546994][ T7867] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.626919][ T7867] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.716909][ T7867] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.743274][ T7867] Dead loop on virtual device ip6_vti0, fix it urgently! [ 166.882393][ T7941] kernel read not supported for file /#)-\&[} (pid: 7941 comm: syz.1.493) [ 166.942743][ T29] audit: type=1800 audit(4295032918.715:2): pid=7941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.493" name="#)-\&[}" dev="mqueue" ino=17006 res=0 errno=0 [ 169.052270][ T7972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.501'. [ 169.821073][ T8002] TCP: TCP_TX_DELAY enabled [ 172.966478][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 175.740899][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'. [ 175.876815][ T8097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.710784][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.547'. [ 182.232742][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.558'. [ 183.504413][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 183.520336][ T8232] netlink: 3 bytes leftover after parsing attributes in process `syz.3.568'. [ 183.536657][ T8232] tc_dump_action: action bad kind [ 184.269229][ T8224] kexec: Could not allocate control_code_buffer [ 185.562206][ T8266] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 185.575745][ T8266] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 191.346846][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.604'. [ 191.598166][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 191.598254][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 193.618638][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'. [ 194.647270][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.653620][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.797602][ T8445] netlink: 'syz.2.624': attribute type 2 has an invalid length. [ 199.494867][ T8451] syz.1.626 (8451) used greatest stack depth: 20416 bytes left [ 200.800527][ T8525] nfsd: Unknown parameter 'IPVS' [ 201.198887][ T8472] syz.4.633 (8472) used greatest stack depth: 20144 bytes left [ 202.140875][ T8560] nfsd: Unknown parameter 'IPVS' [ 202.294797][ T8570] syz.2.661(8570): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 208.649723][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'. [ 209.911847][ T8689] netlink: 32 bytes leftover after parsing attributes in process `syz.1.691'. [ 209.933365][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 212.816761][ T8740] can: request_module (can-proto-4) failed. [ 213.418254][ T7720] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.659205][ T7720] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.851194][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.860791][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.875254][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.880305][ T7720] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.902748][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.914504][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.922359][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.038881][ T8765] ptrace attach of "./syz-executor exec"[5838] was attempted by ""[8765] [ 214.155467][ T7720] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.383175][ T8771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 214.880420][ T7720] bridge_slave_1: left allmulticast mode [ 214.902772][ T7720] bridge_slave_1: left promiscuous mode [ 214.938696][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.101062][ T7720] bridge_slave_0: left allmulticast mode [ 215.127448][ T7720] bridge_slave_0: left promiscuous mode [ 215.133301][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.996778][ T5848] Bluetooth: hci0: command tx timeout [ 216.254498][ T8199] syz.4.561 (8199) used greatest stack depth: 18976 bytes left [ 217.039644][ T7720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.071541][ T7720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.285797][ T7720] bond0 (unregistering): Released all slaves [ 217.510375][ T8759] chnl_net:caif_netlink_parms(): no params data found [ 218.077269][ T5848] Bluetooth: hci0: command tx timeout [ 218.304161][ T8759] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.325238][ T8759] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.348692][ T8759] bridge_slave_0: entered allmulticast mode [ 218.356392][ T8759] bridge_slave_0: entered promiscuous mode [ 218.749220][ T8759] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.770976][ T8759] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.786838][ T8759] bridge_slave_1: entered allmulticast mode [ 218.804255][ T8759] bridge_slave_1: entered promiscuous mode [ 219.021598][ T8759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.049489][ T8759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.565099][ T7720] hsr_slave_0: left promiscuous mode [ 219.615088][ T7720] hsr_slave_1: left promiscuous mode [ 219.694587][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.705620][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.760583][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.778853][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.812528][ T7720] veth1_macvtap: left promiscuous mode [ 219.836980][ T7720] veth0_macvtap: left promiscuous mode [ 219.843815][ T7720] veth1_vlan: left promiscuous mode [ 219.856682][ T7720] veth0_vlan: left promiscuous mode [ 220.174206][ T5848] Bluetooth: hci0: command tx timeout [ 221.415272][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 222.227574][ T7720] team0 (unregistering): Port device team_slave_1 removed [ 222.240417][ T5848] Bluetooth: hci0: command tx timeout [ 222.488573][ T7720] team0 (unregistering): Port device team_slave_0 removed [ 225.208013][ T8759] team0: Port device team_slave_0 added [ 225.388445][ T8759] team0: Port device team_slave_1 added [ 225.750292][ T8759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.773969][ T8759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.816733][ T8759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.838925][ T8759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.845926][ T8759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.896569][ T8759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.669134][ T8759] hsr_slave_0: entered promiscuous mode [ 226.705686][ T8759] hsr_slave_1: entered promiscuous mode [ 226.733521][ T8759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.741454][ T8759] Cannot create hsr debugfs directory [ 226.827709][ T8197] syz.4.561 (8197) used greatest stack depth: 18928 bytes left [ 227.029862][ T8928] svc: failed to register nfsdv3 RPC service (errno 111). [ 227.055897][ T8928] svc: failed to register nfsaclv3 RPC service (errno 111). [ 227.342338][ T8759] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.412195][ T8759] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.541353][ T8759] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.575815][ T8759] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 228.140351][ T8759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.225651][ T8759] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.277225][ T7720] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.284379][ T7720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.398069][ T7716] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.405230][ T7716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.516711][ T8759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.015649][ T8759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.926217][ T8759] veth0_vlan: entered promiscuous mode [ 229.988054][ T8759] veth1_vlan: entered promiscuous mode [ 230.616124][ T8759] veth0_macvtap: entered promiscuous mode [ 230.701158][ T8759] veth1_macvtap: entered promiscuous mode [ 230.820856][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.861444][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.886695][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.915201][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.931650][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.942647][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.961340][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.974508][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.992786][ T8759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.074166][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.096777][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.107010][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.146167][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.176674][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.216662][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.241880][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.276741][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.297970][ T8759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.381633][ T8759] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.392876][ T8759] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.420099][ T8759] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.442678][ T8759] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.757698][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.799059][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.882645][ T7714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.932607][ T7714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.365755][ T9070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.764'. [ 233.601637][ T9070] HSR: entered promiscuous mode [ 234.164195][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.768'. [ 236.162592][ T9174] nbd: must specify a device to reconfigure [ 237.704063][ T9240] RDS: rds_bind could not find a transport for 2abd:7000:fcdb:df25:100::, load rds_tcp or rds_rdma? [ 238.298771][ T81] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.570372][ T81] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.921343][ T81] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.093947][ T81] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.124509][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.135650][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.148358][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.163358][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.172908][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 239.181797][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.719512][ T81] bridge_slave_1: left allmulticast mode [ 239.725396][ T81] bridge_slave_1: left promiscuous mode [ 239.741512][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.912686][ T81] bridge_slave_0: left allmulticast mode [ 239.926685][ T81] bridge_slave_0: left promiscuous mode [ 239.932550][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.277594][ T54] Bluetooth: hci1: command tx timeout [ 242.165024][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.254923][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.318826][ T81] bond0 (unregistering): Released all slaves [ 242.482243][ T9283] chnl_net:caif_netlink_parms(): no params data found [ 243.356725][ T54] Bluetooth: hci1: command tx timeout [ 243.421867][ T9283] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.429325][ T9283] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.436984][ T9283] bridge_slave_0: entered allmulticast mode [ 243.444164][ T9283] bridge_slave_0: entered promiscuous mode [ 243.468837][ T9283] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.475964][ T9283] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.510702][ T9283] bridge_slave_1: entered allmulticast mode [ 243.530200][ T9283] bridge_slave_1: entered promiscuous mode [ 243.988703][ T9283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.058157][ T9283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.861049][ T9283] team0: Port device team_slave_0 added [ 245.113938][ T9283] team0: Port device team_slave_1 added [ 245.436657][ T54] Bluetooth: hci1: command tx timeout [ 245.761054][ T9283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.768425][ T9283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.816733][ T9283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.989443][ T9283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.012119][ T9283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.059434][ T9283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.196866][ T81] hsr_slave_0: left promiscuous mode [ 246.302467][ T81] hsr_slave_1: left promiscuous mode [ 246.429748][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.439147][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.448143][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.458454][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.467752][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 246.475121][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 246.542801][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.576618][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.736792][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.749889][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.920929][ T81] veth1_macvtap: left promiscuous mode [ 246.926571][ T81] veth0_macvtap: left promiscuous mode [ 246.932204][ T81] veth1_vlan: left promiscuous mode [ 246.938662][ T81] veth0_vlan: left promiscuous mode [ 247.516635][ T54] Bluetooth: hci1: command tx timeout [ 248.556654][ T54] Bluetooth: hci3: command tx timeout [ 248.607410][ T81] team0 (unregistering): Port device team_slave_1 removed [ 248.747390][ T81] team0 (unregistering): Port device team_slave_0 removed [ 249.577583][ T9283] hsr_slave_0: entered promiscuous mode [ 249.589764][ T9283] hsr_slave_1: entered promiscuous mode [ 249.596032][ T9283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.605064][ T9283] Cannot create hsr debugfs directory [ 250.449975][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.462035][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.470691][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.491554][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.505304][ T9396] chnl_net:caif_netlink_parms(): no params data found [ 250.507363][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 250.519918][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.565723][ T81] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.636714][ T5848] Bluetooth: hci3: command tx timeout [ 250.712496][ T81] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.794078][ T9396] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.802534][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.819050][ T9396] bridge_slave_0: entered allmulticast mode [ 250.826241][ T9396] bridge_slave_0: entered promiscuous mode [ 250.844003][ T9396] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.854392][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.870952][ T9396] bridge_slave_1: entered allmulticast mode [ 250.880786][ T9396] bridge_slave_1: entered promiscuous mode [ 250.948021][ T81] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.993791][ T9396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.059589][ T81] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.080086][ T9396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.185503][ T9283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 251.243191][ T9396] team0: Port device team_slave_0 added [ 251.255552][ T9283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.316140][ T9396] team0: Port device team_slave_1 added [ 251.337599][ T9283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.348749][ T9283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.447893][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.454883][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.482614][ T9396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.567465][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.575200][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.612810][ T9396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.673281][ T9428] chnl_net:caif_netlink_parms(): no params data found [ 251.739664][ T81] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.822929][ T9451] lo: entered allmulticast mode [ 251.907865][ T81] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.973390][ T9451] lo: left allmulticast mode [ 252.028525][ T9396] hsr_slave_0: entered promiscuous mode [ 252.043091][ T9396] hsr_slave_1: entered promiscuous mode [ 252.056108][ T9396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.092632][ T9396] Cannot create hsr debugfs directory [ 252.145267][ T81] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.209415][ T9428] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.225413][ T9428] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.239566][ T9428] bridge_slave_0: entered allmulticast mode [ 252.257278][ T9428] bridge_slave_0: entered promiscuous mode [ 252.295620][ T81] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.347495][ T9428] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.354685][ T9428] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.372454][ T9428] bridge_slave_1: entered allmulticast mode [ 252.386418][ T9428] bridge_slave_1: entered promiscuous mode [ 252.536044][ T9428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.576670][ T5848] Bluetooth: hci0: command tx timeout [ 252.580016][ T9428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.669253][ T9428] team0: Port device team_slave_0 added [ 252.710960][ T9428] team0: Port device team_slave_1 added [ 252.726838][ T5848] Bluetooth: hci3: command tx timeout [ 252.873466][ T9283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.892291][ T9428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.904586][ T9428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.935506][ T9428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.984464][ T9428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.001650][ T9428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.056770][ T9428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.165031][ T81] bridge_slave_1: left allmulticast mode [ 253.173402][ T81] bridge_slave_1: left promiscuous mode [ 253.184085][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.221944][ T81] bridge_slave_0: left allmulticast mode [ 253.236565][ T81] bridge_slave_0: left promiscuous mode [ 253.242369][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.260396][ T81] bridge_slave_1: left allmulticast mode [ 253.266078][ T81] bridge_slave_1: left promiscuous mode [ 253.272286][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.283721][ T81] bridge_slave_0: left allmulticast mode [ 253.297865][ T81] bridge_slave_0: left promiscuous mode [ 253.303704][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.979784][ T9483] netlink: zone id is out of range [ 253.986743][ T9483] netlink: zone id is out of range [ 253.992147][ T9483] netlink: zone id is out of range [ 253.997508][ T9483] netlink: zone id is out of range [ 254.002634][ T9483] netlink: del zone limit has 4 unknown bytes [ 254.290003][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.312394][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.335192][ T81] bond0 (unregistering): Released all slaves [ 254.519930][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.536967][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.560722][ T81] bond0 (unregistering): Released all slaves [ 254.641608][ T5848] Bluetooth: hci0: command tx timeout [ 254.665286][ T9428] hsr_slave_0: entered promiscuous mode [ 254.681301][ T9428] hsr_slave_1: entered promiscuous mode [ 254.688690][ T9428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.697886][ T9428] Cannot create hsr debugfs directory [ 254.715442][ T81] HfR: left promiscuous mode [ 254.767252][ T9283] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.796742][ T5848] Bluetooth: hci3: command tx timeout [ 254.825476][ T7714] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.832809][ T7714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.843634][ T81] HSR: left promiscuous mode [ 254.914504][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.921714][ T7717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.557155][ T9396] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.586291][ T9396] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.710846][ T9396] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.783242][ T9396] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 255.878607][ T9428] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 255.898764][ T9428] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 255.987142][ T9428] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 256.014525][ T9428] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 256.090082][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.096435][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.111254][ T9283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.251846][ T9532] netlink: 334 bytes leftover after parsing attributes in process `syz.2.833'. [ 256.582881][ T81] hsr_slave_0: left promiscuous mode [ 256.597164][ T81] hsr_slave_1: left promiscuous mode [ 256.604186][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.628164][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.636086][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.644793][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.656465][ T81] hsr_slave_0: left promiscuous mode [ 256.664934][ T81] hsr_slave_1: left promiscuous mode [ 256.673593][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.682418][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.691295][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.699914][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.718419][ T5848] Bluetooth: hci0: command tx timeout [ 256.752772][ T81] veth1_macvtap: left promiscuous mode [ 256.758606][ T81] veth0_macvtap: left promiscuous mode [ 256.764170][ T81] veth1_vlan: left promiscuous mode [ 256.771034][ T81] veth0_vlan: left promiscuous mode [ 256.780108][ T81] veth1_macvtap: left promiscuous mode [ 256.785681][ T81] veth0_macvtap: left promiscuous mode [ 256.791643][ T81] veth1_vlan: left promiscuous mode [ 256.797559][ T81] veth0_vlan: left promiscuous mode [ 257.320779][ T81] team0 (unregistering): Port device team_slave_1 removed [ 257.360610][ T81] team0 (unregistering): Port device team_slave_0 removed [ 258.084631][ T81] team0 (unregistering): Port device team_slave_1 removed [ 258.122564][ T81] team0 (unregistering): Port device team_slave_0 removed [ 258.489602][ T9396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.549450][ T9396] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.627252][ T9428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.680340][ T9283] veth0_vlan: entered promiscuous mode [ 258.698891][ T7714] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.706045][ T7714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.732677][ T7714] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.739857][ T7714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.759786][ T9428] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.797374][ T5848] Bluetooth: hci0: command tx timeout [ 258.805320][ T7714] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.812487][ T7714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.879865][ T9283] veth1_vlan: entered promiscuous mode [ 258.922734][ T7714] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.929935][ T7714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.103284][ T9283] veth0_macvtap: entered promiscuous mode [ 259.156494][ T9283] veth1_macvtap: entered promiscuous mode [ 259.261428][ T9283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.296714][ T9283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.321893][ T9283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.333075][ T9283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.345139][ T9283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.403656][ T9283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.423109][ T9283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.442862][ T9283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.466020][ T9283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.503098][ T9283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.563190][ T9283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.576571][ T9283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.585314][ T9283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.635324][ T9283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.798196][ T9428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.838752][ T9396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.890454][ T7727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.912508][ T7727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.079984][ T9396] veth0_vlan: entered promiscuous mode [ 260.093689][ T9396] veth1_vlan: entered promiscuous mode [ 260.169563][ T7721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.187284][ T7721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.322920][ T9396] veth0_macvtap: entered promiscuous mode [ 260.382009][ T9396] veth1_macvtap: entered promiscuous mode [ 260.454551][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.487725][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.517805][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.548023][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.566659][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.602476][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.640684][ T9396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.671424][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.702740][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.746833][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.776816][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.823751][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.840942][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.855133][ T9396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.919045][ T9396] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.937527][ T9396] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.953469][ T9396] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.974179][ T9396] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.030939][ T9428] veth0_vlan: entered promiscuous mode [ 261.187642][ T9428] veth1_vlan: entered promiscuous mode [ 261.301601][ T9428] veth0_macvtap: entered promiscuous mode [ 261.312580][ T9428] veth1_macvtap: entered promiscuous mode [ 261.328743][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.339357][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.349519][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.360401][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.370479][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.381272][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.391837][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.402496][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.414677][ T9428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.490439][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.494972][ T7720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.504641][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.560628][ T7720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.573196][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.603547][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.632014][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.682499][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.710191][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.741392][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.771824][ T9428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.863676][ T9428] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.879537][ T9428] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.891908][ T9428] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.910148][ T9428] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.943965][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 261.968076][ T9652] nbd: must specify an index to disconnect [ 261.974689][ T7721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.024780][ T7721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.148123][ T7714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.155989][ T7714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.262912][ T7714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.283773][ T7714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.462056][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 264.654788][ T9757] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 264.695094][ T9757] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 265.741064][ T9778] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 265.781604][ T9778] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 270.400410][ T9935] HSR: entered promiscuous mode [ 277.363560][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 277.714260][ T5848] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 285.010310][T10211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.938'. [ 289.525158][T10307] sctp: [Deprecated]: syz.2.960 (pid 10307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.525158][T10307] Use struct sctp_sack_info instead [ 291.981177][T10395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.977'. [ 293.346755][T10434] svc: failed to register nfsdv3 RPC service (errno 111). [ 293.445291][T10434] svc: failed to register nfsaclv3 RPC service (errno 111). [ 293.576496][T10446] netlink: 342 bytes leftover after parsing attributes in process `syz.6.982'. [ 293.761776][T10448] netlink: 342 bytes leftover after parsing attributes in process `syz.6.982'. [ 293.947006][T10448] netlink: 342 bytes leftover after parsing attributes in process `syz.6.982'. [ 294.066959][T10448] netlink: 342 bytes leftover after parsing attributes in process `syz.6.982'. [ 294.116944][T10448] netlink: 342 bytes leftover after parsing attributes in process `syz.6.982'. [ 295.008068][T10485] netlink: 15 bytes leftover after parsing attributes in process `syz.3.990'. [ 295.703986][T10504] netlink: 'syz.4.994': attribute type 6 has an invalid length. [ 295.739087][T10504] netlink: 330 bytes leftover after parsing attributes in process `syz.4.994'. [ 295.846829][T10510] netlink: 'syz.4.994': attribute type 6 has an invalid length. [ 295.936172][T10510] netlink: 330 bytes leftover after parsing attributes in process `syz.4.994'. [ 298.577647][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1005'. [ 301.312087][T10654] netlink: 'syz.2.1020': attribute type 21 has an invalid length. [ 301.354031][T10654] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1020'. [ 303.078527][T10699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 306.890175][T10781] caif0: entered allmulticast mode [ 307.650340][T10807] netlink: zone id is out of range [ 307.655515][T10807] netlink: zone id is out of range [ 307.660828][T10807] netlink: zone id is out of range [ 307.665961][T10807] netlink: zone id is out of range [ 307.671280][T10807] netlink: zone id is out of range [ 307.676414][T10807] netlink: zone id is out of range [ 307.681825][T10807] netlink: zone id is out of range [ 307.687008][T10807] netlink: zone id is out of range [ 312.170428][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.550748][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.819684][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.820548][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 312.845249][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 312.854958][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 312.864094][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 312.871936][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 312.879509][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 313.167440][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.545240][T10915] chnl_net:caif_netlink_parms(): no params data found [ 314.169230][T10915] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.176373][T10915] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.226979][T10915] bridge_slave_0: entered allmulticast mode [ 314.234142][T10915] bridge_slave_0: entered promiscuous mode [ 314.278048][T10915] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.285638][T10915] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.303739][T10915] bridge_slave_1: entered allmulticast mode [ 314.315773][T10915] bridge_slave_1: entered promiscuous mode [ 314.527135][ T11] bridge_slave_1: left allmulticast mode [ 314.532989][ T11] bridge_slave_1: left promiscuous mode [ 314.550404][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.588587][ T11] bridge_slave_0: left allmulticast mode [ 314.595238][ T11] bridge_slave_0: left promiscuous mode [ 314.627091][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.958503][ T5848] Bluetooth: hci0: command tx timeout [ 315.957268][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.982985][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.006347][ T11] bond0 (unregistering): Released all slaves [ 316.147572][T10915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.184115][T10915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.377493][T10915] team0: Port device team_slave_0 added [ 316.446680][T10915] team0: Port device team_slave_1 added [ 316.681344][T10915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.715018][T10915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.785821][T10915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.826231][T10915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.836910][T10915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.943802][T10915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.010618][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.020743][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.029319][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.037182][ T54] Bluetooth: hci0: command tx timeout [ 317.064008][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.154572][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 317.173026][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.238588][ T11] hsr_slave_0: left promiscuous mode [ 317.259785][ T11] hsr_slave_1: left promiscuous mode [ 317.307748][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.316711][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.327188][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.349228][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.410870][ T11] veth1_macvtap: left promiscuous mode [ 317.424414][ T11] veth0_macvtap: left promiscuous mode [ 317.430218][ T11] veth1_vlan: left promiscuous mode [ 317.435569][ T11] veth0_vlan: left promiscuous mode [ 317.523649][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.530325][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.422367][ T11] team0 (unregistering): Port device team_slave_1 removed [ 318.494446][ T11] team0 (unregistering): Port device team_slave_0 removed [ 319.117744][ T5848] Bluetooth: hci0: command tx timeout [ 319.217630][T11039] FAULT_INJECTION: forcing a failure. [ 319.217630][T11039] name failslab, interval 1, probability 0, space 0, times 0 [ 319.231376][T11039] CPU: 0 UID: 0 PID: 11039 Comm: syz.3.1127 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 319.242193][T11039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 319.252290][T11039] Call Trace: [ 319.255590][T11039] [ 319.258541][T11039] dump_stack_lvl+0x16c/0x1f0 [ 319.263252][T11039] should_fail_ex+0x497/0x5b0 [ 319.267957][T11039] ? fs_reclaim_acquire+0xae/0x150 [ 319.273109][T11039] should_failslab+0xc2/0x120 [ 319.277836][T11039] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 319.283242][T11039] ? getname_flags.part.0+0x4c/0x550 [ 319.288566][T11039] getname_flags.part.0+0x4c/0x550 [ 319.293717][T11039] getname_flags+0x93/0xf0 [ 319.298174][T11039] user_path_at+0x24/0x60 [ 319.302539][T11039] __x64_sys_utime+0x1c1/0x2c0 [ 319.307429][T11039] ? __pfx___x64_sys_utime+0x10/0x10 [ 319.312746][T11039] ? native_tss_update_io_bitmap+0x2ec/0x610 [ 319.318848][T11039] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 319.325209][T11039] ? ksys_write+0x1ad/0x260 [ 319.329755][T11039] do_syscall_64+0xcd/0x250 [ 319.334374][T11039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.340305][T11039] RIP: 0033:0x7f4a1ad7e719 [ 319.344740][T11039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.364382][T11039] RSP: 002b:00007f4a1bc33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 319.372841][T11039] RAX: ffffffffffffffda RBX: 00007f4a1af35f80 RCX: 00007f4a1ad7e719 [ 319.380862][T11039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001a80 [ 319.388879][T11039] RBP: 00007f4a1bc33090 R08: 0000000000000000 R09: 0000000000000000 [ 319.396969][T11039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.404972][T11039] R13: 0000000000000000 R14: 00007f4a1af35f80 R15: 00007ffe733c9bd8 [ 319.412997][T11039] [ 319.418404][ T5848] Bluetooth: hci1: command tx timeout [ 319.884856][T10915] hsr_slave_0: entered promiscuous mode [ 319.902409][T10915] hsr_slave_1: entered promiscuous mode [ 319.909246][T10915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.918193][T10915] Cannot create hsr debugfs directory [ 320.397467][T10998] chnl_net:caif_netlink_parms(): no params data found [ 320.849875][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.202084][ T5848] Bluetooth: hci0: command tx timeout [ 321.267146][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.305497][T10998] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.324018][T10998] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.338329][T10998] bridge_slave_0: entered allmulticast mode [ 321.368073][T10998] bridge_slave_0: entered promiscuous mode [ 321.387165][T10998] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.394312][T10998] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.414779][T10998] bridge_slave_1: entered allmulticast mode [ 321.427771][T10998] bridge_slave_1: entered promiscuous mode [ 321.437673][ T5848] Bluetooth: hci1: command tx timeout [ 321.745855][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.880681][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.917475][T10998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.975597][T10998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.239676][T10998] team0: Port device team_slave_0 added [ 322.248186][T10998] team0: Port device team_slave_1 added [ 322.322710][T10998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.331475][T10998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.359313][T10998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.435304][T10998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.445678][T10998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.473455][T10998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.487805][T10915] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 322.522669][T10915] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 322.534789][T10915] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 322.552808][ T11] bridge_slave_1: left allmulticast mode [ 322.560003][ T11] bridge_slave_1: left promiscuous mode [ 322.565856][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.575531][ T11] bridge_slave_0: left allmulticast mode [ 322.582131][ T11] bridge_slave_0: left promiscuous mode [ 322.588799][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.101140][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.112550][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.124056][ T11] bond0 (unregistering): Released all slaves [ 323.172344][T10915] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 323.174269][T11123] Process accounting resumed [ 323.300144][T10998] hsr_slave_0: entered promiscuous mode [ 323.315427][T10998] hsr_slave_1: entered promiscuous mode [ 323.321572][T10998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.334067][T10998] Cannot create hsr debugfs directory [ 323.516621][ T5848] Bluetooth: hci1: command tx timeout [ 323.662489][ T11] hsr_slave_0: left promiscuous mode [ 323.680826][ T11] hsr_slave_1: left promiscuous mode [ 323.695965][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.712309][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.723024][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.737360][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.777757][ T11] veth1_macvtap: left promiscuous mode [ 323.783343][ T11] veth0_macvtap: left promiscuous mode [ 323.802757][ T11] veth1_vlan: left promiscuous mode [ 323.808691][ T11] veth0_vlan: left promiscuous mode [ 324.849750][ T11] team0 (unregistering): Port device team_slave_1 removed [ 324.906122][ T11] team0 (unregistering): Port device team_slave_0 removed [ 325.443231][ T11] caif0 (unregistering): left allmulticast mode [ 325.606782][ T5848] Bluetooth: hci1: command tx timeout [ 325.709863][T11162] netlink: 'syz.3.1148': attribute type 6 has an invalid length. [ 325.722223][T11162] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1148'. [ 325.921338][T10915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.049485][T10915] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.104902][ T7720] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.112085][ T7720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.122521][ T7720] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.129716][ T7720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.301208][T10998] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 326.348466][T10998] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 326.368919][T10998] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 326.389537][T10998] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 326.666392][T10915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.691334][T10998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.755101][T10998] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.782322][ T7720] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.789504][ T7720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.859364][ T7720] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.866625][ T7720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.988666][T10998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.228692][T10915] veth0_vlan: entered promiscuous mode [ 327.256156][T10915] veth1_vlan: entered promiscuous mode [ 327.304132][T10915] veth0_macvtap: entered promiscuous mode [ 327.341346][T10915] veth1_macvtap: entered promiscuous mode [ 327.398376][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.417450][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.430894][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.444742][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.462631][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.475365][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.494492][T10915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.521138][T10998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.531072][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.552345][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.576605][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.595169][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.615693][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.636881][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.656388][T10915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.707397][T10915] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.716166][T10915] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.741893][T10915] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.752039][T10915] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.129021][ T6381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.167194][ T6381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.419333][T10998] veth0_vlan: entered promiscuous mode [ 328.430646][T10998] veth1_vlan: entered promiscuous mode [ 328.453535][T10998] veth0_macvtap: entered promiscuous mode [ 328.463107][T10998] veth1_macvtap: entered promiscuous mode [ 328.487056][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.497855][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.507980][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.518847][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.528966][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.539596][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.549543][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.560222][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.571556][T10998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.607188][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.618459][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.629294][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.640986][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.651299][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.662378][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.673056][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.684782][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.698037][T10998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.816332][T10998] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.834092][T10998] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.852096][T10998] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.872102][T10998] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.935134][ T7714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.958480][ T7714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.126371][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.149751][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.235317][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.262615][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.948136][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 329.977704][T11281] ip6gre0: entered promiscuous mode [ 329.982980][T11281] ip6gre0: entered allmulticast mode [ 334.044216][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'. [ 336.540906][ T7714] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.749598][ T7714] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.071583][ T7714] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.320138][ T7714] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.342427][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.352133][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.361175][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.373643][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.384610][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.392268][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.003004][ T7714] bridge_slave_1: left allmulticast mode [ 338.037011][ T7714] bridge_slave_1: left promiscuous mode [ 338.044260][ T7714] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.137632][ T7714] bridge_slave_0: left allmulticast mode [ 338.160030][ T7714] bridge_slave_0: left promiscuous mode [ 338.186212][ T7714] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.345491][ T7714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.425142][ T7714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.436741][ T5848] Bluetooth: hci1: command tx timeout [ 339.443985][T11464] Invalid ELF header magic: != ELF [ 339.452676][ T7714] bond0 (unregistering): Released all slaves [ 339.593201][T11422] chnl_net:caif_netlink_parms(): no params data found [ 340.083215][T11422] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.098935][T11422] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.119711][T11422] bridge_slave_0: entered allmulticast mode [ 340.137371][T11422] bridge_slave_0: entered promiscuous mode [ 340.379405][T11422] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.403441][T11422] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.426127][T11422] bridge_slave_1: entered allmulticast mode [ 340.443566][T11422] bridge_slave_1: entered promiscuous mode [ 340.550482][T11422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.679237][T11422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.997489][ T7714] hsr_slave_0: left promiscuous mode [ 341.071864][ T7714] hsr_slave_1: left promiscuous mode [ 341.134030][ T7714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.148183][ T7714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.191286][ T7714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.230280][ T7714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.338697][ T7714] veth1_macvtap: left promiscuous mode [ 341.383003][ T7714] veth0_macvtap: left promiscuous mode [ 341.392666][ T7714] veth1_vlan: left promiscuous mode [ 341.413945][ T7714] veth0_vlan: left promiscuous mode [ 341.517057][ T5848] Bluetooth: hci1: command tx timeout [ 342.545849][ T7714] team0 (unregistering): Port device team_slave_1 removed [ 342.600383][ T7714] team0 (unregistering): Port device team_slave_0 removed [ 343.077667][T11422] team0: Port device team_slave_0 added [ 343.104969][T11540] openvswitch: HSR: Dropping previously announced user features [ 343.131336][T11422] team0: Port device team_slave_1 added [ 343.274750][T11422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.300128][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.349935][T11422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.373623][T11422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.380762][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.456666][T11422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.596965][ T5848] Bluetooth: hci1: command tx timeout [ 343.610651][T11422] hsr_slave_0: entered promiscuous mode [ 343.618200][T11422] hsr_slave_1: entered promiscuous mode [ 343.624992][T11422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.633339][T11422] Cannot create hsr debugfs directory [ 345.219768][T11422] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.285594][T11422] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 345.343846][T11422] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 345.386013][T11422] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 345.680725][ T5848] Bluetooth: hci1: command tx timeout [ 345.698678][T11422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.814193][T11422] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.938811][ T7721] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.945965][ T7721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.059243][ T7721] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.066397][ T7721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.331434][T11422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.130679][T11422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.093411][T11422] veth0_vlan: entered promiscuous mode [ 348.140540][T11422] veth1_vlan: entered promiscuous mode [ 348.283731][T11422] veth0_macvtap: entered promiscuous mode [ 348.334926][T11422] veth1_macvtap: entered promiscuous mode [ 348.433736][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.486178][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.531238][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.582802][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.619442][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.670827][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.724112][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.765604][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.819231][T11422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.882949][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.934597][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.986812][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.023624][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.072741][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.121689][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.153442][T11422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.195609][T11422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.250060][T11422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.321938][T11422] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.364646][T11422] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.405072][T11422] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.456798][T11422] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.719803][ T7713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.764846][ T7713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.886834][ T7721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.894799][ T7721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.971597][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 354.995388][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 355.168082][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 355.888176][T11834] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 355.938287][T11834] svc: failed to register nfsdv3 RPC service (errno 111). [ 355.965601][T11834] svc: failed to register nfsaclv3 RPC service (errno 111). [ 361.890404][T11916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1290'. [ 362.198157][T11920] openvswitch: netlink: Key type 8590 is out of range max 32 [ 365.172140][T11989] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1304'. [ 365.853274][T12011] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 365.907273][T12011] svc: failed to register nfsdv3 RPC service (errno 111). [ 365.923505][T12011] svc: failed to register nfsaclv3 RPC service (errno 111). [ 366.421587][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1313'. [ 366.462929][T12033] : entered promiscuous mode [ 366.844658][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1319'. [ 366.884294][T12053] openvswitch: : Dropping previously announced user features [ 370.800278][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 371.132356][T12124] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1333'. [ 372.507967][T12148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1340'. [ 374.566368][T12181] HSR: entered promiscuous mode [ 375.061801][T12170] delete_channel: no stack [ 376.049408][T12220] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1357'. [ 378.963259][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.969692][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.088904][T12280] delete_channel: no stack [ 380.408357][T12292] Process accounting resumed [ 380.523753][T12295] svc: failed to register nfsdv3 RPC service (errno 111). [ 380.564097][T12295] svc: failed to register nfsaclv3 RPC service (errno 111). [ 381.157354][T12311] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1377'. [ 382.222006][T12334] Invalid ELF header magic: != ELF [ 382.545713][T12340] HSR: entered promiscuous mode [ 382.887789][T12335] delete_channel: no stack [ 387.157084][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1393'. [ 387.886936][T12417] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1400'. [ 390.084101][T12454] svc: failed to register nfsdv3 RPC service (errno 111). [ 390.114480][T12454] svc: failed to register nfsaclv3 RPC service (errno 111). [ 392.927586][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 395.392221][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1419'. [ 395.944100][T12536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1426'. [ 398.091141][T12598] can: request_module (can-proto-5) failed. [ 398.493824][T12609] cgroup: fork rejected by pids controller in /syz6 [ 399.043091][T12678] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 399.112565][T12678] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 406.650935][T12820] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 406.685746][T12820] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 407.282775][T12869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1467'. [ 410.283022][T12910] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 410.302590][T12910] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 412.783331][ T5848] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 412.976946][ T29] audit: type=1326 audit(8277292236.748:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12952 comm="syz.2.1490" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5a257e719 code=0x0 [ 413.163283][T12955] Process accounting resumed [ 415.564919][ T5848] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 415.917580][T13036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1505'. [ 415.978952][T13036] macvtap0: entered promiscuous mode [ 416.008880][T13036] macvtap0: entered allmulticast mode [ 416.059678][T13036] veth0_macvtap: entered allmulticast mode [ 418.037120][ T5848] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 418.626666][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1516'. [ 418.988508][T13088] delete_channel: no stack [ 420.294875][ T5848] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 424.962279][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 424.992449][T13152] ip6gre0: entered promiscuous mode [ 425.017930][T13152] ip6gre0: entered allmulticast mode [ 425.416480][ T5848] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 425.456147][T13161] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1535'. [ 425.489761][T13159] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1535'. [ 426.303262][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1537'. [ 426.820623][ T7720] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.931754][T13187] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 427.016698][T13187] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 427.197749][ T7720] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.286258][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.355321][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.364034][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.372379][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.381210][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 427.388960][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 427.430499][ T7720] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.694840][ T7720] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.382442][ T7720] bridge_slave_1: left allmulticast mode [ 428.391975][ T7720] bridge_slave_1: left promiscuous mode [ 428.398226][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.408163][ T7720] bridge_slave_0: left allmulticast mode [ 428.413846][ T7720] bridge_slave_0: left promiscuous mode [ 428.423769][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.443038][ T54] Bluetooth: hci1: command tx timeout [ 429.955938][ T7720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.976120][ T7720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.990106][ T7720] bond0 (unregistering): Released all slaves [ 430.110952][T13196] chnl_net:caif_netlink_parms(): no params data found [ 430.181438][ T7720] : left promiscuous mode [ 430.300894][ T7720] HSR: left promiscuous mode [ 430.539323][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1553'. [ 430.638836][T13196] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.646887][T13196] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.676025][T13196] bridge_slave_0: entered allmulticast mode [ 430.698912][T13196] bridge_slave_0: entered promiscuous mode [ 430.733091][T13196] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.760103][T13196] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.795653][T13196] bridge_slave_1: entered allmulticast mode [ 430.817951][T13196] bridge_slave_1: entered promiscuous mode [ 431.012509][T13196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.230786][T13196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.272129][T13269] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1559'. [ 431.376935][ T29] audit: type=1326 audit(8277292255.168:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13280 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8821f7e719 code=0x0 [ 431.517627][ T54] Bluetooth: hci1: command tx timeout [ 431.585931][T13196] team0: Port device team_slave_0 added [ 431.595794][T13196] team0: Port device team_slave_1 added [ 431.700389][T13196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.716989][T13196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.744592][T13196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.786921][ T7720] hsr_slave_0: left promiscuous mode [ 431.806563][ T7720] hsr_slave_1: left promiscuous mode [ 431.837384][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.845584][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.867011][ T7720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.874652][ T7720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.896337][ T7720] veth1_macvtap: left promiscuous mode [ 431.903173][ T7720] veth0_macvtap: left allmulticast mode [ 431.912856][ T7720] veth0_macvtap: left promiscuous mode [ 431.922677][ T7720] veth1_vlan: left promiscuous mode [ 431.931613][ T7720] veth0_vlan: left promiscuous mode [ 432.683003][ T7720] team0 (unregistering): Port device team_slave_1 removed [ 432.742279][ T7720] team0 (unregistering): Port device team_slave_0 removed [ 433.215696][T13196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.223601][T13196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.260274][T13196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.352889][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'. [ 433.509463][T13196] hsr_slave_0: entered promiscuous mode [ 433.555864][T13196] hsr_slave_1: entered promiscuous mode [ 433.593020][T13196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.600813][ T54] Bluetooth: hci1: command tx timeout [ 433.610462][T13196] Cannot create hsr debugfs directory [ 434.397474][T13333] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1573'. [ 434.428988][T13333] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1573'. [ 434.925820][T13196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 434.948906][T13196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 434.969523][T13196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 434.985351][T13196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 435.158237][T13196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.194923][T13196] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.224161][ T7721] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.231349][ T7721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.270703][ T7720] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.277924][ T7720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.406425][T13196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 435.469518][T13196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.677087][ T5848] Bluetooth: hci1: command tx timeout [ 435.861474][T13196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.272937][T13196] veth0_vlan: entered promiscuous mode [ 436.305643][T13196] veth1_vlan: entered promiscuous mode [ 436.383088][T13196] veth0_macvtap: entered promiscuous mode [ 436.413984][T13196] veth1_macvtap: entered promiscuous mode [ 436.431578][T13196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.443821][T13196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.474078][T13196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.506759][T13196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.526730][T13196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.563852][T13196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.594611][T13196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.643590][T13196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.672841][T13196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.720328][T13196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.750874][T13196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.774277][T13196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.806752][T13196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.836634][T13196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.875694][T13196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.906785][T13196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.926694][T13196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.948159][T13196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.008983][T13196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.027050][T13196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.046027][T13196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.065103][T13196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.337007][ T7720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.344885][ T7720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.361301][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 437.472725][ T7714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.556611][ T7714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.401161][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.407841][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.606308][T13553] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1612'. [ 444.786030][T13624] openvswitch: netlink: Flow key attribute not present in set flow. [ 445.410034][ T7713] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.706814][ T7713] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.931643][ T7713] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.116770][ T7713] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.276322][ T54] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 446.357940][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 446.368872][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 446.450099][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 446.487292][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 446.495363][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 446.505007][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 446.533865][ T7713] bridge_slave_1: left allmulticast mode [ 446.545542][ T7713] bridge_slave_1: left promiscuous mode [ 446.551930][ T7713] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.566349][ T7713] bridge_slave_0: left allmulticast mode [ 446.572958][ T7713] bridge_slave_0: left promiscuous mode [ 446.600567][ T7713] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.766048][ T5848] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 447.806726][ T7713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.852847][ T7713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.421329][ T7713] bond0 (unregistering): Released all slaves [ 448.561828][ T5848] Bluetooth: hci3: command tx timeout [ 448.590765][ T7713] HSR: left promiscuous mode [ 448.605186][ T5848] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 449.822105][T13655] chnl_net:caif_netlink_parms(): no params data found [ 450.641313][ T5848] Bluetooth: hci3: command tx timeout [ 450.782011][T13655] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.828185][T13655] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.835451][T13655] bridge_slave_0: entered allmulticast mode [ 450.914625][T13655] bridge_slave_0: entered promiscuous mode [ 450.956237][T13655] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.959288][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1656'. [ 450.970715][T13655] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.006103][T13655] bridge_slave_1: entered allmulticast mode [ 451.032936][T13655] bridge_slave_1: entered promiscuous mode [ 451.116180][ T7713] hsr_slave_0: left promiscuous mode [ 451.165932][ T7713] hsr_slave_1: left promiscuous mode [ 451.191412][ T7713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.213016][ T7713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.285356][ T7713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.295959][ T7713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.456962][ T7713] veth1_macvtap: left promiscuous mode [ 451.476661][ T7713] veth0_macvtap: left promiscuous mode [ 451.482330][ T7713] veth1_vlan: left promiscuous mode [ 451.516990][ T7713] veth0_vlan: left promiscuous mode [ 452.324268][ T5848] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 452.735158][ T5848] Bluetooth: hci3: command tx timeout [ 453.701078][T13846] Process accounting resumed [ 454.113183][T13744] Process accounting resumed [ 454.528546][ T7713] team0 (unregistering): Port device team_slave_1 removed [ 454.731661][ T7713] team0 (unregistering): Port device team_slave_0 removed [ 454.801625][ T5848] Bluetooth: hci3: command tx timeout [ 456.292621][T13655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.304784][T13655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.363803][T13655] team0: Port device team_slave_0 added [ 456.389875][T13655] team0: Port device team_slave_1 added [ 456.456310][T13655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.464601][T13655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.492493][T13655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.505503][T13655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.513028][T13655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.540066][T13655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.819045][T13655] hsr_slave_0: entered promiscuous mode [ 456.856497][T13655] hsr_slave_1: entered promiscuous mode [ 456.875425][T13655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.912860][T13655] Cannot create hsr debugfs directory [ 459.021130][ T5848] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 459.136750][T13655] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 459.161093][T13655] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 459.204619][T13655] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 459.259698][T13655] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 459.412468][T13942] delete_channel: no stack [ 459.462901][T13942] unsupported nlmsg_type 40 [ 459.778244][T13655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.919413][T13655] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.983862][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.991034][ T7724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.137768][ T7724] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.144981][ T7724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.556452][T13655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.653601][T13655] veth0_vlan: entered promiscuous mode [ 460.674138][T13655] veth1_vlan: entered promiscuous mode [ 460.745761][T13655] veth0_macvtap: entered promiscuous mode [ 460.781079][T13655] veth1_macvtap: entered promiscuous mode [ 460.827067][T13655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.846790][T13655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.868512][T13655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.906788][T13655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.926751][T13655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.946716][T13655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.966792][T13655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.979225][T13655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.999327][T13655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.026184][T13655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.044223][T13655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.055344][T13655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.066424][T13655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.076644][T13655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.094193][T13655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.105319][T13655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.122873][T13655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.143465][T13655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.163150][T13655] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.172828][T13655] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.189005][T13655] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.209389][T13655] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.349869][ T7727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.367436][ T7727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.434594][T12602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.451906][T12602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.631899][T14020] FAULT_INJECTION: forcing a failure. [ 461.631899][T14020] name failslab, interval 1, probability 0, space 0, times 0 [ 461.696422][T14020] CPU: 0 UID: 0 PID: 14020 Comm: syz.3.1632 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 461.707270][T14020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 461.717360][T14020] Call Trace: [ 461.720668][T14020] [ 461.723631][T14020] dump_stack_lvl+0x16c/0x1f0 [ 461.728351][T14020] should_fail_ex+0x497/0x5b0 [ 461.733066][T14020] ? fs_reclaim_acquire+0xae/0x150 [ 461.738230][T14020] should_failslab+0xc2/0x120 [ 461.742952][T14020] kmem_cache_alloc_node_noprof+0x71/0x310 [ 461.748812][T14020] ? __alloc_skb+0x2b3/0x380 [ 461.753448][T14020] __alloc_skb+0x2b3/0x380 [ 461.757908][T14020] ? __pfx___alloc_skb+0x10/0x10 [ 461.762884][T14020] ? __pfx_mark_lock+0x10/0x10 [ 461.767697][T14020] ? __pfx___lock_acquire+0x10/0x10 [ 461.772943][T14020] ? __pfx_aa_file_perm+0x10/0x10 [ 461.778009][T14020] vhci_write+0xc1/0x470 [ 461.782297][T14020] do_iter_readv_writev+0x532/0x7f0 [ 461.787547][T14020] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 461.793320][T14020] ? bpf_lsm_file_permission+0x9/0x10 [ 461.798730][T14020] ? security_file_permission+0x71/0x210 [ 461.804410][T14020] vfs_writev+0x363/0xdd0 [ 461.808780][T14020] ? find_held_lock+0x2d/0x110 [ 461.813613][T14020] ? __pfx_vfs_writev+0x10/0x10 [ 461.818523][T14020] ? find_held_lock+0x2d/0x110 [ 461.823331][T14020] ? __pfx_lock_release+0x10/0x10 [ 461.828397][T14020] ? trace_lock_acquire+0x14a/0x1d0 [ 461.833665][T14020] ? __fget_files+0x244/0x3f0 [ 461.838399][T14020] ? do_writev+0x137/0x370 [ 461.842872][T14020] do_writev+0x137/0x370 [ 461.847164][T14020] ? __pfx_do_writev+0x10/0x10 [ 461.851970][T14020] do_syscall_64+0xcd/0x250 [ 461.856510][T14020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.862449][T14020] RIP: 0033:0x7fb29b97e719 [ 461.866893][T14020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.886536][T14020] RSP: 002b:00007fb29c6bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 461.894989][T14020] RAX: ffffffffffffffda RBX: 00007fb29bb35f80 RCX: 00007fb29b97e719 [ 461.902999][T14020] RDX: 0000000000000004 RSI: 0000000020000080 RDI: 00000000000000ca [ 461.911010][T14020] RBP: 00007fb29c6bb090 R08: 0000000000000000 R09: 0000000000000000 [ 461.919013][T14020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.927034][T14020] R13: 0000000000000001 R14: 00007fb29bb35f80 R15: 00007ffe17090738 [ 461.935058][T14020] [ 462.375301][ T5848] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 462.881312][T14066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1708'. [ 462.925187][T14066] HfR: entered promiscuous mode [ 463.205525][T14085] FAULT_INJECTION: forcing a failure. [ 463.205525][T14085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.268283][T14085] CPU: 1 UID: 0 PID: 14085 Comm: syz.4.1716 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 463.279118][T14085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 463.289225][T14085] Call Trace: [ 463.292524][T14085] [ 463.295471][T14085] dump_stack_lvl+0x16c/0x1f0 [ 463.300181][T14085] should_fail_ex+0x497/0x5b0 [ 463.304888][T14085] _copy_from_iter+0x4a5/0x1400 [ 463.309780][T14085] ? __pfx__copy_from_iter+0x10/0x10 [ 463.315098][T14085] ? __virt_addr_valid+0x1a4/0x590 [ 463.320256][T14085] ? __virt_addr_valid+0x5e/0x590 [ 463.325317][T14085] ? __phys_addr_symbol+0x30/0x80 [ 463.330380][T14085] ? __check_object_size+0x488/0x710 [ 463.335707][T14085] vhci_write+0x153/0x470 [ 463.340075][T14085] do_iter_readv_writev+0x532/0x7f0 [ 463.345325][T14085] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 463.351096][T14085] ? bpf_lsm_file_permission+0x9/0x10 [ 463.356520][T14085] ? security_file_permission+0x71/0x210 [ 463.362200][T14085] vfs_writev+0x363/0xdd0 [ 463.366653][T14085] ? find_held_lock+0x2d/0x110 [ 463.371464][T14085] ? __pfx_vfs_writev+0x10/0x10 [ 463.376355][T14085] ? find_held_lock+0x2d/0x110 [ 463.381185][T14085] ? __pfx_lock_release+0x10/0x10 [ 463.386240][T14085] ? trace_lock_acquire+0x14a/0x1d0 [ 463.391464][T14085] ? __fget_files+0x244/0x3f0 [ 463.396159][T14085] ? do_writev+0x137/0x370 [ 463.400582][T14085] do_writev+0x137/0x370 [ 463.404916][T14085] ? __pfx_do_writev+0x10/0x10 [ 463.409689][T14085] do_syscall_64+0xcd/0x250 [ 463.414200][T14085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.420108][T14085] RIP: 0033:0x7f9880f7e719 [ 463.424523][T14085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.444138][T14085] RSP: 002b:00007f9881dda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 463.452559][T14085] RAX: ffffffffffffffda RBX: 00007f9881135f80 RCX: 00007f9880f7e719 [ 463.460539][T14085] RDX: 0000000000000004 RSI: 0000000020000080 RDI: 00000000000000ca [ 463.468511][T14085] RBP: 00007f9881dda090 R08: 0000000000000000 R09: 0000000000000000 [ 463.476485][T14085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.484816][T14085] R13: 0000000000000001 R14: 00007f9881135f80 R15: 00007ffc03a6ff78 [ 463.492808][T14085] [ 463.847322][ T5848] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 465.218468][T14155] FAULT_INJECTION: forcing a failure. [ 465.218468][T14155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.218554][ T5848] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 465.260794][T14155] CPU: 1 UID: 0 PID: 14155 Comm: syz.6.1727 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 465.271627][T14155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 465.281720][T14155] Call Trace: [ 465.285024][T14155] [ 465.287982][T14155] dump_stack_lvl+0x16c/0x1f0 [ 465.292698][T14155] should_fail_ex+0x497/0x5b0 [ 465.297422][T14155] _copy_to_user+0x32/0xd0 [ 465.301888][T14155] simple_read_from_buffer+0xd0/0x160 [ 465.307306][T14155] proc_fail_nth_read+0x198/0x270 [ 465.312366][T14155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 465.317952][T14155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 465.323537][T14155] vfs_read+0x1df/0xbe0 [ 465.327731][T14155] ? __fget_files+0x23a/0x3f0 [ 465.332442][T14155] ? fdget_pos+0x24c/0x360 [ 465.336889][T14155] ? __pfx_lock_release+0x10/0x10 [ 465.341929][T14155] ? trace_lock_acquire+0x14a/0x1d0 [ 465.347135][T14155] ? __pfx_vfs_read+0x10/0x10 [ 465.351814][T14155] ? __pfx___mutex_lock+0x10/0x10 [ 465.356869][T14155] ? __fget_files+0x244/0x3f0 [ 465.361574][T14155] ksys_read+0x12f/0x260 [ 465.365823][T14155] ? __pfx_ksys_read+0x10/0x10 [ 465.370606][T14155] do_syscall_64+0xcd/0x250 [ 465.375121][T14155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.381027][T14155] RIP: 0033:0x7f8821f7d15c [ 465.385444][T14155] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 465.405065][T14155] RSP: 002b:00007f8822cc9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 465.413486][T14155] RAX: ffffffffffffffda RBX: 00007f8822135f80 RCX: 00007f8821f7d15c [ 465.421459][T14155] RDX: 000000000000000f RSI: 00007f8822cc90a0 RDI: 0000000000000003 [ 465.429435][T14155] RBP: 00007f8822cc9090 R08: 0000000000000000 R09: 0000000000000000 [ 465.437409][T14155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.445380][T14155] R13: 0000000000000001 R14: 00007f8822135f80 R15: 00007fff16c371e8 [ 465.453369][T14155] [ 465.525694][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1729'. [ 465.928455][T14173] netlink: 'syz.4.1733': attribute type 1 has an invalid length. [ 466.062234][T14183] cgroup: fork rejected by pids controller in /syz2 [ 476.413224][T14484] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1756'. [ 476.771809][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'. [ 476.803685][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'. [ 480.285670][T14595] nbd: must specify at least one socket [ 484.926032][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 484.942519][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 484.952824][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 484.963433][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 484.971525][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 484.979932][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 485.908698][ T7720] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.156504][ T7720] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.619632][T14633] chnl_net:caif_netlink_parms(): no params data found [ 486.752432][T14633] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.762327][T14633] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.782810][T14633] bridge_slave_0: entered allmulticast mode [ 486.793747][T14633] bridge_slave_0: entered promiscuous mode [ 486.811040][T14633] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.823432][T14633] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.835914][T14633] bridge_slave_1: entered allmulticast mode [ 486.848282][T14633] bridge_slave_1: entered promiscuous mode [ 486.902911][T14633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.923643][T14633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.978548][T14633] team0: Port device team_slave_0 added [ 486.998542][T14633] team0: Port device team_slave_1 added [ 487.043241][T14633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.050753][ T54] Bluetooth: hci3: command tx timeout [ 487.065053][T14633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.102537][T14633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.128462][T14633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.137047][T14633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.172351][T14633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.255832][T14633] hsr_slave_0: entered promiscuous mode [ 487.263792][T14633] hsr_slave_1: entered promiscuous mode [ 487.280197][T14633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.294945][T14633] Cannot create hsr debugfs directory [ 488.188906][ T7720] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.126882][ T54] Bluetooth: hci3: command tx timeout [ 491.196754][ T54] Bluetooth: hci3: command tx timeout [ 493.276879][ T54] Bluetooth: hci3: command tx timeout [ 493.611442][T14736] netlink: 'syz.2.1782': attribute type 11 has an invalid length. [ 493.637426][T14736] netlink: 'syz.2.1782': attribute type 11 has an invalid length. [ 493.653178][ T7720] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.851509][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.866648][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.226656][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 502.248385][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 502.263253][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 502.275287][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 502.283164][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 502.291423][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 502.304225][ T7720] bridge_slave_1: left allmulticast mode [ 502.340122][ T7720] bridge_slave_1: left promiscuous mode [ 502.346751][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.359128][ T7720] bridge_slave_0: left allmulticast mode [ 502.364966][ T7720] bridge_slave_0: left promiscuous mode [ 502.371689][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.091404][ T7720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.113678][ T7720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.135412][ T7720] bond0 (unregistering): Released all slaves [ 503.996877][T14633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 504.317116][ T54] Bluetooth: hci4: command tx timeout [ 506.396841][ T54] Bluetooth: hci4: command tx timeout [ 508.292705][T14203] syz.2.1736 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 508.406638][T14203] CPU: 1 UID: 0 PID: 14203 Comm: syz.2.1736 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 508.417468][T14203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 508.427520][T14203] Call Trace: [ 508.430785][T14203] [ 508.433705][T14203] dump_stack_lvl+0x16c/0x1f0 [ 508.438389][T14203] dump_header+0x101/0x900 [ 508.442817][T14203] oom_kill_process+0x270/0xa60 [ 508.447668][T14203] out_of_memory+0x351/0x1700 [ 508.452344][T14203] ? __pfx_out_of_memory+0x10/0x10 [ 508.457460][T14203] ? rcu_read_unlock+0x17/0x60 [ 508.462262][T14203] ? find_held_lock+0x2d/0x110 [ 508.467063][T14203] mem_cgroup_out_of_memory+0x207/0x270 [ 508.472647][T14203] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 508.478713][T14203] ? do_raw_spin_unlock+0x172/0x230 [ 508.483910][T14203] try_charge_memcg+0x5b9/0xaf0 [ 508.488774][T14203] ? __pfx_try_charge_memcg+0x10/0x10 [ 508.494156][T14203] ? get_mem_cgroup_from_mm+0x7f/0x5f0 [ 508.496943][ T54] Bluetooth: hci4: command tx timeout [ 508.499612][T14203] ? get_mem_cgroup_from_mm+0x129/0x5f0 [ 508.510525][T14203] __mem_cgroup_charge+0x9b/0x280 [ 508.515567][T14203] shmem_alloc_and_add_folio+0x507/0xc00 [ 508.521218][T14203] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 508.527382][T14203] ? shmem_allowable_huge_orders+0xcd/0x3f0 [ 508.533279][T14203] ? mark_lock+0xb5/0xc60 [ 508.537628][T14203] shmem_get_folio_gfp+0x689/0x1530 [ 508.542850][T14203] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 508.548512][T14203] ? inode_update_timestamps+0x165/0x580 [ 508.554171][T14203] shmem_write_begin+0x161/0x300 [ 508.559133][T14203] ? __pfx_shmem_write_begin+0x10/0x10 [ 508.564608][T14203] ? lockdep_hardirqs_on+0x7c/0x110 [ 508.569841][T14203] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 508.576695][T14203] ? ktime_get_coarse_real_ts64+0x147/0x200 [ 508.582601][T14203] generic_perform_write+0x2ba/0x920 [ 508.587902][T14203] ? __pfx_generic_perform_write+0x10/0x10 [ 508.593719][T14203] ? __mark_inode_dirty+0x2ae/0xe60 [ 508.598935][T14203] ? generic_update_time+0xcf/0xf0 [ 508.604061][T14203] ? mnt_put_write_access_file+0x45/0xf0 [ 508.609715][T14203] shmem_file_write_iter+0x10e/0x140 [ 508.615016][T14203] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 508.620833][T14203] __kernel_write_iter+0x318/0xa80 [ 508.625981][T14203] ? __pfx___kernel_write_iter+0x10/0x10 [ 508.631616][T14203] ? get_dump_page+0x15c/0x220 [ 508.636403][T14203] dump_user_range+0x389/0x8a0 [ 508.641185][T14203] ? __pfx_dump_user_range+0x10/0x10 [ 508.646482][T14203] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 508.652687][T14203] ? __pfx_writenote+0x10/0x10 [ 508.657470][T14203] elf_core_dump+0x2766/0x3840 [ 508.662259][T14203] ? __pfx_elf_core_dump+0x10/0x10 [ 508.667383][T14203] ? try_to_wake_up+0x5dd/0x14f0 [ 508.672332][T14203] ? __pfx_lock_release+0x10/0x10 [ 508.677382][T14203] ? rwsem_wake.isra.0+0xbe/0x120 [ 508.682427][T14203] ? rcu_is_watching+0x12/0xc0 [ 508.687198][T14203] ? trace_lock_acquire+0x14a/0x1d0 [ 508.692405][T14203] ? get_signal+0x237c/0x26d0 [ 508.697094][T14203] ? do_coredump+0x2c42/0x4160 [ 508.701869][T14203] do_coredump+0x2c42/0x4160 [ 508.706477][T14203] ? __pfx_do_coredump+0x10/0x10 [ 508.711424][T14203] ? kmem_cache_free+0x152/0x4b0 [ 508.716371][T14203] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 508.722280][T14203] ? asm_exc_page_fault+0x26/0x30 [ 508.727366][T14203] get_signal+0x237c/0x26d0 [ 508.731884][T14203] ? __pfx_get_signal+0x10/0x10 [ 508.736738][T14203] ? rcu_is_watching+0x12/0xc0 [ 508.741520][T14203] ? trace_irq_disable.constprop.0+0xe4/0x130 [ 508.747607][T14203] arch_do_signal_or_restart+0x90/0x7e0 [ 508.753167][T14203] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 508.759342][T14203] ? do_user_addr_fault+0x419/0x13f0 [ 508.764647][T14203] irqentry_exit_to_user_mode+0x13f/0x280 [ 508.770382][T14203] asm_exc_page_fault+0x26/0x30 [ 508.775245][T14203] RIP: 0033:0x0 [ 508.778707][T14203] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 508.786067][T14203] RSP: 002b:000000000000000e EFLAGS: 00010217 [ 508.792136][T14203] RAX: 0000000000000000 RBX: 00007fe5a2736058 RCX: 00007fe5a257e719 [ 508.800113][T14203] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000100 [ 508.808088][T14203] RBP: 00007fe5a25f139e R08: 0000000000000005 R09: 0000000000000000 [ 508.816066][T14203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.824040][T14203] R13: 0000000000000000 R14: 00007fe5a2736058 R15: 00007ffc66698f08 [ 508.832031][T14203] [ 508.849636][ T5904] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 508.862428][ T5904] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 508.870860][ T5904] CPU: 1 UID: 0 PID: 5904 Comm: kworker/1:5 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 508.881637][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 508.891691][ T5904] Workqueue: events swap_reclaim_work [ 508.897074][ T5904] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x1c0 [ 508.904017][ T5904] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 fe 48 83 c7 08 48 83 ec 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 19 01 00 00 48 89 f2 48 8b 4e 08 48 b8 00 00 00 [ 508.923635][ T5904] RSP: 0018:ffffc90004437c30 EFLAGS: 00010202 [ 508.929708][ T5904] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88814e06a878 [ 508.937674][ T5904] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000008 [ 508.945642][ T5904] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 508.953614][ T5904] R10: 0000000000000001 R11: 000000000000004f R12: dffffc0000000000 [ 508.961589][ T5904] R13: ffffffffffffffb8 R14: ffff88814e06a800 R15: ffffc90003521000 [ 508.969560][ T5904] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 508.978489][ T5904] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 508.985067][ T5904] CR2: 00005555686b3808 CR3: 000000004cdce000 CR4: 00000000003526f0 [ 508.993034][ T5904] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 509.001000][ T5904] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 509.008967][ T5904] Call Trace: [ 509.012237][ T5904] [ 509.015162][ T5904] ? die_addr+0x3b/0xa0 [ 509.019321][ T5904] ? exc_general_protection+0x155/0x230 [ 509.024878][ T5904] ? asm_exc_general_protection+0x26/0x30 [ 509.030615][ T5904] ? __list_del_entry_valid_or_report+0x20/0x1c0 [ 509.036950][ T5904] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 509.042331][ T5904] swap_reclaim_full_clusters+0x109/0x460 [ 509.048071][ T5904] swap_reclaim_work+0x2e/0x40 [ 509.052839][ T5904] process_one_work+0x958/0x1b30 [ 509.057792][ T5904] ? __pfx_br_fdb_cleanup+0x10/0x10 [ 509.062996][ T5904] ? __pfx_process_one_work+0x10/0x10 [ 509.068376][ T5904] ? assign_work+0x1a0/0x250 [ 509.072973][ T5904] worker_thread+0x6c8/0xf00 [ 509.077576][ T5904] ? __pfx_worker_thread+0x10/0x10 [ 509.082704][ T5904] kthread+0x2c1/0x3a0 [ 509.086861][ T5904] ? _raw_spin_unlock_irq+0x23/0x50 [ 509.092068][ T5904] ? __pfx_kthread+0x10/0x10 [ 509.096684][ T5904] ret_from_fork+0x45/0x80 [ 509.101118][ T5904] ? __pfx_kthread+0x10/0x10 [ 509.105706][ T5904] ret_from_fork_asm+0x1a/0x30 [ 509.110495][ T5904] [ 509.113519][ T5904] Modules linked in: [ 509.117637][ T5904] ---[ end trace 0000000000000000 ]--- [ 509.123109][ T5904] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x1c0 [ 509.130217][ T5904] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 fe 48 83 c7 08 48 83 ec 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 19 01 00 00 48 89 f2 48 8b 4e 08 48 b8 00 00 00 [ 509.149902][ T5904] RSP: 0018:ffffc90004437c30 EFLAGS: 00010202 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 509.156007][ T5904] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88814e06a878 [ 509.164055][ T5904] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000008 [ 509.172089][ T5904] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 509.180132][ T5904] R10: 0000000000000001 R11: 000000000000004f R12: dffffc0000000000 [ 509.188201][ T5904] R13: ffffffffffffffb8 R14: ffff88814e06a800 R15: ffffc90003521000 [ 509.196201][ T5904] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 509.205355][ T5904] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.212086][ T5904] CR2: 00005555686b3808 CR3: 000000004cdce000 CR4: 00000000003526f0 [ 509.220223][ T5904] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 509.228407][ T5904] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 509.236403][ T5904] Kernel panic - not syncing: Fatal exception [ 509.242735][ T5904] Kernel Offset: disabled [ 509.247049][ T5904] Rebooting in 86400 seconds..