last executing test programs: 51.24017413s ago: executing program 3 (id=2494): socket(0x15, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D1\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) semtimedop$auto(0xfffffffe, &(0x7f00000001c0)={0x8, 0x7, 0x36ec}, 0x1f4, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r3, 0xc0045520, r2) getsockopt$auto_SO_MEMINFO(r1, 0x9, 0x37, &(0x7f0000000000)='*.:\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x5) sendmsg$auto_MACSEC_CMD_DEL_RXSA(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r4, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) r5 = socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x111100, 0x0) kcmp$auto(0x1, 0x100000001, 0x1, 0x4, 0x24000) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto(r5, 0x1, r6) 50.135445974s ago: executing program 3 (id=2497): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300), 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) acct$auto(&(0x7f0000000040)='/dev/dri/card1\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) timerfd_gettime$auto(r2, &(0x7f0000000100)={{0x100, 0x3520}, {0x100, 0xbc4}}) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r6 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) read$auto_objects_fops_(r6, &(0x7f00000003c0)=""/211, 0xd3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) socket(0x10, 0xa, 0xfffffffd) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) madvise$auto(0xffff, 0xf, 0x8001) 48.976488194s ago: executing program 3 (id=2500): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300), 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) acct$auto(&(0x7f0000000040)='/dev/dri/card1\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) timerfd_gettime$auto(r2, &(0x7f0000000100)={{0x100, 0x3520}, {0x100, 0xbc4}}) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r6 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) read$auto_objects_fops_(r6, &(0x7f00000003c0)=""/211, 0xd3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) socket(0x10, 0xa, 0xfffffffd) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) madvise$auto(0xffff, 0xf, 0x8001) 47.619505027s ago: executing program 3 (id=2505): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300), 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) acct$auto(&(0x7f0000000040)='/dev/dri/card1\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) timerfd_gettime$auto(r2, &(0x7f0000000100)={{0x100, 0x3520}, {0x100, 0xbc4}}) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r6 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) read$auto_objects_fops_(r6, &(0x7f00000003c0)=""/211, 0xd3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) socket(0x10, 0xa, 0xfffffffd) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) madvise$auto(0xffff, 0xf, 0x8001) 46.336310578s ago: executing program 3 (id=2508): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300), 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) acct$auto(&(0x7f0000000040)='/dev/dri/card1\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) timerfd_gettime$auto(r2, &(0x7f0000000100)={{0x100, 0x3520}, {0x100, 0xbc4}}) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r6 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) read$auto_objects_fops_(r6, &(0x7f00000003c0)=""/211, 0xd3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) socket(0x10, 0xa, 0xfffffffd) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) madvise$auto(0xffff, 0xf, 0x8001) 44.751446137s ago: executing program 3 (id=2513): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2c, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0}) r5 = socket(0x1d, 0x2, 0x6) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r5, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fcdbdf251c0000006400018008000300f1ffffff1400020076657468305f746f5f62726964676500080003000600000008000100", @ANYRES32, @ANYBLOB="0800030000018000140002006970366772653000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="080003000400000008000100", @ANYRES32=r7, @ANYBLOB="20000180140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000300603ffec2f5d20615173f60fc9cb332af3e2344b64b"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r8, 0x0, 0x20) r9 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r9, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0xfffffffd) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\t\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000fedbdf251c00000018000180140002006e657464657673696d30000000000000"], 0x2c}}, 0x4000000) rmdir$auto(&(0x7f0000000000)='./cgroup/../file0\x00') 43.436462678s ago: executing program 0 (id=2518): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) acct$auto(&(0x7f0000000040)='/dev/dri/card1\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) timerfd_gettime$auto(r2, &(0x7f0000000100)={{0x100, 0x3520}, {0x100, 0xbc4}}) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r6 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) read$auto_objects_fops_(r6, &(0x7f00000003c0)=""/211, 0xd3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) socket(0x10, 0xa, 0xfffffffd) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) madvise$auto(0xffff, 0xf, 0x8001) 41.562100145s ago: executing program 0 (id=2522): socket(0x15, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D1\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) semtimedop$auto(0xfffffffe, &(0x7f00000001c0)={0x8, 0x7, 0x36ec}, 0x1f4, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r3, 0xc0045520, r2) getsockopt$auto_SO_MEMINFO(r1, 0x9, 0x37, &(0x7f0000000000)='*.:\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x5) sendmsg$auto_MACSEC_CMD_DEL_RXSA(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r4, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) kcmp$auto(0x1, 0x100000001, 0x1, 0x4, 0x24000) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) 40.896986201s ago: executing program 0 (id=2525): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x1, 0x7ff) ptrace$auto(0xc, r1, 0x6, 0x6) r2 = socket(0xa, 0x80803, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(r2, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x66) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x381020, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_flow(0x0, r4) sendmsg$auto_OVS_FLOW_CMD_NEW(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x850}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5o\x91p\xe6\x1eRN8\x99\x00\b\xaa\x1c\x00\x00\x00\x00c\x14\xaf\r\x94\x1a\xd3\xd3\x1d\xf8\xbebR\xddL\'\x03\xf1`\x9f5\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\x9d*\xd1\x14^\xbe\xa2\x00\x00\x00\x01\x00\x00\x00\x00\x00\xe8\xff\x00\x00\x00\x00\x00', 0xfdef, 0x500000000000) timerfd_gettime$auto(r3, &(0x7f0000000000)={{0x3, 0xc}, {0xe2, 0x5}}) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r0, 0x40085507, &(0x7f0000000180)={0x3, 0x1, 0x7fff}) 39.82154691s ago: executing program 0 (id=2527): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300), 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) acct$auto(&(0x7f0000000040)='/dev/dri/card1\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) timerfd_gettime$auto(r2, &(0x7f0000000100)={{0x100, 0x3520}, {0x100, 0xbc4}}) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r6 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) read$auto_objects_fops_(r6, &(0x7f00000003c0)=""/211, 0xd3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) socket(0x10, 0xa, 0xfffffffd) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) madvise$auto(0xffff, 0xf, 0x8001) 38.013986938s ago: executing program 0 (id=2530): socket(0x15, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D1\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) semtimedop$auto(0xfffffffe, &(0x7f00000001c0)={0x8, 0x7, 0x36ec}, 0x1f4, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r3, 0xc0045520, r2) getsockopt$auto_SO_MEMINFO(r1, 0x9, 0x37, &(0x7f0000000000)='*.:\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x5) sendmsg$auto_MACSEC_CMD_DEL_RXSA(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r4, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) r5 = socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x111100, 0x0) kcmp$auto(0x1, 0x100000001, 0x1, 0x4, 0x24000) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto(r5, 0x1, r6) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0x42, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) 36.769197516s ago: executing program 0 (id=2533): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2c, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0}) r5 = socket(0x1d, 0x2, 0x6) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r5, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fcdbdf251c0000006400018008000300f1ffffff1400020076657468305f746f5f62726964676500080003000600000008000100", @ANYRES32, @ANYBLOB="0800030000018000140002006970366772653000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="080003000400000008000100", @ANYRES32=r7, @ANYBLOB="20000180140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000300603ffec2f5d20615173f60fc9cb332af3e2344b64b"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r8, 0x0, 0x20) r9 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r9, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0xfffffffd) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010028bd7000fedbdf251c00000018000180140002006e657464657673696d30000000000000"], 0x2c}}, 0x4000000) rmdir$auto(&(0x7f0000000000)='./cgroup/../file0\x00') 35.082893006s ago: executing program 1 (id=2537): socket(0x25, 0x5, 0x1) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0xa4400, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4040ae79, &(0x7f0000000280)={0x4, 0x0, [{0x400, 0x5, 0x1}, {0xfffffffb, 0x0, 0x8}]}) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) mprotect$auto(0x0, 0x806121, 0x6) fcntl$auto(0x3, 0x4, 0xa553) setsockopt$auto(r3, 0x1, 0x1d, 0x0, 0x9) r4 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x5a1, 0x40, 0x10001, 0x7ffd}, "2900000000000700000000000000cf000000000000000000000000e700"}) close_range$auto(0x2, 0x8, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r2, 0x6, &(0x7f0000000000)={@siginfo_0_0={0xfffffffa, 0x9, 0x8, @_sigpoll={0x1, r2}}}, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) process_vm_readv$auto(r4, &(0x7f0000000380)={&(0x7f00000002c0)="c3fc98e4feb080d29851f56eb49bc8dc6a466cc5b494c39c7627e3d0e251a93b85dc9a6355c9fce39c64679ebfc00079b2f5751ad8137bcd23dc56cfc25433076fab59e54531b16e7addf1a9738ce23958505e35567d79507b5c5c9f327da073ae34c06021285b72182bad3b0903c5cbe59a036f41d121059d8eaaac237d4a98f116e45dff372233b4ebc46de3a9e5ddcc85d7de10e0effb408ab6c630ab022b6a3ca7091c7f1845ae04d0a1af8bd1e5d5f24b", 0x2}, 0x205, &(0x7f0000000440)={&(0x7f0000000200)="f50c18b271cd4c2f7446e068e2935d9106f9d1a0dd9fd2f5a6c160f0dc6b402bb6621690cd2e41dfea2996da67eaaaa87198951a90a171589ddc0aea672e525a8a1d9caab54d69a5c39fc55ef9b8c96bf3", 0x7f}, 0x2, 0x10004) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f00000000c0)=ANY=[@ANYBLOB="01f610c83193fbdefd9cb861a4479126cca24984b4bfe3303bf5b193f12a76f39af87e82e7b94365f2", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) 34.840388802s ago: executing program 1 (id=2539): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) acct$auto(&(0x7f0000000040)='/dev/dri/card1\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) timerfd_gettime$auto(r2, &(0x7f0000000100)={{0x100, 0x3520}, {0x100, 0xbc4}}) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r6 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) read$auto_objects_fops_(r6, &(0x7f00000003c0)=""/211, 0xd3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) socket(0x10, 0xa, 0xfffffffd) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) madvise$auto(0xffff, 0xf, 0x8001) 34.245955921s ago: executing program 1 (id=2541): socket(0x15, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D1\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) semtimedop$auto(0xfffffffe, &(0x7f00000001c0)={0x8, 0x7, 0x36ec}, 0x1f4, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r3, 0xc0045520, r2) getsockopt$auto_SO_MEMINFO(r1, 0x9, 0x37, &(0x7f0000000000)='*.:\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x5) sendmsg$auto_MACSEC_CMD_DEL_RXSA(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r4, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) r5 = socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x111100, 0x0) kcmp$auto(0x1, 0x100000001, 0x1, 0x4, 0x24000) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto(r5, 0x1, r6) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0x42, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) 33.850158986s ago: executing program 1 (id=2542): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300), 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) acct$auto(&(0x7f0000000040)='/dev/dri/card1\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) timerfd_gettime$auto(r2, &(0x7f0000000100)={{0x100, 0x3520}, {0x100, 0xbc4}}) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r6 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) read$auto_objects_fops_(r6, &(0x7f00000003c0)=""/211, 0xd3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) socket(0x10, 0xa, 0xfffffffd) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) madvise$auto(0xffff, 0xf, 0x8001) 33.108196258s ago: executing program 1 (id=2543): socket(0x15, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D1\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) semtimedop$auto(0xfffffffe, &(0x7f00000001c0)={0x8, 0x7, 0x36ec}, 0x1f4, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r3, 0xc0045520, r2) getsockopt$auto_SO_MEMINFO(r1, 0x9, 0x37, &(0x7f0000000000)='*.:\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x5) sendmsg$auto_MACSEC_CMD_DEL_RXSA(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r4, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x111100, 0x0) kcmp$auto(0x1, 0x100000001, 0x1, 0x4, 0x24000) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) 32.724378913s ago: executing program 1 (id=2544): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2c, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0}) r5 = socket(0x1d, 0x2, 0x6) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r5, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fcdbdf251c0000006400018008000300f1ffffff1400020076657468305f746f5f62726964676500080003000600000008000100", @ANYRES32, @ANYBLOB="0800030000018000140002006970366772653000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="080003000400000008000100", @ANYRES32=r7, @ANYBLOB="20000180140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000300603ffec2f5d20615173f60fc9cb332af3e2344b64b"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r8, 0x0, 0x20) r9 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r9, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0xfffffffd) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\t\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000fedbdf251c00000018000180140002006e657464657673696d30000000000000"], 0x2c}}, 0x4000000) rmdir$auto(&(0x7f0000000000)='./cgroup/../file0\x00') 21.677396839s ago: executing program 32 (id=2533): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2c, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0}) r5 = socket(0x1d, 0x2, 0x6) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r5, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fcdbdf251c0000006400018008000300f1ffffff1400020076657468305f746f5f62726964676500080003000600000008000100", @ANYRES32, @ANYBLOB="0800030000018000140002006970366772653000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="080003000400000008000100", @ANYRES32=r7, @ANYBLOB="20000180140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000300603ffec2f5d20615173f60fc9cb332af3e2344b64b"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r8, 0x0, 0x20) r9 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r9, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0xfffffffd) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010028bd7000fedbdf251c00000018000180140002006e657464657673696d30000000000000"], 0x2c}}, 0x4000000) rmdir$auto(&(0x7f0000000000)='./cgroup/../file0\x00') 18.095641082s ago: executing program 2 (id=2576): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300), 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) acct$auto(&(0x7f0000000040)='/dev/dri/card1\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) timerfd_gettime$auto(r2, 0x0) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r6 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) read$auto_objects_fops_(r6, &(0x7f00000003c0)=""/211, 0xd3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) socket(0x10, 0xa, 0xfffffffd) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) madvise$auto(0xffff, 0xf, 0x8001) 17.630049399s ago: executing program 33 (id=2544): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2c, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0}) r5 = socket(0x1d, 0x2, 0x6) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r5, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fcdbdf251c0000006400018008000300f1ffffff1400020076657468305f746f5f62726964676500080003000600000008000100", @ANYRES32, @ANYBLOB="0800030000018000140002006970366772653000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="080003000400000008000100", @ANYRES32=r7, @ANYBLOB="20000180140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000300603ffec2f5d20615173f60fc9cb332af3e2344b64b"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r8, 0x0, 0x20) r9 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r9, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0xfffffffd) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\t\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000fedbdf251c00000018000180140002006e657464657673696d30000000000000"], 0x2c}}, 0x4000000) rmdir$auto(&(0x7f0000000000)='./cgroup/../file0\x00') 17.614997699s ago: executing program 2 (id=2578): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x1, 0x7ff) ptrace$auto(0xc, r1, 0x6, 0x6) r2 = socket(0xa, 0x80803, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(r2, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x66) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x381020, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), r4) sendmsg$auto_OVS_FLOW_CMD_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x850}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5o\x91p\xe6\x1eRN8\x99\x00\b\xaa\x1c\x00\x00\x00\x00c\x14\xaf\r\x94\x1a\xd3\xd3\x1d\xf8\xbebR\xddL\'\x03\xf1`\x9f5\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\x9d*\xd1\x14^\xbe\xa2\x00\x00\x00\x01\x00\x00\x00\x00\x00\xe8\xff\x00\x00\x00\x00\x00', 0xfdef, 0x500000000000) timerfd_gettime$auto(r3, &(0x7f0000000000)={{0x3, 0xc}, {0xe2, 0x5}}) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r0, 0x40085507, &(0x7f0000000180)={0x3, 0x1, 0x7fff}) 16.638071216s ago: executing program 2 (id=2579): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300), 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) acct$auto(0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) timerfd_gettime$auto(r2, &(0x7f0000000100)={{0x100, 0x3520}, {0x100, 0xbc4}}) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r6 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) read$auto_objects_fops_(r6, &(0x7f00000003c0)=""/211, 0xd3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) socket(0x10, 0xa, 0xfffffffd) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) madvise$auto(0xffff, 0xf, 0x8001) 16.051841675s ago: executing program 2 (id=2580): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300), 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) acct$auto(0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) timerfd_gettime$auto(r2, &(0x7f0000000100)={{0x100, 0x3520}, {0x100, 0xbc4}}) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r6 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) read$auto_objects_fops_(r6, &(0x7f00000003c0)=""/211, 0xd3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, r3, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) socket(0x10, 0xa, 0xfffffffd) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) madvise$auto(0xffff, 0xf, 0x8001) 15.612606648s ago: executing program 2 (id=2581): socket(0x15, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D1\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) semtimedop$auto(0xfffffffe, &(0x7f00000001c0)={0x8, 0x7, 0x36ec}, 0x1f4, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r3, 0xc0045520, r2) getsockopt$auto_SO_MEMINFO(r1, 0x9, 0x37, &(0x7f0000000000)='*.:\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x5) sendmsg$auto_MACSEC_CMD_DEL_RXSA(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket(0xa, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x111100, 0x0) kcmp$auto(0x1, 0x100000001, 0x1, 0x4, 0x24000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto(0xffffffffffffffff, 0x1, r4) 15.36534034s ago: executing program 2 (id=2582): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2c, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0}) r5 = socket(0x1d, 0x2, 0x6) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r5, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fcdbdf251c0000006400018008000300f1ffffff1400020076657468305f746f5f62726964676500080003000600000008000100", @ANYRES32, @ANYBLOB="0800030000018000140002006970366772653000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="080003000400000008000100", @ANYRES32=r7, @ANYBLOB="20000180140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000300603ffec2f5d20615173f60fc9cb332af3e2344b64b"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r8, 0x0, 0x20) r9 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r9, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0xfffffffd) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000fedbdf251c00000018000180140002006e657464657673696d30000000000000"], 0x2c}}, 0x4000000) rmdir$auto(0x0) 0s ago: executing program 34 (id=2582): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2c, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0}) r5 = socket(0x1d, 0x2, 0x6) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r5, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fcdbdf251c0000006400018008000300f1ffffff1400020076657468305f746f5f62726964676500080003000600000008000100", @ANYRES32, @ANYBLOB="0800030000018000140002006970366772653000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="080003000400000008000100", @ANYRES32=r7, @ANYBLOB="20000180140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000300603ffec2f5d20615173f60fc9cb332af3e2344b64b"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r8, 0x0, 0x20) r9 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r9, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0xfffffffd) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000fedbdf251c00000018000180140002006e657464657673696d30000000000000"], 0x2c}}, 0x4000000) rmdir$auto(0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. [ 90.418261][ T5612] cgroup: Unknown subsys name 'net' [ 90.528759][ T5612] cgroup: Unknown subsys name 'cpuset' [ 90.537881][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.198480][ T9] cfg80211: failed to load regulatory.db [ 92.394639][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.353005][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.362366][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.372050][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.381734][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.391375][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.415321][ T4941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.439556][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.448843][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.459330][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.468602][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.481427][ T4941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.500300][ T4941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.509980][ T4941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.519520][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.530753][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.576793][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.587612][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.598930][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.607824][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.616857][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.175464][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.183373][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.190747][ T5629] bridge_slave_0: entered allmulticast mode [ 96.199222][ T5629] bridge_slave_0: entered promiscuous mode [ 96.238756][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.245974][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.253370][ T5629] bridge_slave_1: entered allmulticast mode [ 96.260884][ T5629] bridge_slave_1: entered promiscuous mode [ 96.367420][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.377146][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.384495][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.392297][ T5632] bridge_slave_0: entered allmulticast mode [ 96.399720][ T5632] bridge_slave_0: entered promiscuous mode [ 96.407227][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.414379][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.421639][ T5636] bridge_slave_0: entered allmulticast mode [ 96.428812][ T5636] bridge_slave_0: entered promiscuous mode [ 96.445167][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.454672][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.462062][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.469774][ T5632] bridge_slave_1: entered allmulticast mode [ 96.476912][ T5632] bridge_slave_1: entered promiscuous mode [ 96.483986][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.492266][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.499857][ T5636] bridge_slave_1: entered allmulticast mode [ 96.507064][ T5636] bridge_slave_1: entered promiscuous mode [ 96.516113][ T5634] Bluetooth: hci0: command tx timeout [ 96.577332][ T5629] team0: Port device team_slave_0 added [ 96.595821][ T5634] Bluetooth: hci2: command tx timeout [ 96.602190][ T5638] Bluetooth: hci1: command tx timeout [ 96.623719][ T5629] team0: Port device team_slave_1 added [ 96.632416][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.645647][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.675478][ T5638] Bluetooth: hci3: command tx timeout [ 96.690637][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.702220][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.711596][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.719254][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.727003][ T5639] bridge_slave_0: entered allmulticast mode [ 96.734120][ T5639] bridge_slave_0: entered promiscuous mode [ 96.742699][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.749860][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.775945][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.808842][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.816179][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.823477][ T5639] bridge_slave_1: entered allmulticast mode [ 96.830928][ T5639] bridge_slave_1: entered promiscuous mode [ 96.838851][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.846228][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.872381][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.937036][ T5632] team0: Port device team_slave_0 added [ 96.944614][ T5636] team0: Port device team_slave_0 added [ 96.953576][ T5636] team0: Port device team_slave_1 added [ 96.963601][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.975363][ T5632] team0: Port device team_slave_1 added [ 97.004179][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.033008][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.040658][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.066816][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.114572][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.121920][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.148198][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.170465][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.177744][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.204023][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.223317][ T5629] hsr_slave_0: entered promiscuous mode [ 97.230104][ T5629] hsr_slave_1: entered promiscuous mode [ 97.249629][ T5639] team0: Port device team_slave_0 added [ 97.256223][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.263554][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.289820][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.306075][ T5639] team0: Port device team_slave_1 added [ 97.391997][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.399412][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.425365][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.472503][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.479879][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.506137][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.523341][ T5636] hsr_slave_0: entered promiscuous mode [ 97.530245][ T5636] hsr_slave_1: entered promiscuous mode [ 97.536681][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 97.542483][ T5636] Cannot create hsr debugfs directory [ 97.562531][ T5632] hsr_slave_0: entered promiscuous mode [ 97.569550][ T5632] hsr_slave_1: entered promiscuous mode [ 97.576145][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 97.581929][ T5632] Cannot create hsr debugfs directory [ 97.720911][ T5639] hsr_slave_0: entered promiscuous mode [ 97.727770][ T5639] hsr_slave_1: entered promiscuous mode [ 97.733924][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 97.739789][ T5639] Cannot create hsr debugfs directory [ 98.011829][ T5629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.026194][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.058558][ T5629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.069193][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.077294][ T5629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.087628][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.122850][ T5629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.135427][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.248010][ T5636] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.260973][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.270342][ T5636] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.281769][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.291504][ T5636] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.301665][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.310043][ T5636] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.319533][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.429102][ T5639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.440570][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.457339][ T5639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.468098][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.478629][ T5639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.488471][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.497912][ T5639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.508227][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.594982][ T5638] Bluetooth: hci0: command tx timeout [ 98.625852][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.644673][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.656277][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.664565][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.675810][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.675855][ T5638] Bluetooth: hci1: command tx timeout [ 98.689084][ T5634] Bluetooth: hci2: command tx timeout [ 98.692808][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.705723][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.713814][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.724192][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.754996][ T5638] Bluetooth: hci3: command tx timeout [ 98.772038][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.811813][ T3285] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.819538][ T3285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.830017][ T3285] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.837188][ T3285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.919016][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.980215][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.007606][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.014742][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.029003][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.063134][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.070393][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.122188][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.174174][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.181324][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.235937][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.243182][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.323783][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.417579][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.458240][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.465618][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.504392][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.511652][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.988923][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.183269][ T5629] veth0_vlan: entered promiscuous mode [ 100.264506][ T5629] veth1_vlan: entered promiscuous mode [ 100.339202][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.426761][ T5629] veth0_macvtap: entered promiscuous mode [ 100.463955][ T5629] veth1_macvtap: entered promiscuous mode [ 100.618817][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.643642][ T5636] veth0_vlan: entered promiscuous mode [ 100.667301][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.678741][ T5638] Bluetooth: hci0: command tx timeout [ 100.718895][ T3353] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.730660][ T3353] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.742036][ T3353] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.760298][ T5634] Bluetooth: hci2: command tx timeout [ 100.760533][ T3353] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.766189][ T5638] Bluetooth: hci1: command tx timeout [ 100.783192][ T5636] veth1_vlan: entered promiscuous mode [ 100.798093][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.811177][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.835112][ T5638] Bluetooth: hci3: command tx timeout [ 100.987629][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.004506][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.020660][ T5639] veth0_vlan: entered promiscuous mode [ 101.039810][ T5636] veth0_macvtap: entered promiscuous mode [ 101.051310][ T5632] veth0_vlan: entered promiscuous mode [ 101.069214][ T5636] veth1_macvtap: entered promiscuous mode [ 101.089012][ T5639] veth1_vlan: entered promiscuous mode [ 101.101970][ T3353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.112202][ T3353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.127134][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.138012][ T5632] veth1_vlan: entered promiscuous mode [ 101.159952][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.196248][ T3353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.206296][ T3353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.222622][ T3353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.228876][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.253438][ T3353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.296613][ T5639] veth0_macvtap: entered promiscuous mode [ 101.359073][ T5639] veth1_macvtap: entered promiscuous mode [ 101.456692][ T5632] veth0_macvtap: entered promiscuous mode [ 101.489464][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.490452][ T5632] veth1_macvtap: entered promiscuous mode [ 101.499569][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.573534][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.632886][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.648360][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.666054][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.680937][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.696392][ T145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.749682][ T145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.765742][ T145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.789167][ T145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.821533][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.886012][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.919489][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.944855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 101.986997][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.014248][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.353581][ T3353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.383550][ T3353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.439093][ T3353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.447591][ T3353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.665740][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.701941][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.755261][ T5638] Bluetooth: hci0: command tx timeout [ 102.835280][ T5638] Bluetooth: hci1: command tx timeout [ 102.841312][ T5634] Bluetooth: hci2: command tx timeout [ 102.882419][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.906698][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.916441][ T5634] Bluetooth: hci3: command tx timeout [ 108.079899][ T5836] random: crng reseeded on system resumption [ 111.691931][ T5916] random: crng reseeded on system resumption [ 118.726408][ T6014] random: crng reseeded on system resumption [ 124.318190][ T6084] random: crng reseeded on system resumption [ 126.012935][ T6095] random: crng reseeded on system resumption [ 131.654718][ T6165] random: crng reseeded on system resumption [ 133.173508][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.188076][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.541675][ T6222] random: crng reseeded on system resumption [ 136.965034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 142.475425][ T6317] random: crng reseeded on system resumption [ 155.738198][ T6494] random: crng reseeded on system resumption [ 162.852406][ T6589] random: crng reseeded on system resumption [ 165.113392][ T6597] random: crng reseeded on system resumption [ 178.234875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 178.570117][ T6796] random: crng reseeded on system resumption [ 180.726787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 182.451321][ T6839] random: crng reseeded on system resumption [ 189.876082][ T6970] random: crng reseeded on system resumption [ 194.597332][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.603923][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.700179][ T7080] random: crng reseeded on system resumption [ 200.965297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 206.443105][ T7190] random: crng reseeded on system resumption [ 209.107758][ T7206] random: crng reseeded on system resumption [ 210.352161][ T7226] random: crng reseeded on system resumption [ 213.134884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 214.489250][ T7280] random: crng reseeded on system resumption [ 217.159720][ T5635] Bluetooth: hci1: command 0x0406 tx timeout [ 217.166082][ T5635] Bluetooth: hci0: command 0x0406 tx timeout [ 217.166437][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 217.173277][ T5635] Bluetooth: hci2: command 0x0406 tx timeout [ 219.706403][ T7356] random: crng reseeded on system resumption [ 226.866234][ T7443] random: crng reseeded on system resumption [ 230.095212][ T7505] random: crng reseeded on system resumption [ 237.373080][ T7585] random: crng reseeded on system resumption [ 241.602465][ T7639] random: crng reseeded on system resumption [ 245.193320][ T7684] random: crng reseeded on system resumption [ 254.933555][ T7853] random: crng reseeded on system resumption [ 256.039884][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.046348][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.385196][ T7927] random: crng reseeded on system resumption [ 266.575676][ T7993] random: crng reseeded on system resumption [ 274.826272][ T8125] random: crng reseeded on system resumption [ 282.885246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 283.824235][ T8247] random: crng reseeded on system resumption [ 285.116128][ T8283] random: crng reseeded on system resumption [ 287.162951][ T8287] random: crng reseeded on system resumption [ 289.169244][ T8341] Zero length message leads to an empty skb [ 290.108682][ T8331] random: crng reseeded on system resumption [ 293.472137][ T8389] random: crng reseeded on system resumption [ 300.148685][ T8501] Zero length message leads to an empty skb [ 300.385959][ T8504] random: crng reseeded on system resumption [ 301.158770][ T8509] random: crng reseeded on system resumption [ 302.655253][ T8531] random: crng reseeded on system resumption [ 306.504655][ T8581] Zero length message leads to an empty skb [ 307.712528][ T8590] random: crng reseeded on system resumption [ 309.520150][ T8621] Zero length message leads to an empty skb [ 310.855290][ T8627] random: crng reseeded on system resumption [ 312.777204][ T8669] Zero length message leads to an empty skb [ 315.307244][ T8710] random: crng reseeded on system resumption [ 317.483063][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.489859][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.236390][ T8821] Zero length message leads to an empty skb [ 326.548545][ T8859] random: crng reseeded on system resumption [ 330.334997][ T8903] random: crng reseeded on system resumption [ 330.542355][ T8930] Zero length message leads to an empty skb [ 331.051987][ T8942] syz.3.550 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 338.318134][ T9035] Zero length message leads to an empty skb [ 341.241746][ T9083] random: crng reseeded on system resumption [ 344.165061][ T9122] random: crng reseeded on system resumption [ 347.167217][ T9154] random: crng reseeded on system resumption [ 350.159364][ T9196] Zero length message leads to an empty skb [ 355.209573][ T9273] random: crng reseeded on system resumption [ 355.546031][ T9274] Zero length message leads to an empty skb [ 365.807584][ T9398] random: crng reseeded on system resumption [ 367.332449][ T9437] Zero length message leads to an empty skb [ 373.990963][ T9531] random: crng reseeded on system resumption [ 376.612606][ T9569] Zero length message leads to an empty skb [ 376.954454][ T9565] random: crng reseeded on system resumption [ 378.257398][ T9576] random: crng reseeded on system resumption [ 378.920927][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.927984][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.594621][ T9626] random: crng reseeded on system resumption [ 389.690898][ T9737] random: crng reseeded on system resumption [ 392.256568][ T9791] random: crng reseeded on system resumption [ 395.659599][ T9810] random: crng reseeded on system resumption [ 397.133272][ T9845] random: crng reseeded on system resumption [ 403.848383][ T9942] random: crng reseeded on system resumption [ 403.970692][ T9956] Zero length message leads to an empty skb [ 407.856679][T10014] random: crng reseeded on system resumption [ 408.365248][T10030] Zero length message leads to an empty skb [ 411.690340][T10071] Zero length message leads to an empty skb [ 414.565706][T10098] random: crng reseeded on system resumption [ 423.397904][T10230] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 423.638459][T10237] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 423.765821][T10244] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 424.209040][T10254] Zero length message leads to an empty skb [ 425.245174][T10274] random: crng reseeded on system resumption [ 427.953374][T10301] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 429.600029][T10320] random: crng reseeded on system resumption [ 430.213513][T10346] Zero length message leads to an empty skb [ 433.533508][T10405] random: crng reseeded on system resumption [ 434.450043][T10413] Zero length message leads to an empty skb [ 439.303632][T10471] random: crng reseeded on system resumption [ 440.357263][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.363819][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.473779][T10503] random: crng reseeded on system resumption [ 446.608058][T10603] Zero length message leads to an empty skb [ 448.240056][T10611] random: crng reseeded on system resumption [ 452.503893][T10688] random: crng reseeded on system resumption [ 456.257765][T10741] random: crng reseeded on system resumption [ 471.351958][T10965] random: crng reseeded on system resumption [ 484.784124][T11160] random: crng reseeded on system resumption [ 487.193292][T11215] random: crng reseeded on system resumption [ 488.475325][T11234] random: crng reseeded on system resumption [ 491.784056][T11276] random: crng reseeded on system resumption [ 498.873398][T11367] random: crng reseeded on system resumption [ 501.799199][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.805865][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.235251][T11455] random: crng reseeded on system resumption [ 507.781068][T11506] random: crng reseeded on system resumption [ 510.080750][T11552] random: crng reseeded on system resumption [ 511.789692][T11555] random: crng reseeded on system resumption [ 514.743675][T11593] random: crng reseeded on system resumption [ 518.735012][T11662] random: crng reseeded on system resumption [ 523.460422][T11719] random: crng reseeded on system resumption [ 525.049673][T11743] random: crng reseeded on system resumption [ 529.588716][T11809] random: crng reseeded on system resumption [ 536.412634][T11925] random: crng reseeded on system resumption [ 545.401559][T12059] random: crng reseeded on system resumption [ 563.248241][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.259932][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.376420][T12402] random: crng reseeded on system resumption [ 568.954408][T12418] random: crng reseeded on system resumption [ 574.312153][T12510] random: crng reseeded on system resumption [ 576.805381][T12540] random: crng reseeded on system resumption [ 582.101237][T12613] random: crng reseeded on system resumption [ 586.486700][T12682] random: crng reseeded on system resumption [ 589.121419][T12718] random: crng reseeded on system resumption [ 591.277501][T12747] random: crng reseeded on system resumption [ 595.122706][T12803] random: crng reseeded on system resumption [ 601.633486][T12901] random: crng reseeded on system resumption [ 604.635087][T12957] random: crng reseeded on system resumption [ 608.020661][T12982] random: crng reseeded on system resumption [ 614.517297][T13098] Zero length message leads to an empty skb [ 618.144360][T13135] random: crng reseeded on system resumption [ 620.758996][T13161] random: crng reseeded on system resumption [ 624.683406][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.698364][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.930723][T13231] random: crng reseeded on system resumption [ 630.192508][T13306] random: crng reseeded on system resumption [ 632.397293][T13348] Zero length message leads to an empty skb [ 637.242537][T13407] random: crng reseeded on system resumption [ 640.486555][T13459] random: crng reseeded on system resumption [ 648.473074][T13583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1319'. [ 648.584662][T13574] random: crng reseeded on system resumption [ 650.607992][T13621] random: crng reseeded on system resumption [ 652.058876][T13628] random: crng reseeded on system resumption [ 652.372373][T13640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1328'. [ 654.726194][T13685] Zero length message leads to an empty skb [ 658.193800][T13725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1339'. [ 658.290244][T13724] random: crng reseeded on system resumption [ 663.044832][T13790] random: crng reseeded on system resumption [ 666.198917][T13838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1356'. [ 668.126362][T13872] random: crng reseeded on system resumption [ 670.104318][T13892] random: crng reseeded on system resumption [ 670.334518][T13896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1367'. [ 670.796633][T13916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1371'. [ 671.693229][T13921] random: crng reseeded on system resumption [ 672.514147][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1373'. [ 673.252442][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1378'. [ 673.601702][T13945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1377'. [ 674.019740][T13953] random: crng reseeded on system resumption [ 675.069267][T13976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1382'. [ 676.784395][T13996] random: crng reseeded on system resumption [ 676.864599][T13998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1385'. [ 679.863504][T14057] random: crng reseeded on system resumption [ 679.874169][T14041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1391'. [ 682.297408][T14067] random: crng reseeded on system resumption [ 682.648883][T14082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 684.229105][T14098] random: crng reseeded on system resumption [ 686.069422][T14127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1405'. [ 686.117756][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.126008][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.700744][T14147] random: crng reseeded on system resumption [ 687.560400][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1409'. [ 691.324884][T14201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1415'. [ 692.130230][T14209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'. [ 693.631723][T14251] random: crng reseeded on system resumption [ 694.811054][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1425'. [ 695.677263][T14265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1426'. [ 696.080982][T14282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1429'. [ 697.916788][T14316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1433'. [ 699.545777][T14334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1435'. [ 702.114861][T14374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1442'. [ 702.679740][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1444'. [ 703.536206][T14404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1447'. [ 705.705496][T14432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1451'. [ 705.943080][T14449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1453'. [ 706.871195][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1454'. [ 708.751245][T14486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1460'. [ 711.220335][T14523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1466'. [ 712.419292][T14561] Zero length message leads to an empty skb [ 712.612796][T14542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1467'. [ 712.950666][T14551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1470'. [ 714.823599][T14581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1475'. [ 717.143252][T14618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1479'. [ 717.736019][T14631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1481'. [ 718.813157][T14646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1483'. [ 720.368736][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1485'. [ 720.618890][T14667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1486'. [ 722.551728][T14701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1492'. [ 723.847032][T14731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1496'. [ 724.151490][T14738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1497'. [ 725.411671][T14751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1499'. [ 726.420145][T14775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1503'. [ 726.659171][T14782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1504'. [ 727.600365][T14790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1505'. [ 728.520893][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1508'. [ 729.236877][T14828] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1512'. [ 730.572252][T14837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1513'. [ 731.837584][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1517'. [ 733.310762][T14877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1519'. [ 734.035543][T14898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1522'. [ 734.593005][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1523'. [ 734.987085][T14917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1524'. [ 736.690997][T14938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1529'. [ 738.468963][T14977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1531'. [ 740.431788][T14993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1534'. [ 742.307304][T15024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1540'. [ 744.169660][T15058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1544'. [ 745.262513][T15075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1547'. [ 745.831224][T15088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1549'. [ 747.228342][T15106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1552'. [ 747.556848][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.564646][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.130345][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1553'. [ 748.384247][T15118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1554'. [ 749.273577][T15139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1556'. [ 750.383152][T15144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'. [ 751.128927][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1561'. [ 751.921182][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1564'. [ 752.363621][T15182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1563'. [ 754.421662][T15222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1570'. [ 755.477118][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1571'. [ 758.643555][T15302] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1583'. [ 759.646476][T15298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1582'. [ 760.138506][T15321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1584'. [ 762.114037][T15337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1588'. [ 767.992930][T15437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1603'. [ 768.373264][T15447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1605'. [ 768.678143][T15460] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1607'. [ 771.657167][T15496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1613'. [ 775.004942][T15542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1621'. [ 775.901113][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1623'. [ 776.310996][T15572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1625'. [ 779.840606][T15636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1634'. [ 783.073217][T15692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1644'. [ 784.139026][T15701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1645'. [ 785.359381][T15728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1649'. [ 785.617940][T15731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1650'. [ 786.072372][T15745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1651'. [ 786.690706][T15759] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1655'. [ 789.145457][T15788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1660'. [ 789.842916][T15802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1662'. [ 789.930525][T15813] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1663'. [ 791.672378][T15824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1666'. [ 795.061007][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1676'. [ 797.560834][T15940] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1685'. [ 798.664169][T15938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1684'. [ 799.542474][T15979] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1692'. [ 800.287389][T15984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1691'. [ 804.061072][T16038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1700'. [ 804.659230][T16047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1701'. [ 808.589283][T16099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1709'. [ 808.996750][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.006075][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.544860][T16119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'. [ 810.861845][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1715'. [ 811.913913][T16154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1718'. [ 812.266099][T16173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1721'. [ 814.098449][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1723'. [ 818.190652][T16259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1734'. [ 819.947079][T16290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1738'. [ 824.980986][T16365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1749'. [ 826.310720][T16383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1752'. [ 828.456179][T16421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1758'. [ 828.743149][T16424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1760'. [ 831.661956][T16484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1768'. [ 834.205889][T16528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1777'. [ 835.367249][T16541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1778'. [ 837.514298][T16580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1785'. [ 838.248793][T16591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1788'. [ 838.998295][T16607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1790'. [ 839.920755][T16622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1792'. [ 841.722797][T16651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1797'. [ 842.269125][T16664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1798'. [ 842.823122][T16676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1800'. [ 845.477130][T16706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1806'. [ 845.935204][T16714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1807'. [ 847.377898][T16743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1811'. [ 848.583016][T16768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1814'. [ 850.197832][T16786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1818'. [ 850.380388][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1817'. [ 852.991893][T16846] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1828'. [ 855.884812][T16884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1833'. [ 857.158384][T16892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1834'. [ 859.019030][T16926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1839'. [ 862.348718][T16991] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1851'. [ 863.069602][T16987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1850'. [ 864.912321][T17016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1856'. [ 870.241168][T17096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1870'. [ 870.436675][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.445943][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.452624][T17095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1869'. [ 871.030191][T17116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1872'. [ 873.300145][T17156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1878'. [ 873.324655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 874.726538][T17166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1879'. [ 875.118539][T17171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1881'. [ 878.519849][T17225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1889'. [ 881.013272][T17265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1894'. [ 882.410852][T17289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1899'. [ 883.262915][T17293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1900'. [ 883.781916][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1903'. [ 886.437457][T17346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1908'. [ 886.933435][T17349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1909'. [ 887.679806][T17380] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1912'. [ 888.980835][T17391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1914'. [ 890.179731][T17408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1917'. [ 890.692824][T17413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1918'. [ 892.749317][T17443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1922'. [ 893.194871][T17464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1923'. [ 894.169168][T17481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'. [ 894.914323][T17496] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1931'. [ 897.442101][T17528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1936'. [ 899.142473][T17556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1940'. [ 900.792223][T17578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1944'. [ 904.744077][T17647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1955'. [ 905.226905][T17656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1956'. [ 906.905273][T17673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1959'. [ 907.326453][T17694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1961'. [ 908.165496][T17711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1964'. [ 910.153394][T17736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1968'. [ 911.491327][T17759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1971'. [ 912.211360][T17768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1973'. [ 914.751176][T17806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1979'. [ 915.046946][T17815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1981'. [ 915.568491][T17828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1982'. [ 915.596335][T17838] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1985'. [ 916.302077][T17839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1984'. [ 916.622777][T17857] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1987'. [ 917.044541][T17851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'. [ 917.982247][T17863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1988'. [ 919.868800][T17898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1994'. [ 920.651445][T17905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1996'. [ 922.094368][T17932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2000'. [ 922.171953][T17944] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2002'. [ 923.666077][T17955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2003'. [ 924.369331][T17966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2006'. [ 925.350279][T17988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2009'. [ 925.699663][T18000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2010'. [ 927.408509][T18030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2014'. [ 928.112817][T18039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2016'. [ 929.630340][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2019'. [ 930.151598][T18078] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 931.820396][T18094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2024'. [ 931.878179][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.884678][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.125004][T18123] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2031'. [ 933.732502][T18121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2030'. [ 934.134084][T18126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'. [ 934.946455][T18148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2037'. [ 936.059680][T18175] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 936.773983][T18172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2041'. [ 936.943317][T18166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2039'. [ 937.575767][T18190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2043'. [ 938.360103][T18217] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2050'. [ 938.928442][T18218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2048'. [ 939.112304][T18219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2049'. [ 939.655187][T18227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2051'. [ 940.360174][T18242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2053'. [ 941.891841][T18268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2057'. [ 942.375230][T18273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2058'. [ 942.609294][T18281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2060'. [ 943.527592][T18304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2063'. [ 943.580203][T18313] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2065'. [ 944.791460][T18332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2066'. [ 945.087263][T18334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2069'. [ 945.455611][T18341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2070'. [ 946.268628][T18351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2071'. [ 946.452923][T18362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2072'. [ 948.050737][T18377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2075'. [ 948.959887][T18401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2078'. [ 950.230070][T18426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2083'. [ 951.283283][T18433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2084'. [ 951.909479][T18458] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2089'. [ 952.330276][T18451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2087'. [ 952.739177][T18457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2088'. [ 952.952955][T18446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2086'. [ 953.963024][T18478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2092'. [ 954.696379][T18485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2094'. [ 954.897616][T18481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2093'. [ 955.238031][T18493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2095'. [ 955.865235][T18493] ieee80211 phy212: Failed to add default virtual iface [ 956.237755][T18515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2097'. [ 956.864327][T18539] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2101'. [ 957.021223][T18534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2100'. [ 957.911765][T18542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2102'. [ 958.757206][T18555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2104'. [ 959.732482][T18585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2109'. [ 960.261097][T18595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2111'. [ 961.836093][T18613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2114'. [ 962.150115][T18619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2115'. [ 963.172997][T18638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2119'. [ 963.945240][T18655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2122'. [ 964.632858][T18665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2124'. [ 966.109933][T18685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2127'. [ 966.858623][T18701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2130'. [ 968.050166][T18720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2133'. [ 968.360050][T18736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2136'. [ 969.292743][T18748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2137'. [ 969.589984][T18754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2139'. [ 969.736708][T18750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2138'. [ 970.396256][T18785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2142'. [ 971.119183][T18800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2146'. [ 971.703639][T18799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2145'. [ 973.339088][T18831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2152'. [ 973.636235][T18841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2154'. [ 973.904628][T18833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2153'. [ 974.149853][T18858] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2157'. [ 975.071597][T18862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2158'. [ 975.497301][T18870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2160'. [ 975.751043][T18887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2161'. [ 976.298451][T18884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2162'. [ 976.889562][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2163'. [ 978.254121][T18916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2166'. [ 978.749295][T18925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2169'. [ 980.394357][T18954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2173'. [ 981.083583][T18975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2177'. [ 982.140579][T18991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2179'. [ 984.268162][T19054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2191'. [ 984.611888][T19062] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2193'. [ 984.831137][T19047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2190'. [ 985.469087][T19065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2194'. [ 986.005675][T19084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2197'. [ 986.670417][T19092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2196'. [ 987.304694][T19102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2199'. [ 988.309342][T19133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2203'. [ 988.507748][T19134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2204'. [ 989.091205][T19132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2205'. [ 990.809365][T19168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2210'. [ 990.986373][T19185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2213'. [ 991.475212][T19199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2216'. [ 992.141643][T19201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2217'. [ 993.077178][T19222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2219'. [ 993.281502][T19229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2222'. [ 993.317463][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.324044][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.116967][T19270] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2229'. [ 995.350280][T19273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2230'. [ 995.816634][T19284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2232'. [ 996.777447][T19306] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2237'. [ 996.933166][T19311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2238'. [ 997.802198][T19319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2239'. [ 998.373995][T19334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2242'. [ 998.816341][T19342] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2243'. [ 1000.496682][T19361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2248'. [ 1000.834944][T19374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2250'. [ 1001.247957][T19385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2251'. [ 1001.764140][T19388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2252'. [ 1002.814360][T19405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2255'. [ 1003.438108][T19440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2260'. [ 1003.737691][T19448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2262'. [ 1006.642522][T19492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2270'. [ 1007.417171][T19509] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2272'. [ 1007.815509][T19521] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2276'. [ 1009.140843][T19526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2277'. [ 1009.960228][T19544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2280'. [ 1011.259168][T19591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2289'. [ 1011.684332][T19590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2286'. [ 1011.880840][T19582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2287'. [ 1012.958764][T19622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2293'. [ 1014.613272][T19642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2297'. [ 1015.796687][T19666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2301'. [ 1017.111078][T19682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2303'. [ 1017.490106][T19689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2305'. [ 1017.906164][T19707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2306'. [ 1019.107449][T19724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2309'. [ 1022.890304][T19801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2322'. [ 1025.067365][T19856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2332'. [ 1026.256989][T19884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2336'. [ 1027.155861][T19903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2339'. [ 1028.153607][T19907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2340'. [ 1028.337831][T19910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2341'. [ 1028.760941][T19926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2343'. [ 1029.881188][T19945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2346'. [ 1031.060577][T19966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2349'. [ 1032.053633][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2354'. [ 1034.043537][T20019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2359'. [ 1035.872405][T20058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2366'. [ 1037.629641][T20102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2373'. [ 1039.336289][T20138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2381'. [ 1040.032942][T20149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2383'. [ 1041.013491][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1041.031069][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1041.040634][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1041.051701][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1041.062489][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1041.618804][T20159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2384'. [ 1042.209051][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.362861][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.537165][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.682256][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.154583][ T5630] Bluetooth: hci4: command tx timeout [ 1043.347219][ T12] bridge_slave_1: left allmulticast mode [ 1043.364623][ T12] bridge_slave_1: left promiscuous mode [ 1043.377189][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.420798][ T12] bridge_slave_0: left allmulticast mode [ 1043.440147][ T12] bridge_slave_0: left promiscuous mode [ 1043.454703][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.927712][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1043.941899][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1043.961440][ T12] bond0 (unregistering): Released all slaves [ 1044.373571][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1044.531625][T20173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.554614][T20173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.563096][T20173] bridge_slave_0: entered allmulticast mode [ 1044.573125][T20173] bridge_slave_0: entered promiscuous mode [ 1044.633143][T20173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.641287][T20173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.648879][T20173] bridge_slave_1: entered allmulticast mode [ 1044.656632][T20173] bridge_slave_1: entered promiscuous mode [ 1044.845097][T20173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.871705][T20173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.183448][T20241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2394'. [ 1045.194929][T20173] team0: Port device team_slave_0 added [ 1045.227325][T20173] team0: Port device team_slave_1 added [ 1045.244816][ T5630] Bluetooth: hci4: command tx timeout [ 1045.840961][T20173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.851884][T20173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.889993][T20173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.971267][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1045.982892][T20173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.990165][T20173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.020200][T20173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.287456][T20173] hsr_slave_0: entered promiscuous mode [ 1046.294754][T20173] hsr_slave_1: entered promiscuous mode [ 1046.301346][T20173] debugfs: 'hsr0' already exists in 'hsr' [ 1046.309265][T20173] Cannot create hsr debugfs directory [ 1046.424007][T20272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2397'. [ 1047.315844][ T5630] Bluetooth: hci4: command tx timeout [ 1047.503210][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2401'. [ 1048.106310][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1049.394646][ T5630] Bluetooth: hci4: command tx timeout [ 1050.158627][T20173] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1050.193927][T20346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2406'. [ 1050.199996][T20173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1050.291089][T20173] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1050.309926][T20173] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1050.320381][T20173] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1050.341261][T20173] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1050.488762][T20173] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1050.502362][T20173] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1052.039488][T20393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2408'. [ 1052.308274][T20402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2409'. [ 1052.449021][T20173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.799480][T20173] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.828672][ T3285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.836898][ T3285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.873713][T20424] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2411'. [ 1052.942882][ T3285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.950238][ T3285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.144357][T20173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1053.640093][T20430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2412'. [ 1053.913248][T20441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2413'. [ 1054.757397][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.763933][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.094491][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2416'. [ 1055.382571][T20173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1055.527652][T20474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2417'. [ 1056.174084][T20173] veth0_vlan: entered promiscuous mode [ 1056.184058][T20484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2418'. [ 1056.305156][T20173] veth1_vlan: entered promiscuous mode [ 1056.656197][T20173] veth0_macvtap: entered promiscuous mode [ 1056.701596][T20173] veth1_macvtap: entered promiscuous mode [ 1056.851890][T20173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1056.942232][T20173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1056.975248][ T3285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.984197][ T3285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.994148][T18119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.007084][ T1161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.319364][ T3285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.342672][ T3285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.558024][T18119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.583177][T18119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.613333][T20509] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2424'. [ 1057.752599][T20173] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1058.463588][T20505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2422'. [ 1058.689987][T20510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2423'. [ 1059.013429][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1059.038656][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1059.048469][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1059.059551][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1059.077033][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1060.487542][T20537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2427'. [ 1061.057200][ T12] hsr_slave_0: left promiscuous mode [ 1061.063573][ T12] hsr_slave_1: left promiscuous mode [ 1061.070532][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.079672][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.096139][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.103662][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.118957][ T12] veth1_macvtap: left promiscuous mode [ 1061.126571][ T12] veth0_macvtap: left promiscuous mode [ 1061.132295][ T12] veth1_vlan: left promiscuous mode [ 1061.138249][ T12] veth0_vlan: left promiscuous mode [ 1061.155499][ T5634] Bluetooth: hci0: command tx timeout [ 1061.482529][T20568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2431'. [ 1061.526218][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1061.543018][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1062.587580][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.787694][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.051996][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.235634][ T5634] Bluetooth: hci0: command tx timeout [ 1063.354514][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.357057][T20588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2434'. [ 1063.462965][T20530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.470573][T20530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.481811][T20530] bridge_slave_0: entered allmulticast mode [ 1063.491426][T20530] bridge_slave_0: entered promiscuous mode [ 1063.500013][T20530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.509552][T20530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.516981][T20530] bridge_slave_1: entered allmulticast mode [ 1063.524290][T20530] bridge_slave_1: entered promiscuous mode [ 1063.648838][T20530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.710003][T20530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.858049][T20530] team0: Port device team_slave_0 added [ 1063.950124][T20530] team0: Port device team_slave_1 added [ 1064.052603][ T12] bridge_slave_1: left allmulticast mode [ 1064.065331][ T12] bridge_slave_1: left promiscuous mode [ 1064.074075][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.085297][ T12] bridge_slave_0: left allmulticast mode [ 1064.091077][ T12] bridge_slave_0: left promiscuous mode [ 1064.098937][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.463878][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.491072][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.500712][T20608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2437'. [ 1064.504333][ T12] bond0 (unregistering): Released all slaves [ 1065.281079][T20530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.290819][T20530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.317817][T20530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.333314][ T5634] Bluetooth: hci0: command tx timeout [ 1065.341252][T20530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.355383][T20530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.382079][T20530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.006343][T20530] hsr_slave_0: entered promiscuous mode [ 1066.013572][T20530] hsr_slave_1: entered promiscuous mode [ 1066.928036][T20621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2439'. [ 1067.258682][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1067.394560][ T5634] Bluetooth: hci0: command tx timeout [ 1069.210887][T20682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2445'. [ 1069.802193][T20530] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1069.816574][T20530] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1069.851240][T20530] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1069.941738][T20530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1069.966457][T20530] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1069.990631][T20530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1070.060991][T20530] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1070.091101][T20530] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1071.440209][T20530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.808767][T20716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2448'. [ 1072.240057][T20717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2449'. [ 1072.343690][T20530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.737687][ T3285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.745008][ T3285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.853961][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.861345][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.909633][T20530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.619225][T20530] veth0_vlan: entered promiscuous mode [ 1075.630329][T20806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2456'. [ 1075.858403][T20530] veth1_vlan: entered promiscuous mode [ 1076.273364][T20530] veth0_macvtap: entered promiscuous mode [ 1076.332825][T20530] veth1_macvtap: entered promiscuous mode [ 1076.609111][T20841] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2463'. [ 1076.639416][T20530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1076.723137][T20530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1076.762208][ T3285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.814472][ T3285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.840387][ T3285] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.902533][ T3285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.437041][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.454535][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.628913][T20856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2465'. [ 1077.780717][T18119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.792490][T18119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.731699][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1078.752437][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1078.761967][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1078.774113][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1078.782136][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1079.566208][T20879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2469'. [ 1080.181144][T20901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2472'. [ 1080.834533][ T5634] Bluetooth: hci2: command tx timeout [ 1081.863745][T20945] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2480'. [ 1081.931241][T20933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2477'. [ 1082.236606][T20947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2478'. [ 1082.307659][T20882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.315933][T20882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.332737][T20882] bridge_slave_0: entered allmulticast mode [ 1082.343342][T20882] bridge_slave_0: entered promiscuous mode [ 1082.477057][T20882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.485398][T20882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.492649][T20882] bridge_slave_1: entered allmulticast mode [ 1082.501170][T20882] bridge_slave_1: entered promiscuous mode [ 1082.733504][T20882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.751996][T20882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.878923][T20882] team0: Port device team_slave_0 added [ 1082.917791][ T5634] Bluetooth: hci2: command tx timeout [ 1082.950377][T20882] team0: Port device team_slave_1 added [ 1083.101737][T20882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.109259][T20882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.135771][T20882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.213515][T20882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.230261][T20882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.261011][T20882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.639601][T20882] hsr_slave_0: entered promiscuous mode [ 1083.658965][T20882] hsr_slave_1: entered promiscuous mode [ 1083.675673][T20882] debugfs: 'hsr0' already exists in 'hsr' [ 1083.689591][T20882] Cannot create hsr debugfs directory [ 1083.789138][ T12] hsr_slave_0: left promiscuous mode [ 1083.796305][ T12] hsr_slave_1: left promiscuous mode [ 1083.802574][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1083.810596][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.821690][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.829685][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.847670][ T12] veth1_macvtap: left promiscuous mode [ 1083.853270][ T12] veth0_macvtap: left promiscuous mode [ 1083.860413][ T12] veth1_vlan: left promiscuous mode [ 1083.865830][ T12] veth0_vlan: left promiscuous mode [ 1084.272379][T20985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2486'. [ 1084.304836][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1084.331992][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1085.004502][ T5634] Bluetooth: hci2: command tx timeout [ 1085.072658][T20882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.281346][T20882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.488902][T20882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.882215][T20882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.191847][ T12] bridge_slave_1: left allmulticast mode [ 1086.195056][T21000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2488'. [ 1086.205925][ T12] bridge_slave_1: left promiscuous mode [ 1086.228634][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.241497][ T12] bridge_slave_0: left allmulticast mode [ 1086.247983][ T12] bridge_slave_0: left promiscuous mode [ 1086.253979][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.968581][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.979877][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.990123][ T12] bond0 (unregistering): Released all slaves [ 1087.084499][ T5634] Bluetooth: hci2: command tx timeout [ 1088.646469][T20882] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1088.659327][T21028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2493'. [ 1088.700722][T20882] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1088.743245][T21028] veth1_macvtap: left promiscuous mode [ 1088.749797][T21028] macsec0: entered promiscuous mode [ 1088.758073][T21028] macsec0: entered allmulticast mode [ 1088.781127][T20882] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1088.810281][T20882] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1088.879963][T20882] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1088.896074][T20882] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1088.970890][T20882] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1089.014761][T20882] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1089.997860][T21045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2495'. [ 1090.324786][T20882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.611629][T20882] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.760137][ T3285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.767404][ T3285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.818817][T21054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2497'. [ 1090.858415][ T3285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.865718][ T3285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.242626][T21066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2498'. [ 1092.064608][T21092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2503'. [ 1092.110482][T21092] veth1_macvtap: left promiscuous mode [ 1092.123579][T21092] macsec0: entered promiscuous mode [ 1092.138964][T21092] macsec0: entered allmulticast mode [ 1092.145642][T21073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2500'. [ 1093.476024][T21105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2505'. [ 1093.605657][T20882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.971847][T20882] veth0_vlan: entered promiscuous mode [ 1094.028918][T20882] veth1_vlan: entered promiscuous mode [ 1094.256591][T20882] veth0_macvtap: entered promiscuous mode [ 1094.408378][T20882] veth1_macvtap: entered promiscuous mode [ 1094.838174][T21131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2508'. [ 1095.021284][T20882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.119628][T20882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.220427][T18119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.249392][T18119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.273749][T18119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.302345][T18119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.630202][ T3353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.668964][ T3353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.802444][T21165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2515'. [ 1095.908470][T21165] veth1_macvtap: left promiscuous mode [ 1095.927045][T21165] macsec0: entered promiscuous mode [ 1095.938689][T21165] macsec0: entered allmulticast mode [ 1096.090702][ T3353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.100992][ T3353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.402166][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1097.413400][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1097.423064][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1097.433979][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1097.442224][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1097.943496][T21184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2518'. [ 1099.474639][ T5634] Bluetooth: hci1: command tx timeout [ 1099.947026][T21197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.964675][T21197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.971678][T21230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2524'. [ 1099.985035][T21197] bridge_slave_0: entered allmulticast mode [ 1099.993095][T21197] bridge_slave_0: entered promiscuous mode [ 1100.038665][T21197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.048214][T21197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.056169][T21197] bridge_slave_1: entered allmulticast mode [ 1100.065297][T21197] bridge_slave_1: entered promiscuous mode [ 1100.239424][T21197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.296870][T21197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.485690][T21197] team0: Port device team_slave_0 added [ 1100.539626][T21197] team0: Port device team_slave_1 added [ 1100.679991][T21197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.687723][T21197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.714862][T21197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.804536][T21197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.827617][T21197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.889307][T21197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.029624][T21257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2527'. [ 1101.557264][ T5634] Bluetooth: hci1: command tx timeout [ 1101.596676][T21197] hsr_slave_0: entered promiscuous mode [ 1101.603879][T21197] hsr_slave_1: entered promiscuous mode [ 1101.611100][T21197] debugfs: 'hsr0' already exists in 'hsr' [ 1101.617921][T21197] Cannot create hsr debugfs directory [ 1101.771295][T21265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2529'. [ 1102.026413][ T12] hsr_slave_0: left promiscuous mode [ 1102.032382][ T12] hsr_slave_1: left promiscuous mode [ 1102.042216][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1102.050442][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1102.060385][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1102.068726][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1102.133398][ T12] veth1_macvtap: left promiscuous mode [ 1102.149203][ T12] veth0_macvtap: left promiscuous mode [ 1102.160959][ T12] veth1_vlan: left promiscuous mode [ 1102.172592][ T12] veth0_vlan: left promiscuous mode [ 1102.285912][T21275] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2531'. [ 1102.613788][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1102.630567][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1102.986129][T21278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2532'. [ 1103.349722][T21197] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.635339][ T5634] Bluetooth: hci1: command tx timeout [ 1103.666275][T21287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2534'. [ 1103.706430][T21197] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.012709][T21197] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.226161][T21197] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.778041][T21291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2535'. [ 1104.927131][T21294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2536'. [ 1105.715246][ T5634] Bluetooth: hci1: command tx timeout [ 1105.728763][T21312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2539'. [ 1106.853823][T21326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2542'. [ 1108.732418][T21349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2546'. [ 1109.172057][T21354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2547'. [ 1109.290981][T21359] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2548'. [ 1109.300041][T21359] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2548'. [ 1109.468350][T21363] Zero length message leads to an empty skb [ 1110.588137][T21366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2550'. [ 1111.617192][T21376] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2552'. [ 1111.626476][T21376] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2552'. [ 1113.488257][T21391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2556'. [ 1113.915362][T21396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2557'. [ 1114.351142][T21401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2558'. [ 1115.072691][T21410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2560'. [ 1115.519388][T21415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2561'. [ 1116.197731][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.204120][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.450640][T21427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2564'. [ 1117.887376][T21432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2565'. [ 1118.314890][T21437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2566'. [ 1118.612810][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1118.625875][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1118.635495][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1118.643767][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1118.654195][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1119.430146][T21445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.437817][T21445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.445337][T21445] bridge_slave_0: entered allmulticast mode [ 1119.452621][T21445] bridge_slave_0: entered promiscuous mode [ 1119.470539][T21445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.482487][T21445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.490322][T21445] bridge_slave_1: entered allmulticast mode [ 1119.503162][T21445] bridge_slave_1: entered promiscuous mode [ 1119.558224][T21445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.572196][T21445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.621625][T21445] team0: Port device team_slave_0 added [ 1119.632273][T21445] team0: Port device team_slave_1 added [ 1119.674871][T21445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.681895][T21445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.709348][T21445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.723527][T21445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.731662][T21445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.758016][T21445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.822739][T21445] hsr_slave_0: entered promiscuous mode [ 1119.829908][T21445] hsr_slave_1: entered promiscuous mode [ 1119.836999][T21445] debugfs: 'hsr0' already exists in 'hsr' [ 1119.843201][T21445] Cannot create hsr debugfs directory [ 1120.149110][T21475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2571'. [ 1120.585415][T21481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2572'. [ 1120.676540][ T5634] Bluetooth: hci3: command tx timeout [ 1121.031472][T21486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2573'. [ 1121.468696][T21491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2574'. [ 1121.915058][T21496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2575'. [ 1122.365740][T21501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2576'. [ 1122.656086][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1122.670543][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1122.681394][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1122.693006][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1122.701055][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1122.754748][ T5634] Bluetooth: hci3: command tx timeout [ 1123.263846][T21509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.271127][T21509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.278656][T21509] bridge_slave_0: entered allmulticast mode [ 1123.288015][T21509] bridge_slave_0: entered promiscuous mode [ 1123.296336][T21509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.303513][T21509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.311402][T21509] bridge_slave_1: entered allmulticast mode [ 1123.318861][T21509] bridge_slave_1: entered promiscuous mode [ 1123.348783][T21509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.361104][T21509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.406644][T21509] team0: Port device team_slave_0 added [ 1123.418978][T21509] team0: Port device team_slave_1 added [ 1123.460793][T21509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.469237][T21509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.498276][T21509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.512342][T21509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.519809][T21509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.546636][T21509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.618265][T21509] hsr_slave_0: entered promiscuous mode [ 1123.625077][T21509] hsr_slave_1: entered promiscuous mode [ 1123.631584][T21509] debugfs: 'hsr0' already exists in 'hsr' [ 1123.638167][T21509] Cannot create hsr debugfs directory [ 1123.964307][T21530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2579'. [ 1124.402330][T21536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2580'. [ 1124.754724][ T5634] Bluetooth: hci5: command tx timeout [ 1124.834575][ T5634] Bluetooth: hci3: command tx timeout [ 1126.844695][ T5634] Bluetooth: hci5: command tx timeout [ 1126.914705][ T5634] Bluetooth: hci3: command tx timeout [ 1128.914704][ T5634] Bluetooth: hci5: command tx timeout [ 1130.994721][ T5634] Bluetooth: hci5: command tx timeout [ 1140.261806][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1140.274102][ T5630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1140.285105][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1140.295397][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1140.303146][ T5630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1140.786245][T21552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.794534][T21552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.802596][T21552] bridge_slave_0: entered allmulticast mode [ 1140.810239][T21552] bridge_slave_0: entered promiscuous mode [ 1140.819809][T21552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.827072][T21552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.834442][T21552] bridge_slave_1: entered allmulticast mode [ 1140.842353][T21552] bridge_slave_1: entered promiscuous mode [ 1140.871625][T21552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1140.883678][T21552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.919071][T21552] team0: Port device team_slave_0 added [ 1140.927197][T21552] team0: Port device team_slave_1 added [ 1140.953688][T21552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.960791][T21552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.986816][T21552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.000382][T21552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.007447][T21552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.033613][T21552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.078310][T21552] hsr_slave_0: entered promiscuous mode [ 1141.085430][T21552] hsr_slave_1: entered promiscuous mode [ 1141.091633][T21552] debugfs: 'hsr0' already exists in 'hsr' [ 1141.097454][T21552] Cannot create hsr debugfs directory [ 1142.354735][ T5630] Bluetooth: hci6: command tx timeout [ 1144.444715][ T5630] Bluetooth: hci6: command tx timeout [ 1146.514586][ T5630] Bluetooth: hci6: command tx timeout [ 1148.594875][ T5630] Bluetooth: hci6: command tx timeout [ 1157.230702][ T5634] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1157.244189][ T5634] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1157.252744][ T5634] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1157.262263][ T5634] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1157.270121][ T5634] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1157.764312][T21576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.771763][T21576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.779258][T21576] bridge_slave_0: entered allmulticast mode [ 1157.786646][T21576] bridge_slave_0: entered promiscuous mode [ 1157.798803][T21576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.806154][T21576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.813622][T21576] bridge_slave_1: entered allmulticast mode [ 1157.821595][T21576] bridge_slave_1: entered promiscuous mode [ 1157.851879][T21576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.865318][T21576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.899510][T21576] team0: Port device team_slave_0 added [ 1157.907811][T21576] team0: Port device team_slave_1 added [ 1157.934235][T21576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.941283][T21576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.967438][T21576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.980899][T21576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.988528][T21576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.015723][T21576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1158.063989][T21576] hsr_slave_0: entered promiscuous mode [ 1158.070527][T21576] hsr_slave_1: entered promiscuous mode [ 1158.076988][T21576] debugfs: 'hsr0' already exists in 'hsr' [ 1158.082722][T21576] Cannot create hsr debugfs directory [ 1159.314853][ T5630] Bluetooth: hci7: command tx timeout [ 1161.394618][ T5630] Bluetooth: hci7: command tx timeout [ 1163.474660][ T5634] Bluetooth: hci7: command tx timeout [ 1164.354644][ T5634] Bluetooth: hci4: command 0x0406 tx timeout [ 1165.554622][ T5630] Bluetooth: hci7: command tx timeout [ 1177.639557][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.646257][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.256537][ T5634] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1179.269441][ T5634] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1179.277797][ T5634] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1179.286581][ T5634] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1179.295940][ T5634] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1179.777557][T21596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.784913][T21596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.792329][T21596] bridge_slave_0: entered allmulticast mode [ 1179.801918][T21596] bridge_slave_0: entered promiscuous mode [ 1179.811827][T21596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.819134][T21596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.826727][T21596] bridge_slave_1: entered allmulticast mode [ 1179.834001][T21596] bridge_slave_1: entered promiscuous mode [ 1179.863864][T21596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.876333][T21596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.910875][T21596] team0: Port device team_slave_0 added [ 1179.919186][T21596] team0: Port device team_slave_1 added [ 1179.945673][T21596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1179.952719][T21596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.979641][T21596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.992411][T21596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.999751][T21596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.026928][T21596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.071175][T21596] hsr_slave_0: entered promiscuous mode [ 1180.077832][T21596] hsr_slave_1: entered promiscuous mode [ 1180.083986][T21596] debugfs: 'hsr0' already exists in 'hsr' [ 1180.090221][T21596] Cannot create hsr debugfs directory [ 1181.394872][ T5630] Bluetooth: hci8: command tx timeout [ 1182.753081][ T5634] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1182.782860][T20174] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1182.792577][T20174] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1182.802909][T20174] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1182.811270][T20174] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1183.303295][T21615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.310532][T21615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.318370][T21615] bridge_slave_0: entered allmulticast mode [ 1183.326180][T21615] bridge_slave_0: entered promiscuous mode [ 1183.334716][T21615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.341896][T21615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.349676][T21615] bridge_slave_1: entered allmulticast mode [ 1183.357410][T21615] bridge_slave_1: entered promiscuous mode [ 1183.387153][T21615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1183.401159][T21615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.431849][T21615] team0: Port device team_slave_0 added [ 1183.440342][T21615] team0: Port device team_slave_1 added [ 1183.467081][T21615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.474043][T21615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.500365][ T5630] Bluetooth: hci8: command tx timeout [ 1183.507045][T21615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.519615][T21615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.526719][T21615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.552822][T21615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.599879][T21615] hsr_slave_0: entered promiscuous mode [ 1183.606491][T21615] hsr_slave_1: entered promiscuous mode [ 1183.612657][T21615] debugfs: 'hsr0' already exists in 'hsr' [ 1183.618647][T21615] Cannot create hsr debugfs directory [ 1184.836269][ T5630] Bluetooth: hci9: command tx timeout [ 1184.836265][T20174] Bluetooth: hci0: command 0x0406 tx timeout [ 1185.554836][ T5634] Bluetooth: hci8: command tx timeout [ 1186.924714][ T5634] Bluetooth: hci9: command tx timeout [ 1187.634735][ T5634] Bluetooth: hci8: command tx timeout [ 1188.994737][ T5634] Bluetooth: hci9: command tx timeout [ 1191.074671][ T5634] Bluetooth: hci9: command tx timeout [ 1200.295871][ T5630] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1200.304717][ T5630] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1200.312702][ T5630] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1200.322934][ T5630] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1200.332287][ T5630] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1200.833803][T21635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.842041][T21635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.849601][T21635] bridge_slave_0: entered allmulticast mode [ 1200.856997][T21635] bridge_slave_0: entered promiscuous mode [ 1200.865389][T21635] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.872690][T21635] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.880379][T21635] bridge_slave_1: entered allmulticast mode [ 1200.888046][T21635] bridge_slave_1: entered promiscuous mode [ 1200.921489][T21635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1200.934290][T21635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.965837][T21635] team0: Port device team_slave_0 added [ 1200.974094][T21635] team0: Port device team_slave_1 added [ 1201.000972][T21635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1201.008908][T21635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1201.034950][T21635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1201.048829][T21635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1201.056161][T21635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1201.082229][T21635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1201.127998][T21635] hsr_slave_0: entered promiscuous mode [ 1201.134750][T21635] hsr_slave_1: entered promiscuous mode [ 1201.141000][T21635] debugfs: 'hsr0' already exists in 'hsr' [ 1201.146858][T21635] Cannot create hsr debugfs directory [ 1202.434694][ T5634] Bluetooth: hci10: command tx timeout [ 1204.514657][T20174] Bluetooth: hci10: command tx timeout [ 1205.314565][T20174] Bluetooth: hci2: command 0x0406 tx timeout [ 1206.594620][ T5634] Bluetooth: hci10: command tx timeout [ 1208.674623][ T5634] Bluetooth: hci10: command tx timeout [ 1217.305747][T20174] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1217.320270][T20174] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1217.328724][T20174] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1217.338130][T20174] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1217.346377][T20174] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1217.843200][T21661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.850833][T21661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.858385][T21661] bridge_slave_0: entered allmulticast mode [ 1217.867605][T21661] bridge_slave_0: entered promiscuous mode [ 1217.876806][T21661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.883954][T21661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.891465][T21661] bridge_slave_1: entered allmulticast mode [ 1217.901133][T21661] bridge_slave_1: entered promiscuous mode [ 1217.931398][T21661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.943821][T21661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.981870][T21661] team0: Port device team_slave_0 added [ 1217.990026][T21661] team0: Port device team_slave_1 added [ 1218.019608][T21661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.026783][T21661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.052970][T21661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1218.065878][T21661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1218.072882][T21661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.098953][T21661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.146727][T21661] hsr_slave_0: entered promiscuous mode [ 1218.153258][T21661] hsr_slave_1: entered promiscuous mode [ 1218.160868][T21661] debugfs: 'hsr0' already exists in 'hsr' [ 1218.166670][T21661] Cannot create hsr debugfs directory [ 1219.395115][ T5634] Bluetooth: hci11: command tx timeout [ 1220.676021][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 1221.474887][T20174] Bluetooth: hci11: command tx timeout [ 1223.554776][T20174] Bluetooth: hci11: command tx timeout [ 1225.634965][T20174] Bluetooth: hci11: command tx timeout [ 1239.077450][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.084739][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.836775][ T5630] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1239.849116][ T5630] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1239.857229][ T5630] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1239.865965][ T5630] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1239.873807][ T5630] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1240.368446][T21682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.375788][T21682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.383128][T21682] bridge_slave_0: entered allmulticast mode [ 1240.390878][T21682] bridge_slave_0: entered promiscuous mode [ 1240.399257][T21682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.406528][T21682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.413815][T21682] bridge_slave_1: entered allmulticast mode [ 1240.421523][T21682] bridge_slave_1: entered promiscuous mode [ 1240.454927][T21682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.467936][T21682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.499304][T21682] team0: Port device team_slave_0 added [ 1240.507495][T21682] team0: Port device team_slave_1 added [ 1240.538611][T21682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.545639][T21682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.571816][T21682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.585156][T21682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.592125][T21682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.618993][T21682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.667126][T21682] hsr_slave_0: entered promiscuous mode [ 1240.673677][T21682] hsr_slave_1: entered promiscuous mode [ 1240.681209][T21682] debugfs: 'hsr0' already exists in 'hsr' [ 1240.687153][T21682] Cannot create hsr debugfs directory [ 1241.155112][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 1241.954733][ T5634] Bluetooth: hci12: command tx timeout [ 1242.838649][ T5630] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1242.847059][ T5630] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1242.856120][ T5630] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1242.865630][ T5630] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1242.873409][ T5630] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1243.373949][T21701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.381647][T21701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.389556][T21701] bridge_slave_0: entered allmulticast mode [ 1243.400906][T21701] bridge_slave_0: entered promiscuous mode [ 1243.410390][T21701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.417713][T21701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.425152][T21701] bridge_slave_1: entered allmulticast mode [ 1243.432540][T21701] bridge_slave_1: entered promiscuous mode [ 1243.462343][T21701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1243.474667][T21701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1243.509506][T21701] team0: Port device team_slave_0 added [ 1243.518960][T21701] team0: Port device team_slave_1 added [ 1243.546152][T21701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1243.553118][T21701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.579222][T21701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.591696][T21701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.598684][T21701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.626224][T21701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.671783][T21701] hsr_slave_0: entered promiscuous mode [ 1243.679525][T21701] hsr_slave_1: entered promiscuous mode [ 1243.686143][T21701] debugfs: 'hsr0' already exists in 'hsr' [ 1243.691974][T21701] Cannot create hsr debugfs directory [ 1244.034588][ T5630] Bluetooth: hci12: command tx timeout [ 1244.924583][T20174] Bluetooth: hci13: command tx timeout [ 1246.114606][T20174] Bluetooth: hci12: command tx timeout [ 1246.276222][T20174] Bluetooth: hci5: command 0x0406 tx timeout [ 1247.004905][ T5630] Bluetooth: hci13: command tx timeout [ 1248.194872][ T5630] Bluetooth: hci12: command tx timeout [ 1249.075046][ T5630] Bluetooth: hci13: command tx timeout [ 1251.164704][ T5630] Bluetooth: hci13: command tx timeout [ 1257.644671][ T31] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 1257.652431][ T31] Tainted: G L syzkaller #0 [ 1257.659255][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1257.668021][ T31] task:kworker/u8:0 state:D stack:22904 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1257.680227][ T31] Workqueue: netns cleanup_net [ 1257.685286][ T31] Call Trace: [ 1257.688651][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1257.691614][ T31] __schedule+0x125c/0x6730 [ 1257.696365][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1257.702113][ T31] ? __pfx___schedule+0x10/0x10 [ 1257.707106][ T31] ? find_held_lock+0x2b/0x80 [ 1257.711833][ T31] ? schedule+0x225/0x2c0 [ 1257.716714][ T31] schedule+0xdd/0x2c0 [ 1257.721033][ T31] schedule_preempt_disabled+0x13/0x30 [ 1257.726626][ T31] __mutex_lock+0xccc/0x1bd0 [ 1257.733192][ T31] ? devlink_pernet_pre_exit+0x19e/0x370 [ 1257.739218][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1257.744391][ T31] ? __devlinks_xa_find_get+0x127/0x260 [ 1257.750072][ T31] ? devlink_pernet_pre_exit+0x19e/0x370 [ 1257.755833][ T31] devlink_pernet_pre_exit+0x19e/0x370 [ 1257.761330][ T31] ? iput.part.0+0x1a0/0x1050 [ 1257.766170][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1257.772205][ T31] ? iput+0x3a/0x40 [ 1257.776129][ T31] ? sock_release+0x14d/0x1c0 [ 1257.780928][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1257.787022][ T31] ops_undo_list+0x187/0xab0 [ 1257.791667][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1257.799115][ T31] ? cleanup_net+0x332/0x920 [ 1257.803823][ T31] ? cleanup_net+0x332/0x920 [ 1257.808525][ T31] ? idr_destroy+0x62/0x2e0 [ 1257.813158][ T31] cleanup_net+0x499/0x920 [ 1257.817700][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1257.822710][ T31] ? rcu_is_watching+0x12/0xc0 [ 1257.828802][ T31] process_one_work+0xa23/0x1940 [ 1257.836554][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1257.842056][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1257.847113][ T31] worker_thread+0x5ef/0xe50 [ 1257.851781][ T31] ? kthread+0x13a/0x450 [ 1257.856151][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1257.861317][ T31] kthread+0x370/0x450 [ 1257.865647][ T31] ? __pfx_kthread+0x10/0x10 [ 1257.870292][ T31] ret_from_fork+0x72b/0xd50 [ 1257.875069][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1257.880236][ T31] ? __switch_to+0x800/0x10f0 [ 1257.885101][ T31] ? __switch_to_asm+0x39/0x70 [ 1257.889947][ T31] ? __pfx_kthread+0x10/0x10 [ 1257.894654][ T31] ret_from_fork_asm+0x1a/0x30 [ 1257.899490][ T31] [ 1257.914512][ T31] INFO: task syz-executor:21197 blocked for more than 143 seconds. [ 1257.947831][ T31] Tainted: G L syzkaller #0 [ 1257.966524][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1257.975624][ T31] task:syz-executor state:D stack:23800 pid:21197 tgid:21197 ppid:1 task_flags:0x480140 flags:0x00080003 [ 1257.988013][ T31] Call Trace: [ 1257.991362][ T31] [ 1257.994839][ T31] __schedule+0x125c/0x6730 [ 1257.999863][ T31] ? __pfx___schedule+0x10/0x10 [ 1258.005228][ T31] ? find_held_lock+0x2b/0x80 [ 1258.009983][ T31] ? schedule+0x225/0x2c0 [ 1258.014420][ T31] schedule+0xdd/0x2c0 [ 1258.018545][ T31] schedule_timeout+0x1b2/0x280 [ 1258.023517][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1258.029062][ T31] ? mark_held_locks+0x40/0x70 [ 1258.033886][ T31] __wait_for_common+0x2e7/0x4c0 [ 1258.040445][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1258.045905][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1258.051410][ T31] remove_one+0x312/0x420 [ 1258.055909][ T31] ? up_write+0x2e5/0x5c0 [ 1258.060273][ T31] __simple_recursive_removal+0x148/0x5c0 [ 1258.066079][ T31] ? __pfx_remove_one+0x10/0x10 [ 1258.070977][ T31] debugfs_remove+0x5d/0x80 [ 1258.075537][ T31] nsim_drv_remove+0xd2/0x1e0 [ 1258.080365][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1258.085734][ T31] device_remove+0xcb/0x180 [ 1258.090317][ T31] device_release_driver_internal+0x44e/0x620 [ 1258.096439][ T31] bus_remove_device+0x2bc/0x560 [ 1258.101517][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 1258.107223][ T31] ? __pfx_device_remove_attrs+0x10/0x10 [ 1258.112917][ T31] device_del+0x376/0x9b0 [ 1258.117744][ T31] ? __pfx_device_del+0x10/0x10 [ 1258.122692][ T31] device_unregister+0x1d/0xe0 [ 1258.127521][ T31] del_device_store+0x346/0x480 [ 1258.132421][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1258.137951][ T31] ? find_held_lock+0x2b/0x80 [ 1258.143844][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 1258.148883][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 1258.153786][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1258.159237][ T31] bus_attr_store+0x74/0xb0 [ 1258.163826][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 1258.169124][ T31] sysfs_kf_write+0xf2/0x150 [ 1258.173759][ T31] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1258.179108][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1258.184396][ T31] vfs_write+0x6ac/0x1050 [ 1258.188805][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1258.195332][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1258.200178][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1258.205490][ T31] ksys_write+0x12a/0x250 [ 1258.209954][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1258.214884][ T31] do_syscall_64+0x115/0x840 [ 1258.219596][ T31] ? clear_bhb_loop+0x40/0x90 [ 1258.224395][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.230320][ T31] RIP: 0033:0x7f4b0d75e6ce [ 1258.235000][ T31] RSP: 002b:00007fffd1d9f248 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1258.244869][ T31] RAX: ffffffffffffffda RBX: 000055556427c500 RCX: 00007f4b0d75e6ce [ 1258.252907][ T31] RDX: 0000000000000001 RSI: 00007fffd1d9f2d0 RDI: 0000000000000005 [ 1258.261026][ T31] RBP: 00007f4b0d834732 R08: 0000000000000000 R09: 0000000000000000 [ 1258.269278][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.277509][ T31] R13: 00007fffd1d9f2d0 R14: 00007f4b0e554620 R15: 0000000000000003 [ 1258.285619][ T31] [ 1258.288693][ T31] INFO: task syz.0.2533:21285 blocked for more than 144 seconds. [ 1258.296594][ T31] Tainted: G L syzkaller #0 [ 1258.303132][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1258.311865][ T31] task:syz.0.2533 state:D stack:26056 pid:21285 tgid:21282 ppid:20173 task_flags:0x400140 flags:0x00080002 [ 1258.323894][ T31] Call Trace: [ 1258.327237][ T31] [ 1258.330202][ T31] __schedule+0x125c/0x6730 [ 1258.334826][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1258.339889][ T31] ? __pfx___schedule+0x10/0x10 [ 1258.344851][ T31] ? find_held_lock+0x2b/0x80 [ 1258.350466][ T31] ? schedule+0x225/0x2c0 [ 1258.355380][ T31] schedule+0xdd/0x2c0 [ 1258.359523][ T31] schedule_preempt_disabled+0x13/0x30 [ 1258.365083][ T31] __mutex_lock+0xccc/0x1bd0 [ 1258.369710][ T31] ? nsim_bus_dev_max_vfs_write+0x206/0x410 [ 1258.375695][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1258.380781][ T31] ? __kmalloc_noprof+0x343/0x820 [ 1258.385892][ T31] ? nsim_bus_dev_max_vfs_write+0x1bb/0x410 [ 1258.391839][ T31] ? nsim_bus_dev_max_vfs_write+0x206/0x410 [ 1258.397849][ T31] nsim_bus_dev_max_vfs_write+0x206/0x410 [ 1258.403637][ T31] ? __pfx_nsim_bus_dev_max_vfs_write+0x10/0x10 [ 1258.409982][ T31] ? __debugfs_file_get+0x1fc/0x860 [ 1258.415312][ T31] full_proxy_write+0x135/0x1a0 [ 1258.420216][ T31] vfs_write+0x2aa/0x1050 [ 1258.424616][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 1258.430024][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1258.435770][ T31] ? __fget_files+0x215/0x3d0 [ 1258.440524][ T31] ? __fget_files+0x21f/0x3d0 [ 1258.445319][ T31] ksys_write+0x12a/0x250 [ 1258.450554][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1258.455653][ T31] do_syscall_64+0x115/0x840 [ 1258.460277][ T31] ? clear_bhb_loop+0x40/0x90 [ 1258.465032][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.470958][ T31] RIP: 0033:0x7f7b08f9de99 [ 1258.475441][ T31] RSP: 002b:00007f7b09e1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1258.483891][ T31] RAX: ffffffffffffffda RBX: 00007f7b09226180 RCX: 00007f7b08f9de99 [ 1258.491943][ T31] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000a [ 1258.500083][ T31] RBP: 00007f7b09033eaf R08: 0000000000000000 R09: 0000000000000000 [ 1258.508175][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1258.519759][ T31] R13: 00007f7b09226218 R14: 00007f7b09226180 R15: 00007ffe1cf30b28 [ 1258.527954][ T31] [ 1258.531053][ T31] INFO: task syz.1.2544:21337 blocked for more than 144 seconds. [ 1258.542506][ T31] Tainted: G L syzkaller #0 [ 1258.549257][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1258.559179][ T31] task:syz.1.2544 state:D stack:26056 pid:21337 tgid:21335 ppid:20530 task_flags:0x400140 flags:0x00080002 [ 1258.571483][ T31] Call Trace: [ 1258.574833][ T31] [ 1258.577776][ T31] __schedule+0x125c/0x6730 [ 1258.582312][ T31] ? __pfx___schedule+0x10/0x10 [ 1258.587216][ T31] ? find_held_lock+0x2b/0x80 [ 1258.591932][ T31] ? schedule+0x225/0x2c0 [ 1258.596429][ T31] schedule+0xdd/0x2c0 [ 1258.600559][ T31] schedule_preempt_disabled+0x13/0x30 [ 1258.606174][ T31] rwsem_down_read_slowpath+0x5af/0xb40 [ 1258.611762][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1258.618000][ T31] ? __pfx___might_resched+0x10/0x10 [ 1258.623365][ T31] down_read+0xed/0x4c0 [ 1258.627621][ T31] ? __pfx_down_read+0x10/0x10 [ 1258.632428][ T31] ? mnt_get_write_access+0x1e9/0x2f0 [ 1258.637906][ T31] path_openat+0xb3c/0x4280 [ 1258.642490][ T31] ? __pfx_path_openat+0x10/0x10 [ 1258.647567][ T31] do_file_open+0x20e/0x430 [ 1258.652127][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1258.658477][ T31] ? alloc_fd+0x471/0x7a0 [ 1258.662879][ T31] ? do_getname+0x191/0x390 [ 1258.667615][ T31] do_sys_openat2+0x10f/0x1e0 [ 1258.672389][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1258.677700][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1258.683772][ T31] __x64_sys_openat+0x12d/0x210 [ 1258.688803][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1258.694258][ T31] do_syscall_64+0x115/0x840 [ 1258.698933][ T31] ? clear_bhb_loop+0x40/0x90 [ 1258.703642][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.709682][ T31] RIP: 0033:0x7fd367f9de99 [ 1258.714148][ T31] RSP: 002b:00007fd368dcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1258.722794][ T31] RAX: ffffffffffffffda RBX: 00007fd368226090 RCX: 00007fd367f9de99 [ 1258.730918][ T31] RDX: 0000000000048002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1258.738960][ T31] RBP: 00007fd368033eaf R08: 0000000000000000 R09: 0000000000000000 [ 1258.747032][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1258.758486][ T31] R13: 00007fd368226128 R14: 00007fd368226090 R15: 00007ffd605697c8 [ 1258.766927][ T31] [ 1258.770198][ T31] [ 1258.770198][ T31] Showing all locks held in the system: [ 1258.778784][ T31] 4 locks held by kworker/u8:0/12: [ 1258.783934][ T31] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1258.795130][ T31] #1: ffffc90000117d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1258.805159][ T31] #2: ffffffff90a862c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1258.814588][ T31] #3: ffff88801f317128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370 [ 1258.824728][ T31] 1 lock held by khungtaskd/31: [ 1258.829635][ T31] #0: ffffffff8ebe5f80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1258.840499][ T31] 5 locks held by kworker/u8:5/145: [ 1258.846230][ T31] #0: ffff8880b843b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 1258.856259][ T31] #1: ffff8880b8424568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e8e/0x6730 [ 1258.866054][ T31] #2: ffff88803ffd07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1258.876319][ T31] #3: ffffffff8ebe5f80 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xdc/0x420 [ 1258.886931][ T31] #4: ffffffff8ebe5f80 (rcu_read_lock){....}-{1:3}, at: crng_make_state+0xbb/0x6c0 [ 1258.896539][ T31] 6 locks held by kworker/u8:8/3285: [ 1258.901942][ T31] 2 locks held by getty/5382: [ 1258.906779][ T31] #0: ffff8880372960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1258.917784][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1258.928142][ T31] 7 locks held by syz-executor/21197: [ 1258.933515][ T31] #0: ffff88807f684450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1258.942588][ T31] #1: ffff888084604c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1258.952441][ T31] #2: ffff88802a37b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1258.963559][ T31] #3: ffffffff9000cce0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1258.974662][ T31] #4: ffff88801f317128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1258.985452][ T31] #5: ffff88807e3cf258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 1258.995856][ T31] #6: ffff888075ba3630 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 1259.007930][ T31] 3 locks held by syz.0.2533/21285: [ 1259.013179][ T31] #0: ffff88802a3989b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1259.022359][ T31] #1: ffff8880206e8450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1259.031655][ T31] #2: ffff88807e3cf258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_bus_dev_max_vfs_write+0x206/0x410 [ 1259.043033][ T31] 2 locks held by syz.1.2544/21337: [ 1259.048392][ T31] #0: ffff8880206e8450 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 1259.057745][ T31] #1: ffff888075ba3630 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xb3c/0x4280 [ 1259.068749][ T31] 4 locks held by syz-executor/21445: [ 1259.074678][ T31] #0: ffff88807f684450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1259.083752][ T31] #1: ffff88809b2f0c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1259.093929][ T31] #2: ffff88802a37b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1259.104067][ T31] #3: ffffffff9000cce0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1259.114489][ T31] 4 locks held by syz-executor/21509: [ 1259.119870][ T31] #0: ffff88807f684450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1259.129061][ T31] #1: ffff888059c21480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1259.138915][ T31] #2: ffff88802a37b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1259.149004][ T31] #3: ffffffff9000cce0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1259.159466][ T31] 2 locks held by syz.2.2582/21546: [ 1259.165988][ T31] #0: ffff8880206e8450 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 1259.175333][ T31] #1: ffff888075ba3630 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xb3c/0x4280 [ 1259.185984][ T31] 4 locks held by syz-executor/21552: [ 1259.191470][ T31] #0: ffff88807f684450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1259.200544][ T31] #1: ffff888057d97c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1259.210397][ T31] #2: ffff88802a37b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1259.220475][ T31] #3: ffffffff9000cce0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1259.230956][ T31] 4 locks held by syz-executor/21576: [ 1259.236923][ T31] #0: ffff88807f684450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1259.246037][ T31] #1: ffff88805a98b480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1259.255831][ T31] #2: ffff88802a37b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1259.265961][ T31] #3: ffffffff9000cce0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1259.277403][ T31] 4 locks held by syz-executor/21596: [ 1259.282822][ T31] #0: ffff88807f684450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1259.291902][ T31] #1: ffff888059c75c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1259.301789][ T31] #2: ffff88802a37b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1259.311918][ T31] #3: ffffffff9000cce0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1259.322393][ T31] 4 locks held by syz-executor/21615: [ 1259.329116][ T31] #0: ffff88807f684450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1259.338274][ T31] #1: ffff88809b39ac80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1259.348213][ T31] #2: ffff88802a37b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1259.358378][ T31] #3: ffffffff9000cce0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1259.368770][ T31] 4 locks held by syz-executor/21635: [ 1259.375407][ T31] #0: ffff88807f684450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1259.384597][ T31] #1: ffff88804fe93480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1259.394599][ T31] #2: ffff88802a37b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1259.404742][ T31] #3: ffffffff9000cce0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1259.415140][ T31] 4 locks held by syz-executor/21661: [ 1259.420510][ T31] #0: ffff88807f684450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1259.429624][ T31] #1: ffff888059e8cc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1259.439557][ T31] #2: ffff88802a37b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1259.449707][ T31] #3: ffffffff9000cce0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1259.460137][ T31] 4 locks held by syz-executor/21682: [ 1259.465757][ T31] #0: ffff88807f684450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1259.477043][ T31] #1: ffff8880a0e38480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1259.486923][ T31] #2: ffff88802a37b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1259.497006][ T31] #3: ffffffff9000cce0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1259.507407][ T31] 4 locks held by syz-executor/21701: [ 1259.512798][ T31] #0: ffff88807f684450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1259.521846][ T31] #1: ffff88809da62c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1259.531723][ T31] #2: ffff88802a37b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1259.541803][ T31] #3: ffffffff9000cce0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1259.552192][ T31] [ 1259.555258][ T31] ============================================= [ 1259.555258][ T31] [ 1259.563738][ T31] NMI backtrace for cpu 1 [ 1259.563757][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1259.563787][ T31] Tainted: [L]=SOFTLOCKUP [ 1259.563793][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1259.563803][ T31] Call Trace: [ 1259.563809][ T31] [ 1259.563816][ T31] dump_stack_lvl+0x100/0x190 [ 1259.563840][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1259.563867][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1259.563914][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1259.563947][ T31] sys_info+0x141/0x190 [ 1259.563969][ T31] watchdog+0xcb1/0x1030 [ 1259.564037][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1259.564067][ T31] ? __pfx_watchdog+0x10/0x10 [ 1259.564092][ T31] ? __kthread_parkme+0x18c/0x230 [ 1259.564113][ T31] ? kthread+0x13a/0x450 [ 1259.564134][ T31] ? __pfx_watchdog+0x10/0x10 [ 1259.564157][ T31] kthread+0x370/0x450 [ 1259.564178][ T31] ? __pfx_kthread+0x10/0x10 [ 1259.564202][ T31] ret_from_fork+0x72b/0xd50 [ 1259.564223][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1259.564245][ T31] ? __switch_to+0x800/0x10f0 [ 1259.564271][ T31] ? __switch_to_asm+0x39/0x70 [ 1259.564313][ T31] ? __pfx_kthread+0x10/0x10 [ 1259.564349][ T31] ret_from_fork_asm+0x1a/0x30 [ 1259.564412][ T31] [ 1259.696411][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1259.702256][ C0] NMI backtrace for cpu 0 [ 1259.702280][ C0] CPU: 0 UID: 0 PID: 145 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1259.702313][ C0] Tainted: [L]=SOFTLOCKUP [ 1259.702320][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1259.702335][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 1259.702368][ C0] RIP: 0010:rcu_is_watching+0x71/0xc0 [ 1259.702396][ C0] Code: 20 a9 46 8e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 <8b> 03 c1 e8 02 83 e0 01 65 ff 0d 70 a3 75 12 74 07 5b 5d e9 97 c4 [ 1259.702417][ C0] RSP: 0018:ffffc90002fcf890 EFLAGS: 00000246 [ 1259.702436][ C0] RAX: 0000000000000003 RBX: ffff8880b8433c68 RCX: ffffffff8b24c696 [ 1259.702450][ C0] RDX: 0000000000000000 RSI: ffffffff8c400600 RDI: ffffffff8e46a920 [ 1259.702464][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1259.702478][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88803f110f40 [ 1259.702492][ C0] R13: ffff88807748cec0 R14: 0000000000000000 R15: ffff88802c154800 [ 1259.702506][ C0] FS: 0000000000000000(0000) GS:ffff888123df1000(0000) knlGS:0000000000000000 [ 1259.702528][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1259.702543][ C0] CR2: 00007ffc76f85f5c CR3: 000000000e992000 CR4: 00000000003526f0 [ 1259.702558][ C0] Call Trace: [ 1259.702565][ C0] [ 1259.702574][ C0] sta_info_get+0x23c/0x3e0 [ 1259.702713][ C0] ieee80211_update_sta_info.isra.0+0x2f0/0x11f0 [ 1259.702745][ C0] ? __pfx_ieee80211_update_sta_info.isra.0+0x10/0x10 [ 1259.702780][ C0] ? __pfx_ieee80211_sta_active_ibss+0x10/0x10 [ 1259.702807][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1259.702878][ C0] ? rcu_is_watching+0x12/0xc0 [ 1259.702901][ C0] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 1259.702936][ C0] ieee80211_ibss_rx_queued_mgmt+0xdea/0x1c70 [ 1259.702966][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1259.703001][ C0] ieee80211_iface_work+0xa9a/0x1070 [ 1259.703032][ C0] cfg80211_wiphy_work+0x2b7/0x550 [ 1259.703059][ C0] process_one_work+0xa23/0x1940 [ 1259.703094][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1259.703126][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 1259.703152][ C0] worker_thread+0x5ef/0xe50 [ 1259.703184][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1259.703212][ C0] ? kthread+0x13a/0x450 [ 1259.703236][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1259.703263][ C0] kthread+0x370/0x450 [ 1259.703288][ C0] ? __pfx_kthread+0x10/0x10 [ 1259.703314][ C0] ret_from_fork+0x72b/0xd50 [ 1259.703339][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1259.703363][ C0] ? __switch_to+0x800/0x10f0 [ 1259.703392][ C0] ? __switch_to_asm+0x39/0x70 [ 1259.703419][ C0] ? __pfx_kthread+0x10/0x10 [ 1259.703444][ C0] ret_from_fork_asm+0x1a/0x30 [ 1259.703478][ C0] [ 1259.986207][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1259.993099][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1260.003782][ T31] Tainted: [L]=SOFTLOCKUP [ 1260.008101][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1260.018152][ T31] Call Trace: [ 1260.021448][ T31] [ 1260.024379][ T31] dump_stack_lvl+0x100/0x190 [ 1260.029069][ T31] vpanic+0x552/0x970 [ 1260.033054][ T31] ? __pfx_vpanic+0x10/0x10 [ 1260.037560][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1260.043724][ T31] panic+0xd1/0xe0 [ 1260.047462][ T31] ? __pfx_panic+0x10/0x10 [ 1260.051931][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1260.058179][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1260.064369][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1260.070550][ T31] ? watchdog.cold+0x1ec/0x234 [ 1260.075342][ T31] ? watchdog+0xcc1/0x1030 [ 1260.079787][ T31] watchdog.cold+0x1fd/0x234 [ 1260.084387][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1260.090210][ T31] ? __pfx_watchdog+0x10/0x10 [ 1260.094913][ T31] ? __kthread_parkme+0x18c/0x230 [ 1260.099963][ T31] ? kthread+0x13a/0x450 [ 1260.104224][ T31] ? __pfx_watchdog+0x10/0x10 [ 1260.108927][ T31] kthread+0x370/0x450 [ 1260.113019][ T31] ? __pfx_kthread+0x10/0x10 [ 1260.117630][ T31] ret_from_fork+0x72b/0xd50 [ 1260.122240][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1260.127370][ T31] ? __switch_to+0x800/0x10f0 [ 1260.132072][ T31] ? __switch_to_asm+0x39/0x70 [ 1260.136856][ T31] ? __pfx_kthread+0x10/0x10 [ 1260.141473][ T31] ret_from_fork_asm+0x1a/0x30 [ 1260.146272][ T31] [ 1260.149597][ T31] Kernel Offset: disabled [ 1260.153928][ T31] Rebooting in 86400 seconds..