last executing test programs: 13.860473772s ago: executing program 2 (id=1586): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) fchmod$auto(0xc8, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x7, 0x0, 0x26) sendmsg$auto_SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\n\x00\x00', @ANYRES16=0x0, @ANYBLOB="07032dbd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40040) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) socket(0x11, 0x80003, 0x300) socket(0x26, 0x80805, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x80) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) write$auto(0xc8, 0x0, 0x40f6) mkdir$auto(&(0x7f0000000000)='[[^\x00', 0x4) 13.141913985s ago: executing program 1 (id=1590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000140)={0x60, r1, 0x8a00f4e9954364ed, 0x70bd29, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_NAME={0x49, 0x11, '\xfd\xff\xff\xff\xff\xff\xff\xff-\x9c\xe4\xbe\x9e6y\x93\xd5\xbc\x9f\xa6\xf7\f\x01k\a\x86\xc1a\x12;\xab\xd7+\x99\xe71\x9b)p\x06\x02;/X\xfc+\x8b@\x90\xfc\x00\x00\x00\f\x11\xe7\xd3:\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff'}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x24000054) 12.591027236s ago: executing program 1 (id=1592): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x88) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0x5}, 0x5, 0x400) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) write$auto(0x3, 0x0, 0x81) socket(0x2, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="10fab018515f93d99358e1ccda67"}, 0xc0000) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x90) getpeername$auto(0x3, 0x0, 0x0) 11.419429152s ago: executing program 1 (id=1596): r0 = socket(0xa, 0x801, 0x84) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r1 = socket(0xa, 0x2, 0x88) (async) r2 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000180), r0) sendmsg$auto_TIPC_NL_MON_PEER_GET(r1, &(0x7f0000001500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000", @ANYRES16=r2, @ANYBLOB="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"], 0x1210}, 0x1, 0x0, 0x0, 0x4000000}, 0x480) (async) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_1={0xffffffffffffffff, 0x8, @next_key=0xbcd, 0x8}, 0x9) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) madvise$auto(0x0, 0x3, 0x15) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) getrandom$auto(0x0, 0x6000000, 0x3) (rerun: 64) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) (async) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async, rerun: 32) shutdown$auto(r0, 0xb8) (async, rerun: 32) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) setsockopt$auto(0x3, 0x10000000084, 0x75, 0x0, 0x8) 11.346223239s ago: executing program 2 (id=1597): socket(0x23, 0x801, 0x100) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) memfd_create$auto(0x0, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048080}, 0x80) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) socket(0x23, 0x801, 0x100) (async) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) (async) setrlimit$auto(0x1000000007, 0x0) (async) memfd_create$auto(0x0, 0xe) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048080}, 0x80) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) 10.498006971s ago: executing program 2 (id=1599): socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = socket(0x10, 0x2, 0x9) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) iopl$auto(0x3) sendfile$auto(0x1, 0x3, 0x0, 0xc01) fcntl$auto(0x0, 0x407, 0xc) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), 0xffffffffffffffff) getresgid$auto(0x0, 0xfffffffffffffffe, 0xfffffffffffffffc) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000534be6c4b40e7e97486d8831c89fd82024e29caf97f266694ed435e1a29c86fa00c2ac800a6d503bb63dc3db0b96882e133d11232a2c6df64f6dee93a02e76d08e69429d1811a0ed7da7ae56b0bdd32d9a3b85e4d8c7cba5325115c1ebc238445c86cd2a70100d6233264695d39b981af8b55a003f71b5a1322e381b1eccc07b435030153d150a0103b1988b5c09ead203b8d8fb1d1f0e430134488b1a47057b9196f28c62e21494b2a77521112f8801730833ba4dcfb03f7f74ca26047f726dcb", @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x28044004) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0x8008b705, 0x0) shmat$auto(0x0, 0x0, 0x0) clone$auto(0x40083b42, 0x5c84, 0xfffffffffffffffe, 0x0, 0x100000000000f) mount$auto(0x0, 0x0, &(0x7f0000000000)='p\x17rw8low\x00', 0x9, &(0x7f0000000100)) timerfd_create$auto(0x9, 0x0) preadv$auto(0x5, 0x0, 0x3, 0x10003, 0x32) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime$auto(0x4, 0xfffffffffffffffe) mmap$auto(0x0, 0x200, 0x1000000004, 0x9b72, 0x2, 0x8000) keyctl$auto(0x2000000000000017, 0x9, 0x2a, 0xef0, 0x0) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) pidfd_open$auto(0x0, 0x2) clone$auto(0x80000000, 0x40000000001, 0x0, 0x0, 0x10000) write$auto(r1, 0x0, 0x8) shutdown$auto(0x200000003, 0x2) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x4040040) 10.102200804s ago: executing program 1 (id=1600): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x801, 0x4) mmap$auto(0x0, 0x400005, 0xe1, 0xfff, 0x2, 0xfffffffffffffffa) socket(0x15, 0x5, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x80) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x6, 0x8000) fchmodat2$auto(0x3697, 0xffffffffffffffff, 0x3, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x9cf8, 0x4, 0x229f) select$auto(0x20ff, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) signalfd$auto(0x3, 0xfffffffffffffffe, 0x1) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(0x0, 0x205, 0x7, 0x4, 0x0) mmap$auto(0x0, 0x1004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) getsid$auto(0x0) 9.751726053s ago: executing program 3 (id=1601): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000140)={0x60, r1, 0x8a00f4e9954364ed, 0x70bd29, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_NAME={0x49, 0x11, '\xfd\xff\xff\xff\xff\xff\xff\xff-\x9c\xe4\xbe\x9e6y\x93\xd5\xbc\x9f\xa6\xf7\f\x01k\a\x86\xc1a\x12;\xab\xd7+\x99\xe71\x9b)p\x06\x02;/X\xfc+\x8b@\x90\xfc\x00\x00\x00\f\x11\xe7\xd3:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03'}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x24000054) 7.917405665s ago: executing program 3 (id=1604): r0 = open(&(0x7f0000000000)='./file0\x00', 0x440102, 0x4) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_PMK={0x2e, 0xfe, "00275380daf089d41b5121a18da3f862d7bbd6a3ebf142217d91406a408524fba8db260405adbea20ac8"}, @NL80211_ATTR_STA_FLAGS={0x52, 0x11, "efc68f47f00bf84155912bb8ba66bf886ce4fab23e7ad80c1d8709eb138a144aef4ebcae65bdc10d53492f5172755356aef734cf7ccac610d33d95b60bb9d8321a76f26de3bff2e3614d834b43d7"}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2a, 0x75, "5c0799e59044d359ccb037db88ba63fd0c70fa3747402d67454e285847b446024bc5557622d0"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x104, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x1}, @HWSIM_ATTR_ADDR_RECEIVER={0x20, 0x1, "fd730105ac2702b39301d3c43a1ffd66f88c2899dab96acf78dba39f"}, @HWSIM_ATTR_TX_INFO_FLAGS={0xc6, 0x15, "f6cbba4e85b69b97dddb7d06f20575691cbabc08c56e11900a062bfca34ce9b30dd5c9a5b5d8cfb058ed40335780a539ff16e6b14b3c2b6a10540a08dd8faac380802fcae4e2872b793f217cee30b4b5c38371e4bd3620f4b32de3987d05ee377456d3aa2472645397082462b6e9b74702e4055eac92751dee937799fe6770ac3530d78305db6ddbe57aa1c29b94fb05d036138e8e6996be1c37facbe9f4826dad45d54419882dc70aa2bba6571cf5aee20e6894239b3d6fb4bbd85f3c739123ea16"}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000000) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000480), r0) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd4, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x4}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xe}, @NL802154_ATTR_SEC_DEVICE={0xad, 0x2e, "eeee1c84cfdc6d77f848519af28a4857a8f9bada066f85668e4d0b9df8036ab44a81676c7172ec6274c895b9c44677960cdbb9c8312f86c7fedd28582e7ee66ccb7d7f6462cbec7903900b516ee3ea23cdb2fa405fde6aca1a7f08021e8ce3edb62c5b9aed999058249d2c57f0f519498b30d44c00da9e62a62c7428f1d3fe036a75db9105c8287ad5b1134e7a327fcc3942d53e160279b4df10c8806b103bc52df420f687c933968b"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'dvmrp0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'team_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'dvmrp0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'geneve0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'bond_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'team_slave_0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_NAPI_GET0(r3, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r5}, @NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r6}, @NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r7}, @NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r8}, @NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r9}, @NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r10}, @NETDEV_A_NAPI_IFINDEX={0x8}, @NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r11}, @NETDEV_A_NAPI_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x40040) r12 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000009c0), r0) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r12, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x855}, 0x20004810) r13 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000b00), r0) sendmsg$auto_ETHTOOL_MSG_MM_SET(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r13, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_MM_TX_MIN_FRAG_SIZE={0x8, 0x5, 0x1}, @ETHTOOL_A_MM_TX_ENABLED={0x5}, @ETHTOOL_A_MM_VERIFY_ENABLED={0x5, 0x7, 0x1}, @ETHTOOL_A_MM_HEADER={0x7, 0x1, "a7ca8a"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET0(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NETDEV_A_NAPI_IFINDEX={0x8}, @NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r10}, @NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r11}, @NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r7}, @NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x4000081) io_uring_register$auto(r3, 0x80, &(0x7f0000000d00)=[0x36b, 0x2, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) mmap$auto(0x7, 0x3, 0x6, 0x10, 0x1, 0x8b1f) mprotect$auto(0xfffffffffffffffd, 0x7, 0x4) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "a8b20509f4b57807690f06b0"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0xe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0xebc35a189f89d714) pread64$auto(r3, &(0x7f0000000e40)='geneve0\x00', 0x40925aed, 0x9) r14 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000ec0), r0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000001040)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xf4, r14, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0xba, 0x22, "0f470be06d807c724d517465eed57168a4fd90ae0a1b9765de36daae37cf9573cf593443fe7ee7a5ffe989db62d17db71ad123866d83cb013b83b923da3116798cb7f0158b77a0c609de0e6fb47b2e63844696d5f4edeab255ddfc85a3ab652386c95a749a4e26c7067916abd57ca65d685d484c393c3dd12b71b5552b483332ccaa70fcb8eaafee69fe936656ccfb65d130eb273956f79a4b9ec31c028ca6e57cdb5c8a7e84b0b6d5fd762b9c1238edc08704ffb7aa"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x21, 0x13, "429131d55a3638dade29c6d3bde8479009fc0f0c8ab4c85d8342e6417e"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x2000c888}, 0x44) fchmod$auto(r3, 0x0) sendmsg$auto_IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x108, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_DEST={0xb5, 0x2, "19f986125dfae821d5f3857c281e978296c6c80e00036d0245bb541bb8bf25f94e204994fc1169fae957d52f6d03e93ee4d2de3fdb27f84e4068c41c0e66d07498c5d35c94585109e4ac599d97f6f65a65b87a8d463f88afd51460226a214315451e997e44fa52f9640f93a2525474e6a2789395d7fa49d4963a87ffbbafe40bcb230f20c1d7043c12708af9c7365ab30f01bac5b20e9065135acd7bce10610c000713919cfbeb6421eb5f2ecb590d665b"}, @IPVS_CMD_ATTR_DAEMON={0x11, 0x3, "5ee815346c7a116d1570ae7e53"}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, "4c7e117e37d48a3204b4f5439a263da7dc9e9713a1706df5a2528e25"}]}, 0x108}, 0x1, 0x0, 0x0, 0x4880}, 0x24000000) 7.175332507s ago: executing program 3 (id=1605): socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="6a2f7ff43519eb7100"}, 0x55) socketpair$auto(0x3, 0x5, 0x7, 0x0) socketpair$auto(0xf, 0x20000000, 0xac7, &(0x7f0000000000)) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) io_uring_setup$auto(0x6, 0x0) write$auto(0x3, 0x0, 0xfdef) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002f40), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000017e28324560c5c99baa18c7a47fbe4171c8a83f0aa7c33b2beda3b1f7e0361910a0fdcbe285f4b6144f43a932425206d8338ca257171", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf252c000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 6.296121882s ago: executing program 3 (id=1608): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x6, 0x0, 0x40, 0xfffffffffffffffe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_SET(r0, 0x0, 0x40) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) socket(0xa, 0x3, 0x73) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x80) clock_gettime$auto(0x7, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) munlock$auto(0x8b, 0x4) socket(0xa, 0x5, 0x0) capget$auto(&(0x7f0000000080)={0x1, 0x0}, &(0x7f00000000c0)={0x2, 0x9, 0x4}) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/pid\x00') prctl$auto(0x9, 0x1, 0x1000, 0x8000, 0x7) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 6.138310835s ago: executing program 2 (id=1609): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) symlink$auto(&(0x7f0000000380)='\\\':\xb0RH9h\xd41|=8\x84\xbc\xa5\xbf\xa2\xc2\xfbs{\x9cmu\x17\x90r\xa0\x0e\xc3\x05\xd3*X$E\xebS.\x00Oh\xd5\xb4A\a\xee\xd6\x9bH1\x18J\xa9\x01)\x02\a\f.s\x9al\xe1\xf6d\xe0\x8d\xd0\x19:\xc4\xcaQ#\xe6\xfdM65\xb2\xa3\a\xc3\x1f\x8csv?\xf8\xca\xd5H+\x8be\xf9g\x00\xd9<\x80\xce\xe9\xba\x15a\xface\t\x00_\xe2\xe8M\x84\xec\x96\n\x02Z\xcd\xfb\xf2n\n\x1a|\xd0~?7u0\x19\x1d\xb3E\xee\xb9\xdd\xe1Y\x164\xf2\xc6K\xe6\x84Cj@\x88\xf3;0\x8f\xd7\xed\xd8C=|\xbc\x87y2\xf0o\x9f-\xec\x8f\xdb?\xad\xca\x91\x16[\x1d*\xb4r\xff\xf4\r\xc4\xc3WK\xaeJ\xe8\x1fo\x05f\xa7\xe7\xa3,\xa8\xd3 \xcb\xb5%]<-\xb2I\xae\x96\xd1\x82]6\xd5O\xcd\x8bG\xe4\xda}j\x9e\xb9\x92\xc5\x8ax\xfbHr\xcc\xffj\xf6a2\x91\x14\x11\x19.\xfc\xe3\xfd\x14sR\xd7\xde\x19\x88\xd1\xc2\xf76\xb0[\xee[\x1c\xa7\x939\x16o\xf0\x97\"\x89\xc3Y&w\xc2\x1c\xbc\x1f)\xff\xb2\x05\x94\x15t\x03\x00\x00\x00\x942\tL\xd7\x0f\x92\xac\xa0JLl*\x95s\xc6\xa9\xdd\x02?w\xf5\x1c:\xdd-_\xbd\x8bK\x90\x15\x18', &(0x7f0000000340)='\xfb\x00') readlink$auto(&(0x7f0000000b00)='\xfb\x00', 0x0, 0x800) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) ioctl$auto(0x3, 0x541b, 0x38) socket(0x10, 0x2, 0xc) mseal$auto(0x1ffff000, 0x7dca, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) mmap$auto(0x0, 0x400008, 0xe0, 0x9b72, 0x2, 0x8000) mmap$auto(0x3, 0x100, 0x10, 0x16, 0xacf, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(0x0, r0) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x2000c080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x8000, 0xc) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) getgroups$auto(0xd, &(0x7f0000000000)=0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2, 0x1, &(0x7f0000002100)=0x4, 0x5, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0xcf2a, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) process_vm_readv$auto(0x0, 0x0, 0x7, 0x0, 0x4, 0x4) madvise$auto(0xa, 0x8ce, 0x19) semctl$auto(0x1ff, 0x2, 0x13, 0x4) 5.864974478s ago: executing program 1 (id=1610): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x73) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x2, 0x0, &(0x7f00000000c0)=0x10000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x408005, 0x4df, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) preadv$auto(0x7, 0x0, 0x7, 0xfffffffffffffffc, 0x5) 5.18704951s ago: executing program 3 (id=1614): mknod$auto(&(0x7f0000000240)='}[,&*}\x00+Qv\xb7\xf4=\x06`0\x11\xf7\x10;pj\x81\x14m\x9d\xf3\xdaQe\xb5\xec\f\x1b\x04\xb9\xf7\x03+\xdd\xaaT\xd4\x1dG\xb3\xaa0R\xf1\xf5\x02@&\x82\xe8\x89\xfc\xba\xa6\x1b\xb6\x06>\x18\xdf{\xaf$\xcd&\x9c\xd9\x911z\xc5\xf1\x8c\xadGY\xc6^\x0f\xb9\'I5\xda\xf0%\xfb\x862G9\xec\xd6t\n\xee1\x86\xc8f\x18\xa4A\x05N:aK\x8f\xf5\x9f\'C\xc3\xf0\xc5f\xf2\x93\x19\xc2=\xcb\xf6\xaa\xd9\xebj\xe1\x12\x99k\x1c\xb6\xd7=@\xacz\xf5\xc0\x14J\xadg\f\x84\xe0\x15LK(\xf6I<\xf5\xcb@\x95\xb3\x0f\x1dH\x81/J;\nGZ\xe7\xdcP\xd4\xbcm\x92\xd5\xf2!f*\x14\xcb\x03\xf7eD\xe3,\xb5\x164\xfc\x85\x02\xd9\xba\xe4a\xe5Q\x9b\xb8\x97\x1a\x04^\x9f\x85\xfe\x1c\a\xe00\xc4X7\x05\"\xfa5\xad(\x11\xe5\x97\xc1Y\xa4P\x7f?\xbb\xa0\x124l\x80a\xbc_\x9d\xe9\\\"\xd5N\'\a\xa9\xd8\xf6.\x95T\x83\xe7/=\x85\x1e`7\xe8&$(\xf92\xb7J\xe0q\xfd`7\x18K\xab\x17z\xe1Z\xd9|h*\xeaz\xf2I\xcb\xc0\x9bd10-\x9f\xcdK8\xd9#\xba\xbc)8\x16\xa1\x117\xe6p\x86\x16\xd1\xe1a\xac\x88\xbei`\xf1\xeb\xd7\xbb0_\xfby\xf9\xac\x1a\xb3\xaa\xf3\xb3\xcc\x86\xef-5\xdbH\x8c\xe0\xe1\xb0\v\x1b(%\x80\x88X\xf1\xd7`\xb0\x81l\xae/\xfb\x90\x05>\xa32\xc1@\xbb3f\x801E\xdcGu\xe3\x13d2\xa7\xf5\xd9\x88\x18\xf4\xfa\xa2M\xa4\x97\x81\x99]\xcb\xf7\x82W\xcap\xe387~yo\xf5\xb7\xd3\xc4\xdeW\x98\xd76oTY!\xbd\xdd|U:m\x1f&\x06\x11\xdd%^\xc5f\x02\x9aj\xd0\x96\xe9^\x13q\xaf\xbcM\x9c\xa8R\xd3D\x1c7\xec\x19\xc6', 0xc85, 0x4) (async) unlink$auto(&(0x7f00000001c0)='}[,&*}\x00') mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x23, 0x80805, 0x0) (async) memfd_secret$auto(0x3) (async) socket(0x2b, 0x1, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) open(0x0, 0x261c2, 0x84) (async) fcntl$auto(0x3, 0x4, 0x9) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcb55d) mmap$auto(0x0, 0xae4, 0xfffffffffffffe01, 0x12, 0xd0, 0x8000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) r0 = socket(0x1, 0x2, 0x0) recvfrom$auto(0x3, 0x0, 0x9, 0x6, 0x0, 0x0) shutdown$auto(0x200000003, 0x653a5585) (async) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) clock_nanosleep$auto(0x1ff, 0x6, &(0x7f0000000200)={0xffffffffffffffff, 0x80}, &(0x7f0000000180)={0x5, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) (async) capset$auto(&(0x7f0000000080)={0x4}, &(0x7f00000000c0)={0x8, 0x2, 0x6}) (async) landlock_restrict_self$auto(r0, 0x10d1) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (async) socket(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 4.479796287s ago: executing program 3 (id=1617): r0 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x2240, 0x154) sysfs$auto(0x9, 0x20, 0x40) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x6, 0x4, 0x200, 0xffffffff, 0x8, 0xc, 0x66b, 0x0, 0x1}, 0x6f4) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000000)={0xa, @sa_data_min="07af03b7ba75eb248981df837039"}, 0x52) socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, 0xffffffffffffffff) 3.327933337s ago: executing program 0 (id=1619): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') setns(r0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000de, 0x40eb2, 0x402, 0x300000000000) userfaultfd$auto(0x1) select$auto(0xb, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x4, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x9}) semctl$auto(0x1ff, 0x2, 0x13, 0x1) socket(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x2) connect$auto(0x5, 0x0, 0xd) socket(0x26, 0x6, 0x3) clone$auto(0x40000, 0x8, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x8) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) madvise$auto(0x9, 0x9, 0x6fa3d1ab) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0x0) setsockopt$auto(0x4, 0x0, 0x32, 0xfffffffffffffffe, 0x0) r4 = socket(0x18, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'}) recvmmsg$auto(r4, &(0x7f0000000380)={{&(0x7f0000000280)=[0x2, 0x86, 0x100000000, 0x10000, 0x2, 0x6, 0xfffffffffffff469], 0x2, &(0x7f0000000300)={&(0x7f00000002c0)=[0x2, 0x278, 0x400, 0xe, 0x7], 0x3}, 0x800, &(0x7f0000000340)=[0x2, 0xaa5, 0x2, 0x5], 0x101, 0x9}, 0x101}, 0x10001, 0x4, &(0x7f00000003c0)={0x50, 0x6}) mlockall$auto(0x0) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_CAPABILITY={0x15, 0x10d, "f5f027f1528731b85d8a0a0f02f31b63b8"}]}, 0x2c}}, 0x4000000) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="000225bd7000ffdbdf25430000000b0002006e732f6970630000a1002501ef4e1e5b93ca995b222f6ee1e0654041f7c933dc651ffe065891b231316401298df1e3069e3fd35e6aae8cb8860f4d5276b3345b0fec6853aac860dc65b2395cb300da2250fd2ff6b4b12f79adfaf8a99e701c70c4bde869178624c2bf04df7e14f6173326420cf7c890408f283ece002f3397b52bf37f315dd6e2a4f2b7cfb5dfc4c24ec282f15b11df5d9b3237180dc9cd9a387fedc7c58e7de15fa1000000"], 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x84) 2.994965255s ago: executing program 0 (id=1620): socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) 2.690875823s ago: executing program 0 (id=1621): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x6, 0x100000003) 2.379595452s ago: executing program 0 (id=1622): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x1010001, 0x100000003) sendmsg$auto_TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000040}, 0x44004880) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r2) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf250200000008000100ffffff7f"], 0x1c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) r4 = socket(0xa, 0x4, 0x0) socket(0x1d, 0x3, 0x1) getpeername$auto(0x3, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_TX_TS(r1, 0x0, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002100), r5) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010027007000ffdbdf250a00000008000400030000000500000000f9327f3edacd4644e91ee056add68a003c6fecd8a49f373b83416d7630f5da14fd862cde4e6cb030a52c648e190f168bee836dce7176eb7f66c48de07550d0f9c38f46e2edeb68c41ca804927e3aba67e50084709aa25520e9ce908e0b1a578ddf51d6b73ca742025fc6198f1b763357fc8ebc83dfb25b550af751dc96764b1e9090f1ebe1b9d50afb479610e8a0718d6a0d930c8f2f8cacbd73503880a2fdbfd5e548791e39aa86b1c9ea5863c3877a7b"], 0x1c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000870) sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="dc020000276c196ee7a92fd3009e9a8fc48c20e5e4ef56d79d62d70b41bec7a23e14630b90f461035e400cb3fc59c142a7d8e25ae656f33911d84f633d7d2910b208dc65c4b6ec91fb6feb24fb3f46d56bd82a5ed0da0636d8b430e660a27ed60b2752008c5464b392e5f0f562486543dcd20480c8a003e5d2bec7457a4ee0fd54d25d143c65e84876859c368202dfe2e207b212bd3601bdca71aceef622a0d309ba988404d5f7bc4dc33dba08f78efc364046604e5121f29a", @ANYRES16=r6, @ANYBLOB="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"], 0x2dc}, 0x1, 0x0, 0x0, 0x1}, 0x442) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) mmap$auto(0x3, 0x7, 0x5, 0x19, 0xea4, 0x400) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'erspan0\x00'}) 1.97905581s ago: executing program 1 (id=1623): r0 = socket(0xa, 0x801, 0x84) select$auto(0xffffffff, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x9, 0x3, 0x5, 0x2000000000000002, 0x9, 0x5e58296f, 0xff, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) connect$auto(r0, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed44adc7fe80004400"}, 0x58) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xc, 0x3ff57696, 0x9b72, 0x0, 0x8000000000008003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0xd, 0x9, 0x9, 0x6, 0x7fff}, 0x3b) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x801, 0x106) r2 = syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f00000000c0), r1) sendmsg$auto_IEEE802154_LIST_PHY(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000a00", @ANYRES16=r2, @ANYBLOB="000825bd7000fddbdf252000000006000b00e21f0000"], 0x1c}}, 0x4000040) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pipe$auto(&(0x7f00000014c0)=0x6) open(&(0x7f0000001500)='./file0\x00', 0x20040, 0x0) pipe$auto(&(0x7f0000001540)=0x8dde) pipe$auto(&(0x7f0000001580)=0x5) preadv2$auto(0x8, &(0x7f0000001600)={0x0, 0x8}, 0x10, 0xffffffffffffffff, 0xa964, 0x8) mmap$auto(0x6, 0x6, 0x2, 0x17, 0x5e62, 0xd71) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) socket(0x3, 0x3, 0x4) mmap$auto(0xfffffffffffffffd, 0xdaf, 0x4000000000df, 0xff, 0xffffffffffffffff, 0x3f) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x200], {0x0, 0x1, 0x8, 0x7, 0x5, 0x5, 0x1, 0xfffffffc, 0x7}, {0x4, 0x1000fff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) sysinfo$auto(0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) close_range$auto(0x2, 0x8000, 0x0) connect$auto(r0, &(0x7f0000000240)={0xb7, @sa_data_min="81b8f23a1f254ea818acffeac1cf"}, 0x80000001) 1.403948756s ago: executing program 2 (id=1624): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8e6}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xfe}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x3a, 0x84, "eda96e38c96d81972941e9f772d33cb0b9accd679019ad3c51d32cd3d5bf31e9345a4c0e4188014d1f4f59a2cc9196e9b0c0a30e6b40"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000000180), r0) sendmsg$auto_IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004804}, 0x20000000) madvise$auto(0x7f, 0x7, 0x7) r3 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f00000002c0), r0) sendmsg$auto_TIPC_NL_MON_SET(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000020}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x144, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NAME_TABLE={0xc9, 0x8, "99f8b5814731d1a5485acf7cfc5ca38ea9c0b96385de3e4d48866a0eeca892d979aecae5d7437f181cd518ccde1eef48271c15b1931c8d0cdb26ddb07ac60c1e1fb77a433473ddf7043454abbaff461f0c6d5d35d9dc4bf9c73746e02ef8b379733e65c6740733e41ddfc44f29bbbdb885e32da4e6dea86bc75c384aa1768c825d7c8d94d2aa42bbd3ba28ec89ae74e28d11cd392f6bbed91f4ec3943ff412a647f28e8bb556118642a4a91090c2a7a351c18d063e6834db74851f961abfdf126a64c347c4"}, @TIPC_NLA_MEDIA={0x61, 0x5, "445e7d2b36b079656ca4fd1c0388c37fc7ad84167cd55bbcd58b82ab2df0f10fc3b8282e84a988b2e196913f772e8bfd8a9f0666aacc721683fef16c04a85aecd3cdc7965110e6fd65fbe78d0735b89b5b3490db5b4d7521bbb5e1135c"}]}, 0x144}, 0x1, 0x0, 0x0, 0x4040800}, 0x1) madvise$auto(0x4, 0xc, 0x8b2) ppoll$auto(&(0x7f0000000500)={r1, 0x4, 0x2}, 0x5, &(0x7f0000000540)={0x8, 0xfffffffffffffffa}, &(0x7f0000000580)={0xf0}, 0xffffffffffffffff) fanotify_mark$auto(r0, 0x0, 0x6, r4, &(0x7f00000005c0)='802_15_4_MAC\x00') fsconfig$auto(r1, 0x40, &(0x7f0000000600)='%&\x00', &(0x7f0000000640)=[0x2], 0x3) dup2$auto(r4, r1) sendmsg$auto_ETHTOOL_MSG_MM_GET(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_MM_HEADER={0x7, 0x1, "ea65b7"}, @ETHTOOL_A_MM_HEADER={0x7, 0x1, "923ef6"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) getsockname$auto(r1, &(0x7f0000000780)={0x9, @sockaddr_1_1={"01ce82ae8b2cbddb7a1ad99253ccd0c38b683ad4c938d62393a13774fcd8b1e37d15ca1707ebde2d1a3dc87f9cab5058025dfe4c86492447d2c9019235037d5431eb4a018a258bd24632ee59881524107f15fbd6c896efae8b9906f6ae83b5d02fc97c8a755f8d480500e4cbc81dfbb840eaaa3b077942126431c9aeaf1c82a3e354345a1cde142e4d0573abd2488250c1cc0e52316928f41a79a6d02c9796820c16a4c466a4a1a14e283da94023a2d9de89ed"}}, &(0x7f0000000840)=0x7f) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000008c0), r0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r5, 0x4, 0x70bd25, 0xfd5, {}, [@ETHTOOL_A_DEBUG_HEADER={0x7, 0x1, "fa8510"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000045}, 0x4001) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), r0) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, r6, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_CSA_IES={0x39, 0xb9, "ef8d1fdadce57300f402e8cf6ce50ab9ec061a5d39533cc21c6054aad3b9a024498c802aaf38a1faecc066a7e6c64cb03b79912ec6"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000b40), r1) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xe4, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x40}, @NL802154_ATTR_SCAN_PREAMBLE_CODES={0xa5, 0x22, "3263b18a2b5cef029c1f349bdc249ef249a48882a7018a1b69cd6ef0bebd4e6412da60b6bbffaaa24538ca90898fa77fc73b6cfdd7e5ac068017fd7f41e3e06253c73341226a217890c5802bde3de8f1146bb89ffdbd402e0bc30a4913748171c8777d60d6168dde322c02647cc6259ce472d1119df03b03713bab0699c1ed1bce953b9b3ca8952126dbe3950f77cf6354d45183849d1d3914a388158e65bb37b5"}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x93}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xf}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008040}, 0x800) mmap$auto(0x7, 0x7, 0x6, 0x19d, 0x7, 0x8) r7 = socket(0x2c, 0x80000, 0x6) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r7, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xd0, r8, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x800}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_COORDINATOR={0x87, 0x1e, "3b15c773e90b719dac10b38f1b5dd382c8e0c4de23047f7801b308b25a3dc02ad3bc58fe7be44289df30776e4d449b1d89c68ac17e25eee5213bcddea959736f2da4a6e1642538ffa9f0d1f5e2a018b576086595eb3dfd1666ab63c9f6b4fe558ebd5b6558e4b9b7001e9d7afd17cad5961036414069ddc7b14abcb1c75b587daef3b7"}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000f80), r1) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000001040)={&(0x7f0000000f40), 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x38, r10, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xb, 0x2, "e557714700b98d"}, @ETHTOOL_A_STRSET_STRINGSETS={0x17, 0x2, "ef7ba558ac9bb7f5adbfa8e36b0599493e3d16"}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x1, 0x5, 0xaa1, &(0x7f0000001080)=[0x8000000000000000, 0x5, 0x6], 0x0) statmount$auto(&(0x7f00000010c0)={0x6567, 0x4b93, 0x7, 0x6, 0x5}, &(0x7f0000001100)={0x2, 0xc000000, 0x8f, 0x6ce8a3d1, 0x4, 0x540, 0x8, 0x7, 0x400, 0x100000001, 0x6, 0x0, 0x2000000000000000, 0x60000000000000, 0x8, 0x9, 0x8, 0x5, 0x8, 0xa3, [0x8, 0x100000001, 0x6, 0x80000000, 0xd, 0xb49, 0x70d9, 0x10000, 0x9, 0x4, 0x4, 0x6, 0x67, 0x1, 0x5, 0xeb7, 0x5c5, 0x40, 0x7, 0xfffffffffffff800, 0x3, 0x2676, 0x2, 0x7, 0x7, 0x5, 0x2, 0x2, 0x7, 0x1, 0x401, 0xc, 0x8f6b, 0x6, 0x9, 0x42, 0x5, 0x6, 0x3, 0x5, 0x7fffffff, 0x794, 0x2, 0xfffffffffffffff8, 0xfff, 0x60, 0x8000000000000000, 0x5, 0x2], "3c2f1efd26caed3dee3393ff3bf4ba6477c5e74ba0f80b35222216046fb7f45042b937c57d5f8e33cb25455144f42a6c27e31789cd038b9255a0c5f6e9d5c7be35f5edf354c3f8ed01b687553c18ae8bd519b737266448292244e67222e10f8ce61853b2a9b9fe222cc8280212383179e831ca6ec3e0a0b5f3f12020a5e84763e08902d0e22d4bc1c92dcb4cefdea230ed6a5c847e1e3c3bbad266649cd7b7b64d5f2f021b098cd3826e6134e972c5b5eca4c87c8ffbd7c1c094ccbef30ec87593985b131fc340ef7f8cbf5c3c23de4562cd2cfc66aecbb76162696450f96ecaa24ebbcdbaaa880c7df663d51822c62774ba0ad8e6583e6d62ac8021e4d0f80d4873819dd502e88e159be914b9f6209f44588839ac7a46424a5310d3afb3dd3600d395cd5da77c0b3b947d5583316f839f260c47e92965daed974190a38e2e65b0d898143e3e4870965a8b8c462a47214721e676a028d464cfb634ca484538f5c42d023a7c1d2d87eb455a39a5790aa215839a8930ac7ff8e52d75fa785c87b13f286c287018fdb76c7951fab99f87e2e51ee612f9ef8c9fbd06fbb58a0b893e296c60be4274a82eaaf0d0a1e06ca0cb0c9faeed67c156d46a2d8fd20e6708ef3f8360c3c4d3a7c827533603b2d7413f89e8d631b245d6780d0bd3ba936677ff63a835d450118af538a8cfc5a8fada15bfae5552445fe9ba407c417b8beb762c71508496ca03fd5642dc09a6d4ab5e9cfd666bcb67b7d7b198b469ad939ca89a0eb93b6b16d9f4af7c78f4baf108853922cad20c95d3d3390aebf5aa89e49440c76413c4ecf912693d0e0ec1a4eb8d68f58247a9764d94470c9b7e14cd94838350651f0d418d66c29763b670be02a9afbaab78a333875250a90149c9f099ca4d5c4d4818e8bedf4a1e2b7fb9eea2c9af9557b23a2cfcaa5357326f3bcf805ebdd8d2123bd6f1dd8d55455c38cd38965e57e1a487238a9eca729162f282f0f986e45f5157a765e4829c9330a20b3fe0f12109f124a465889aba4873dbecf93b22c98cb8b85efe069fa5d858c3993696646abf2db4f38d4d44c79e0c6c9d5fb12875eeb1705cd1336b29a1b12bee50a063d139cc1391a1c4beeb0f9afdb49d21f23558798a8fa7a7573e5710a5d171e10b673bb5a119e2915512e5dd45b45fd22887dd988db71ee051306ec00ecd500b08fad23cf91d2b667416bd30f2919df9d6db77201cab5edba9e3f5af370bed33c7dcd89fcb8787cfb016a83665249c38aa824f79d54bb0928ee42756cdfb5f1d6973689432414e98cde160bb22481d0879882e6bf079756c41aee2bfb56616a1a5debe48b263aa56ac448a10a47d052d5b8b5a1c20a45112890fcccb076c8d920f0a7ee98204265dc9b0128da9ff93f1201a8e32613ca21cf5130c422d7b74dc2040b09eb2a8eb9dc4a6a18de2ce2274c0d0ca7e6f299bbbf8349840ecd83d2bbdc823dc1832b3a69d99b974bf92f640dfe632fd91e63869ec1122134dd5f5dcabda0b892ccf6520b4631111a40c497045b49d1006b3a3d7c9fee1ab863f8e7591d7dc30ddeda0d921ce71e94cf9437c7c597e6806fc1b81a8512064059ef039f63d474387d48310735d4ca343d4b48742801743b6a47c364c290a62286daad55b75555c0fa91ee99d7adad1e0b18f9fe5cd862d812b54b7d5dcef21600ed685fefccfd7e13e0dbc78dc2cf78c4ae99af20bfecb8940ca6ded10fafacfa627b5e70604fe50a8f7a1bb8a5996bba136daef5c5397d140e3707bf52fcb7c4cc8428677ccc95e5ee7f67328824712add931b4f252eb74a48579f20a03d95b1b6580cca27551a1fac7652d8a968ac3dcd2c4101d1a7b837e16364331ca5b7fff73e762e9d856a2f66fd2233485feff471017a63793c4e82ad605c58cbbd5aadaa3adda04e151039301e79f680a4d48e5f1b7eb80894d8daf200c02c37f9dd89c9aa74eb62591faa8c0d96cb8ec1d19a2c0e26f4fb7d1d32f7bda4eca6ef274b4b6bfef7d35b95d9835d14931075017883fd25d380de3132d8970190c3ae89f31bd989ab70a7f4bac91c9ce930ce2b2fd07ad61751deb834019b7a06d8c64037a7eb076cbabc95310107a839646601e6bdfd2383780d949003b8686e3e126911bbfa04e58f185d920d9b152dbb15214995442cbb4e3bd43d3ca28a456e738ae294f7f10733b054f1ffa32bd7c1aa7576148c00c27be95f5f20c5175f9559ef7516fe1ce8f069c80aadbe0e655be735a12f09301f01c3993451365e62f77b2797323315856d5456cd4c89aac661a9ea4cc4f637ea483507a9e4ef91c37a8f7268511ae7f0e5da2804055bea5bb373f2fcedd7a8d80b4b7783311aceb8fcb39f30e7f6bbd7bd8e3a13850303d60dc12febd24fb738c8d3b6d006fffd02adc8d8fa5fed1aa3a69ebd1b406aa3e8bf686e2e2ad39f11820117c662e3a1beef81280a337feeba8b9a4c007508d15ec11cf39b702c0318e0e616ecf475da48ef96fcec8413a478e948f8268ead90061b4c1d821bba46dd58672b02dd7af8d42fd1161eb1f523e9a8cc5fb50904304d14e748298c3418a0e3fc546198de842b877ea4e7f1630c710250e3ded94c8dbce8f11402d2c5e3e2226d8dd631b57d616213abf2355770acdba7a987a3b878d6877896052a5d824ab414ae9f24dbaa5af4075b9094d1c06f3f6254b41037b83b3c26cd4f94921cb998ae120977699ef7017b73ea2b63f6465d657aee80635e1708dcb81042625a2503fc10e783e16bdf93587eda16bfe0054de90cf6ee80e67da782473815de9523388f69af1c0096dbd28ce237d8afcf017aa1bb93c3f9bf3070b11b44086a64da27a8cd43be29f5883de8583ef76f23e67476cf9a4a1908eabdf10f70e9b9e735572a8bd0cd803e53a4a53f295b9555c7854d11f42f7a5439925af0f699981c85b861005150730b0913651ef00493a0d35d893d55794117e891896552d514f6847ea6f0f79731babbcf5212cffcd7ab72fa7fff8b6146d33876935d41365202bee8afd4e62a2dfde75a125b2b0d1b54b5fb0906ae3240b37bf5797d702ca5a43c489ec1857927875d951b9bd43da18b0d2350a8bfb785deeaee471ca2f35b730809f6a9cc14dec655823063ea4357e7c7796ac96d613eb7cd797d9533c05eaa384a5582f1d6804460fd29eaa842fdcf8b0d50836f0b066c4a5fc579d00f7177ca5ce234ecae92a2abe41ff2034ac432226861bc5246b20ff3496dd43a8ebe97ecba3b56d69a371bb6b396fb6f6df45d9dc41435cc4b6168fdbc12c36a0cfab6e7d89d0374d7d13933baca553476784298100461756a21c1dc1606f09f1c17ac81b9747631db438a077f8e65e966899defdd76dd7f952737c5f7ecd42e8a43b4f3da2582dd066a2b03099ca21f466a4bbb8b3864edfa5a7b12de923be76f25cc48b24f7a9f7cb67c3afa9a516ed33916b68d3c7d9ac1f6e4705ea92e7eaa2193bd7aa136ea6534e7310e9a39520a64085eafb37e4d749da54dde28459e47d5929bdc27f9ee391b89abd4d51e3a1580bde9aa9f09a3399ecb7087ca697f4a6fb758392f59fac8aa0d6db5c3bfa533f5b7d52fc7c0b5400ca9bb78ac203465a4e9461e79593033b281935bb847fafa6ec3e5c5c722455780b4c3390acf013df327861d3dc351dcd24d4b7aae5aac09cbfc21998420d76e8701b9f4d61e6d9eeb426a40dd582f9f5fba0fc47e45f80e3ffe1108891ec04ae43e47f87f0f4fa35dcef50a59579b0fd37aec6b37062fc3e00b3a40ec19b2475a93cd5e0a934ba752e0042c8b99b55105639e77ed82407b0ff929c1efa4e3e084af0dc45ffd3683d9cd955d8e2404cc8ca2b3d271791b4645a48e3d6a2c9831486d5dd46beb7fa41d22f10e7499a87b7274ff50395342b99c8b8da4e2c62c3eec977f2542453adfc9cd06886c1472dac0fc509c239ea720c57cdab8d1df11709794eba4d276b300b6fdc1dbd983e58406523bfbdc86738c5d6c62a0e7e6ba6eeb700b10e0fc1849a4a70e3b58c908c5abe1a1fd23a301fefd7e24e6909cce58392c9d10f47e6a1d81864913ce60df6a1132f5c9e6d95931c10daadc0d3faed1af42f37d98b8c4b6962cb84c5f5fa907669ae1dee3de6d43f0eb93093025930c78c136ff3ea1032a8ac7e3d75450f193809e5e87b33f09b3e9eb00188e00f3e722d189a5688cae581781b29e481170376a9c1e9c3a3953b011b99b1c2afdb92bf442aa90a6aff35f0b497eb3c03723025c5b76ea867b21e9ffc8ae2963629402f69543919c10b26875d54ddd1f7242e2bb27821986b12873f6705a32f5f6e679bf414b09ba9238d8b482e77befcc444657d89385ee2471171915ad755a17087339543064317ade492ee9488aaac61fd5f89754e02f2b11a9079e41ad44fbf297911c796c56a2ed71b655a744309b657855a6e260d099b25fd566b610d483a0dc13ccab91fa1b3f0e1b172c24254d635163329ebbb583a3337a8bf28f7e94a729bc39d3fc9de51c607b86f8c0cc91f27549b44be559dabadf16bc6167f82bcf88a53a93349620cdf4f6543bed70ada04391329607eb608ade56389a3bad086c5465b2849d9b89ecb17f06c3f463c60d9ca6d0ade196d673d36a359a5acd728e8da619a9717dc22274c9f3e539c318b39966850d3113ec8bb2519fa72d720362d781c8fbd216bd3502319bddd8670ac3631c6313bc72d5d88e7d42b041a887fd9ca3a5bcff616dd88e3a0a14221ef2928ae838b469b774246ad4ac9e2b50d7050c7d77cc97256a0adb661e16adc1b7c6c383f1b89d0b0dc3b2ee810e8923421c0d0d415bb4d783aa795da7428fa4ba17b73e5fb888287da79c6a8db8040aefac5ed17e438fb7cddd57da88c74b48776a531b6e26f7afafe409dea07d996d9aea3b91e6d53053b3f84c556fc03fc8c795d0bb9b048a0def529ef29130391d1f8f4f9694a03eb0a017210b0e84f98b560fc2ff4781687c08dded9d1200041a06c2765deddfdc82a9f0feab4e0ceebbcf060f2c04916cb077760c6fda0c733ab6ffe67af02a75bdb234a344043def3ef23acd63a055261b6a7d56bbcca808d61036c7b5c703ca6c6634e3d7fbf67088db8a59e81a90337a8347d846e8338784a2f589103bca407a69ecaa401289bd9da3b9c033ff8143585dddf15bb0511ca4b8218604defb632f43d68835c60cfe45778863e590c749e9489ab39efb1c9ca6ad2d410b6eb3e9f2f6b6c675a31852da1ab5a4f6265e72aac966e4e62c360c474b0efb6f94da8d9a8d119a6f85f4ae34d3033fe27457a5da1613dda31b7094b379a3b9ad573d0ea54cfd6db62ec555767070f282255055c263e391acfd9df38e328fcc0cc3442f5d8869496495d2dc961c8c1c2a99c339b74d7917ab1cb6051a8b47ab49cf39278d7e6c7c609bb77d20db0a911900f815d648909adbee4fdaf79b56908fe83df0aff81bfc5d8fc11bced3bceda853a8aa90d0499f196256c3e307693063919c0df59cf811cc3c11f6a0484c6c1e1d7cee2cf62c4e49e74ffbb0f07b4b892fd197f09d501f8d2988b827782b4df9188b6e3907d253caf617b57643143c19929028a7c1d6d4cda32d2b9f39281579cfc87b6e27619b7313ce6939ef27331cb2cd83dcb5a4dcf2fcc9f7b40e0e92ed2821d58b6e40001b7e1f27f040d010714e393f29749f6174f59b155edb30e21965df657c4cd957eb7e22c03522df5260d5b50823afcbbe1a6448e67af8859b2a33cae3df319247e9e23f306770582df2ffda26edaf89de876b4"}, 0x0, 0x7fffffff) 1.005173643s ago: executing program 0 (id=1625): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000000)='./file0\x00', 0xe63e, 0x20) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x73, 0x0, &(0x7f0000000080)=0x9c8) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r1 = socket(0xa, 0x801, 0x84) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x44084) close_range$auto(r1, r1, 0x2ffffc) pidfd_open$auto(0x1, 0x0) execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 285.069648ms ago: executing program 0 (id=1626): open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) r0 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) io_uring_setup$auto(0x2, &(0x7f0000000000)={0x4, 0x7, 0x0, 0xa4, 0x4, 0x0, r0, [0x2, 0x3, 0x1], {0x4, 0x0, 0xbf1, 0x0, 0x4, 0x3, 0xa9a, 0x101, 0x9}, {0x7, 0xc11, 0x9, 0x8000, 0x7f, 0x5, 0x6f, 0xff6, 0x8}}) io_cancel$auto(0x3, &(0x7f0000000080)={0x163, 0x146b, 0x5, 0x5, 0xf79f, 0x5, 0x1, 0xf, 0x5, 0x0, 0xc, r0}, &(0x7f00000000c0)={0x9, 0x6, 0x69, 0x22b1}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000228bd7000fddbdf253e00000008003f0009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40800) bpf$auto(0x8000000000000021, 0xfffffffffffffffe, 0x0) sendfile$auto(r0, r0, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8000, 0x0) 0s ago: executing program 2 (id=1627): keyctl$auto(0x20000000000001f, 0x20000002, 0x100, 0x13, 0x8) r0 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)={0x20, r3, 0x413, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r6) sendmsg$auto_NETDEV_CMD_DEV_GET(r6, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fedbdf250d00000008000100bc"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x28044004) sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x30, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xc}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0xb8}, @OVS_DP_ATTR_NAME={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x30}}, 0x20000000) keyctl$auto(0x20000000000001f, 0x20000002, 0x100, 0x13, 0x8) (async) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x2, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) sendmsg$auto_NL80211_CMD_NEW_KEY(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)={0x20, r3, 0x413, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r6) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(r6, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fedbdf250d00000008000100bc"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x28044004) (async) sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x30, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xc}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0xb8}, @OVS_DP_ATTR_NAME={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x30}}, 0x20000000) (async) kernel console output (not intermixed with test programs): _sendmsg+0x10/0x10 [ 458.842869][T11115] ? netlink_recvmsg+0x81c/0xf30 [ 458.847844][T11115] ? __pfx___lock_acquire+0x10/0x10 [ 458.853098][T11115] ___sys_sendmsg+0x135/0x1e0 [ 458.857828][T11115] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.863110][T11115] ? lock_acquire+0x2f/0xb0 [ 458.867663][T11115] ? __fget_files+0x40/0x3f0 [ 458.872295][T11115] ? fdget+0x176/0x210 [ 458.876398][T11115] __sys_sendmsg+0x117/0x1f0 [ 458.881038][T11115] ? __pfx___sys_sendmsg+0x10/0x10 [ 458.886286][T11115] ? __x64_sys_futex+0x1e1/0x4c0 [ 458.891283][T11115] do_syscall_64+0xcd/0x250 [ 458.895832][T11115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.901771][T11115] RIP: 0033:0x7fc2ee97dff9 [ 458.906216][T11115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.925865][T11115] RSP: 002b:00007fc2ef7da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.934316][T11115] RAX: ffffffffffffffda RBX: 00007fc2eeb35f80 RCX: 00007fc2ee97dff9 [ 458.942317][T11115] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 458.950314][T11115] RBP: 00007fc2ee9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 458.958313][T11115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.966312][T11115] R13: 0000000000000000 R14: 00007fc2eeb35f80 R15: 00007ffc59ea7a98 [ 458.974328][T11115] [ 459.961342][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.451975][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.821608][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.329359][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.585572][T11142] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 461.613666][T11142] CPU: 0 UID: 0 PID: 11142 Comm: syz.0.1242 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 461.624543][T11142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 461.635013][T11142] Call Trace: [ 461.638353][T11142] [ 461.641326][T11142] dump_stack_lvl+0x16c/0x1f0 [ 461.646092][T11142] sysfs_warn_dup+0x7f/0xa0 [ 461.650666][T11142] sysfs_do_create_link_sd+0x124/0x140 [ 461.656205][T11142] sysfs_create_link+0x61/0xc0 [ 461.661049][T11142] device_add+0x62e/0x1a70 [ 461.665565][T11142] ? __pfx_device_add+0x10/0x10 [ 461.670494][T11142] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 461.676478][T11142] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 461.682572][T11142] wiphy_register+0x20d7/0x2d30 [ 461.687527][T11142] ? __pfx_wiphy_register+0x10/0x10 [ 461.692838][T11142] ieee80211_register_hw+0x2959/0x3fb0 [ 461.698462][T11142] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 461.704391][T11142] ? rcu_is_watching+0x12/0xc0 [ 461.709234][T11142] ? trace_hrtimer_init+0x19d/0x220 [ 461.714554][T11142] ? __hrtimer_init+0x106/0x2c0 [ 461.719497][T11142] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 461.725343][T11142] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 461.731516][T11142] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 461.738203][T11142] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 461.743758][T11142] hwsim_new_radio_nl+0xb42/0x12b0 [ 461.748958][T11142] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 461.754605][T11142] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 461.762063][T11142] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 461.769543][T11142] genl_family_rcv_msg_doit+0x202/0x2f0 [ 461.775215][T11142] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 461.781408][T11142] ? bpf_lsm_capable+0x9/0x10 [ 461.786344][T11142] ? security_capable+0x7e/0x260 [ 461.791379][T11142] ? ns_capable+0xd7/0x110 [ 461.795874][T11142] genl_rcv_msg+0x565/0x800 [ 461.800480][T11142] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.805593][T11142] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 461.811255][T11142] netlink_rcv_skb+0x165/0x410 [ 461.816100][T11142] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.821218][T11142] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.826612][T11142] ? down_read+0xc9/0x330 [ 461.831035][T11142] ? __pfx_down_read+0x10/0x10 [ 461.835889][T11142] ? netlink_deliver_tap+0x1ae/0xcf0 [ 461.841266][T11142] genl_rcv+0x28/0x40 [ 461.845329][T11142] netlink_unicast+0x53c/0x7f0 [ 461.850179][T11142] ? __pfx_netlink_unicast+0x10/0x10 [ 461.855548][T11142] ? __phys_addr_symbol+0x30/0x80 [ 461.857227][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 461.860627][T11142] ? __check_object_size+0x488/0x710 [ 461.872242][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 461.873043][T11142] netlink_sendmsg+0x8b8/0xd70 [ 461.881821][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 461.884758][T11142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.895039][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 461.897168][T11142] ____sys_sendmsg+0x9ae/0xb40 [ 461.897227][T11142] ? copy_msghdr_from_user+0x10b/0x160 [ 461.905198][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 461.908951][T11142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.909012][T11142] ? __pfx___lock_acquire+0x10/0x10 [ 461.909071][T11142] ___sys_sendmsg+0x135/0x1e0 [ 461.915357][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 461.921592][T11142] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.921673][T11142] ? lock_acquire+0x2f/0xb0 [ 461.953793][T11142] ? __fget_files+0x40/0x3f0 [ 461.958485][T11142] ? fdget+0x176/0x210 [ 461.962632][T11142] __sys_sendmsg+0x117/0x1f0 [ 461.967318][T11142] ? __pfx___sys_sendmsg+0x10/0x10 [ 461.972523][T11142] ? __x64_sys_futex+0x1e1/0x4c0 [ 461.977568][T11142] do_syscall_64+0xcd/0x250 [ 461.982166][T11142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.988149][T11142] RIP: 0033:0x7fb0d277dff9 [ 461.992627][T11142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.012309][T11142] RSP: 002b:00007fb0d356c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.020804][T11142] RAX: ffffffffffffffda RBX: 00007fb0d2935f80 RCX: 00007fb0d277dff9 [ 462.028850][T11142] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 462.036882][T11142] RBP: 00007fb0d27f0296 R08: 0000000000000000 R09: 0000000000000000 [ 462.044916][T11142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.052949][T11142] R13: 0000000000000000 R14: 00007fb0d2935f80 R15: 00007fff58bba1e8 [ 462.061028][T11142] [ 462.170695][ T11] bridge_slave_1: left allmulticast mode [ 462.196096][ T11] bridge_slave_1: left promiscuous mode [ 462.212111][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.268370][ T11] bridge_slave_0: left allmulticast mode [ 462.274352][ T11] bridge_slave_0: left promiscuous mode [ 462.292704][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.549043][ T5251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 463.560077][ T5251] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 463.586923][ T5251] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 463.603419][ T5251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 463.613359][ T5251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 463.621497][ T5251] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 463.734084][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.753152][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.767024][ T11] bond0 (unregistering): Released all slaves [ 464.017329][ T5251] Bluetooth: hci0: command tx timeout [ 464.700779][T11145] chnl_net:caif_netlink_parms(): no params data found [ 464.803715][ T11] hsr_slave_0: left promiscuous mode [ 464.809954][ T11] hsr_slave_1: left promiscuous mode [ 464.816186][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.824520][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.832811][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.843934][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.863447][ T11] veth1_macvtap: left promiscuous mode [ 464.869161][ T11] veth0_macvtap: left promiscuous mode [ 464.874780][ T11] veth1_vlan: left promiscuous mode [ 464.880284][ T11] veth0_vlan: left promiscuous mode [ 465.355511][ T11] team0 (unregistering): Port device team_slave_1 removed [ 465.401938][ T11] team0 (unregistering): Port device team_slave_0 removed [ 465.709378][ T5251] Bluetooth: hci1: command tx timeout [ 465.855865][T11166] chnl_net:caif_netlink_parms(): no params data found [ 465.869201][T11145] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.876465][T11145] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.884714][T11145] bridge_slave_0: entered allmulticast mode [ 465.893398][T11145] bridge_slave_0: entered promiscuous mode [ 465.935391][T11145] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.945514][T11145] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.953016][T11145] bridge_slave_1: entered allmulticast mode [ 465.960611][T11145] bridge_slave_1: entered promiscuous mode [ 466.099137][ T5251] Bluetooth: hci0: command tx timeout [ 466.150169][T11145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.191210][T11166] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.202978][T11166] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.213514][T11166] bridge_slave_0: entered allmulticast mode [ 466.230801][T11166] bridge_slave_0: entered promiscuous mode [ 466.244688][T11145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.271658][T11166] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.284529][T11166] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.295687][T11166] bridge_slave_1: entered allmulticast mode [ 466.311290][T11166] bridge_slave_1: entered promiscuous mode [ 466.375893][T11145] team0: Port device team_slave_0 added [ 466.384440][T11145] team0: Port device team_slave_1 added [ 466.400378][T11166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.415827][T11166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.475062][T11145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.489809][T11145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.516398][T11145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.529458][T11145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.536464][T11145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.565471][T11145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.621556][T11166] team0: Port device team_slave_0 added [ 466.634396][T11166] team0: Port device team_slave_1 added [ 466.665892][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.704030][T11166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.711421][T11166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.738427][T11166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.788796][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.805504][T11166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.813218][T11166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.839771][T11166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.855454][T11145] hsr_slave_0: entered promiscuous mode [ 466.866391][T11145] hsr_slave_1: entered promiscuous mode [ 466.906751][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.994922][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.035491][T11166] hsr_slave_0: entered promiscuous mode [ 467.047588][T11166] hsr_slave_1: entered promiscuous mode [ 467.055657][T11166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.063903][T11166] Cannot create hsr debugfs directory [ 467.331026][ T11] bridge_slave_1: left allmulticast mode [ 467.344154][ T11] bridge_slave_1: left promiscuous mode [ 467.351498][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.368837][ T11] bridge_slave_0: left allmulticast mode [ 467.374567][ T11] bridge_slave_0: left promiscuous mode [ 467.387818][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.781108][ T5251] Bluetooth: hci1: command tx timeout [ 467.843018][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.854737][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.866493][ T11] bond0 (unregistering): Released all slaves [ 468.185152][ T5251] Bluetooth: hci0: command tx timeout [ 468.373083][ T11] hsr_slave_0: left promiscuous mode [ 468.384123][ T11] hsr_slave_1: left promiscuous mode [ 468.397396][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.404887][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.419771][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.433031][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.464389][ T11] veth1_macvtap: left promiscuous mode [ 468.474147][ T11] veth0_macvtap: left promiscuous mode [ 468.481955][ T11] veth1_vlan: left promiscuous mode [ 468.492575][ T11] veth0_vlan: left promiscuous mode [ 469.000760][ T11] team0 (unregistering): Port device team_slave_1 removed [ 469.052625][ T11] team0 (unregistering): Port device team_slave_0 removed [ 469.720332][T11166] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 469.747672][T11166] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 469.785584][T11166] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 469.807584][T11166] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 469.858129][ T5251] Bluetooth: hci1: command tx timeout [ 469.898175][T11145] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 469.918542][T11145] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 469.941628][T11145] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 469.970084][T11145] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 470.049568][T11166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.075749][T11166] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.100189][ T7667] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.107426][ T7667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.146754][ T7667] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.154021][ T7667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.228542][T11145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.257053][ T5251] Bluetooth: hci0: command tx timeout [ 470.319193][T11145] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.372869][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.380123][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.409075][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.416252][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.626330][T11166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.716526][T11166] veth0_vlan: entered promiscuous mode [ 470.733364][T11166] veth1_vlan: entered promiscuous mode [ 470.801262][T11166] veth0_macvtap: entered promiscuous mode [ 470.823944][T11145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.840526][T11166] veth1_macvtap: entered promiscuous mode [ 470.878787][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.890526][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.901474][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.913223][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.924566][T11166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.959251][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.970292][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.982703][T11166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.994276][T11166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.006598][T11166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.030458][T11145] veth0_vlan: entered promiscuous mode [ 471.049555][T11166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.077097][T11166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.087858][T11166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.100591][T11166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.113644][T11145] veth1_vlan: entered promiscuous mode [ 471.214142][T11145] veth0_macvtap: entered promiscuous mode [ 471.250840][T11145] veth1_macvtap: entered promiscuous mode [ 471.271876][ T7667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.289564][ T7667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.296426][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.323877][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.336927][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.350538][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.361028][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.372062][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.383982][T11145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.440680][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.450769][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.456375][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.467097][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.486421][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.504349][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.515688][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.526783][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.539466][T11145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.551087][T11145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.560025][T11145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.569534][T11145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.580342][T11145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.856106][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.885991][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.938037][ T5251] Bluetooth: hci1: command tx timeout [ 471.966771][ T7667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.067175][ T7667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.291122][T11343] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 473.374199][T11343] CPU: 1 UID: 0 PID: 11343 Comm: syz.2.1252 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 473.385078][T11343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 473.395204][T11343] Call Trace: [ 473.398538][T11343] [ 473.401533][T11343] dump_stack_lvl+0x16c/0x1f0 [ 473.406298][T11343] sysfs_warn_dup+0x7f/0xa0 [ 473.410871][T11343] sysfs_do_create_link_sd+0x124/0x140 [ 473.416383][T11343] sysfs_create_link+0x61/0xc0 [ 473.421198][T11343] device_add+0x62e/0x1a70 [ 473.425659][T11343] ? __pfx_device_add+0x10/0x10 [ 473.430547][T11343] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 473.436581][T11343] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 473.442670][T11343] wiphy_register+0x20d7/0x2d30 [ 473.447584][T11343] ? __pfx_wiphy_register+0x10/0x10 [ 473.452846][T11343] ieee80211_register_hw+0x2959/0x3fb0 [ 473.458356][T11343] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 473.464227][T11343] ? rcu_is_watching+0x12/0xc0 [ 473.469027][T11343] ? trace_hrtimer_init+0x19d/0x220 [ 473.474284][T11343] ? __hrtimer_init+0x106/0x2c0 [ 473.479189][T11343] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 473.485160][T11343] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 473.491285][T11343] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 473.497924][T11343] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 473.503264][T11343] hwsim_new_radio_nl+0xb42/0x12b0 [ 473.508429][T11343] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 473.514035][T11343] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 473.521542][T11343] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 473.528965][T11343] genl_family_rcv_msg_doit+0x202/0x2f0 [ 473.534560][T11343] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 473.540683][T11343] ? bpf_lsm_capable+0x9/0x10 [ 473.545492][T11343] ? security_capable+0x7e/0x260 [ 473.550556][T11343] ? ns_capable+0xd7/0x110 [ 473.555008][T11343] genl_rcv_msg+0x565/0x800 [ 473.559564][T11343] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.564630][T11343] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 473.570260][T11343] netlink_rcv_skb+0x165/0x410 [ 473.575065][T11343] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.580148][T11343] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 473.585486][T11343] ? down_read+0xc9/0x330 [ 473.589863][T11343] ? __pfx_down_read+0x10/0x10 [ 473.594699][T11343] ? netlink_deliver_tap+0x1ae/0xcf0 [ 473.600047][T11343] genl_rcv+0x28/0x40 [ 473.604110][T11343] netlink_unicast+0x53c/0x7f0 [ 473.608941][T11343] ? __pfx_netlink_unicast+0x10/0x10 [ 473.614275][T11343] ? __phys_addr_symbol+0x30/0x80 [ 473.619345][T11343] ? __check_object_size+0x488/0x710 [ 473.624683][T11343] netlink_sendmsg+0x8b8/0xd70 [ 473.629499][T11343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.634849][T11343] ____sys_sendmsg+0x9ae/0xb40 [ 473.639656][T11343] ? copy_msghdr_from_user+0x10b/0x160 [ 473.645163][T11343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.650520][T11343] ? __pfx___lock_acquire+0x10/0x10 [ 473.655821][T11343] ___sys_sendmsg+0x135/0x1e0 [ 473.660556][T11343] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.665861][T11343] ? lock_acquire+0x2f/0xb0 [ 473.670422][T11343] ? __fget_files+0x40/0x3f0 [ 473.675087][T11343] ? fdget+0x176/0x210 [ 473.679224][T11343] __sys_sendmsg+0x117/0x1f0 [ 473.683918][T11343] ? __pfx___sys_sendmsg+0x10/0x10 [ 473.689137][T11343] ? __x64_sys_futex+0x1e1/0x4c0 [ 473.694177][T11343] do_syscall_64+0xcd/0x250 [ 473.698752][T11343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.704698][T11343] RIP: 0033:0x7fc2ee97dff9 [ 473.709179][T11343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.728954][T11343] RSP: 002b:00007fc2ef7da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.737417][T11343] RAX: ffffffffffffffda RBX: 00007fc2eeb35f80 RCX: 00007fc2ee97dff9 [ 473.745460][T11343] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 473.753489][T11343] RBP: 00007fc2ee9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 473.761608][T11343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.769644][T11343] R13: 0000000000000000 R14: 00007fc2eeb35f80 R15: 00007ffc59ea7a98 [ 473.777679][T11343] [ 476.581661][T11440] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 476.663071][T11440] CPU: 1 UID: 0 PID: 11440 Comm: syz.2.1267 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 476.673956][T11440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 476.684085][T11440] Call Trace: [ 476.687418][T11440] [ 476.690402][T11440] dump_stack_lvl+0x16c/0x1f0 [ 476.695169][T11440] sysfs_warn_dup+0x7f/0xa0 [ 476.699753][T11440] sysfs_do_create_link_sd+0x124/0x140 [ 476.705304][T11440] sysfs_create_link+0x61/0xc0 [ 476.710151][T11440] device_add+0x62e/0x1a70 [ 476.714654][T11440] ? __pfx_device_add+0x10/0x10 [ 476.719606][T11440] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 476.725607][T11440] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 476.731692][T11440] wiphy_register+0x20d7/0x2d30 [ 476.736639][T11440] ? __pfx_wiphy_register+0x10/0x10 [ 476.741947][T11440] ieee80211_register_hw+0x2959/0x3fb0 [ 476.747506][T11440] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 476.753418][T11440] ? rcu_is_watching+0x12/0xc0 [ 476.758243][T11440] ? trace_hrtimer_init+0x19d/0x220 [ 476.763540][T11440] ? __hrtimer_init+0x106/0x2c0 [ 476.768478][T11440] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 476.774321][T11440] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 476.780481][T11440] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 476.787162][T11440] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 476.792549][T11440] hwsim_new_radio_nl+0xb42/0x12b0 [ 476.797750][T11440] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 476.803487][T11440] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 476.811024][T11440] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 476.818491][T11440] genl_family_rcv_msg_doit+0x202/0x2f0 [ 476.824117][T11440] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 476.830274][T11440] ? bpf_lsm_capable+0x9/0x10 [ 476.835060][T11440] ? security_capable+0x7e/0x260 [ 476.840091][T11440] ? ns_capable+0xd7/0x110 [ 476.844587][T11440] genl_rcv_msg+0x565/0x800 [ 476.849183][T11440] ? __pfx_genl_rcv_msg+0x10/0x10 [ 476.854296][T11440] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 476.859952][T11440] netlink_rcv_skb+0x165/0x410 [ 476.864809][T11440] ? __pfx_genl_rcv_msg+0x10/0x10 [ 476.869929][T11440] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 476.875302][T11440] ? down_read+0xc9/0x330 [ 476.879724][T11440] ? __pfx_down_read+0x10/0x10 [ 476.884572][T11440] ? netlink_deliver_tap+0x1ae/0xcf0 [ 476.889938][T11440] genl_rcv+0x28/0x40 [ 476.894001][T11440] netlink_unicast+0x53c/0x7f0 [ 476.898841][T11440] ? __pfx_netlink_unicast+0x10/0x10 [ 476.904206][T11440] ? __phys_addr_symbol+0x30/0x80 [ 476.909303][T11440] ? __check_object_size+0x488/0x710 [ 476.914669][T11440] netlink_sendmsg+0x8b8/0xd70 [ 476.919551][T11440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.925012][T11440] ____sys_sendmsg+0x9ae/0xb40 [ 476.929932][T11440] ? copy_msghdr_from_user+0x10b/0x160 [ 476.935473][T11440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.940843][T11440] ? __pfx___lock_acquire+0x10/0x10 [ 476.946136][T11440] ___sys_sendmsg+0x135/0x1e0 [ 476.950903][T11440] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.956209][T11440] ? lock_acquire+0x2f/0xb0 [ 476.960794][T11440] ? __fget_files+0x40/0x3f0 [ 476.965555][T11440] ? fdget+0x176/0x210 [ 476.969702][T11440] __sys_sendmsg+0x117/0x1f0 [ 476.974371][T11440] ? __pfx___sys_sendmsg+0x10/0x10 [ 476.979659][T11440] ? __x64_sys_futex+0x1e1/0x4c0 [ 476.984711][T11440] do_syscall_64+0xcd/0x250 [ 476.989300][T11440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.995278][T11440] RIP: 0033:0x7fc2ee97dff9 [ 476.999891][T11440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.019575][T11440] RSP: 002b:00007fc2ef7da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.028059][T11440] RAX: ffffffffffffffda RBX: 00007fc2eeb35f80 RCX: 00007fc2ee97dff9 [ 477.036442][T11440] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 477.044480][T11440] RBP: 00007fc2ee9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 477.052510][T11440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.060541][T11440] R13: 0000000000000000 R14: 00007fc2eeb35f80 R15: 00007ffc59ea7a98 [ 477.068596][T11440] [ 477.544145][T11453] TCP: TCP_TX_DELAY enabled [ 479.031462][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.123991][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 479.133515][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 479.142801][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 479.171376][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 479.180423][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 479.187921][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 479.511912][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.051868][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.608566][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.664169][T11471] chnl_net:caif_netlink_parms(): no params data found [ 481.179139][T11471] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.186327][T11471] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.210769][T11471] bridge_slave_0: entered allmulticast mode [ 481.217178][ T54] Bluetooth: hci2: command tx timeout [ 481.255428][T11471] bridge_slave_0: entered promiscuous mode [ 481.300578][T11471] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.333705][T11471] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.363489][T11471] bridge_slave_1: entered allmulticast mode [ 481.370835][T11471] bridge_slave_1: entered promiscuous mode [ 481.591349][T11471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.604822][T11471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.720078][T11471] team0: Port device team_slave_0 added [ 481.829627][T11471] team0: Port device team_slave_1 added [ 481.962335][ T35] bridge_slave_1: left allmulticast mode [ 481.968391][ T35] bridge_slave_1: left promiscuous mode [ 481.974200][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.000709][ T35] bridge_slave_0: left allmulticast mode [ 482.016934][ T35] bridge_slave_0: left promiscuous mode [ 482.022744][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.944054][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.021844][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.046393][ T35] bond0 (unregistering): Released all slaves [ 483.147581][T11471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.157011][T11471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.213734][T11471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.237680][T11471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.244790][T11471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.297091][ T54] Bluetooth: hci2: command tx timeout [ 483.300121][T11471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.333745][ T35] HSR: left promiscuous mode [ 483.650389][T11471] hsr_slave_0: entered promiscuous mode [ 483.667497][T11471] hsr_slave_1: entered promiscuous mode [ 483.685507][T11471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.696921][T11471] Cannot create hsr debugfs directory [ 485.377265][ T54] Bluetooth: hci2: command tx timeout [ 485.409989][ T35] hsr_slave_0: left promiscuous mode [ 485.506967][ T35] hsr_slave_1: left promiscuous mode [ 485.567194][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.574788][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.599667][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.612645][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.718624][ T35] veth1_macvtap: left promiscuous mode [ 485.730945][ T35] veth1_vlan: left promiscuous mode [ 485.736789][ T35] veth0_vlan: left promiscuous mode [ 487.305395][ T5251] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 487.315134][ T5251] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 487.324959][ T5251] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 487.358968][ T5251] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 487.371888][ T5251] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 487.379498][ T5251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 487.457054][ T54] Bluetooth: hci2: command tx timeout [ 487.823938][ T35] team0 (unregistering): Port device team_slave_1 removed [ 487.915658][ T35] team0 (unregistering): Port device team_slave_0 removed [ 488.854143][T11573] openvswitch: netlink: Flow key attr not present in new flow. [ 489.458006][ T54] Bluetooth: hci0: command tx timeout [ 489.482538][T11580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1301'. [ 490.125750][T11564] chnl_net:caif_netlink_parms(): no params data found [ 490.592252][T11471] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 490.618322][T11471] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 490.650773][T11564] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.665872][T11564] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.698073][T11564] bridge_slave_0: entered allmulticast mode [ 490.705394][T11564] bridge_slave_0: entered promiscuous mode [ 490.728726][T11564] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.735921][T11564] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.756680][T11564] bridge_slave_1: entered allmulticast mode [ 490.773557][T11564] bridge_slave_1: entered promiscuous mode [ 490.796423][T11471] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 490.905188][T11471] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 491.060229][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.121104][T11564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.158263][T11564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.286129][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.394896][T11564] team0: Port device team_slave_0 added [ 491.535901][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.546592][ T54] Bluetooth: hci0: command tx timeout [ 491.735777][T11564] team0: Port device team_slave_1 added [ 492.009640][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.243427][T11564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.269219][T11564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.328342][T11564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.344455][T11564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.357538][T11564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.419013][T11564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.861533][T11564] hsr_slave_0: entered promiscuous mode [ 492.938552][T11564] hsr_slave_1: entered promiscuous mode [ 492.980760][T11564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.007742][T11564] Cannot create hsr debugfs directory [ 493.453455][T11471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.576479][ T35] bridge_slave_1: left allmulticast mode [ 493.592111][ T35] bridge_slave_1: left promiscuous mode [ 493.612784][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.645919][ T35] bridge_slave_0: left allmulticast mode [ 493.652074][ T54] Bluetooth: hci0: command tx timeout [ 493.662166][ T35] bridge_slave_0: left promiscuous mode [ 493.681350][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.362461][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.403787][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.437366][ T35] bond0 (unregistering): Released all slaves [ 495.519557][T11471] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.545272][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1306'. [ 495.697444][ T54] Bluetooth: hci0: command tx timeout [ 496.039339][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.046510][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.087445][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.094632][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.634101][ T35] hsr_slave_0: left promiscuous mode [ 496.673478][ T35] hsr_slave_1: left promiscuous mode [ 496.717871][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.725370][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.755810][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.772375][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.820075][ T35] veth1_macvtap: left promiscuous mode [ 496.825834][ T35] veth0_macvtap: left promiscuous mode [ 496.833153][ T35] veth1_vlan: left promiscuous mode [ 496.845456][ T35] veth0_vlan: left promiscuous mode [ 498.028098][ T35] team0 (unregistering): Port device team_slave_1 removed [ 498.152171][ T35] team0 (unregistering): Port device team_slave_0 removed [ 499.322618][T11564] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 499.375952][T11564] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 499.448301][T11564] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 499.485109][T11564] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 499.626476][T11471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.813536][T11471] veth0_vlan: entered promiscuous mode [ 499.852755][T11471] veth1_vlan: entered promiscuous mode [ 499.893060][T11564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.991460][T11564] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.038556][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.045722][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.095521][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.102983][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.181863][T11471] veth0_macvtap: entered promiscuous mode [ 500.196134][T11471] veth1_macvtap: entered promiscuous mode [ 500.249352][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.287126][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.308733][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.337066][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.364583][T11471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.433085][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.446074][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.457847][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.469176][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.480803][T11471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.496294][T11564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.520226][T11471] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.535349][T11471] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.545189][T11471] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.560288][T11471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.807966][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.853455][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.952593][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.975583][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.693422][T11564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.874343][T11564] veth0_vlan: entered promiscuous mode [ 501.922720][T11564] veth1_vlan: entered promiscuous mode [ 502.044863][T11564] veth0_macvtap: entered promiscuous mode [ 502.062317][T11564] veth1_macvtap: entered promiscuous mode [ 502.119583][T11564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.148962][T11564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.169955][T11564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.208887][T11564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.238533][T11564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.257142][T11564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.299786][T11564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.369178][T11564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.401871][T11564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.439641][T11564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.487343][T11564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.532298][T11564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.563960][T11564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.601050][T11564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.770511][T11564] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.805547][T11564] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.844352][T11564] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.886880][T11564] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.356031][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.407164][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.764470][ T9824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.778462][ T9824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.817835][ T5251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 504.829299][ T5251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 504.837988][ T5251] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 504.846123][ T5251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 504.855414][ T5251] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 504.864242][ T5251] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 505.513269][T11752] chnl_net:caif_netlink_parms(): no params data found [ 506.036238][T11752] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.077377][T11752] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.104446][T11752] bridge_slave_0: entered allmulticast mode [ 506.124614][T11752] bridge_slave_0: entered promiscuous mode [ 506.144637][T11752] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.173281][T11752] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.197235][T11752] bridge_slave_1: entered allmulticast mode [ 506.204924][T11752] bridge_slave_1: entered promiscuous mode [ 506.367465][T11752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.783912][T11752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.907568][ T54] Bluetooth: hci3: command tx timeout [ 507.058769][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.065130][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.743027][T11752] team0: Port device team_slave_0 added [ 507.898758][T11752] team0: Port device team_slave_1 added [ 507.963655][T11787] FAULT_INJECTION: forcing a failure. [ 507.963655][T11787] name failslab, interval 1, probability 0, space 0, times 1 [ 508.068071][T11787] CPU: 1 UID: 0 PID: 11787 Comm: syz.3.1321 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 508.078942][T11787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 508.089048][T11787] Call Trace: [ 508.092399][T11787] [ 508.095365][T11787] dump_stack_lvl+0x16c/0x1f0 [ 508.100104][T11787] should_fail_ex+0x497/0x5b0 [ 508.104843][T11787] ? fs_reclaim_acquire+0xae/0x150 [ 508.110014][T11787] should_failslab+0xc2/0x120 [ 508.114748][T11787] kmem_cache_alloc_node_noprof+0x71/0x310 [ 508.120623][T11787] ? copy_process+0x49c/0x6ee0 [ 508.125436][T11787] ? _raw_spin_unlock_irq+0x23/0x50 [ 508.130687][T11787] copy_process+0x49c/0x6ee0 [ 508.135336][T11787] ? get_pid_task+0xfc/0x250 [ 508.139986][T11787] ? __pfx_lock_release+0x10/0x10 [ 508.145068][T11787] ? trace_lock_acquire+0x14a/0x1d0 [ 508.150329][T11787] ? __pfx_copy_process+0x10/0x10 [ 508.155618][T11787] ? find_held_lock+0x2d/0x110 [ 508.160456][T11787] kernel_clone+0xfd/0x960 [ 508.164927][T11787] ? __pfx_kernel_clone+0x10/0x10 [ 508.170021][T11787] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 508.176068][T11787] __do_sys_clone+0xba/0x100 [ 508.180732][T11787] ? __pfx___do_sys_clone+0x10/0x10 [ 508.186023][T11787] do_syscall_64+0xcd/0x250 [ 508.190590][T11787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.196532][T11787] RIP: 0033:0x7f152d57dff9 [ 508.200991][T11787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.220728][T11787] RSP: 002b:00007f152e3c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 508.229191][T11787] RAX: ffffffffffffffda RBX: 00007f152d735f80 RCX: 00007f152d57dff9 [ 508.237199][T11787] RDX: 9999999999999999 RSI: 0000000000000008 RDI: 0000000000040000 [ 508.245209][T11787] RBP: 00007f152e3c0090 R08: 0000000000000008 R09: 0000000000000000 [ 508.253217][T11787] R10: 9999999999999999 R11: 0000000000000246 R12: 0000000000000001 [ 508.261231][T11787] R13: 0000000000000000 R14: 00007f152d735f80 R15: 00007ffd9cb5d818 [ 508.269791][T11787] [ 508.977183][ T54] Bluetooth: hci3: command tx timeout [ 509.756611][T11752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.785090][T11752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.897293][T11752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.959251][T11752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.966270][T11752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.096248][T11752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.132320][T11797] debugfs: Directory '-侞6yռ ka;+1)p;!X+@' with parent 'ieee80211' already present! [ 510.485727][T11752] hsr_slave_0: entered promiscuous mode [ 510.567868][T11752] hsr_slave_1: entered promiscuous mode [ 511.057343][ T54] Bluetooth: hci3: command tx timeout [ 512.482592][T11752] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.137879][ T54] Bluetooth: hci3: command tx timeout [ 513.494887][T11752] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.877896][T11827] FAULT_INJECTION: forcing a failure. [ 513.877896][T11827] name failslab, interval 1, probability 0, space 0, times 0 [ 513.978056][T11827] CPU: 1 UID: 0 PID: 11827 Comm: syz.3.1334 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 513.988923][T11827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 513.999043][T11827] Call Trace: [ 514.002360][T11827] [ 514.005503][T11827] dump_stack_lvl+0x16c/0x1f0 [ 514.010267][T11827] should_fail_ex+0x497/0x5b0 [ 514.015076][T11827] ? fs_reclaim_acquire+0xae/0x150 [ 514.020380][T11827] should_failslab+0xc2/0x120 [ 514.025148][T11827] __kmalloc_cache_node_noprof+0x6e/0x360 [ 514.030944][T11827] ? __get_vm_area_node+0xe1/0x2d0 [ 514.036117][T11827] __get_vm_area_node+0xe1/0x2d0 [ 514.041124][T11827] __vmalloc_node_range_noprof+0x26a/0x15a0 [ 514.047129][T11827] ? kernel_clone+0xfd/0x960 [ 514.051797][T11827] ? mod_objcg_state+0x4c4/0x8d0 [ 514.056801][T11827] ? lockdep_hardirqs_on+0x7c/0x110 [ 514.062058][T11827] ? kernel_clone+0xfd/0x960 [ 514.066709][T11827] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 514.073207][T11827] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 514.078663][T11827] ? kmem_cache_alloc_node_noprof+0x1a2/0x310 [ 514.084818][T11827] ? copy_process+0x49c/0x6ee0 [ 514.089653][T11827] ? kernel_clone+0xfd/0x960 [ 514.094311][T11827] copy_process+0x29b4/0x6ee0 [ 514.099047][T11827] ? kernel_clone+0xfd/0x960 [ 514.103699][T11827] ? get_pid_task+0xfc/0x250 [ 514.108376][T11827] ? __pfx_lock_release+0x10/0x10 [ 514.113494][T11827] ? trace_lock_acquire+0x14a/0x1d0 [ 514.118773][T11827] ? __pfx_copy_process+0x10/0x10 [ 514.123859][T11827] ? find_held_lock+0x2d/0x110 [ 514.128690][T11827] kernel_clone+0xfd/0x960 [ 514.133180][T11827] ? __pfx_kernel_clone+0x10/0x10 [ 514.138288][T11827] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 514.144335][T11827] __do_sys_clone+0xba/0x100 [ 514.148983][T11827] ? __pfx___do_sys_clone+0x10/0x10 [ 514.154361][T11827] do_syscall_64+0xcd/0x250 [ 514.158949][T11827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.164908][T11827] RIP: 0033:0x7f152d57dff9 [ 514.169370][T11827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.189045][T11827] RSP: 002b:00007f152e3c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 514.197526][T11827] RAX: ffffffffffffffda RBX: 00007f152d735f80 RCX: 00007f152d57dff9 [ 514.205542][T11827] RDX: 9999999999999999 RSI: 0000000000000008 RDI: 0000000000040000 [ 514.213582][T11827] RBP: 00007f152e3c0090 R08: 0000000000000008 R09: 0000000000000000 [ 514.221615][T11827] R10: 9999999999999999 R11: 0000000000000246 R12: 0000000000000001 [ 514.229639][T11827] R13: 0000000000000000 R14: 00007f152d735f80 R15: 00007ffd9cb5d818 [ 514.237685][T11827] [ 514.517158][T11827] syz.3.1334: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 514.532478][T11827] CPU: 0 UID: 0 PID: 11827 Comm: syz.3.1334 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 514.543414][T11827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 514.553532][T11827] Call Trace: [ 514.556853][T11827] [ 514.559826][T11827] dump_stack_lvl+0x16c/0x1f0 [ 514.564580][T11827] warn_alloc+0x24d/0x3a0 [ 514.568987][T11827] ? __pfx_warn_alloc+0x10/0x10 [ 514.573916][T11827] ? rcu_is_watching+0x12/0xc0 [ 514.578755][T11827] ? trace_kmalloc+0x2d/0xe0 [ 514.583466][T11827] ? __kasan_kmalloc+0x8a/0xb0 [ 514.588309][T11827] ? __get_vm_area_node+0x1bc/0x2d0 [ 514.593590][T11827] __vmalloc_node_range_noprof+0xd27/0x15a0 [ 514.599574][T11827] ? mod_objcg_state+0x4c4/0x8d0 [ 514.604753][T11827] ? lockdep_hardirqs_on+0x7c/0x110 [ 514.610141][T11827] ? kernel_clone+0xfd/0x960 [ 514.614807][T11827] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 514.615570][T11752] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.621186][T11827] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 514.621241][T11827] ? kmem_cache_alloc_node_noprof+0x1a2/0x310 [ 514.621287][T11827] ? copy_process+0x49c/0x6ee0 [ 514.621330][T11827] ? kernel_clone+0xfd/0x960 [ 514.621372][T11827] copy_process+0x29b4/0x6ee0 [ 514.621413][T11827] ? kernel_clone+0xfd/0x960 [ 514.621454][T11827] ? get_pid_task+0xfc/0x250 [ 514.621499][T11827] ? __pfx_lock_release+0x10/0x10 [ 514.621543][T11827] ? trace_lock_acquire+0x14a/0x1d0 [ 514.621598][T11827] ? __pfx_copy_process+0x10/0x10 [ 514.621644][T11827] ? find_held_lock+0x2d/0x110 [ 514.621693][T11827] kernel_clone+0xfd/0x960 [ 514.621737][T11827] ? __pfx_kernel_clone+0x10/0x10 [ 514.696365][T11827] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 514.702428][T11827] __do_sys_clone+0xba/0x100 [ 514.707086][T11827] ? __pfx___do_sys_clone+0x10/0x10 [ 514.712356][T11827] do_syscall_64+0xcd/0x250 [ 514.716918][T11827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.722848][T11827] RIP: 0033:0x7f152d57dff9 [ 514.727287][T11827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.747241][T11827] RSP: 002b:00007f152e3c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 514.755724][T11827] RAX: ffffffffffffffda RBX: 00007f152d735f80 RCX: 00007f152d57dff9 [ 514.763739][T11827] RDX: 9999999999999999 RSI: 0000000000000008 RDI: 0000000000040000 [ 514.771778][T11827] RBP: 00007f152e3c0090 R08: 0000000000000008 R09: 0000000000000000 [ 514.779776][T11827] R10: 9999999999999999 R11: 0000000000000246 R12: 0000000000000001 [ 514.787776][T11827] R13: 0000000000000000 R14: 00007f152d735f80 R15: 00007ffd9cb5d818 [ 514.795787][T11827] [ 514.901766][T11827] Mem-Info: [ 514.905562][T11827] active_anon:71744 inactive_anon:0 isolated_anon:0 [ 514.905562][T11827] active_file:1234 inactive_file:56823 isolated_file:0 [ 514.905562][T11827] unevictable:768 dirty:501 writeback:0 [ 514.905562][T11827] slab_reclaimable:9521 slab_unreclaimable:94669 [ 514.905562][T11827] mapped:35805 shmem:60662 pagetables:991 [ 514.905562][T11827] sec_pagetables:0 bounce:0 [ 514.905562][T11827] kernel_misc_reclaimable:0 [ 514.905562][T11827] free:1278928 free_pcp:6075 free_cma:0 [ 514.984447][T11827] Node 0 active_anon:287776kB inactive_anon:0kB active_file:4936kB inactive_file:227220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144020kB dirty:2000kB writeback:0kB shmem:241912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10980kB pagetables:3964kB sec_pagetables:0kB all_unreclaimable? no [ 515.203203][T11827] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 515.236693][T11830] debugfs: Directory '-侞6yռ ka;+1)p;!X+@' with parent 'ieee80211' already present! [ 515.516931][T11827] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 515.619845][T11827] lowmem_reserve[]: 0 2465 2466 0 0 [ 515.637933][T11827] Node 0 DMA32 free:1167976kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:301760kB inactive_anon:300kB active_file:4936kB inactive_file:226392kB unevictable:1536kB writepending:1692kB present:3129332kB managed:2551312kB mlocked:0kB bounce:0kB free_pcp:7356kB local_pcp:872kB free_cma:0kB [ 515.847732][T11827] lowmem_reserve[]: 0 0 0 0 0 [ 515.852569][T11827] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 515.988058][T11752] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.087821][T11827] lowmem_reserve[]: 0 0 0 0 0 [ 516.092664][T11827] Node 1 Normal free:3907636kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21116kB local_pcp:2980kB free_cma:0kB [ 516.362512][T11827] lowmem_reserve[]: 0 0 0 0 0 [ 516.417349][T11827] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 516.575496][T11827] Node 0 DMA32: 92*4kB (U) 57*8kB (UE) 72*16kB (UME) 53*32kB (UME) 13*64kB (UME) 12*128kB (UME) 257*256kB (UME) 132*512kB (UME) 67*1024kB (UM) 4*2048kB (M) 234*4096kB (M) = 1174680kB [ 516.934329][T11752] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 517.004493][T11752] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 517.098111][T11827] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 517.143010][T11752] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 517.229102][T11752] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 517.264465][T11827] Node 1 Normal: 195*4kB (UME) 29*8kB (UME) 23*16kB (UME) 210*32kB (UME) 81*64kB (UME) 35*128kB (UME) 20*256kB (UM) 12*512kB (UM) 10*1024kB (UME) 7*2048kB (UME) 941*4096kB (M) = 3907940kB [ 517.436651][T11843] nbd: must specify a device to reconfigure [ 517.461609][T11827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 517.565369][T11752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.610959][T11827] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 517.680690][T11752] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.718597][T11827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 517.749913][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.757184][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.784981][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.792220][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.912816][T11827] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 518.046919][T11827] 123584 total pagecache pages [ 518.051780][T11827] 105 pages in swap cache [ 518.056161][T11827] Free swap = 124012kB [ 518.186993][T11827] Total swap = 124996kB [ 518.229200][T11827] 2097051 pages RAM [ 518.259199][T11827] 0 pages HighMem/MovableOnly [ 518.298006][T11827] 427373 pages reserved [ 518.329289][T11827] 0 pages cma reserved [ 518.664536][T11752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.856768][T11752] veth0_vlan: entered promiscuous mode [ 518.924459][T11752] veth1_vlan: entered promiscuous mode [ 519.052274][T11752] veth0_macvtap: entered promiscuous mode [ 519.082643][T11752] veth1_macvtap: entered promiscuous mode [ 519.138095][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.166874][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.176766][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.223876][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.263245][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.287043][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.306918][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.326991][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.348600][T11752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.378781][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.412436][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.457040][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.480232][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.506960][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.546979][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.576906][T11752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.616884][T11752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.648916][T11752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.677171][T11752] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.685984][T11752] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.737571][T11752] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.746401][T11752] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.957934][ T5251] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 521.967617][ T5251] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 521.978728][ T5251] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 522.000718][ T5251] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 522.010017][ T5251] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 522.020025][ T5251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 522.887042][ T1044] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.570776][ T1044] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.743247][T11876] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 523.876940][T11876] CPU: 0 UID: 0 PID: 11876 Comm: syz.3.1346 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 523.888003][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 523.898414][T11876] Call Trace: [ 523.901750][T11876] [ 523.904740][T11876] dump_stack_lvl+0x16c/0x1f0 [ 523.909688][T11876] sysfs_warn_dup+0x7f/0xa0 [ 523.914276][T11876] sysfs_do_create_link_sd+0x124/0x140 [ 523.919852][T11876] sysfs_create_link+0x61/0xc0 [ 523.924884][T11876] device_add+0x62e/0x1a70 [ 523.929396][T11876] ? __pfx_device_add+0x10/0x10 [ 523.934334][T11876] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 523.940416][T11876] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 523.946585][T11876] wiphy_register+0x20d7/0x2d30 [ 523.951532][T11876] ? __pfx_wiphy_register+0x10/0x10 [ 523.956808][T11876] ieee80211_register_hw+0x2959/0x3fb0 [ 523.962334][T11876] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 523.968277][T11876] ? rcu_is_watching+0x12/0xc0 [ 523.973110][T11876] ? trace_hrtimer_init+0x19d/0x220 [ 523.978385][T11876] ? __hrtimer_init+0x106/0x2c0 [ 523.983350][T11876] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 523.989163][T11876] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 523.995294][T11876] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 524.001970][T11876] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 524.007447][T11876] hwsim_new_radio_nl+0xb42/0x12b0 [ 524.012636][T11876] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 524.018343][T11876] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 524.025895][T11876] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 524.033330][T11876] genl_family_rcv_msg_doit+0x202/0x2f0 [ 524.038949][T11876] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 524.045083][T11876] ? bpf_lsm_capable+0x9/0x10 [ 524.049813][T11876] ? security_capable+0x7e/0x260 [ 524.054888][T11876] ? ns_capable+0xd7/0x110 [ 524.059390][T11876] genl_rcv_msg+0x565/0x800 [ 524.063957][T11876] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.069044][T11876] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 524.074660][T11876] netlink_rcv_skb+0x165/0x410 [ 524.079472][T11876] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.084559][T11876] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 524.090011][T11876] ? down_read+0xc9/0x330 [ 524.094429][T11876] ? __pfx_down_read+0x10/0x10 [ 524.099289][T11876] ? netlink_deliver_tap+0x1ae/0xcf0 [ 524.104638][T11876] genl_rcv+0x28/0x40 [ 524.108844][T11876] netlink_unicast+0x53c/0x7f0 [ 524.113743][T11876] ? __pfx_netlink_unicast+0x10/0x10 [ 524.119102][T11876] ? __phys_addr_symbol+0x30/0x80 [ 524.124320][T11876] ? __check_object_size+0x488/0x710 [ 524.129752][T11876] netlink_sendmsg+0x8b8/0xd70 [ 524.134653][T11876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.139996][T11876] ____sys_sendmsg+0x9ae/0xb40 [ 524.144836][T11876] ? copy_msghdr_from_user+0x10b/0x160 [ 524.150386][T11876] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.155731][T11876] ? __pfx___lock_acquire+0x10/0x10 [ 524.161115][T11876] ___sys_sendmsg+0x135/0x1e0 [ 524.165859][T11876] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.171132][T11876] ? lock_acquire+0x2f/0xb0 [ 524.175775][T11876] ? __fget_files+0x40/0x3f0 [ 524.180517][T11876] ? fdget+0x176/0x210 [ 524.184635][T11876] __sys_sendmsg+0x117/0x1f0 [ 524.189282][T11876] ? __pfx___sys_sendmsg+0x10/0x10 [ 524.194448][T11876] ? __x64_sys_futex+0x1e1/0x4c0 [ 524.199909][T11876] do_syscall_64+0xcd/0x250 [ 524.204487][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.210553][T11876] RIP: 0033:0x7f152d57dff9 [ 524.215028][T11876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.234856][T11876] RSP: 002b:00007f152e3c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.243331][T11876] RAX: ffffffffffffffda RBX: 00007f152d735f80 RCX: 00007f152d57dff9 [ 524.251357][T11876] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 524.259405][T11876] RBP: 00007f152d5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 524.267420][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.275692][T11876] R13: 0000000000000000 R14: 00007f152d735f80 R15: 00007ffd9cb5d818 [ 524.283718][T11876] [ 524.317379][ T54] Bluetooth: hci0: command tx timeout [ 524.753958][ T1044] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.020180][ T9827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.074938][ T9827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.551173][ T1044] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.698164][ T7667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.706083][ T7667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.862137][T11870] chnl_net:caif_netlink_parms(): no params data found [ 526.337119][ T54] Bluetooth: hci0: command tx timeout [ 526.634733][T11880] delete_channel: no stack [ 526.799951][T11870] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.821537][T11870] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.848306][T11870] bridge_slave_0: entered allmulticast mode [ 526.868237][T11870] bridge_slave_0: entered promiscuous mode [ 526.888768][T11870] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.895955][T11870] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.946965][T11870] bridge_slave_1: entered allmulticast mode [ 526.973028][T11870] bridge_slave_1: entered promiscuous mode [ 527.350122][T11870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.379526][ T1044] bridge_slave_1: left allmulticast mode [ 527.385284][ T1044] bridge_slave_1: left promiscuous mode [ 527.401780][ T1044] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.448999][ T1044] bridge_slave_0: left allmulticast mode [ 527.454730][ T1044] bridge_slave_0: left promiscuous mode [ 527.470877][ T1044] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.417849][ T54] Bluetooth: hci0: command tx timeout [ 530.428346][ T1044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.507085][ T54] Bluetooth: hci0: command tx timeout [ 530.635186][ T1044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.778191][ T1044] bond0 (unregistering): Released all slaves [ 531.058066][T11870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.566367][T11923] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 531.627083][T11923] CPU: 0 UID: 0 PID: 11923 Comm: syz.0.1355 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 531.638138][T11923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 531.648252][T11923] Call Trace: [ 531.651575][T11923] [ 531.654544][T11923] dump_stack_lvl+0x16c/0x1f0 [ 531.659323][T11923] sysfs_warn_dup+0x7f/0xa0 [ 531.663940][T11923] sysfs_do_create_link_sd+0x124/0x140 [ 531.669507][T11923] sysfs_create_link+0x61/0xc0 [ 531.674459][T11923] device_add+0x62e/0x1a70 [ 531.678963][T11923] ? __pfx_device_add+0x10/0x10 [ 531.683918][T11923] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 531.689912][T11923] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 531.696005][T11923] wiphy_register+0x20d7/0x2d30 [ 531.700949][T11923] ? __pfx_wiphy_register+0x10/0x10 [ 531.706233][T11923] ieee80211_register_hw+0x2959/0x3fb0 [ 531.711771][T11923] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 531.717684][T11923] ? rcu_is_watching+0x12/0xc0 [ 531.722526][T11923] ? trace_hrtimer_init+0x19d/0x220 [ 531.727863][T11923] ? __hrtimer_init+0x106/0x2c0 [ 531.732814][T11923] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 531.738667][T11923] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 531.744813][T11923] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 531.751505][T11923] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 531.756899][T11923] hwsim_new_radio_nl+0xb42/0x12b0 [ 531.762106][T11923] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 531.767746][T11923] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 531.775220][T11923] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 531.782688][T11923] genl_family_rcv_msg_doit+0x202/0x2f0 [ 531.788363][T11923] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 531.794545][T11923] ? bpf_lsm_capable+0x9/0x10 [ 531.799407][T11923] ? security_capable+0x7e/0x260 [ 531.804425][T11923] ? ns_capable+0xd7/0x110 [ 531.808908][T11923] genl_rcv_msg+0x565/0x800 [ 531.813485][T11923] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.818594][T11923] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 531.824249][T11923] netlink_rcv_skb+0x165/0x410 [ 531.829116][T11923] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.834226][T11923] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 531.839598][T11923] ? down_read+0xc9/0x330 [ 531.844002][T11923] ? __pfx_down_read+0x10/0x10 [ 531.848857][T11923] ? netlink_deliver_tap+0x1ae/0xcf0 [ 531.854226][T11923] genl_rcv+0x28/0x40 [ 531.858291][T11923] netlink_unicast+0x53c/0x7f0 [ 531.863133][T11923] ? __pfx_netlink_unicast+0x10/0x10 [ 531.868496][T11923] ? __phys_addr_symbol+0x30/0x80 [ 531.873637][T11923] ? __check_object_size+0x488/0x710 [ 531.879007][T11923] netlink_sendmsg+0x8b8/0xd70 [ 531.883856][T11923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.889346][T11923] ____sys_sendmsg+0x9ae/0xb40 [ 531.894210][T11923] ? copy_msghdr_from_user+0x10b/0x160 [ 531.899748][T11923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.905164][T11923] ? __pfx___lock_acquire+0x10/0x10 [ 531.910456][T11923] ___sys_sendmsg+0x135/0x1e0 [ 531.915215][T11923] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.920520][T11923] ? lock_acquire+0x2f/0xb0 [ 531.925203][T11923] ? __fget_files+0x40/0x3f0 [ 531.929877][T11923] ? fdget+0x176/0x210 [ 531.934006][T11923] __sys_sendmsg+0x117/0x1f0 [ 531.938678][T11923] ? __pfx___sys_sendmsg+0x10/0x10 [ 531.943917][T11923] ? __x64_sys_futex+0x1e1/0x4c0 [ 531.948961][T11923] do_syscall_64+0xcd/0x250 [ 531.953541][T11923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.959504][T11923] RIP: 0033:0x7f125557dff9 [ 531.963979][T11923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.983931][T11923] RSP: 002b:00007f1256399038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.992422][T11923] RAX: ffffffffffffffda RBX: 00007f1255735f80 RCX: 00007f125557dff9 [ 532.000458][T11923] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 532.008526][T11923] RBP: 00007f12555f0296 R08: 0000000000000000 R09: 0000000000000000 [ 532.016555][T11923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.024585][T11923] R13: 0000000000000000 R14: 00007f1255735f80 R15: 00007ffc343a3168 [ 532.032640][T11923] [ 532.189700][T11870] team0: Port device team_slave_0 added [ 532.415896][T11870] team0: Port device team_slave_1 added [ 532.932944][T11870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.966852][T11870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.044681][T11870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.486307][T11870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.506887][T11870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.537675][T11870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.981924][T11870] hsr_slave_0: entered promiscuous mode [ 534.034089][T11870] hsr_slave_1: entered promiscuous mode [ 534.104800][T11870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 534.131910][T11870] Cannot create hsr debugfs directory [ 534.668171][T11985] delete_channel: no stack [ 535.748284][ T1044] hsr_slave_0: left promiscuous mode [ 535.823731][ T1044] hsr_slave_1: left promiscuous mode [ 535.908873][ T1044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.927000][ T1044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.969206][ T1044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.986933][ T1044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.074945][ T1044] veth1_macvtap: left promiscuous mode [ 536.080745][ T1044] veth0_macvtap: left promiscuous mode [ 536.086435][ T1044] veth1_vlan: left promiscuous mode [ 536.115989][ T1044] veth0_vlan: left promiscuous mode [ 538.404495][ T1044] team0 (unregistering): Port device team_slave_1 removed [ 538.558169][ T1044] team0 (unregistering): Port device team_slave_0 removed [ 540.494218][T12000] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 540.517434][T12000] CPU: 1 UID: 0 PID: 12000 Comm: syz.3.1368 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 540.528306][T12000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 540.538418][T12000] Call Trace: [ 540.541751][T12000] [ 540.544727][T12000] dump_stack_lvl+0x16c/0x1f0 [ 540.549488][T12000] sysfs_warn_dup+0x7f/0xa0 [ 540.554066][T12000] sysfs_do_create_link_sd+0x124/0x140 [ 540.559639][T12000] sysfs_create_link+0x61/0xc0 [ 540.564468][T12000] device_add+0x62e/0x1a70 [ 540.568956][T12000] ? __pfx_device_add+0x10/0x10 [ 540.573876][T12000] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 540.579860][T12000] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 540.585942][T12000] wiphy_register+0x20d7/0x2d30 [ 540.590888][T12000] ? __pfx_wiphy_register+0x10/0x10 [ 540.596180][T12000] ieee80211_register_hw+0x2959/0x3fb0 [ 540.601737][T12000] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 540.607659][T12000] ? rcu_is_watching+0x12/0xc0 [ 540.612510][T12000] ? trace_hrtimer_init+0x19d/0x220 [ 540.617791][T12000] ? __hrtimer_init+0x106/0x2c0 [ 540.622743][T12000] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 540.628585][T12000] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 540.634736][T12000] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 540.641417][T12000] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 540.646798][T12000] hwsim_new_radio_nl+0xb42/0x12b0 [ 540.651986][T12000] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 540.657616][T12000] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 540.665051][T12000] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 540.672500][T12000] genl_family_rcv_msg_doit+0x202/0x2f0 [ 540.678125][T12000] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 540.684298][T12000] ? bpf_lsm_capable+0x9/0x10 [ 540.689051][T12000] ? security_capable+0x7e/0x260 [ 540.694059][T12000] ? ns_capable+0xd7/0x110 [ 540.698552][T12000] genl_rcv_msg+0x565/0x800 [ 540.703146][T12000] ? __pfx_genl_rcv_msg+0x10/0x10 [ 540.708256][T12000] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 540.713906][T12000] netlink_rcv_skb+0x165/0x410 [ 540.718753][T12000] ? __pfx_genl_rcv_msg+0x10/0x10 [ 540.723872][T12000] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 540.729249][T12000] ? down_read+0xc9/0x330 [ 540.733666][T12000] ? __pfx_down_read+0x10/0x10 [ 540.738519][T12000] ? netlink_deliver_tap+0x1ae/0xcf0 [ 540.743877][T12000] genl_rcv+0x28/0x40 [ 540.747938][T12000] netlink_unicast+0x53c/0x7f0 [ 540.752772][T12000] ? __pfx_netlink_unicast+0x10/0x10 [ 540.758129][T12000] ? __phys_addr_symbol+0x30/0x80 [ 540.763231][T12000] ? __check_object_size+0x488/0x710 [ 540.768609][T12000] netlink_sendmsg+0x8b8/0xd70 [ 540.773540][T12000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.778911][T12000] ____sys_sendmsg+0x9ae/0xb40 [ 540.783750][T12000] ? copy_msghdr_from_user+0x10b/0x160 [ 540.789392][T12000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.794847][T12000] ? __pfx___lock_acquire+0x10/0x10 [ 540.800134][T12000] ___sys_sendmsg+0x135/0x1e0 [ 540.804929][T12000] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.810236][T12000] ? lock_acquire+0x2f/0xb0 [ 540.814821][T12000] ? __fget_files+0x40/0x3f0 [ 540.819487][T12000] ? fdget+0x176/0x210 [ 540.823615][T12000] __sys_sendmsg+0x117/0x1f0 [ 540.828283][T12000] ? __pfx___sys_sendmsg+0x10/0x10 [ 540.833494][T12000] ? __x64_sys_futex+0x1e1/0x4c0 [ 540.838539][T12000] do_syscall_64+0xcd/0x250 [ 540.843132][T12000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.849114][T12000] RIP: 0033:0x7f152d57dff9 [ 540.853593][T12000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.873371][T12000] RSP: 002b:00007f152e3c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.881848][T12000] RAX: ffffffffffffffda RBX: 00007f152d735f80 RCX: 00007f152d57dff9 [ 540.889875][T12000] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 540.897901][T12000] RBP: 00007f152d5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 540.906115][T12000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.914234][T12000] R13: 0000000000000000 R14: 00007f152d735f80 R15: 00007ffd9cb5d818 [ 540.922329][T12000] [ 542.074415][T11870] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 542.118193][T11870] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 542.135299][T11870] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 542.152747][T11870] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 542.297945][T11870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.364918][T11870] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.388343][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.395502][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.449099][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.456285][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.784429][T11870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.924002][T11870] veth0_vlan: entered promiscuous mode [ 542.974360][T11870] veth1_vlan: entered promiscuous mode [ 543.049215][T11870] veth0_macvtap: entered promiscuous mode [ 543.091671][T11870] veth1_macvtap: entered promiscuous mode [ 543.128996][T11870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.146838][T11870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.156732][T11870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.178558][T11870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.197276][T11870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.216844][T11870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.242479][T11870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.256833][T11870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.286061][T11870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.327101][T11870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.346944][T11870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.366857][T11870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.385036][T11870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.420797][T11870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.453388][T11870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.484758][T11870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.513409][T11870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.529021][T11870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.548362][T11870] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.564404][T11870] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.574003][T11870] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.597682][T11870] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.759382][ T9825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.789341][ T9825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.841117][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.860845][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.035380][T12082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1344'. [ 544.196636][T12089] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 544.221726][T12089] CPU: 0 UID: 0 PID: 12089 Comm: syz.0.1384 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 544.232612][T12089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 544.242735][T12089] Call Trace: [ 544.246076][T12089] [ 544.249073][T12089] dump_stack_lvl+0x16c/0x1f0 [ 544.253846][T12089] sysfs_warn_dup+0x7f/0xa0 [ 544.258439][T12089] sysfs_do_create_link_sd+0x124/0x140 [ 544.263989][T12089] sysfs_create_link+0x61/0xc0 [ 544.268845][T12089] device_add+0x62e/0x1a70 [ 544.273358][T12089] ? __pfx_device_add+0x10/0x10 [ 544.278293][T12089] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 544.284270][T12089] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 544.290328][T12089] wiphy_register+0x20d7/0x2d30 [ 544.295501][T12089] ? __pfx_wiphy_register+0x10/0x10 [ 544.300770][T12089] ieee80211_register_hw+0x2959/0x3fb0 [ 544.306282][T12089] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 544.312154][T12089] ? rcu_is_watching+0x12/0xc0 [ 544.316957][T12089] ? trace_hrtimer_init+0x19d/0x220 [ 544.322230][T12089] ? __hrtimer_init+0x106/0x2c0 [ 544.327149][T12089] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 544.332963][T12089] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 544.339080][T12089] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 544.345737][T12089] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 544.351262][T12089] hwsim_new_radio_nl+0xb42/0x12b0 [ 544.356429][T12089] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 544.362031][T12089] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 544.369449][T12089] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 544.376884][T12089] genl_family_rcv_msg_doit+0x202/0x2f0 [ 544.382484][T12089] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 544.388605][T12089] ? bpf_lsm_capable+0x9/0x10 [ 544.393327][T12089] ? security_capable+0x7e/0x260 [ 544.398309][T12089] ? ns_capable+0xd7/0x110 [ 544.402764][T12089] genl_rcv_msg+0x565/0x800 [ 544.407315][T12089] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.412386][T12089] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 544.417991][T12089] netlink_rcv_skb+0x165/0x410 [ 544.422887][T12089] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.427961][T12089] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 544.433301][T12089] ? down_read+0xc9/0x330 [ 544.437683][T12089] ? __pfx_down_read+0x10/0x10 [ 544.442494][T12089] ? netlink_deliver_tap+0x1ae/0xcf0 [ 544.447823][T12089] genl_rcv+0x28/0x40 [ 544.451855][T12089] netlink_unicast+0x53c/0x7f0 [ 544.456663][T12089] ? __pfx_netlink_unicast+0x10/0x10 [ 544.462001][T12089] ? __phys_addr_symbol+0x30/0x80 [ 544.467066][T12089] ? __check_object_size+0x488/0x710 [ 544.472422][T12089] netlink_sendmsg+0x8b8/0xd70 [ 544.477231][T12089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.482569][T12089] ____sys_sendmsg+0x9ae/0xb40 [ 544.487372][T12089] ? copy_msghdr_from_user+0x10b/0x160 [ 544.492974][T12089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 544.498330][T12089] ? netlink_recvmsg+0x81c/0xf30 [ 544.503305][T12089] ? __pfx___lock_acquire+0x10/0x10 [ 544.508559][T12089] ___sys_sendmsg+0x135/0x1e0 [ 544.513288][T12089] ? __pfx____sys_sendmsg+0x10/0x10 [ 544.518550][T12089] ? lock_acquire+0x2f/0xb0 [ 544.523098][T12089] ? __fget_files+0x40/0x3f0 [ 544.527733][T12089] ? fdget+0x176/0x210 [ 544.531844][T12089] __sys_sendmsg+0x117/0x1f0 [ 544.536489][T12089] ? __pfx___sys_sendmsg+0x10/0x10 [ 544.541652][T12089] ? __x64_sys_futex+0x1e1/0x4c0 [ 544.546661][T12089] do_syscall_64+0xcd/0x250 [ 544.551298][T12089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.557234][T12089] RIP: 0033:0x7f125557dff9 [ 544.561698][T12089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.581359][T12089] RSP: 002b:00007f1256399038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.589829][T12089] RAX: ffffffffffffffda RBX: 00007f1255735f80 RCX: 00007f125557dff9 [ 544.597829][T12089] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 544.605830][T12089] RBP: 00007f12555f0296 R08: 0000000000000000 R09: 0000000000000000 [ 544.613833][T12089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.621871][T12089] R13: 0000000000000000 R14: 00007f1255735f80 R15: 00007ffc343a3168 [ 544.629894][T12089] [ 554.684668][T12306] nbd: must specify at least one socket [ 563.688660][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'. [ 564.493018][ T7667] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.848791][ T7667] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.957021][T12479] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1470'. [ 565.106093][ T7667] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.302498][ T5251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 565.324133][ T5251] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 565.331734][ T5251] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 565.342566][ T5251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 565.363848][ T5251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 565.372501][ T5251] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 565.421535][ T7667] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.851576][ T7667] bridge_slave_1: left allmulticast mode [ 565.860199][ T7667] bridge_slave_1: left promiscuous mode [ 565.867422][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.000427][ T7667] bridge_slave_0: left allmulticast mode [ 566.009171][ T7667] bridge_slave_0: left promiscuous mode [ 566.032462][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.456966][ T5251] Bluetooth: hci1: command tx timeout [ 568.387373][ T7667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.438758][ T7667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.469360][ T7667] bond0 (unregistering): Released all slaves [ 568.498867][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.510489][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.733058][T12487] chnl_net:caif_netlink_parms(): no params data found [ 569.548476][ T5251] Bluetooth: hci1: command tx timeout [ 569.674950][T12487] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.699696][T12487] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.737112][T12487] bridge_slave_0: entered allmulticast mode [ 569.744427][T12487] bridge_slave_0: entered promiscuous mode [ 569.802596][T12487] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.810427][T12487] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.817837][T12487] bridge_slave_1: entered allmulticast mode [ 569.825486][T12487] bridge_slave_1: entered promiscuous mode [ 570.860386][T12487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.978793][T12487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.636880][ T5251] Bluetooth: hci1: command tx timeout [ 571.923769][T12487] team0: Port device team_slave_0 added [ 572.332964][ T7667] hsr_slave_0: left promiscuous mode [ 572.387832][ T7667] hsr_slave_1: left promiscuous mode [ 572.408789][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.416482][ T7667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.437591][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.450381][ T7667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.527244][ T7667] veth1_macvtap: left promiscuous mode [ 572.532966][ T7667] veth0_macvtap: left promiscuous mode [ 572.578994][ T7667] veth1_vlan: left promiscuous mode [ 572.584425][ T7667] veth0_vlan: left promiscuous mode [ 573.717802][ T5251] Bluetooth: hci1: command tx timeout [ 576.170653][ T7667] team0 (unregistering): Port device team_slave_1 removed [ 576.287221][ T7667] team0 (unregistering): Port device team_slave_0 removed [ 578.048089][T12487] team0: Port device team_slave_1 added [ 578.119236][T12487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.135993][T12487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.180226][T12487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.294862][T12487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.311824][T12487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.364895][T12487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.873857][T12487] hsr_slave_0: entered promiscuous mode [ 578.922940][T12487] hsr_slave_1: entered promiscuous mode [ 578.967452][T12487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.000041][T12487] Cannot create hsr debugfs directory [ 579.922439][T12662] sock: sock_timestamping_bind_phc: sock not bind to device [ 580.874654][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 580.942236][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 581.001379][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 581.161764][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 581.170911][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 581.179294][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 583.305496][ T54] Bluetooth: hci5: command tx timeout [ 584.219491][ T7667] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.415993][T12487] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 584.527388][T12487] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 584.564588][T12730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.596775][T12730] netlink: get zone limit has 4 unknown bytes [ 584.617969][T12681] chnl_net:caif_netlink_parms(): no params data found [ 584.697060][ T7667] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.748149][T12487] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 584.780030][T12487] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 585.246545][ T7667] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.385218][T12681] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.394667][ T54] Bluetooth: hci5: command tx timeout [ 585.472620][T12681] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.479930][T12681] bridge_slave_0: entered allmulticast mode [ 585.489619][T12681] bridge_slave_0: entered promiscuous mode [ 585.514543][ T7667] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.549774][T12681] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.572160][T12681] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.579565][T12681] bridge_slave_1: entered allmulticast mode [ 585.619943][T12681] bridge_slave_1: entered promiscuous mode [ 586.099962][T12681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.145118][T12681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.325511][T12681] team0: Port device team_slave_0 added [ 586.404916][T12681] team0: Port device team_slave_1 added [ 586.428689][T12487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.630876][T12487] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.680616][T12681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.699482][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.801803][T12681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.865478][T12681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.887837][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.982066][T12681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.003006][T12772] nfsd: Unknown parameter 'locking state [ 587.003006][T12772] <6>[ 585.572160][T12681] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.003006][T12772] <6>[ 585.579565][T12681] bridge_slave_1: entered allmulticast mode [ 587.003006][T12772] <6>[ 585.619943][T12681] bridge_slave_1: entered promiscuous mode [ 587.003006][T12772] <6>[ 586.099962][T12681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.003006][T12772] <6>[ 586.145118][T12681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.003006][T12772] <6>[ 586.325511][T12681] team0: Port device team_slave_0 added [ 587.003006][T12772] <6>[ 586.404916][T12681] team0: Port device team_slave_1 added [ 587.003006][T12772] <6>[ 586.428689][T12487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.003006][T12772] <6>[ 586.630876][T12487] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.003006][T12772] <6>[ 586.680616][T12681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.003006][T12772] <6>[ 586.699482][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragme [ 587.038499][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.159862][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.388417][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.395741][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.476531][ T54] Bluetooth: hci5: command tx timeout [ 588.303486][T12681] hsr_slave_0: entered promiscuous mode [ 588.332789][T12681] hsr_slave_1: entered promiscuous mode [ 588.395913][T12681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 588.414150][T12681] Cannot create hsr debugfs directory [ 588.626884][T12782] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 588.682051][T12782] CPU: 1 UID: 0 PID: 12782 Comm: syz.1.1516 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 588.692923][T12782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 588.703048][T12782] Call Trace: [ 588.706378][T12782] [ 588.709371][T12782] dump_stack_lvl+0x16c/0x1f0 [ 588.714132][T12782] sysfs_warn_dup+0x7f/0xa0 [ 588.718701][T12782] sysfs_do_create_link_sd+0x124/0x140 [ 588.724231][T12782] sysfs_create_link+0x61/0xc0 [ 588.729069][T12782] device_add+0x62e/0x1a70 [ 588.733564][T12782] ? __pfx_device_add+0x10/0x10 [ 588.738573][T12782] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 588.744557][T12782] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 588.750650][T12782] wiphy_register+0x20d7/0x2d30 [ 588.755597][T12782] ? __pfx_wiphy_register+0x10/0x10 [ 588.760902][T12782] ieee80211_register_hw+0x2959/0x3fb0 [ 588.766433][T12782] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 588.772361][T12782] ? rcu_is_watching+0x12/0xc0 [ 588.777190][T12782] ? trace_hrtimer_init+0x19d/0x220 [ 588.782504][T12782] ? __hrtimer_init+0x106/0x2c0 [ 588.787456][T12782] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 588.793291][T12782] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 588.799435][T12782] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 588.806116][T12782] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 588.811489][T12782] hwsim_new_radio_nl+0xb42/0x12b0 [ 588.816700][T12782] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 588.822369][T12782] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 588.829824][T12782] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 588.837296][T12782] genl_family_rcv_msg_doit+0x202/0x2f0 [ 588.842946][T12782] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 588.849122][T12782] ? bpf_lsm_capable+0x9/0x10 [ 588.853877][T12782] ? security_capable+0x7e/0x260 [ 588.858891][T12782] ? ns_capable+0xd7/0x110 [ 588.863369][T12782] genl_rcv_msg+0x565/0x800 [ 588.867958][T12782] ? __pfx_genl_rcv_msg+0x10/0x10 [ 588.873052][T12782] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 588.878705][T12782] netlink_rcv_skb+0x165/0x410 [ 588.883552][T12782] ? __pfx_genl_rcv_msg+0x10/0x10 [ 588.888672][T12782] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 588.894045][T12782] ? down_read+0xc9/0x330 [ 588.898456][T12782] ? __pfx_down_read+0x10/0x10 [ 588.903299][T12782] ? netlink_deliver_tap+0x1ae/0xcf0 [ 588.908672][T12782] genl_rcv+0x28/0x40 [ 588.912726][T12782] netlink_unicast+0x53c/0x7f0 [ 588.917639][T12782] ? __pfx_netlink_unicast+0x10/0x10 [ 588.923004][T12782] ? __phys_addr_symbol+0x30/0x80 [ 588.928093][T12782] ? __check_object_size+0x488/0x710 [ 588.933548][T12782] netlink_sendmsg+0x8b8/0xd70 [ 588.938385][T12782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.944199][T12782] ____sys_sendmsg+0x9ae/0xb40 [ 588.949060][T12782] ? copy_msghdr_from_user+0x10b/0x160 [ 588.954604][T12782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.959983][T12782] ? __pfx___lock_acquire+0x10/0x10 [ 588.965268][T12782] ___sys_sendmsg+0x135/0x1e0 [ 588.970030][T12782] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.975394][T12782] ? lock_acquire+0x2f/0xb0 [ 588.980067][T12782] ? __fget_files+0x40/0x3f0 [ 588.984800][T12782] ? fdget+0x176/0x210 [ 588.988943][T12782] __sys_sendmsg+0x117/0x1f0 [ 588.993630][T12782] ? __pfx___sys_sendmsg+0x10/0x10 [ 588.998963][T12782] ? __x64_sys_futex+0x1e1/0x4c0 [ 589.004004][T12782] do_syscall_64+0xcd/0x250 [ 589.008597][T12782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.014664][T12782] RIP: 0033:0x7f2af097dff9 [ 589.019124][T12782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.038838][T12782] RSP: 002b:00007f2af16e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.047328][T12782] RAX: ffffffffffffffda RBX: 00007f2af0b35f80 RCX: 00007f2af097dff9 [ 589.055447][T12782] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 589.063493][T12782] RBP: 00007f2af09f0296 R08: 0000000000000000 R09: 0000000000000000 [ 589.071536][T12782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.079667][T12782] R13: 0000000000000000 R14: 00007f2af0b35f80 R15: 00007fff61f91208 [ 589.087738][T12782] [ 589.542174][ T54] Bluetooth: hci5: command tx timeout [ 589.768121][ T7667] bridge_slave_1: left allmulticast mode [ 589.781047][ T7667] bridge_slave_1: left promiscuous mode [ 589.802665][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.833019][ T7667] bridge_slave_0: left allmulticast mode [ 589.838759][ T7667] bridge_slave_0: left promiscuous mode [ 589.872300][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.600931][ T7667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.650957][ T7667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.690464][ T7667] bond0 (unregistering): Released all slaves [ 595.859199][T12864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 600.051399][T12487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.347721][ T7667] hsr_slave_0: left promiscuous mode [ 600.366519][ T7667] hsr_slave_1: left promiscuous mode [ 600.391679][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.428904][ T7667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.468807][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.501476][ T7667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.604364][ T7667] veth1_macvtap: left promiscuous mode [ 600.630312][ T7667] veth0_macvtap: left promiscuous mode [ 600.655029][ T7667] veth1_vlan: left promiscuous mode [ 600.682957][ T7667] veth0_vlan: left promiscuous mode [ 601.311439][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 602.772810][ T7667] team0 (unregistering): Port device team_slave_1 removed [ 602.826397][ T7667] team0 (unregistering): Port device team_slave_0 removed [ 603.707137][T12487] veth0_vlan: entered promiscuous mode [ 603.925081][T12487] veth1_vlan: entered promiscuous mode [ 604.166788][T12681] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 604.260325][T12681] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 604.314098][T12681] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 604.355154][T12487] veth0_macvtap: entered promiscuous mode [ 604.370606][T12681] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 604.559120][T12487] veth1_macvtap: entered promiscuous mode [ 604.718024][T12487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.773126][T12487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.801959][T12487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.822261][T12487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.852691][T12487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.881984][T12487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.903528][T12487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.963483][T12487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.997936][T12487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.018239][T12487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.051940][T12487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.084740][T12487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.111946][T12487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.134515][T12487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.160172][T12487] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.179280][T12487] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.202546][T12487] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.211354][T12487] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.351083][T12681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.443298][T12681] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.514838][ T9824] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.522079][ T9824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.554080][ T9824] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.561283][ T9824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.662044][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.670209][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.777538][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.801999][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.331081][T12681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.587514][T12681] veth0_vlan: entered promiscuous mode [ 608.685141][T12681] veth1_vlan: entered promiscuous mode [ 608.831051][T12681] veth0_macvtap: entered promiscuous mode [ 608.924535][T12681] veth1_macvtap: entered promiscuous mode [ 609.011765][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.109344][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.160339][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.213537][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.273837][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.342016][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.402056][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.470746][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.537466][T12681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.662051][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.735698][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.786588][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.850448][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.904393][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.975709][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.059248][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.105394][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.163793][T12681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.238982][T12681] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.302062][T12681] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.310850][T12681] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.397869][T12681] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.806345][ T7667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.860120][ T7667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.083653][ T7667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.122051][ T7667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.015872][T13035] debugfs: Directory '-侞6yռ ka;+1)p;!X+@' with parent 'ieee80211' already present! [ 615.233338][T13029] kexec: Could not allocate control_code_buffer [ 615.665875][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 615.675680][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 615.685065][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 615.717553][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 615.732402][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 615.739860][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 616.101821][T13038] chnl_net:caif_netlink_parms(): no params data found [ 617.032116][T13038] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.040115][T13038] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.082218][T13038] bridge_slave_0: entered allmulticast mode [ 617.091172][T13038] bridge_slave_0: entered promiscuous mode [ 617.138023][T13038] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.166370][T13038] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.182827][T13038] bridge_slave_1: entered allmulticast mode [ 617.190126][T13038] bridge_slave_1: entered promiscuous mode [ 617.635025][T13038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.678405][T13038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.783795][ T54] Bluetooth: hci3: command tx timeout [ 618.108354][T13038] team0: Port device team_slave_0 added [ 618.182593][T13038] team0: Port device team_slave_1 added [ 618.777275][T13038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.806247][T13038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.881948][T13038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.904341][T13038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.911390][T13038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.982129][T13038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.357366][T13038] hsr_slave_0: entered promiscuous mode [ 619.373612][T13038] hsr_slave_1: entered promiscuous mode [ 619.869507][ T54] Bluetooth: hci3: command tx timeout [ 621.951778][ T54] Bluetooth: hci3: command tx timeout [ 622.568171][T13038] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.074021][T13038] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.618458][T13038] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.022150][ T54] Bluetooth: hci3: command tx timeout [ 624.135596][T13038] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.564209][T13038] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 624.806017][T13038] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 624.862805][T13038] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 624.903752][T13038] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 625.046900][T13038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.066070][T13038] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.116046][ T9825] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.123367][ T9825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.203822][ T9825] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.210980][ T9825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.380568][T13038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 625.664037][T13038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.707780][T13038] veth0_vlan: entered promiscuous mode [ 625.721769][T13038] veth1_vlan: entered promiscuous mode [ 625.750772][T13038] veth0_macvtap: entered promiscuous mode [ 625.761141][T13038] veth1_macvtap: entered promiscuous mode [ 625.833355][T13038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.871972][T13038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.883119][T13038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.902049][T13038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.912348][T13038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.923240][T13038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.942165][T13038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.953710][T13038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.963887][T13038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.974584][T13038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.987897][T13038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.998669][T13038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.009356][T13038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.019475][T13038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.030359][T13038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.040651][T13038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.051773][T13038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.062463][T13038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.073084][T13038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.083233][T13038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.093805][T13038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.106411][T13038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.119373][T13038] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.128355][T13038] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.137740][T13038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.147785][T13038] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.538841][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.557253][ T9825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.562314][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.579004][ T9825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.953856][T13109] debugfs: Directory '-侞6yռ ka;+1)p;!X+@' with parent 'ieee80211' already present! [ 629.945365][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.951803][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.505912][T13172] Process accounting resumed [ 632.894300][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1582'. [ 634.580041][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 634.986890][T13250] debugfs: Directory '-侞6yռ ka;+1)p;!X+@' with parent 'ieee80211' already present! [ 638.765064][T13295] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 638.784821][T13295] CPU: 0 UID: 0 PID: 13295 Comm: syz.3.1601 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 638.795701][T13295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 638.805838][T13295] Call Trace: [ 638.809177][T13295] [ 638.812162][T13295] dump_stack_lvl+0x16c/0x1f0 [ 638.817020][T13295] sysfs_warn_dup+0x7f/0xa0 [ 638.821623][T13295] sysfs_do_create_link_sd+0x124/0x140 [ 638.827174][T13295] sysfs_create_link+0x61/0xc0 [ 638.832027][T13295] device_add+0x62e/0x1a70 [ 638.836527][T13295] ? __pfx_device_add+0x10/0x10 [ 638.841450][T13295] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 638.847524][T13295] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 638.853613][T13295] wiphy_register+0x20d7/0x2d30 [ 638.858649][T13295] ? __pfx_wiphy_register+0x10/0x10 [ 638.863943][T13295] ieee80211_register_hw+0x2959/0x3fb0 [ 638.869491][T13295] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 638.875397][T13295] ? rcu_is_watching+0x12/0xc0 [ 638.880244][T13295] ? trace_hrtimer_init+0x19d/0x220 [ 638.885582][T13295] ? __hrtimer_init+0x106/0x2c0 [ 638.890531][T13295] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 638.896367][T13295] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 638.902593][T13295] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 638.909270][T13295] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 638.914673][T13295] hwsim_new_radio_nl+0xb42/0x12b0 [ 638.919868][T13295] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 638.925501][T13295] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 638.932940][T13295] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 638.940397][T13295] genl_family_rcv_msg_doit+0x202/0x2f0 [ 638.946036][T13295] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 638.952203][T13295] ? bpf_lsm_capable+0x9/0x10 [ 638.956955][T13295] ? security_capable+0x7e/0x260 [ 638.961964][T13295] ? ns_capable+0xd7/0x110 [ 638.966447][T13295] genl_rcv_msg+0x565/0x800 [ 638.971017][T13295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 638.976116][T13295] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 638.981763][T13295] netlink_rcv_skb+0x165/0x410 [ 638.986610][T13295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 638.991717][T13295] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 638.997104][T13295] ? down_read+0xc9/0x330 [ 639.001521][T13295] ? __pfx_down_read+0x10/0x10 [ 639.006484][T13295] ? netlink_deliver_tap+0x1ae/0xcf0 [ 639.011834][T13295] genl_rcv+0x28/0x40 [ 639.015888][T13295] netlink_unicast+0x53c/0x7f0 [ 639.020740][T13295] ? __pfx_netlink_unicast+0x10/0x10 [ 639.026109][T13295] ? __phys_addr_symbol+0x30/0x80 [ 639.031288][T13295] ? __check_object_size+0x488/0x710 [ 639.036669][T13295] netlink_sendmsg+0x8b8/0xd70 [ 639.041513][T13295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.046883][T13295] ____sys_sendmsg+0x9ae/0xb40 [ 639.051722][T13295] ? copy_msghdr_from_user+0x10b/0x160 [ 639.057279][T13295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 639.062654][T13295] ? __pfx___lock_acquire+0x10/0x10 [ 639.068015][T13295] ___sys_sendmsg+0x135/0x1e0 [ 639.072813][T13295] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.078144][T13295] ? lock_acquire+0x2f/0xb0 [ 639.082728][T13295] ? __fget_files+0x40/0x3f0 [ 639.087408][T13295] ? fdget+0x176/0x210 [ 639.091547][T13295] __sys_sendmsg+0x117/0x1f0 [ 639.096240][T13295] ? __pfx___sys_sendmsg+0x10/0x10 [ 639.101446][T13295] ? __x64_sys_futex+0x1e1/0x4c0 [ 639.106524][T13295] do_syscall_64+0xcd/0x250 [ 639.111116][T13295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.117081][T13295] RIP: 0033:0x7f4176f7dff9 [ 639.121657][T13295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.141427][T13295] RSP: 002b:00007f4177e03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.149949][T13295] RAX: ffffffffffffffda RBX: 00007f4177135f80 RCX: 00007f4176f7dff9 [ 639.157983][T13295] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 639.166028][T13295] RBP: 00007f4176ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 639.174066][T13295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.182097][T13295] R13: 0000000000000000 R14: 00007f4177135f80 R15: 00007ffd3716b138 [ 639.190167][T13295] [ 641.241595][T13315] netlink: 'syz.0.1606': attribute type 2 has an invalid length. [ 647.383450][ T5251] Bluetooth: hci0: command 0x0406 tx timeout [ 647.862369][ T30] INFO: task syz.2.1308:11672 blocked for more than 143 seconds. [ 647.870560][ T30] Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 647.893958][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 647.931989][ T30] task:syz.2.1308 state:D stack:26128 pid:11672 tgid:11668 ppid:5648 flags:0x00000006 [ 647.961902][ T30] Call Trace: [ 647.969950][ T30] [ 647.975515][ T30] __schedule+0xef5/0x5750 [ 647.980138][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 648.012074][ T30] ? __pfx___schedule+0x10/0x10 [ 648.017062][ T30] ? schedule+0x298/0x350 [ 648.021476][ T30] ? __pfx_lock_release+0x10/0x10 [ 648.057781][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 648.081955][ T30] ? lock_acquire+0x2f/0xb0 [ 648.086613][ T30] ? schedule+0x1fd/0x350 [ 648.091015][ T30] schedule+0xe7/0x350 [ 648.115785][ T30] schedule_timeout+0x258/0x2a0 [ 648.121281][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 648.141901][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 648.161924][ T30] __wait_for_common+0x3e1/0x600 [ 648.178434][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 648.192055][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 648.208980][ T30] ? __pfx_try_to_wake_up+0x10/0x10 [ 648.252025][ T30] wait_for_completion_state+0x1c/0x40 [ 648.257790][ T30] do_coredump+0x82f/0x4160 [ 648.281986][ T30] ? hlock_class+0x4e/0x130 [ 648.297170][ T30] ? stack_depot_save_flags+0x28/0x900 [ 648.326318][ T30] ? __pfx_do_coredump+0x10/0x10 [ 648.337168][ T30] ? kmem_cache_free+0x152/0x4b0 [ 648.347248][ T30] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 648.361930][ T30] ? do_syscall_64+0xda/0x250 [ 648.379585][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.400233][ T30] get_signal+0x237c/0x26d0 [ 648.410621][ T30] ? __pfx_get_signal+0x10/0x10 [ 648.424365][ T30] ? rcu_is_watching+0x12/0xc0 [ 648.452369][ T30] ? fpu__clear_user_states+0xf8/0x1e0 [ 648.457971][ T30] ? __local_bh_enable_ip+0xa4/0x120 [ 648.483866][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 648.489545][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 648.521927][ T30] ? rcu_is_watching+0x12/0xc0 [ 648.537404][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 648.557362][ T30] do_syscall_64+0xda/0x250 [ 648.567822][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.591989][ T30] RIP: 0033:0x7fc2ee8403c0 [ 648.596543][ T30] RSP: 002b:00007fc2ef7b8b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 648.632030][ T30] RAX: 0000000000000000 RBX: 00007fc2eeb36060 RCX: 00007fc2ee97dff9 [ 648.640116][ T30] RDX: 00007fc2ef7b8b40 RSI: 00007fc2ef7b8c70 RDI: 000000000000000b [ 648.681910][ T30] RBP: 00007fc2eeb36058 R08: 0000000000000000 R09: 0000000000000000 [ 648.689989][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc2eeb36064 [ 648.702626][ T30] R13: 0000000000000000 R14: 00007ffc59ea79b0 R15: 00007ffc59ea7a98 [ 648.710699][ T30] [ 648.713916][ T30] [ 648.713916][ T30] Showing all locks held in the system: [ 648.721695][ T30] 1 lock held by khungtaskd/30: [ 648.732218][ T30] #0: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 648.742590][ T30] 2 locks held by syslogd/4668: [ 648.747509][ T30] #0: ffff8880b873ee98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 648.762160][ T30] #1: ffff8880b8728a48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 648.801913][ T30] 1 lock held by udevd/4686: [ 648.806588][ T30] 2 locks held by getty/4997: [ 648.811334][ T30] #0: ffff88814d0100a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 648.845398][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 648.855869][ T30] 2 locks held by kworker/u8:11/7662: [ 648.861614][ T30] 4 locks held by kworker/u8:15/7666: [ 648.871957][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 648.891944][ T30] #1: ffffc90002edfd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 648.912015][ T30] #2: ffffffff8faae210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 648.921478][ T30] #3: ffffffff8ddc2fc0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x700 [ 648.942163][ T30] 1 lock held by syz.2.1308/11669: [ 648.952227][ T30] 1 lock held by syz.1.1528/12928: [ 648.957433][ T30] 1 lock held by syz.2.1576/13193: [ 648.991938][ T30] 2 locks held by syz.3.1594/13263: [ 648.997317][ T30] 2 locks held by syz.3.1608/13332: [ 649.011926][ T30] 2 locks held by syz.0.1619/13363: [ 649.017244][ T30] [ 649.019615][ T30] ============================================= [ 649.019615][ T30] [ 649.041980][ T30] NMI backtrace for cpu 0 [ 649.046397][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 649.056969][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 649.067167][ T30] Call Trace: [ 649.070484][ T30] [ 649.073463][ T30] dump_stack_lvl+0x116/0x1f0 [ 649.078221][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 649.083227][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 649.089289][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 649.095348][ T30] watchdog+0xf0c/0x1240 [ 649.099667][ T30] ? __pfx_watchdog+0x10/0x10 [ 649.104425][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 649.109709][ T30] ? __kthread_parkme+0x148/0x220 [ 649.114812][ T30] ? __pfx_watchdog+0x10/0x10 [ 649.119555][ T30] kthread+0x2c1/0x3a0 [ 649.123675][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 649.128946][ T30] ? __pfx_kthread+0x10/0x10 [ 649.133604][ T30] ret_from_fork+0x45/0x80 [ 649.138050][ T30] ? __pfx_kthread+0x10/0x10 [ 649.142678][ T30] ret_from_fork_asm+0x1a/0x30 [ 649.147514][ T30] [ 649.152145][ T30] Sending NMI from CPU 0 to CPUs 1: [ 649.157437][ C1] NMI backtrace for cpu 1 [ 649.157455][ C1] CPU: 1 UID: 0 PID: 13263 Comm: syz.3.1594 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 649.157488][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 649.157504][ C1] RIP: 0010:write_comp_data+0x42/0x90 [ 649.157548][ C1] Code: a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 1c 16 00 00 85 c0 74 4f 8b 82 f8 15 00 00 <83> f8 03 75 44 48 8b 82 00 16 00 00 8b 92 fc 15 00 00 48 8b 38 48 [ 649.157575][ C1] RSP: 0018:ffffc900091c7280 EFLAGS: 00000046 [ 649.157597][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b06bd09 [ 649.157615][ C1] RDX: ffff8880550f5a00 RSI: 0000000000000000 RDI: 0000000000000005 [ 649.157634][ C1] RBP: fffff52001238e6b R08: 0000000000000005 R09: 0000000000000000 [ 649.157657][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffea0001e61dc0 [ 649.157675][ C1] R13: 0000000000000000 R14: ffff88805c3457b0 R15: ffffc900091c7358 [ 649.157694][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 649.157721][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 649.157740][ C1] CR2: 0000001b32adaff8 CR3: 000000006ddca000 CR4: 00000000003526f0 [ 649.157758][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 649.157775][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 649.157792][ C1] Call Trace: [ 649.157800][ C1] [ 649.157809][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 649.157844][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 649.157885][ C1] ? nmi_handle+0x1a9/0x5c0 [ 649.157914][ C1] ? write_comp_data+0x42/0x90 [ 649.157950][ C1] ? default_do_nmi+0x6a/0x160 [ 649.157980][ C1] ? exc_nmi+0x170/0x1e0 [ 649.158006][ C1] ? end_repeat_nmi+0xf/0x53 [ 649.158046][ C1] ? xas_store+0x259/0x1960 [ 649.158071][ C1] ? write_comp_data+0x42/0x90 [ 649.158107][ C1] ? write_comp_data+0x42/0x90 [ 649.158143][ C1] ? write_comp_data+0x42/0x90 [ 649.158179][ C1] [ 649.158187][ C1] [ 649.158196][ C1] xas_store+0x259/0x1960 [ 649.158225][ C1] __filemap_remove_folio+0x368/0x570 [ 649.158264][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 649.158307][ C1] ? __pfx___filemap_remove_folio+0x10/0x10 [ 649.158348][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 649.158376][ C1] ? lock_acquire+0x2f/0xb0 [ 649.158416][ C1] ? filemap_remove_folio+0xbe/0x210 [ 649.158456][ C1] filemap_remove_folio+0xc8/0x210 [ 649.158494][ C1] truncate_inode_folio+0x49/0x70 [ 649.158520][ C1] shmem_undo_range+0x36e/0x1170 [ 649.158558][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 649.158603][ C1] ? mark_lock+0xb5/0xc60 [ 649.158645][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 649.158679][ C1] ? hlock_class+0x4e/0x130 [ 649.158709][ C1] ? mark_lock+0xb5/0xc60 [ 649.158758][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 649.158796][ C1] ? hlock_class+0x4e/0x130 [ 649.158826][ C1] ? __lock_acquire+0x163e/0x3ce0 [ 649.158867][ C1] shmem_evict_inode+0x3a3/0xba0 [ 649.158901][ C1] ? find_held_lock+0x2d/0x110 [ 649.158932][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 649.158966][ C1] ? evict+0x3c8/0x970 [ 649.158998][ C1] ? __pfx_lock_release+0x10/0x10 [ 649.159039][ C1] ? lock_acquire+0x2f/0xb0 [ 649.159079][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 649.159113][ C1] evict+0x409/0x970 [ 649.159145][ C1] ? __pfx_evict+0x10/0x10 [ 649.159184][ C1] iput+0x530/0x890 [ 649.159215][ C1] ? __pfx_generic_delete_inode+0x10/0x10 [ 649.159244][ C1] dentry_unlink_inode+0x29c/0x480 [ 649.159279][ C1] __dentry_kill+0x1d0/0x600 [ 649.159316][ C1] dput.part.0+0x4b1/0x9b0 [ 649.159354][ C1] dput+0x1f/0x30 [ 649.159389][ C1] __fput+0x513/0xb60 [ 649.159428][ C1] task_work_run+0x14e/0x250 [ 649.159467][ C1] ? __pfx_task_work_run+0x10/0x10 [ 649.159510][ C1] do_exit+0xadd/0x2d70 [ 649.159548][ C1] ? __pfx_do_exit+0x10/0x10 [ 649.159587][ C1] do_group_exit+0xd3/0x2a0 [ 649.159623][ C1] get_signal+0x2658/0x26d0 [ 649.159663][ C1] ? force_sig_fault+0xad/0xf0 [ 649.159691][ C1] ? __pfx_get_signal+0x10/0x10 [ 649.159724][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 649.159761][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 649.159798][ C1] ? __bad_area_nosemaphore+0x334/0x6a0 [ 649.159844][ C1] ? do_user_addr_fault+0x920/0x13f0 [ 649.159889][ C1] irqentry_exit_to_user_mode+0x13f/0x280 [ 649.159927][ C1] asm_exc_page_fault+0x26/0x30 [ 649.159961][ C1] RIP: 0033:0x7f4176f7e001 [ 649.159980][ C1] Code: Unable to access opcode bytes at 0x7f4176f7dfd7. [ 649.159992][ C1] RSP: 002b:0000000000000008 EFLAGS: 00010217 [ 649.160012][ C1] RAX: 0000000000000000 RBX: 00007f4177135f80 RCX: 00007f4176f7dff9 [ 649.160030][ C1] RDX: 9999999999999999 RSI: 0000000000000008 RDI: 0000000000040000 [ 649.160048][ C1] RBP: 00007f4176ff0296 R08: 0000000000000008 R09: 0000000000000000 [ 649.160065][ C1] R10: 9999999999999999 R11: 0000000000000246 R12: 0000000000000000 [ 649.160083][ C1] R13: 0000000000000000 R14: 00007f4177135f80 R15: 00007ffd3716b138 [ 649.160108][ C1] [ 649.239896][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 649.239922][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 649.239964][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 649.239985][ T30] Call Trace: [ 649.239998][ T30] [ 649.240014][ T30] dump_stack_lvl+0x3d/0x1f0 [ 649.240076][ T30] panic+0x71d/0x800 [ 649.240126][ T30] ? __pfx_panic+0x10/0x10 [ 649.240173][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 649.240216][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 649.240270][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 649.240310][ T30] ? watchdog+0xd76/0x1240 [ 649.240360][ T30] ? watchdog+0xd69/0x1240 [ 649.240422][ T30] watchdog+0xd87/0x1240 [ 649.240478][ T30] ? __pfx_watchdog+0x10/0x10 [ 649.240526][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 649.240578][ T30] ? __kthread_parkme+0x148/0x220 [ 649.240621][ T30] ? __pfx_watchdog+0x10/0x10 [ 649.240670][ T30] kthread+0x2c1/0x3a0 [ 649.240708][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 649.240752][ T30] ? __pfx_kthread+0x10/0x10 [ 649.240792][ T30] ret_from_fork+0x45/0x80 [ 649.240824][ T30] ? __pfx_kthread+0x10/0x10 [ 649.240864][ T30] ret_from_fork_asm+0x1a/0x30 [ 649.240932][ T30] [ 649.784339][ T30] Kernel Offset: disabled [ 649.788683][ T30] Rebooting in 86400 seconds..