last executing test programs: 5.145995856s ago: executing program 1 (id=1662): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioprio_set$auto(0x1, 0x0, 0x0) msync$auto(0x1ffff000, 0x100000000005, 0x400000004) madvise$auto(0x0, 0xffffffffffff0001, 0x17) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) madvise$auto(0x7, 0xc7d, 0x3) madvise$auto(0x8000000000000000, 0x7fffffffffffffff, 0x889) madvise$auto(0x2000000040000, 0x7, 0xa) madvise$auto(0x8, 0x5, 0x9) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') epoll_ctl$auto(0x0, 0x2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x100000000000, 0x4000d, 0xdf, 0x9b72, 0x9, 0x28000) clone$auto(0x20001002, 0xd7b0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x1000004000008) mq_open$auto(0x0, 0xb0, 0x2, &(0x7f00000000c0)={0x0, 0x9, 0x8, 0x401, [0x5, 0x5, 0x3]}) 4.678276455s ago: executing program 0 (id=1657): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x4) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) socketpair$auto(0x3, 0x5, 0x7, 0x0) seccomp$auto(0x1, 0x8, 0x0) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x3, 0x1f, 0x0, 0x9b72, 0x1000, 0x8000) socket(0x18, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000043c0), r0) sched_getparam$auto(0x0, &(0x7f0000000240)={0x8000}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f0000004400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="05e725bd7000fcdbdf250f"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4008800) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) 4.196412867s ago: executing program 1 (id=1659): munmap$auto(0x1000000, 0x2000000c) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) mlockall$auto(0x3) (fail_nth: 4) mlockall$auto(0x7) 4.149969847s ago: executing program 0 (id=1660): munmap$auto(0x1000000, 0x2000000c) socket(0x15, 0x5, 0x0) recvmmsg$auto(0x3, &(0x7f0000001180)={{0x0, 0x5, &(0x7f0000000140)={0x0, 0x57d}, 0x4, 0x0, 0x3, 0x7}, 0x9160}, 0x3, 0x4d, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) mlockall$auto(0x3) mlockall$auto(0x7) 3.318095706s ago: executing program 0 (id=1665): ioctl$auto(0xc9, 0x100000002, 0x4000000005c8d) syz_genetlink_get_family_id$auto_handshake(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001c40), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x1c, r1, 0x5f020e7b35b74d3, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) read$auto(0x3, 0x0, 0xfdef) clone$auto(0x3b46, 0x5c84, 0xfffffffffffffffc, 0x0, 0x4f) close_range$auto(0x0, 0xfffffffffffff000, 0x2) pipe$auto(0x0) fcntl$auto(0x8000000000000001, 0x26, 0x2) munmap$auto(0x1000000, 0x2000000c) madvise$auto(0x0, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) mmap$auto(0x400000000000, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) 3.022493387s ago: executing program 0 (id=1669): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioprio_set$auto(0x1, 0x0, 0x0) msync$auto(0x1ffff000, 0x100000000005, 0x400000004) madvise$auto(0x0, 0xffffffffffff0001, 0x17) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) madvise$auto(0x7, 0xc7d, 0x3) madvise$auto(0x8000000000000000, 0x7fffffffffffffff, 0x889) madvise$auto(0x2000000040000, 0x7, 0xa) madvise$auto(0x8, 0x5, 0x9) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') epoll_ctl$auto(0x0, 0x2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x100000000000, 0x4000d, 0xdf, 0x9b72, 0x9, 0x28000) clone$auto(0x20001002, 0xd7b0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x1000004000008) mq_open$auto(0x0, 0xb0, 0x2, &(0x7f00000000c0)={0x0, 0x9, 0x8, 0x401, [0x5, 0x5, 0x3]}) 2.998611694s ago: executing program 2 (id=1670): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x4) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) socketpair$auto(0x3, 0x5, 0x7, 0x0) seccomp$auto(0x1, 0x8, 0x0) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x3, 0x1f, 0x0, 0x9b72, 0x1000, 0x8000) socket(0x18, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000043c0), r0) sched_getparam$auto(0x0, &(0x7f0000000240)={0x8000}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f0000004400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="05e725bd7000fcdbdf250f"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4008800) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) 2.742487755s ago: executing program 3 (id=1672): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2f, 0x3, 0xd35) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002f40), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000010", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf252c000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 2.679421236s ago: executing program 2 (id=1673): socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000100)='.\x00', 0x5d5481, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_SE_IO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0xc011) socket(0x18, 0x4, 0x1) setsockopt$auto(0x7, 0x111, 0x100006, 0x0, 0x8) mmap$auto(0x0, 0x4, 0x4000000000e1, 0x40eb1, 0x401, 0x300000000000) 2.562118741s ago: executing program 2 (id=1674): ioctl$auto(0xc9, 0x100000002, 0x4000000005c8d) munmap$auto(0x1000000, 0x2000000c) madvise$auto(0x0, 0xffffffffffff0001, 0x9) setresgid$auto(0x4000009, 0x8, 0x7fffffffffffffff) mlockall$auto(0x3) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) arch_prctl$auto(0x5005, 0x9) mmap$auto(0x400000000000, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) 2.561978347s ago: executing program 3 (id=1675): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1, 0x2, 0x0) socket(0x2b, 0x1, 0x1) socket(0x1, 0x5, 0x0) socket(0x10, 0x2, 0x14) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) write$auto(0x3, 0x0, 0x10001) 2.482198144s ago: executing program 0 (id=1676): sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(0xffffffffffffffff, 0x0, 0x20004000) mmap$auto(0x0, 0xe983, 0xdd, 0xeb1, 0x3, 0x8000) socket(0x11, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) eventfd2$auto(0xc5, 0x1) write$auto(0x5, &(0x7f00000017c0)=',\x00', 0x8) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$auto(0x3, 0xb704, 0x8d) arch_prctl$auto(0x5005, 0x9) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2c, 0x1, 0x9) setsockopt$auto(0x4, 0x0, 0x20, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mlock$auto(0xfbe8, 0x4) mlock$auto(0x4, 0x0) mlock$auto(0x7c88, 0x7fff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') socket(0x29, 0x2, 0x0) socket(0x1d, 0x3, 0x1) getsockopt$auto(0x6, 0x8, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0x2c, 0x80802, 0x0) connect$auto(0x3, &(0x7f0000000040)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000010000c1728d2af766"}, 0x55) 2.399195478s ago: executing program 3 (id=1677): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) socket(0xa, 0x3, 0x87) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x974, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x4000000000000000, 0x9, 0x3, 0x200, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0x2000000080000001, 0x3) bpf$auto(0x8, &(0x7f0000003c80)=@info={0x687, 0xffffffff}, 0x5) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) access$auto(&(0x7f0000000000)='\x00', 0x0) 2.023941455s ago: executing program 3 (id=1678): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0x1, 0x0) fanotify_init$auto(0x8000000000000000, 0x1) socket(0x2a, 0x80805, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/uts\x00') fanotify_mark$auto(0x400000000000, 0x101, 0x9, 0x4, 0x0) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01402da97000ffdbdf2502000000080002002d00000008479676f87cc39c00010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0x1, 0x2, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000280), r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/pid_for_children\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r3) sendmsg$auto_GTP_CMD_GETPDP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008016) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) socket(0xf, 0x3, 0x2) socket(0x2, 0xa, 0xe57a) socketpair$auto(0x3, 0x5, 0x7, 0x0) 1.970593171s ago: executing program 2 (id=1679): socket(0x15, 0x5, 0x0) recvmmsg$auto(0x3, &(0x7f0000001180)={{0x0, 0x5, &(0x7f0000000140)={0x0, 0x57d}, 0x4, 0x0, 0x3, 0x7}, 0x9160}, 0x3, 0x4d, 0x0) set_mempolicy$auto(0x1, &(0x7f0000000000)=0xc, 0x7) 1.871284517s ago: executing program 2 (id=1680): bpf$auto(0x80b, &(0x7f0000000000)=@iter_create={0x6, 0xa32}, 0x5) ioprio_set$auto(0xfffffa9a, 0x3, 0x7) rseq$auto(&(0x7f0000000100)={0x1, 0x62a8, 0xfffffffffffffffa, 0x200, 0x3ff, 0x7bc1a216, "50808c95c102b33b3b839a4e811d62148e3fa9f06226c7c80f141b9361f6d928eda49bb0b99cbead5cc67c2f72901886cfccaec5ab98a05f3fe87b8fe301e8d91c13a9fe7f4d8c8c0300c8eeba7a30b0dc922b2ffa2c4dae2d156afd719388382fcad4a56e4ef2b7f274d01122e438582702c2fd64dcc11929a3a798cec7bd1a1c347e8d16"}, 0x383b, 0xfffff000, 0x4) r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x7, 0x1, "d414e3"}, @NFSD_A_SERVER_PROTO_VERSION={0x7, 0x1, "7eb8bf"}, @NFSD_A_SERVER_PROTO_VERSION={0x7, 0x1, "953175"}, @NFSD_A_SERVER_PROTO_VERSION={0x7, 0x1, "f651d2"}, @NFSD_A_SERVER_PROTO_VERSION={0x7, 0x1, "c80978"}, @NFSD_A_SERVER_PROTO_VERSION={0x7, 0x1, "d7effa"}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) r1 = socket(0x18, 0x5, 0xfffffff7) clone$auto(0x100, 0x7fffffffffffffff, &(0x7f0000000340)=0x4, &(0x7f0000000380)=0x6, 0x7) r2 = socket(0x23, 0xbaeb46edd113bdab, 0x87) r3 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f00000003c0), r1) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0000}, 0x240080d1) sysfs$auto(0xf, 0x3, 0x7) sendmsg$auto_HANDSHAKE_CMD_DONE(r1, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) ioprio_set$auto(0x800, 0x3ff, 0x81) kill$auto(0x10, 0xffff) io_uring_enter$auto(0x5000, 0x5, 0xb, 0xf, &(0x7f00000005c0)="188c4de78c107e4c69deca539c5bb2b8f975473d610c50198c0c7ec632e613933d2ae097468b5cf5f7ba483c505cea90ee025efc9398c46e3aa06e38c11c008da42dd5ba6eb7d06ea9ca4679c82dc96b21c8510f4e317b1140345f22833db6a516800c24d94209df1d", 0x6) clone$auto(0xffff, 0x80000000000000, &(0x7f0000000640)=0x6, &(0x7f0000000680)=0x80000000, 0x9) io_uring_register$auto(0x101, 0x3c700000, &(0x7f00000006c0)="b0b6c8ac2369378f227fccf908c3407ef754d3ad49f65ba6df3767326f62b38e4430ce0d88f907179be756437d83c0b33ee07dc61b389b36af57f2d73c8c838cb575725d0273517d6828b4bb07fe7d230509fed882751212bb2eadb78e549cdb886994235a666ad2ca8bd41bb1ae0d9d7bb915f104031d9f1812e56f734aac55e604175ea7ebb36ca44a8d5de689c08584b0dd14bd", 0x1) io_uring_register$auto(0x80000001, 0xfa9c, &(0x7f0000000780)="258923203542368d1450cc2e3f0acebde007a5ba71249f696aeb1564527902e4735a362d3a01bfcc8688ecd655953fd645f862b7e5d3fb606420752ff1dc9409c62c8d71f2d11f1ea94fa1837053f50280e83a724fedfd297a36f5a781b715555f50dba6e0fa523db47bbb65bc4a1c11d20e8f85e416219808928186e8351e44424950cdbd48927766666a43f24dd91774da1bde2cbd7abfc6977bd5b9f1cdfb14211d20e20bc570443b0c559376102dd7d4f1b243f7e2793a45335e5a465f6712a8a4c99bc47eb882b6fc9e0fa14f464e4056b808e913a94edd828798", 0x3) sendmsg$auto_TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000c00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000008c0)={0x2e4, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xe9, 0x2, "783dbb511ba0463d167008c153b4da7d2e9682dc668075da7dedf8d330f083f6f7932b855f1578b18517c4808c1bc17e433512a5f12a6634fac0b3796cbfcf9fc1e368b2f995976a5a632c6188f08d5219e8fc3880be6da1b08b819d1e793aba6a55c904f5cbfa76d0e8cab93c5b1cd11b443b1f0326a2cc0abb1ffd086aae14dcd47b5a3146e99d681bd70a06c52e388ac0e219c57fd0a48a9d0cdd97db94331085176a2378e7aad2d3e88f2e2ea8d45d8b228d7fd36d55cb4686f140d8d4e0246bc68db6c11ba1edd497a84c77bf9a51e4f4531fd207017e3636cf044c44848dda796ff9"}, @TIPC_NLA_UNSPEC={0xd0, 0x0, "3cd7459884fbfd000674150ac91a319fa3360e7ac68237b2e922a3f68478e27e6559861258af0412d602caade3b8d086f9c656d17996407cf150b02dcbc08205567a1ca3ef9a4121886be9d5fd3536f4d83eca2cfd692ba967a5cedcb271e85715fe7dfe0bdab09e8c901e1ebb8b8fa662ef9c40598159f3cbf561c6125b22b0210788644f1fbdcecce9692630a30ae98a85c2e409a870d97af6481e0584ef8e1a5d6c8a2343cdb00f64f873770e5bedf629af14d0bbfb13d81b46680b16d98b090711118ada913d2cbf83c8"}, @TIPC_NLA_MEDIA={0xd0, 0x5, "e2aa64391ad53e9e52e2fddbb05ca789496b56660ca0e4d1f80a6b6eaa1d2a20b3dd2add4332ce6b94ac22e0abf4b08fcbe4bf5a46cb476b0ede96b1012891ac1b81a5da8e7411334ce9fb7c5d28821c7053ae25dc7e1150354c9b4d13a6fc1edb3c0ef7bfa6611d500a039cc1b99aa2143354002efdade7541ad4259f57d79d81af793be5af381511fefd9e00ea8e40f29135029abff8c24ebd559cb4e877bd846277499601ba2cd65c352c9351f916c91a6ef00335594b6b3b440054f5e1118a7f5be34a422ee1611aab47"}, @TIPC_NLA_MON={0x44, 0x9, "283ebb16cba55c7d18c63869fbda2c0c4b07ab80aaa4fc62cddb3abc75e7b6012eb9b833949789e718969777aa8241cc7bdfa49632f8b9fa99ab1b6c0997e9b4"}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x48000}, 0x65c7e811e96bcbf6) sendmsg$auto_IPVS_CMD_NEW_DEST(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1020063}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x74, r3, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x45, 0x1, "024f695bf0517819eb6a34d36cd6396fe5bcf373dd758df3ec12c5332452883ad291bee7e699c12e799ef66a60e539f1f2db2e1c3605aa773cec244e1fda182f3e"}, @IPVS_CMD_ATTR_SERVICE={0x17, 0x1, "6cb484e29cb9d235381a1a41fdcfdd127b5b6d"}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000dc0), r1) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r2, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0xb0, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ_NAME={0x9, 0xa, 'IPVS\x00'}, @THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x7fffffff}, @THERMAL_GENL_ATTR_TZ_GOV={0x86, 0xc, "87ac8329f55e9c433b47b87e33e691ec39ae70809b1eea9da495a5f2cc7bf25c3682ef30228346a3dc47150bd19c5ba115dbf1cbca9e32a4ce743dded2041fa663fd98793eb6464e104bf6909d9daed886829f70738817086337d55d386bb929f9073cba47c79d7d669eaad8b3c647b884bacf3b2dded745e48c10dca6510753d126"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) io_uring_register$auto(0x85, 0x7fffffff, &(0x7f0000000f40)="39ec4d1f70381b577558c0bf92f169def0eac6d417e8542048df17381d3aded5d122bc8a558fdd56d6be4e2e2b833d42deac1adcda244d5d9b1edc48f0ac2eb5004c3de9c015b4fd50cdca80bcd207464412e0e50a57d7aba3e9950becda50817dfe6064e724f8e480ae7ab3742d950086bd06cf9531a29c973028c909b24275377cdc51e1b6ca3205300b4b3a0da331174c4d948d9f9c0cdb4542f038dee8634c968595c82d6c0ddf8be92495d433d85e97922f0325cfdde687f578d26a198e7c1db4972a6d21c224d0416c47ed30619d33e0a1fb66b456781303bb10100e71", 0xfffffffe) io_uring_enter$auto(0x2, 0x10, 0x6, 0x40, &(0x7f0000001040)="b8e9805ebdf96130cb6f44dd397c0cdd54e132c013ed5d59c5c21bafe46982c95a1f9940ed22c40504d28a1693c7d2c1e4e8f0aea7181728677c3514c4456bbc7da3843dc05e3f4f774cf87ef657a5f1ec718c089b2de43bf3ee683b76e674fbc9f47d9edc8c", 0x7fff) io_uring_register$auto(0xe5b, 0x1, &(0x7f00000010c0), 0x9) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), r1) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r1, &(0x7f0000001840)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001180)={0x64c, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x533, 0x80, "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"}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e21}, @NL80211_ATTR_FILS_NONCES={0xf4, 0xf3, "153584164051979848bee78012ef9492132d64e0394c2bc85ef8cf59a9e62885eaadf889c656b3eb84f696d52ea8c20cd13894aa2183ee22f7892c54d947fd2742c7b3c9664ead56069900a3b43c5957c1fc180c47216cc3bbc9c6fe533ceca6515e7f7656aba4f81b9b847e0c652ce94dd4b6f7c664be8907281c3c2d757c48867508a3c53619b0527bab5183f1ce434db038541d54d82be09dea1fe5973708199334f644be29ec567343ff0ce8426e6141d3dc80ba6ac8fee42bf0abfb111ebee6736b9a935ef6bee085067d352010fc83afec18d9854af96f95216a97e01a974e1f6fd8fda5deb567931c5e9d8c2e"}]}, 0x64c}, 0x1, 0x0, 0x0, 0x1}, 0x4004011) clone$auto(0x1, 0x9, &(0x7f0000001880)=0x7f2c, &(0x7f00000018c0)=0xa, 0x1) adjtimex$auto(&(0x7f0000001900)={0x0, 0x0, 0x3, 0x6e6, 0x342a, 0x1, 0xffffff77, 0x0, 0x100000001, 0xf15, 0xeb8, {0x9, 0x8}, 0xb, 0x4, 0x91e, 0x0, 0x0, 0xb010, 0x8001, 0x7f, 0x1, 0x6, 0xf}) syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000001a00), r1) 1.730361654s ago: executing program 1 (id=1681): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002f40), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 1.649078121s ago: executing program 0 (id=1682): ioctl$auto(0xc9, 0x100000002, 0x4000000005c8d) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) ioctl$NS_GET_PARENT(r0, 0xff04, 0x0) socket(0x10, 0x3, 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) bpf$auto(0x8, &(0x7f0000000000)=@bpf_attr_5={@target_fd=0x880, 0x9, 0x4, 0x37, 0x80, @relative_fd=0x100, 0x3}, 0xc63) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x3, 0x1) bind$auto(0x7, &(0x7f0000000000)={0x1d, @sockaddr_1_1}, 0x3e) munmap$auto(0x1000000, 0x2000000c) close_range$auto(0x8, 0x3, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setpriority$auto(0x0, 0x9, 0x4) getsockopt$auto(0xffffffff, 0x3, 0x8001, &(0x7f0000000000)='!#\x00', &(0x7f0000000040)=0x5) socket(0x1e, 0x2, 0x0) write$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mlockall$auto(0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x9) getsockopt$auto(0x7c, 0xffffff59, 0xd, &(0x7f0000000080)='!#\x00', &(0x7f00000000c0)=0x1) mlockall$auto(0x3) mmap$auto(0x400000000000, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) 1.611242527s ago: executing program 3 (id=1683): linkat$auto(0x1, 0xfffffffffffffffe, 0x76, 0xffffffffffffffff, 0x400) socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto(0x2000000000000012, 0x3587b5ed, 0x5069, 0x1, 0x7) exit$auto(0x5f97) fchdir$auto(0x3) fanotify_init$auto(0x200, 0x2010000000000) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) open(0x0, 0x161342, 0x100) unshare$auto(0x40000080) memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ftruncate$auto(0x3, 0x700) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) clone$auto(0x20000000048, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x3fd) dup2$auto(0x0, 0x3) writev$auto(0x1, &(0x7f0000000100)={&(0x7f0000000140), 0x400000000000fdef}, 0x1) vmsplice$auto(0x3, &(0x7f0000000080)={0x0, 0x6}, 0x9, 0x7) mmap$auto(0xf9, 0x400008, 0xdb, 0x9b72, 0x2, 0x7fff) socket(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf2502000000080003"], 0x24}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) syz_genetlink_get_family_id$auto_NLBL_CIPSOv4(&(0x7f0000000040), r0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ustat$auto(0x6, 0xfffffffffffffffd) ioctl$auto(0x3, 0x40085400, 0x5) 1.408980562s ago: executing program 1 (id=1684): mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) delete_module$auto(0x0, 0x5) socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x1, 0xffffffffffffffff, 0x1) process_madvise$auto(0xf, 0x0, 0xa, 0x2, 0x8) r0 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) statmount$auto(0xfffffffffffffffc, 0x0, 0x0, 0xfff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000fedbdf2502000000080002000c0000000800070003000000110001006f76735f6461746800"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) sendmmsg$auto(0x53, &(0x7f0000000180)={{&(0x7f0000000000)="01644d09e6c402d28c130f517a5520f5b7319dacfa7a917fd9979de0025b1b70c39f983c85f538acc701cb0493d4fbf476fc07c1308576d1b0671cf79255893b1afe07893e5abf263fe7feb6492cc8406b4cfb8807a460d6960a37fed20fac7a8ad061c32aa488857742c35f179eb4fb6358ce05e34e9ded0c6401a2133936e545ca79f97be4f669dda541c48461ba74ba2fff740d3925293221684a0f2fcadd353fcc22e004dcb7af2f2279b192caafac1f2dc6eba9f4cadbe7fd653693f6c5", 0x3, &(0x7f0000000100)={&(0x7f00000000c0)="711a5fb5", 0x4}, 0x0, &(0x7f0000000140)="a677a848de89bd6d4aa534d4d391c2564eb3f67613a0cb1ef1426d98be2daa9a3ab41086d0fca2858b92834f", 0x7, 0x5000000}, 0xffffffff}, 0x7, 0x8) mmap$auto(0x2, 0x7, 0x400, 0x12, 0x9, 0x6) mmap$auto(0x5, 0x5, 0xffffffffffffffff, 0x18, 0xd, 0xa6e) 1.112725202s ago: executing program 1 (id=1685): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioprio_set$auto(0x1, 0x0, 0x0) msync$auto(0x1ffff000, 0x100000000005, 0x400000004) madvise$auto(0x0, 0xffffffffffff0001, 0x17) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) madvise$auto(0x7, 0xc7d, 0x3) madvise$auto(0x8000000000000000, 0x7fffffffffffffff, 0x889) madvise$auto(0x2000000040000, 0x7, 0xa) madvise$auto(0x8, 0x5, 0x9) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') epoll_ctl$auto(0x0, 0x2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x100000000000, 0x4000d, 0xdf, 0x9b72, 0x9, 0x28000) clone$auto(0x20001002, 0xd7b0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x1000004000008) mq_open$auto(0x0, 0xb0, 0x2, &(0x7f00000000c0)={0x0, 0x9, 0x8, 0x401, [0x5, 0x5, 0x3]}) 863.584525ms ago: executing program 2 (id=1686): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioprio_set$auto(0x1, 0x0, 0x0) msync$auto(0x1ffff000, 0x100000000005, 0x400000004) madvise$auto(0x0, 0xffffffffffff0001, 0x17) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) madvise$auto(0x7, 0xc7d, 0x3) madvise$auto(0x8000000000000000, 0x7fffffffffffffff, 0x889) madvise$auto(0x2000000040000, 0x7, 0xa) madvise$auto(0x8, 0x5, 0x9) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') epoll_ctl$auto(0x0, 0x2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mbind$auto(0x4000005ddc0a8d, 0x100004004, 0x1000000000000002, 0x0, 0x6, 0x8) mmap$auto(0x100000000000, 0x4000d, 0xdf, 0x9b72, 0x9, 0x28000) clone$auto(0x20001002, 0xd7b0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x1000004000008) mq_open$auto(0x0, 0xb0, 0x2, &(0x7f00000000c0)={0x0, 0x9, 0x8, 0x401, [0x5, 0x5, 0x3]}) 203.972µs ago: executing program 1 (id=1687): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) socket(0xa, 0x3, 0x87) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x974, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x4000000000000000, 0x9, 0x3, 0x200, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0x2000000080000001, 0x3) bpf$auto(0x8, &(0x7f0000003c80)=@info={0x687, 0xffffffff}, 0x5) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) access$auto(&(0x7f0000000000)='\x00', 0x0) 0s ago: executing program 3 (id=1688): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) fsmount$auto(0xf4d, 0x3, 0x7) chroot$auto(&(0x7f0000000040)='.\x00') mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) set_mempolicy_home_node$auto(0x8000, 0x10001, 0x0, 0x0) r0 = getpid() mmap$auto(0xfffffffffffffffc, 0x748a, 0x3, 0x16, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x80000, 0x3) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1, 0x2, 0x0) getsockopt$auto(0x100000006, 0x1, 0x1d, 0xfffffffffffffffe, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000080)) ioctl$auto(0xc8, 0x400454d0, 0xbeb) socket(0x2, 0x3, 0xa) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x0, 0x6, 0x1000000000dd, 0xeb1, 0x400000401, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x1e, @new_prog_fd, 0x3, @old_prog_fd=0x4}, 0xa3) bpf$auto(0x1, &(0x7f0000000340)=@raw_tracepoint={0x5, 0x2, 0x0, 0x8004}, 0x7) mmap$auto(0x7, 0xffffffff00000001, 0x10001, 0x10010, 0x5, 0x800) kernel console output (not intermixed with test programs): :3f) already exists on: batadv_slave_1 [ 325.930681][T10624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.940915][T10624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.952142][T10624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.967793][T10624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.978247][T10624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.011727][T10624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.033173][T10624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.055034][T10624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.065515][T10624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.099215][T10624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.120632][T10624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.146858][T10624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.174919][T10624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.197612][T10624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.233485][T10624] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.261635][T10624] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.293497][T10624] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.326281][T10624] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.661984][T10705] HfR: entered promiscuous mode [ 326.711230][T10705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1139'. [ 326.720691][ T7368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.728528][ T7368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.743375][T10705] HfR: left promiscuous mode [ 326.845054][ T7366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.894253][ T7366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.066523][ T6940] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.167553][T10757] HfR: entered promiscuous mode [ 328.213571][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'. [ 328.259830][T10753] HfR: left promiscuous mode [ 328.268495][ T4622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 328.291731][ T4622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 328.307416][ T4622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 328.315757][ T4622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 328.336145][ T4622] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 328.349832][ T4622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 328.380629][ T6940] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.676552][ T6940] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.860887][ T6940] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.233551][T10767] chnl_net:caif_netlink_parms(): no params data found [ 329.332115][ T6940] bridge_slave_1: left allmulticast mode [ 329.337815][ T6940] bridge_slave_1: left promiscuous mode [ 329.360172][ T6940] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.428315][ T6940] bridge_slave_0: left allmulticast mode [ 329.434009][ T6940] bridge_slave_0: left promiscuous mode [ 329.461229][ T6940] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.631731][ T5241] Bluetooth: hci3: command tx timeout [ 330.974297][ T6940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.013460][ T6940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.047695][ T6940] bond0 (unregistering): Released all slaves [ 331.538676][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1163'. [ 331.591153][T10824] HfR: entered promiscuous mode [ 331.643116][T10767] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.650246][T10767] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.675901][T10767] bridge_slave_0: entered allmulticast mode [ 331.700130][T10767] bridge_slave_0: entered promiscuous mode [ 331.727797][T10767] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.750732][T10767] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.771906][T10767] bridge_slave_1: entered allmulticast mode [ 331.792493][T10767] bridge_slave_1: entered promiscuous mode [ 331.815196][T10829] HfR: left promiscuous mode [ 332.372091][T10767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.430331][T10767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.816796][T10767] team0: Port device team_slave_0 added [ 332.898011][ T5241] Bluetooth: hci3: command tx timeout [ 333.265362][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 333.440955][T10767] team0: Port device team_slave_1 added [ 333.819784][T10767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.847539][T10767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.919792][T10767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.383148][T10767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.390138][T10767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.485334][T10767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.790706][ T6940] hsr_slave_0: left promiscuous mode [ 334.837946][ T6940] hsr_slave_1: left promiscuous mode [ 334.861050][ T6940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.883040][ T6940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.902295][ T6940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.923474][ T6940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.981406][ T6940] veth1_macvtap: left promiscuous mode [ 335.003979][ T6940] veth0_macvtap: left promiscuous mode [ 335.020667][ T6940] veth1_vlan: left promiscuous mode [ 335.036853][ T6940] veth0_vlan: left promiscuous mode [ 335.167681][ T5241] Bluetooth: hci3: command tx timeout [ 335.578082][T10909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1183'. [ 336.861907][ T6940] team0 (unregistering): Port device team_slave_1 removed [ 336.996207][ T6940] team0 (unregistering): Port device team_slave_0 removed [ 337.449206][ T5241] Bluetooth: hci3: command tx timeout [ 338.023523][T10900] HfR: entered promiscuous mode [ 338.112192][T10767] hsr_slave_0: entered promiscuous mode [ 338.118680][T10767] hsr_slave_1: entered promiscuous mode [ 338.124906][T10767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.147185][T10767] Cannot create hsr debugfs directory [ 338.165742][T10909] HfR: left promiscuous mode [ 338.412571][T10951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1193'. [ 338.990787][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 339.199700][T10767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 339.222583][T10767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 339.242402][T10767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 339.256657][T10767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 339.409865][T10767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.459858][T10767] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.486617][ T6941] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.493802][ T6941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.519646][ T6940] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.526858][ T6940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.645783][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'. [ 339.672178][T10993] nbd: illegal input index 50331648 [ 339.902179][T10767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.005896][T10767] veth0_vlan: entered promiscuous mode [ 340.048829][T10767] veth1_vlan: entered promiscuous mode [ 340.124438][T10767] veth0_macvtap: entered promiscuous mode [ 340.159438][T10767] veth1_macvtap: entered promiscuous mode [ 340.202543][T10767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.227826][T10767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.253351][T10767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.275201][T10767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.307883][T10767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.329947][T10767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.351532][T10767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.362131][T10767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.384236][T10767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.427867][T10767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.448909][T10767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.481722][T10767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.504023][T10767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.547849][T10767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.567230][T10767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.619936][T10767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.652825][T10767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.675054][T10767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.697392][T10767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.718929][T10767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.744101][T10767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.767096][T10767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.800159][T10767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.813506][T10767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.824102][T10767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.833997][T10767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.847312][T10767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.858408][T10767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.869618][T10767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.881471][T10767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.904455][T10767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.913391][T10767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.922241][T10767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.931235][T10767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.045213][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.062599][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.090133][ T6940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.103324][ T6940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.645248][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 341.683129][T11074] nbd: illegal input index 50331648 [ 341.747067][T11077] FAULT_INJECTION: forcing a failure. [ 341.747067][T11077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.778302][T11077] CPU: 1 UID: 0 PID: 11077 Comm: syz.0.1211 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 341.789120][T11077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 341.799203][T11077] Call Trace: [ 341.802492][T11077] [ 341.805434][T11077] dump_stack_lvl+0x16c/0x1f0 [ 341.810149][T11077] should_fail_ex+0x497/0x5b0 [ 341.814867][T11077] _copy_from_user+0x30/0xf0 [ 341.819483][T11077] do_seccomp+0x200/0x2640 [ 341.823916][T11077] ? __fget_files+0x244/0x3f0 [ 341.828593][T11077] ? __pfx_do_seccomp+0x10/0x10 [ 341.833453][T11077] ? fput+0x30/0x390 [ 341.837390][T11077] ? ksys_write+0x1ad/0x260 [ 341.841921][T11077] ? __pfx_ksys_write+0x10/0x10 [ 341.846807][T11077] do_syscall_64+0xcd/0x250 [ 341.851348][T11077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.857265][T11077] RIP: 0033:0x7fe04b37dff9 [ 341.861685][T11077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.881325][T11077] RSP: 002b:00007fe04c1b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 341.889761][T11077] RAX: ffffffffffffffda RBX: 00007fe04b535f80 RCX: 00007fe04b37dff9 [ 341.897736][T11077] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001 [ 341.905716][T11077] RBP: 00007fe04c1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 341.913709][T11077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.921702][T11077] R13: 0000000000000000 R14: 00007fe04b535f80 R15: 00007ffe52aa81a8 [ 341.929717][T11077] [ 343.193077][T11122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1232'. [ 343.869334][T11141] HfR: entered promiscuous mode [ 343.886805][T11141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1230'. [ 343.897776][T11141] HfR: left promiscuous mode [ 344.122188][T11146] FAULT_INJECTION: forcing a failure. [ 344.122188][T11146] name failslab, interval 1, probability 0, space 0, times 0 [ 344.134873][T11146] CPU: 0 UID: 0 PID: 11146 Comm: syz.1.1233 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 344.145661][T11146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 344.155727][T11146] Call Trace: [ 344.159003][T11146] [ 344.161926][T11146] dump_stack_lvl+0x16c/0x1f0 [ 344.166608][T11146] should_fail_ex+0x497/0x5b0 [ 344.171294][T11146] ? fs_reclaim_acquire+0xae/0x160 [ 344.176422][T11146] should_failslab+0xc2/0x120 [ 344.181107][T11146] __kmalloc_cache_node_noprof+0x6e/0x360 [ 344.186823][T11146] ? __get_vm_area_node+0xe1/0x2d0 [ 344.191958][T11146] __get_vm_area_node+0xe1/0x2d0 [ 344.196904][T11146] ? stack_trace_save+0x95/0xd0 [ 344.201783][T11146] __vmalloc_node_range_noprof+0x26a/0x15a0 [ 344.207694][T11146] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 344.213270][T11146] ? kasan_save_stack+0x33/0x60 [ 344.218132][T11146] ? __kasan_kmalloc+0xaa/0xb0 [ 344.222917][T11146] ? do_syscall_64+0xcd/0x250 [ 344.227594][T11146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.233667][T11146] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 344.239210][T11146] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 344.245535][T11146] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 344.251089][T11146] __vmalloc_noprof+0x6d/0x90 [ 344.255797][T11146] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 344.261369][T11146] bpf_prog_alloc_no_stats+0x54/0x5e0 [ 344.266777][T11146] bpf_prog_alloc+0x3b/0x230 [ 344.271394][T11146] bpf_prog_create_from_user+0xb4/0x2d0 [ 344.276974][T11146] ? __pfx_seccomp_check_filter+0x10/0x10 [ 344.282724][T11146] do_seccomp+0x7b6/0x2640 [ 344.287167][T11146] ? __fget_files+0x244/0x3f0 [ 344.291869][T11146] ? __pfx_do_seccomp+0x10/0x10 [ 344.296751][T11146] ? fput+0x30/0x390 [ 344.300677][T11146] ? ksys_write+0x1ad/0x260 [ 344.305202][T11146] ? __pfx_ksys_write+0x10/0x10 [ 344.310091][T11146] do_syscall_64+0xcd/0x250 [ 344.314627][T11146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.320546][T11146] RIP: 0033:0x7f308637dff9 [ 344.324984][T11146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.344626][T11146] RSP: 002b:00007f30871e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 344.353069][T11146] RAX: ffffffffffffffda RBX: 00007f3086535f80 RCX: 00007f308637dff9 [ 344.361063][T11146] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001 [ 344.369057][T11146] RBP: 00007f30871e1090 R08: 0000000000000000 R09: 0000000000000000 [ 344.377048][T11146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.385040][T11146] R13: 0000000000000000 R14: 00007f3086535f80 R15: 00007ffcf42b5f38 [ 344.393045][T11146] [ 344.453303][T11146] syz.1.1233: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 344.469512][T11146] CPU: 1 UID: 0 PID: 11146 Comm: syz.1.1233 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 344.480309][T11146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 344.490388][T11146] Call Trace: [ 344.493678][T11146] [ 344.496618][T11146] dump_stack_lvl+0x16c/0x1f0 [ 344.501331][T11146] warn_alloc+0x24d/0x3a0 [ 344.505700][T11146] ? __pfx_warn_alloc+0x10/0x10 [ 344.510588][T11146] ? rcu_is_watching+0x12/0xc0 [ 344.515382][T11146] ? trace_kmalloc+0x2d/0xe0 [ 344.520009][T11146] ? __kasan_kmalloc+0x8a/0xb0 [ 344.524802][T11146] ? __get_vm_area_node+0x1bc/0x2d0 [ 344.530024][T11146] __vmalloc_node_range_noprof+0xd27/0x15a0 [ 344.535928][T11146] ? kasan_save_stack+0x33/0x60 [ 344.540814][T11146] ? __kasan_kmalloc+0xaa/0xb0 [ 344.545602][T11146] ? do_syscall_64+0xcd/0x250 [ 344.550307][T11146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.556403][T11146] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 344.561974][T11146] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 344.568331][T11146] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 344.573910][T11146] __vmalloc_noprof+0x6d/0x90 [ 344.578626][T11146] ? bpf_prog_alloc_no_stats+0x54/0x5e0 [ 344.584201][T11146] bpf_prog_alloc_no_stats+0x54/0x5e0 [ 344.589605][T11146] bpf_prog_alloc+0x3b/0x230 [ 344.594228][T11146] bpf_prog_create_from_user+0xb4/0x2d0 [ 344.599813][T11146] ? __pfx_seccomp_check_filter+0x10/0x10 [ 344.605562][T11146] do_seccomp+0x7b6/0x2640 [ 344.610007][T11146] ? __fget_files+0x244/0x3f0 [ 344.614709][T11146] ? __pfx_do_seccomp+0x10/0x10 [ 344.619587][T11146] ? fput+0x30/0x390 [ 344.623514][T11146] ? ksys_write+0x1ad/0x260 [ 344.628045][T11146] ? __pfx_ksys_write+0x10/0x10 [ 344.632931][T11146] do_syscall_64+0xcd/0x250 [ 344.637468][T11146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.643390][T11146] RIP: 0033:0x7f308637dff9 [ 344.647831][T11146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.667465][T11146] RSP: 002b:00007f30871e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 344.675910][T11146] RAX: ffffffffffffffda RBX: 00007f3086535f80 RCX: 00007f308637dff9 [ 344.683911][T11146] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001 [ 344.691908][T11146] RBP: 00007f30871e1090 R08: 0000000000000000 R09: 0000000000000000 [ 344.699904][T11146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.707901][T11146] R13: 0000000000000000 R14: 00007f3086535f80 R15: 00007ffcf42b5f38 [ 344.715918][T11146] [ 344.732751][T11146] Mem-Info: [ 344.735915][T11146] active_anon:13628 inactive_anon:0 isolated_anon:0 [ 344.735915][T11146] active_file:8268 inactive_file:48776 isolated_file:0 [ 344.735915][T11146] unevictable:768 dirty:283 writeback:0 [ 344.735915][T11146] slab_reclaimable:10099 slab_unreclaimable:102759 [ 344.735915][T11146] mapped:41905 shmem:1871 pagetables:881 [ 344.735915][T11146] sec_pagetables:0 bounce:0 [ 344.735915][T11146] kernel_misc_reclaimable:0 [ 344.735915][T11146] free:1298980 free_pcp:15018 free_cma:0 [ 344.785304][T11146] Node 0 active_anon:54212kB inactive_anon:0kB active_file:33072kB inactive_file:195036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:167620kB dirty:1128kB writeback:0kB shmem:5940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12196kB pagetables:3524kB sec_pagetables:0kB all_unreclaimable? no [ 344.819727][T11146] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 344.854218][T11146] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.902021][T11146] lowmem_reserve[]: 0 2465 2466 0 0 [ 344.919105][T11146] Node 0 DMA32 free:1310192kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:54272kB inactive_anon:0kB active_file:33072kB inactive_file:194216kB unevictable:1536kB writepending:1124kB present:3129332kB managed:2551312kB mlocked:0kB bounce:0kB free_pcp:2792kB local_pcp:1044kB free_cma:0kB [ 344.951191][T11146] lowmem_reserve[]: 0 0 0 0 0 [ 344.956038][T11146] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 344.987672][T11146] lowmem_reserve[]: 0 0 0 0 0 [ 344.993274][T11146] Node 1 Normal free:3870116kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:57392kB local_pcp:28280kB free_cma:0kB [ 345.040597][T11146] lowmem_reserve[]: 0 0 0 0 0 [ 345.066253][T11146] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 345.088132][T11146] Node 0 DMA32: 1*4kB (E) 1351*8kB (UME) 1660*16kB (UME) 1133*32kB (UME) 771*64kB (UME) 417*128kB (UME) 324*256kB (UME) 197*512kB (UM) 84*1024kB (UM) 24*2048kB (UME) 198*4096kB (UM) = 1306332kB [ 345.108822][T11146] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 345.123071][T11146] Node 1 Normal: 158*4kB (UME) 20*8kB (UME) 38*16kB (UME) 151*32kB (UME) 82*64kB (UME) 40*128kB (UME) 19*256kB (UME) 11*512kB (UM) 5*1024kB (UM) 6*2048kB (UM) 934*4096kB (ME) = 3870168kB [ 345.141836][T11146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.153976][T11146] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.163442][T11146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.173842][T11146] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.184141][T11146] 58969 total pagecache pages [ 345.189267][T11146] 79 pages in swap cache [ 345.193532][T11146] Free swap = 124136kB [ 345.207221][T11146] Total swap = 124996kB [ 345.211724][T11146] 2097051 pages RAM [ 345.215548][T11146] 0 pages HighMem/MovableOnly [ 345.229798][T11146] 427373 pages reserved [ 345.233987][T11146] 0 pages cma reserved [ 346.325325][T11192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'. [ 347.946522][T11227] HfR: entered promiscuous mode [ 347.973720][T11227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1263'. [ 347.992790][T11227] HfR: left promiscuous mode [ 348.487565][T11235] HfR: entered promiscuous mode [ 348.506330][T11235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1257'. [ 348.519002][T11235] HfR: left promiscuous mode [ 349.850135][T11268] FAULT_INJECTION: forcing a failure. [ 349.850135][T11268] name failslab, interval 1, probability 0, space 0, times 0 [ 349.926804][T11268] CPU: 1 UID: 0 PID: 11268 Comm: syz.3.1268 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 349.937628][T11268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 349.947708][T11268] Call Trace: [ 349.951008][T11268] [ 349.953962][T11268] dump_stack_lvl+0x16c/0x1f0 [ 349.958669][T11268] should_fail_ex+0x497/0x5b0 [ 349.963361][T11268] ? fs_reclaim_acquire+0xae/0x160 [ 349.968478][T11268] should_failslab+0xc2/0x120 [ 349.973163][T11268] __kmalloc_cache_node_noprof+0x6e/0x360 [ 349.978889][T11268] ? __get_vm_area_node+0xe1/0x2d0 [ 349.984006][T11268] __get_vm_area_node+0xe1/0x2d0 [ 349.988952][T11268] __vmalloc_node_range_noprof+0x26a/0x15a0 [ 349.994849][T11268] ? kernel_clone+0xfd/0x960 [ 349.999447][T11268] ? mod_objcg_state+0x4c4/0x8d0 [ 350.004387][T11268] ? lockdep_hardirqs_on+0x7c/0x110 [ 350.009591][T11268] ? kernel_clone+0xfd/0x960 [ 350.014192][T11268] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 350.020532][T11268] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 350.025917][T11268] ? kmem_cache_alloc_node_noprof+0x1a2/0x310 [ 350.031999][T11268] ? copy_process+0x4a3/0x6f00 [ 350.036771][T11268] ? kernel_clone+0xfd/0x960 [ 350.041369][T11268] copy_process+0x29c5/0x6f00 [ 350.046060][T11268] ? kernel_clone+0xfd/0x960 [ 350.050658][T11268] ? get_pid_task+0xfc/0x250 [ 350.055255][T11268] ? trace_lock_acquire+0x14a/0x1d0 [ 350.060458][T11268] ? __pfx_copy_process+0x10/0x10 [ 350.065497][T11268] ? find_held_lock+0x2d/0x110 [ 350.070272][T11268] kernel_clone+0xfd/0x960 [ 350.074693][T11268] ? __pfx_kernel_clone+0x10/0x10 [ 350.079728][T11268] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 350.085713][T11268] ? 0xffffffffff600000 [ 350.089861][T11268] __do_sys_clone+0xba/0x100 [ 350.094473][T11268] ? __pfx___do_sys_clone+0x10/0x10 [ 350.099688][T11268] ? 0xffffffffff600000 [ 350.103844][T11268] ? 0xffffffffff600000 [ 350.108018][T11268] do_syscall_64+0xcd/0x250 [ 350.112541][T11268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.118442][T11268] RIP: 0033:0x7f11de37dff9 [ 350.122856][T11268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.142467][T11268] RSP: 002b:00007f11df0eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 350.150886][T11268] RAX: ffffffffffffffda RBX: 00007f11de535f80 RCX: 00007f11de37dff9 [ 350.158854][T11268] RDX: ffffffffff600000 RSI: 0000000000005c84 RDI: 0000000002003b46 [ 350.166822][T11268] RBP: 00007f11df0eb090 R08: 0000000000000014 R09: 0000000000000000 [ 350.174793][T11268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.182761][T11268] R13: 0000000000000000 R14: 00007f11de535f80 R15: 00007ffff047ed08 [ 350.190737][T11268] ? 0xffffffffff600000 [ 350.194891][T11268] [ 350.332495][ T4622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 350.342348][ T4622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 350.351015][ T4622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 350.372534][ T4622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 350.380510][ T4622] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 350.388431][ T4622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 350.570938][T11275] chnl_net:caif_netlink_parms(): no params data found [ 350.704158][T11275] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.711399][T11275] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.718611][T11275] bridge_slave_0: entered allmulticast mode [ 350.727796][T11275] bridge_slave_0: entered promiscuous mode [ 350.737042][T11275] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.744256][T11275] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.751492][T11275] bridge_slave_1: entered allmulticast mode [ 350.758901][T11275] bridge_slave_1: entered promiscuous mode [ 350.792769][T11275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.804842][T11275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.997895][T11275] team0: Port device team_slave_0 added [ 351.022011][T11275] team0: Port device team_slave_1 added [ 351.163052][T11275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.174030][T11275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.237808][T11275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.261821][T11275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.281823][T11275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.363699][T11275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.563053][T11275] hsr_slave_0: entered promiscuous mode [ 351.603691][T11275] hsr_slave_1: entered promiscuous mode [ 351.631417][T11275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.648979][T11275] Cannot create hsr debugfs directory [ 351.723188][T11291] HfR: entered promiscuous mode [ 351.781667][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1271'. [ 351.836454][T11291] HfR: left promiscuous mode [ 352.065625][T11275] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.205866][T11275] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.317612][T11275] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.471706][T11275] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.629725][ T4622] Bluetooth: hci6: command tx timeout [ 352.673858][T11275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 352.700146][T11275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 352.710487][T11275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 352.722279][T11275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 352.872177][T11275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.906066][T11275] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.926366][ T7368] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.933506][ T7368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.971701][ T6940] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.978883][ T6940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.399014][T11330] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1282'. [ 353.442496][T11275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.553605][T11275] veth0_vlan: entered promiscuous mode [ 353.596064][T11275] veth1_vlan: entered promiscuous mode [ 353.668605][T11275] veth0_macvtap: entered promiscuous mode [ 353.701121][T11275] veth1_macvtap: entered promiscuous mode [ 353.744549][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.766735][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.780166][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.797687][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.820250][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.832493][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.862449][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.872895][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.872914][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.953600][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.983293][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.994192][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.019544][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.037241][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.058441][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.080345][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.098478][T11275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.121657][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.132611][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.160037][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.189753][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.209643][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.231269][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.256244][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.277314][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.288914][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.331769][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.341624][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.374377][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.396757][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.408055][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.417899][T11275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.445781][T11275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.457214][T11275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.506564][T11275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.530516][T11275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.543086][T11275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.560817][T11275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.805266][ T6954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.855997][ T6954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.899957][ T4622] Bluetooth: hci6: command tx timeout [ 354.906991][ T6940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.926329][ T6940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.169629][ T4622] Bluetooth: hci6: command tx timeout [ 357.506276][T11420] netlink: 'syz.1.1303': attribute type 11 has an invalid length. [ 357.540612][T11420] netlink: 'syz.1.1303': attribute type 11 has an invalid length. [ 359.439913][ T4622] Bluetooth: hci6: command tx timeout [ 363.385265][T11469] netlink: 'syz.3.1319': attribute type 11 has an invalid length. [ 363.413160][T11469] netlink: 'syz.3.1319': attribute type 11 has an invalid length. [ 363.651570][ T5241] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.675063][ T5241] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.693518][ T5241] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.714774][ T5241] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.723863][ T5241] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 363.732180][ T5241] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.177797][T11478] chnl_net:caif_netlink_parms(): no params data found [ 364.508157][T11478] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.560426][T11478] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.567735][T11478] bridge_slave_0: entered allmulticast mode [ 364.594261][T11478] bridge_slave_0: entered promiscuous mode [ 364.608372][T11478] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.618572][T11478] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.626245][T11478] bridge_slave_1: entered allmulticast mode [ 364.633357][T11478] bridge_slave_1: entered promiscuous mode [ 364.682693][T11478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.704217][T11478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.772757][T11478] team0: Port device team_slave_0 added [ 364.796071][T11478] team0: Port device team_slave_1 added [ 364.895481][T11478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.909069][T11478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.966236][T11478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.097010][T11478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.113984][T11478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.184892][T11478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.286893][T11526] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 365.320642][T11526] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 365.337343][T11478] hsr_slave_0: entered promiscuous mode [ 365.353195][T11478] hsr_slave_1: entered promiscuous mode [ 365.363887][T11478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.381717][T11478] Cannot create hsr debugfs directory [ 365.626490][T11478] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.753859][T11478] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.863533][T11478] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.970855][T11478] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.988475][ T5241] Bluetooth: hci7: command tx timeout [ 366.084842][T11478] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 366.093835][T11478] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 366.104027][T11478] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 366.113546][T11478] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 366.290549][T11478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.333832][T11478] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.350830][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.357913][ T6954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.389706][ T6940] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.396856][ T6940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.699828][T11478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.824957][T11478] veth0_vlan: entered promiscuous mode [ 366.837735][T11478] veth1_vlan: entered promiscuous mode [ 366.862087][T11478] veth0_macvtap: entered promiscuous mode [ 366.871861][T11478] veth1_macvtap: entered promiscuous mode [ 366.886915][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.897448][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.907757][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.920358][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.930267][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.941242][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.951706][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.962484][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.973785][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.984441][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.994309][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.004806][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.016998][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.027600][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.038022][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.049070][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.060689][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.071202][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.082654][T11478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.092746][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.103358][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.113934][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.124636][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.135022][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.145997][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.155966][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.166919][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.177931][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.188426][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.198260][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.209663][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.219500][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.230139][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.241050][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.252450][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.262425][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.273336][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.286117][T11478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.323194][T11478] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.333211][T11478] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.342043][T11478] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.362789][T11478] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.500396][ T7368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.520900][ T7368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.576628][ T6940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.585883][ T6940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.257376][T11533] Bluetooth: hci7: command tx timeout [ 369.450575][T11591] tmpfs: Unknown parameter 'n' [ 370.527608][T11533] Bluetooth: hci7: command tx timeout [ 372.797528][T11533] Bluetooth: hci7: command tx timeout [ 376.895558][ T4622] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 376.906653][ T4622] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 376.920906][ T4622] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 376.930382][ T4622] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 376.942301][ T4622] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 376.949771][ T4622] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 377.070805][T11607] chnl_net:caif_netlink_parms(): no params data found [ 377.133145][T11607] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.140312][T11607] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.147817][T11607] bridge_slave_0: entered allmulticast mode [ 377.155001][T11607] bridge_slave_0: entered promiscuous mode [ 377.165964][T11607] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.173042][T11607] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.180800][T11607] bridge_slave_1: entered allmulticast mode [ 377.190162][T11607] bridge_slave_1: entered promiscuous mode [ 377.215753][T11607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.227682][T11607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.258251][T11607] team0: Port device team_slave_0 added [ 377.266168][T11607] team0: Port device team_slave_1 added [ 377.290429][T11607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.298631][T11607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.324587][T11607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.337362][T11607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.344319][T11607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.371158][T11607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.410395][T11607] hsr_slave_0: entered promiscuous mode [ 377.416978][T11607] hsr_slave_1: entered promiscuous mode [ 377.422974][T11607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.430838][T11607] Cannot create hsr debugfs directory [ 377.541762][T11607] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.627804][T11607] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.704374][T11607] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.779315][T11607] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.950331][T11617] nbd: illegal input index 50331648 [ 377.991419][T11607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 378.016900][T11607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 378.031696][T11607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 378.055755][T11607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 378.095182][T11607] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.102605][T11607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.111368][T11607] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.118532][T11607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.215746][T11607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.251833][ T6946] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.269408][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.327598][T11607] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.365601][ T6946] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.372719][ T6946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.415721][ T6946] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.422872][ T6946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.556558][T11607] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 378.579264][T11607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.869706][T11607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.979214][T11607] veth0_vlan: entered promiscuous mode [ 379.007976][T11607] veth1_vlan: entered promiscuous mode [ 379.040820][T11607] veth0_macvtap: entered promiscuous mode [ 379.050418][T11607] veth1_macvtap: entered promiscuous mode [ 379.081785][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.140034][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.171082][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.225491][ T4622] Bluetooth: hci8: command tx timeout [ 379.232935][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.242913][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.253459][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.300423][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.311576][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.322097][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.332593][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.342979][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.354410][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.357523][T11533] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 379.364395][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.375770][T11533] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 379.381975][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.382000][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.382016][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.382033][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.390904][T11533] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 379.400383][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.412101][T11533] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 379.419099][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.431723][T11533] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 379.437420][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.447417][T11533] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 379.456197][T11607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.501778][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.512509][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.522649][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.533607][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.543899][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.554387][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.564653][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.575543][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.585379][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.595803][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.605655][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.616580][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.626630][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.637145][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.647553][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.658517][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.668439][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.679385][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.689895][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.700461][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.711653][T11607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.745168][T11607] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.756593][T11607] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.769097][T11607] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.781296][T11607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.131201][ T6941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.159475][ T6941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.244864][ T6940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.252911][T11641] chnl_net:caif_netlink_parms(): no params data found [ 380.262777][ T6940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.520882][T11641] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.549216][T11641] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.581732][T11641] bridge_slave_0: entered allmulticast mode [ 380.598043][T11641] bridge_slave_0: entered promiscuous mode [ 380.625009][T11641] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.657467][T11641] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.664770][T11641] bridge_slave_1: entered allmulticast mode [ 380.686823][T11641] bridge_slave_1: entered promiscuous mode [ 380.850127][T11641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.898863][T11641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.046279][T11641] team0: Port device team_slave_0 added [ 381.093515][T11641] team0: Port device team_slave_1 added [ 381.294876][T11641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.302728][T11641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.379669][T11641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.405640][T11641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.417448][T11641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.446229][T11533] Bluetooth: hci8: command tx timeout [ 381.452653][T11641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.606670][T11641] hsr_slave_0: entered promiscuous mode [ 381.631353][T11641] hsr_slave_1: entered promiscuous mode [ 381.680851][T11641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.702257][T11641] Cannot create hsr debugfs directory [ 381.708183][T11533] Bluetooth: hci9: command tx timeout [ 382.340202][T11641] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.590886][T11641] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.818663][T11641] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.961036][T11641] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.019685][T11688] HfR: entered promiscuous mode [ 383.029609][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1370'. [ 383.055631][T11690] HfR: left promiscuous mode [ 383.322621][T11641] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 383.353424][T11641] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 383.382500][T11641] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 383.410707][T11641] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 383.607656][T11641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.651149][T11641] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.678766][ T7368] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.685929][ T7368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.721667][T11533] Bluetooth: hci8: command tx timeout [ 383.728799][ T7368] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.735983][ T7368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.972979][T11533] Bluetooth: hci9: command tx timeout [ 384.268513][T11641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.392964][T11641] veth0_vlan: entered promiscuous mode [ 384.443354][T11641] veth1_vlan: entered promiscuous mode [ 384.524769][T11641] veth0_macvtap: entered promiscuous mode [ 384.557014][T11641] veth1_macvtap: entered promiscuous mode [ 384.620503][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.658453][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.683999][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.714647][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.746780][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.779976][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.807962][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.830603][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.855634][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.891024][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.922000][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.950411][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.972313][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.996758][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.030832][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.057374][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.076162][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.115095][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.150062][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.191451][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.212835][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.238490][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.261810][T11641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.298944][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.340207][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.380805][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.407101][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.424799][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.450090][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.471413][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.488500][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.513839][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.540028][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.547817][T11739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1384'. [ 385.555207][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.565087][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.574546][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.585045][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.595199][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.606635][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.619042][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.629841][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.640521][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.651848][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.662352][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.674110][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.686005][T11641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.696519][T11641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.709092][T11641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.737108][T11738] HfR: entered promiscuous mode [ 385.788130][T11739] HfR: left promiscuous mode [ 385.837830][T11641] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.861472][T11641] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.892750][T11641] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.914781][T11641] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.981363][ T4622] Bluetooth: hci8: command tx timeout [ 386.110838][ T6941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.156741][ T6941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.227993][ T7366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.243832][ T4622] Bluetooth: hci9: command tx timeout [ 386.249400][ T7366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.614690][T11763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1389'. [ 387.631964][T11773] HfR: entered promiscuous mode [ 387.699386][T11773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1394'. [ 387.737873][T11773] HfR: left promiscuous mode [ 387.814372][ T5241] Bluetooth: hci0: command 0x0406 tx timeout [ 388.331959][T11794] syz.2.1401(11794): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 388.512674][T11533] Bluetooth: hci9: command tx timeout [ 389.746906][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1411'. [ 391.553618][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1429'. [ 393.014524][T11896] HfR: entered promiscuous mode [ 393.138321][T11896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'. [ 393.194590][T11896] HfR: left promiscuous mode [ 395.411981][T11961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1449'. [ 396.214936][T11952] HfR: entered promiscuous mode [ 396.286111][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1447'. [ 396.352705][T11952] HfR: left promiscuous mode [ 399.569735][T12015] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 399.622588][T12015] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 403.574260][T12086] Process accounting resumed [ 404.585554][ T5241] Bluetooth: hci1: command 0x0406 tx timeout [ 405.229661][T12107] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 405.240942][T12107] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 406.262920][T12113] HfR: entered promiscuous mode [ 406.312548][T12113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1493'. [ 406.347491][T12113] HfR: left promiscuous mode [ 408.269575][ T148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.455638][ T148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.679893][T12165] HfR: entered promiscuous mode [ 408.704055][ T5241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 408.746295][ T5241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 408.771291][ T5241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 408.797737][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1512'. [ 408.877413][ T5241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 408.903691][ T148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.931984][ T5241] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 408.970103][ T5241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 408.992193][T12165] HfR: left promiscuous mode [ 409.234595][ T148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.648617][ T148] bridge_slave_1: left allmulticast mode [ 409.673257][ T148] bridge_slave_1: left promiscuous mode [ 409.690419][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.715340][ T148] bridge_slave_0: left allmulticast mode [ 409.727439][ T148] bridge_slave_0: left promiscuous mode [ 409.746747][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.575264][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.588484][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.619899][ T148] bond0 (unregistering): Released all slaves [ 410.656602][T12174] chnl_net:caif_netlink_parms(): no params data found [ 411.308591][ T5241] Bluetooth: hci5: command tx timeout [ 411.312397][T12174] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.321398][T12174] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.333333][T12174] bridge_slave_0: entered allmulticast mode [ 411.368821][T12174] bridge_slave_0: entered promiscuous mode [ 411.466310][T12174] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.490539][T12174] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.518454][T12174] bridge_slave_1: entered allmulticast mode [ 411.536925][T12174] bridge_slave_1: entered promiscuous mode [ 411.768000][T12174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.804956][T12174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.188919][T12174] team0: Port device team_slave_0 added [ 412.358586][ T148] hsr_slave_0: left promiscuous mode [ 412.448722][ T148] hsr_slave_1: left promiscuous mode [ 412.470611][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.499794][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.541113][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.555101][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.673458][ T148] veth1_macvtap: left promiscuous mode [ 412.698050][ T148] veth0_macvtap: left promiscuous mode [ 412.704372][ T148] veth1_vlan: left promiscuous mode [ 412.732918][ T148] veth0_vlan: left promiscuous mode [ 413.532293][T12252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1526'. [ 413.581255][ T5241] Bluetooth: hci5: command tx timeout [ 414.236284][ T148] team0 (unregistering): Port device team_slave_1 removed [ 414.345847][ T148] team0 (unregistering): Port device team_slave_0 removed [ 415.130989][T12174] team0: Port device team_slave_1 added [ 415.172366][T12249] HfR: entered promiscuous mode [ 415.195558][T12252] HfR: left promiscuous mode [ 415.269610][T12174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.293620][T12174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.363501][T12174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.407648][T12174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.448877][T12174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.505163][T12174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.690611][T12174] hsr_slave_0: entered promiscuous mode [ 415.719302][T12174] hsr_slave_1: entered promiscuous mode [ 415.796803][T12280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1529'. [ 415.829453][T12174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.840923][ T5241] Bluetooth: hci5: command tx timeout [ 415.847137][T12174] Cannot create hsr debugfs directory [ 417.211700][T12174] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 417.242678][T12174] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 417.269770][T12174] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 417.285060][T12174] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 417.429519][T12174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.464696][T12174] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.498188][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.505358][ T6954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.590077][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.597276][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.694730][T12174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 417.717372][T12174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.110168][ T5241] Bluetooth: hci5: command tx timeout [ 418.121886][T12324] HfR: entered promiscuous mode [ 418.181904][T12324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1540'. [ 418.223683][T12324] HfR: left promiscuous mode [ 418.269556][T12174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.450506][T12174] veth0_vlan: entered promiscuous mode [ 418.484331][T12174] veth1_vlan: entered promiscuous mode [ 418.590640][T12174] veth0_macvtap: entered promiscuous mode [ 418.605588][T12174] veth1_macvtap: entered promiscuous mode [ 418.651992][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.684640][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.717138][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.750688][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.785107][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.818878][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.842534][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.864938][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.896200][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.930074][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.960849][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.994035][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.003911][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.051621][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.103121][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.147988][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.175479][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.212276][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.242227][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.275516][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.297519][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.321275][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.343859][T12174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.366457][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.419608][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.438023][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.463153][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.473008][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.528738][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.556989][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.583253][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.609568][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.634722][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.659996][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.693236][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.725868][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.770182][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.791826][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.823323][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.844481][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.860353][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.877789][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.899768][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.921516][T12174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.954701][T12174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.988569][T12174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.025919][T12174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.059815][T12174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.078415][T12174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.088384][T12395] FAULT_INJECTION: forcing a failure. [ 420.088384][T12395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.113340][T12174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.123504][T12395] CPU: 0 UID: 0 PID: 12395 Comm: syz.0.1548 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 420.134305][T12395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 420.144383][T12395] Call Trace: [ 420.147673][T12395] [ 420.150617][T12395] dump_stack_lvl+0x16c/0x1f0 [ 420.155324][T12395] should_fail_ex+0x497/0x5b0 [ 420.160031][T12395] _copy_to_user+0x30/0xc0 [ 420.164474][T12395] simple_read_from_buffer+0xd0/0x160 [ 420.169886][T12395] proc_fail_nth_read+0x198/0x270 [ 420.174942][T12395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.180516][T12395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.186092][T12395] vfs_read+0x1ce/0xbd0 [ 420.190277][T12395] ? __fget_files+0x23a/0x3f0 [ 420.194978][T12395] ? fdget_pos+0x24c/0x360 [ 420.199413][T12395] ? __pfx_lock_release+0x10/0x10 [ 420.204468][T12395] ? trace_lock_acquire+0x14a/0x1d0 [ 420.209694][T12395] ? __pfx_vfs_read+0x10/0x10 [ 420.214391][T12395] ? __pfx___mutex_lock+0x10/0x10 [ 420.219454][T12395] ? __fget_files+0x244/0x3f0 [ 420.224161][T12395] ksys_read+0x12f/0x260 [ 420.228424][T12395] ? __pfx_ksys_read+0x10/0x10 [ 420.233217][T12395] do_syscall_64+0xcd/0x250 [ 420.237746][T12395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.243666][T12395] RIP: 0033:0x7fe18bd7ca3c [ 420.248096][T12395] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 420.267728][T12395] RSP: 002b:00007fe18cb80030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 420.276169][T12395] RAX: ffffffffffffffda RBX: 00007fe18bf35f80 RCX: 00007fe18bd7ca3c [ 420.284159][T12395] RDX: 000000000000000f RSI: 00007fe18cb800a0 RDI: 0000000000000004 [ 420.292152][T12395] RBP: 00007fe18cb80090 R08: 0000000000000000 R09: 0000000000000000 [ 420.300140][T12395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.308129][T12395] R13: 0000000000000000 R14: 00007fe18bf35f80 R15: 00007ffd55221a88 [ 420.316141][T12395] [ 420.613986][ T7366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.643117][ T7366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.810970][ T6946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.833053][ T6946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.454028][T12416] could not allocate digest TFM handle Linux [ 423.320675][T12476] HfR: entered promiscuous mode [ 423.390024][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1557'. [ 423.417126][T12476] HfR: left promiscuous mode [ 429.534385][T12552] HfR: entered promiscuous mode [ 429.639281][T12552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1577'. [ 429.656376][T12552] HfR: left promiscuous mode [ 429.962332][T12563] FAULT_INJECTION: forcing a failure. [ 429.962332][T12563] name failslab, interval 1, probability 0, space 0, times 0 [ 430.083609][T12563] CPU: 0 UID: 0 PID: 12563 Comm: syz.2.1579 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 430.094439][T12563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 430.104515][T12563] Call Trace: [ 430.107814][T12563] [ 430.110763][T12563] dump_stack_lvl+0x16c/0x1f0 [ 430.115477][T12563] should_fail_ex+0x497/0x5b0 [ 430.120185][T12563] ? fs_reclaim_acquire+0xae/0x160 [ 430.125324][T12563] should_failslab+0xc2/0x120 [ 430.130033][T12563] __kmalloc_noprof+0xcb/0x410 [ 430.134838][T12563] iovec_from_user.part.0+0xf3/0x130 [ 430.140152][T12563] __import_iovec+0xdc/0x6e0 [ 430.144769][T12563] import_iovec+0x108/0x140 [ 430.149278][T12563] __do_sys_process_madvise+0x142/0x5c0 [ 430.154831][T12563] ? __pfx___do_sys_process_madvise+0x10/0x10 [ 430.160906][T12563] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 430.166896][T12563] ? __fget_files+0x244/0x3f0 [ 430.171581][T12563] ? __pfx_ksys_write+0x10/0x10 [ 430.176437][T12563] ? do_syscall_64+0xcd/0x250 [ 430.181125][T12563] do_syscall_64+0xcd/0x250 [ 430.185642][T12563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.191550][T12563] RIP: 0033:0x7f1bf577dff9 [ 430.195985][T12563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.215697][T12563] RSP: 002b:00007f1bf64ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8 [ 430.224120][T12563] RAX: ffffffffffffffda RBX: 00007f1bf5935f80 RCX: 00007f1bf577dff9 [ 430.232091][T12563] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 000000000000000b [ 430.240063][T12563] RBP: 00007f1bf64ce090 R08: 0000000000000000 R09: 0000000000000000 [ 430.248041][T12563] R10: fffffffffffffffb R11: 0000000000000246 R12: 0000000000000001 [ 430.256019][T12563] R13: 0000000000000000 R14: 00007f1bf5935f80 R15: 00007ffe3375d028 [ 430.264015][T12563] [ 431.413665][T12593] nbd: illegal input index 50331648 [ 431.424755][T12593] nbd: illegal input index 50331648 [ 431.854600][T12613] FAULT_INJECTION: forcing a failure. [ 431.854600][T12613] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 431.926363][T12613] CPU: 0 UID: 0 PID: 12613 Comm: syz.2.1594 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 431.937195][T12613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 431.947278][T12613] Call Trace: [ 431.950580][T12613] [ 431.953529][T12613] dump_stack_lvl+0x16c/0x1f0 [ 431.958248][T12613] should_fail_ex+0x497/0x5b0 [ 431.962964][T12613] ? fs_reclaim_acquire+0xae/0x160 [ 431.968115][T12613] should_fail_alloc_page+0xe7/0x130 [ 431.973444][T12613] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 431.979636][T12613] ? mark_lock+0xb5/0xc60 [ 431.984017][T12613] __alloc_pages_noprof+0x190/0x25c0 [ 431.989342][T12613] ? __pfx_mark_lock+0x10/0x10 [ 431.994146][T12613] ? hlock_class+0x4e/0x130 [ 431.998688][T12613] ? __lock_acquire+0xbdd/0x3ce0 [ 432.003677][T12613] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 432.009436][T12613] ? hlock_class+0x4e/0x130 [ 432.013978][T12613] ? hlock_class+0x4e/0x130 [ 432.018512][T12613] ? __lock_acquire+0xbdd/0x3ce0 [ 432.023499][T12613] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 432.029454][T12613] ? policy_nodemask+0xea/0x4e0 [ 432.034345][T12613] alloc_pages_mpol_noprof+0x2c9/0x610 [ 432.039850][T12613] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 432.045883][T12613] ? mt_find+0x82d/0xa20 [ 432.050154][T12613] ? __thp_vma_allowable_orders+0x341/0xb40 [ 432.056090][T12613] ? __pfx_lock_release+0x10/0x10 [ 432.061161][T12613] __pmd_alloc+0x3f/0x810 [ 432.065531][T12613] __handle_mm_fault+0x942/0x2a10 [ 432.070614][T12613] ? __pfx_mt_find+0x10/0x10 [ 432.075240][T12613] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 432.080917][T12613] ? __pfx___handle_mm_fault+0x10/0x10 [ 432.086424][T12613] ? find_vma+0xc0/0x140 [ 432.090700][T12613] ? __pfx_find_vma+0x10/0x10 [ 432.095414][T12613] handle_mm_fault+0x3fa/0xaa0 [ 432.100224][T12613] do_user_addr_fault+0x7a3/0x13f0 [ 432.105393][T12613] exc_page_fault+0x5c/0xc0 [ 432.109932][T12613] asm_exc_page_fault+0x26/0x30 [ 432.114818][T12613] RIP: 0010:copy_iovec_from_user+0x79/0x170 [ 432.120749][T12613] Code: e8 6c 59 06 fd 4d 85 f6 0f 85 c6 00 00 00 e8 ae 57 06 fd 0f 01 cb 0f ae e8 49 bf 00 00 00 00 00 fc ff df e8 99 57 06 fd 31 db <48> 8b 45 08 31 ff 89 de 49 89 c6 e8 c7 59 06 fd 85 db 0f 85 b1 00 [ 432.140473][T12613] RSP: 0018:ffffc90004f4fc18 EFLAGS: 00050246 [ 432.146574][T12613] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff848656e4 [ 432.154576][T12613] RDX: ffff88802d970000 RSI: ffffffff84865707 RDI: 0000000000000006 [ 432.162577][T12613] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 432.170574][T12613] R10: 0000000000000090 R11: 0000000000000000 R12: ffff88803ae15600 [ 432.178576][T12613] R13: 0000000000000009 R14: 0000000000000000 R15: dffffc0000000000 [ 432.186581][T12613] ? copy_iovec_from_user+0x54/0x170 [ 432.191915][T12613] ? copy_iovec_from_user+0x77/0x170 [ 432.197249][T12613] ? copy_iovec_from_user+0x77/0x170 [ 432.202581][T12613] iovec_from_user.part.0+0x65/0x130 [ 432.207905][T12613] __import_iovec+0xdc/0x6e0 [ 432.212535][T12613] import_iovec+0x108/0x140 [ 432.217075][T12613] __do_sys_process_madvise+0x142/0x5c0 [ 432.222653][T12613] ? __pfx___do_sys_process_madvise+0x10/0x10 [ 432.228753][T12613] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 432.234776][T12613] ? __fget_files+0x244/0x3f0 [ 432.239492][T12613] ? __pfx_ksys_write+0x10/0x10 [ 432.244384][T12613] ? do_syscall_64+0xcd/0x250 [ 432.249097][T12613] do_syscall_64+0xcd/0x250 [ 432.253638][T12613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.259563][T12613] RIP: 0033:0x7f1bf577dff9 [ 432.264011][T12613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.283649][T12613] RSP: 002b:00007f1bf64ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8 [ 432.292098][T12613] RAX: ffffffffffffffda RBX: 00007f1bf5935f80 RCX: 00007f1bf577dff9 [ 432.300100][T12613] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 000000000000000b [ 432.308111][T12613] RBP: 00007f1bf64ce090 R08: 0000000000000000 R09: 0000000000000000 [ 432.316203][T12613] R10: fffffffffffffffb R11: 0000000000000246 R12: 0000000000000001 [ 432.324209][T12613] R13: 0000000000000000 R14: 00007f1bf5935f80 R15: 00007ffe3375d028 [ 432.332223][T12613] [ 435.035285][T12672] FAULT_INJECTION: forcing a failure. [ 435.035285][T12672] name failslab, interval 1, probability 0, space 0, times 0 [ 435.106377][T12672] CPU: 0 UID: 0 PID: 12672 Comm: syz.2.1611 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 435.117198][T12672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 435.127277][T12672] Call Trace: [ 435.130579][T12672] [ 435.133530][T12672] dump_stack_lvl+0x16c/0x1f0 [ 435.138250][T12672] should_fail_ex+0x497/0x5b0 [ 435.142965][T12672] ? fs_reclaim_acquire+0xae/0x160 [ 435.148115][T12672] should_failslab+0xc2/0x120 [ 435.152830][T12672] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 435.158237][T12672] ? __thp_vma_allowable_orders+0x341/0xb40 [ 435.164168][T12672] ? __pmd_alloc+0xc3/0x810 [ 435.168713][T12672] __pmd_alloc+0xc3/0x810 [ 435.173081][T12672] __handle_mm_fault+0x942/0x2a10 [ 435.178155][T12672] ? __pfx_mt_find+0x10/0x10 [ 435.182784][T12672] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 435.188458][T12672] ? __pfx___handle_mm_fault+0x10/0x10 [ 435.193972][T12672] ? find_vma+0xc0/0x140 [ 435.198250][T12672] ? __pfx_find_vma+0x10/0x10 [ 435.202964][T12672] handle_mm_fault+0x3fa/0xaa0 [ 435.207774][T12672] do_user_addr_fault+0x7a3/0x13f0 [ 435.212935][T12672] exc_page_fault+0x5c/0xc0 [ 435.217469][T12672] asm_exc_page_fault+0x26/0x30 [ 435.222350][T12672] RIP: 0010:copy_iovec_from_user+0x79/0x170 [ 435.228274][T12672] Code: e8 6c 59 06 fd 4d 85 f6 0f 85 c6 00 00 00 e8 ae 57 06 fd 0f 01 cb 0f ae e8 49 bf 00 00 00 00 00 fc ff df e8 99 57 06 fd 31 db <48> 8b 45 08 31 ff 89 de 49 89 c6 e8 c7 59 06 fd 85 db 0f 85 b1 00 [ 435.247885][T12672] RSP: 0018:ffffc90004527c18 EFLAGS: 00050246 [ 435.253957][T12672] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff848656e4 [ 435.261928][T12672] RDX: ffff888088520000 RSI: ffffffff84865707 RDI: 0000000000000006 [ 435.269914][T12672] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 435.277993][T12672] R10: 0000000000000090 R11: 0000000000000000 R12: ffff8880819cc800 [ 435.285977][T12672] R13: 0000000000000009 R14: 0000000000000000 R15: dffffc0000000000 [ 435.293970][T12672] ? copy_iovec_from_user+0x54/0x170 [ 435.299294][T12672] ? copy_iovec_from_user+0x77/0x170 [ 435.304602][T12672] ? copy_iovec_from_user+0x77/0x170 [ 435.309904][T12672] iovec_from_user.part.0+0x65/0x130 [ 435.315196][T12672] __import_iovec+0xdc/0x6e0 [ 435.319802][T12672] import_iovec+0x108/0x140 [ 435.324315][T12672] __do_sys_process_madvise+0x142/0x5c0 [ 435.329873][T12672] ? __pfx___do_sys_process_madvise+0x10/0x10 [ 435.335952][T12672] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 435.341944][T12672] ? __fget_files+0x244/0x3f0 [ 435.346636][T12672] ? __pfx_ksys_write+0x10/0x10 [ 435.351497][T12672] ? do_syscall_64+0xcd/0x250 [ 435.356183][T12672] do_syscall_64+0xcd/0x250 [ 435.360698][T12672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.366601][T12672] RIP: 0033:0x7f1bf577dff9 [ 435.371018][T12672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.390634][T12672] RSP: 002b:00007f1bf64ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8 [ 435.399068][T12672] RAX: ffffffffffffffda RBX: 00007f1bf5935f80 RCX: 00007f1bf577dff9 [ 435.407044][T12672] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 000000000000000b [ 435.415017][T12672] RBP: 00007f1bf64ce090 R08: 0000000000000000 R09: 0000000000000000 [ 435.422994][T12672] R10: fffffffffffffffb R11: 0000000000000246 R12: 0000000000000001 [ 435.430977][T12672] R13: 0000000000000000 R14: 00007f1bf5935f80 R15: 00007ffe3375d028 [ 435.438968][T12672] [ 436.985087][T12695] FAULT_INJECTION: forcing a failure. [ 436.985087][T12695] name failslab, interval 1, probability 0, space 0, times 0 [ 437.077459][T12695] CPU: 0 UID: 0 PID: 12695 Comm: syz.2.1617 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 437.088292][T12695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 437.098377][T12695] Call Trace: [ 437.101683][T12695] [ 437.104645][T12695] dump_stack_lvl+0x16c/0x1f0 [ 437.109364][T12695] should_fail_ex+0x497/0x5b0 [ 437.114083][T12695] ? fs_reclaim_acquire+0xae/0x160 [ 437.119240][T12695] should_failslab+0xc2/0x120 [ 437.123957][T12695] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 437.129344][T12695] ? __pfx_timestamp_truncate+0x10/0x10 [ 437.134895][T12695] ? jbd2__journal_start+0x193/0x6a0 [ 437.140196][T12695] ? __pfx___might_resched+0x10/0x10 [ 437.145489][T12695] jbd2__journal_start+0x193/0x6a0 [ 437.150618][T12695] __ext4_journal_start_sb+0x358/0x660 [ 437.156088][T12695] ? ext4_dirty_inode+0xa1/0x130 [ 437.161035][T12695] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 437.166420][T12695] ext4_dirty_inode+0xa1/0x130 [ 437.171198][T12695] ? rcu_is_watching+0x12/0xc0 [ 437.175977][T12695] __mark_inode_dirty+0x1f6/0xe60 [ 437.181011][T12695] generic_update_time+0xcf/0xf0 [ 437.185959][T12695] file_modified+0x1bf/0x1f0 [ 437.190559][T12695] ext4_punch_hole+0x34c/0x10d0 [ 437.195434][T12695] ext4_fallocate+0x9b6/0x3940 [ 437.200218][T12695] ? rcu_is_watching+0x12/0xc0 [ 437.204992][T12695] ? trace_lock_acquire+0x14a/0x1d0 [ 437.210209][T12695] ? madvise_vma_behavior+0x180f/0x19e0 [ 437.215773][T12695] ? __pfx_ext4_fallocate+0x10/0x10 [ 437.220984][T12695] vfs_fallocate+0x459/0xf90 [ 437.225587][T12695] madvise_vma_behavior+0x180f/0x19e0 [ 437.230974][T12695] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 437.236706][T12695] ? mas_find+0x2f6/0x530 [ 437.241056][T12695] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 437.246883][T12695] ? find_vma_prev+0xdb/0x160 [ 437.251570][T12695] ? __pfx_find_vma_prev+0x10/0x10 [ 437.256694][T12695] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 437.262244][T12695] ? do_madvise+0x41a/0x760 [ 437.266753][T12695] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 437.272483][T12695] madvise_walk_vmas+0x1cf/0x2c0 [ 437.277436][T12695] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 437.282905][T12695] ? __mutex_unlock_slowpath+0x164/0x650 [ 437.288558][T12695] do_madvise+0x2e1/0x760 [ 437.292894][T12695] ? __pfx_do_madvise+0x10/0x10 [ 437.297751][T12695] ? ksys_write+0x1ad/0x260 [ 437.302259][T12695] ? __pfx_ksys_write+0x10/0x10 [ 437.307123][T12695] __x64_sys_madvise+0xa9/0x110 [ 437.312072][T12695] ? lockdep_hardirqs_on+0x7c/0x110 [ 437.317282][T12695] do_syscall_64+0xcd/0x250 [ 437.321800][T12695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.327703][T12695] RIP: 0033:0x7f1bf577dff9 [ 437.332123][T12695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.351745][T12695] RSP: 002b:00007f1bf64ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 437.360166][T12695] RAX: ffffffffffffffda RBX: 00007f1bf5935f80 RCX: 00007f1bf577dff9 [ 437.368142][T12695] RDX: 0000000000000009 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 437.376117][T12695] RBP: 00007f1bf64ce090 R08: 0000000000000000 R09: 0000000000000000 [ 437.384093][T12695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.392065][T12695] R13: 0000000000000000 R14: 00007f1bf5935f80 R15: 00007ffe3375d028 [ 437.400057][T12695] [ 438.338848][T12715] FAULT_INJECTION: forcing a failure. [ 438.338848][T12715] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 438.373131][T12715] CPU: 0 UID: 0 PID: 12715 Comm: syz.3.1624 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 438.383965][T12715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 438.394061][T12715] Call Trace: [ 438.397369][T12715] [ 438.400322][T12715] dump_stack_lvl+0x16c/0x1f0 [ 438.405045][T12715] should_fail_ex+0x497/0x5b0 [ 438.409766][T12715] ? fs_reclaim_acquire+0xae/0x160 [ 438.414922][T12715] should_fail_alloc_page+0xe7/0x130 [ 438.420264][T12715] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 438.426463][T12715] ? hlock_class+0x4e/0x130 [ 438.431013][T12715] __alloc_pages_noprof+0x190/0x25c0 [ 438.436343][T12715] ? stack_trace_save+0x95/0xd0 [ 438.441234][T12715] ? __pfx_stack_trace_save+0x10/0x10 [ 438.446645][T12715] ? stack_depot_save_flags+0x28/0x900 [ 438.452148][T12715] ? __pfx_mark_lock+0x10/0x10 [ 438.456945][T12715] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 438.462729][T12715] ? hlock_class+0x4e/0x130 [ 438.467256][T12715] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 438.473164][T12715] ? policy_nodemask+0xea/0x4e0 [ 438.478027][T12715] alloc_pages_mpol_noprof+0x2c9/0x610 [ 438.483503][T12715] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 438.489493][T12715] ? find_held_lock+0x2d/0x110 [ 438.494271][T12715] ? __pmd_alloc+0x354/0x810 [ 438.498874][T12715] pte_alloc_one+0x20/0x360 [ 438.503385][T12715] do_pte_missing+0x1ae0/0x3e50 [ 438.508251][T12715] ? do_raw_spin_unlock+0x172/0x230 [ 438.513461][T12715] ? __pmd_alloc+0x359/0x810 [ 438.518073][T12715] __handle_mm_fault+0x100a/0x2a10 [ 438.523203][T12715] ? __pfx_mt_find+0x10/0x10 [ 438.527805][T12715] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 438.533457][T12715] ? __pfx___handle_mm_fault+0x10/0x10 [ 438.538943][T12715] ? find_vma+0xc0/0x140 [ 438.543203][T12715] ? __pfx_find_vma+0x10/0x10 [ 438.547891][T12715] handle_mm_fault+0x3fa/0xaa0 [ 438.552675][T12715] do_user_addr_fault+0x7a3/0x13f0 [ 438.557810][T12715] exc_page_fault+0x5c/0xc0 [ 438.562322][T12715] asm_exc_page_fault+0x26/0x30 [ 438.567179][T12715] RIP: 0010:copy_iovec_from_user+0x79/0x170 [ 438.573089][T12715] Code: e8 6c 59 06 fd 4d 85 f6 0f 85 c6 00 00 00 e8 ae 57 06 fd 0f 01 cb 0f ae e8 49 bf 00 00 00 00 00 fc ff df e8 99 57 06 fd 31 db <48> 8b 45 08 31 ff 89 de 49 89 c6 e8 c7 59 06 fd 85 db 0f 85 b1 00 [ 438.592703][T12715] RSP: 0018:ffffc9000375fc18 EFLAGS: 00050246 [ 438.598776][T12715] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff848656e4 [ 438.606747][T12715] RDX: ffff888026d55a00 RSI: ffffffff84865707 RDI: 0000000000000006 [ 438.614722][T12715] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 438.622693][T12715] R10: 0000000000000090 R11: 0000000000000000 R12: ffff888147283100 [ 438.630666][T12715] R13: 0000000000000009 R14: 0000000000000000 R15: dffffc0000000000 [ 438.638652][T12715] ? copy_iovec_from_user+0x54/0x170 [ 438.643954][T12715] ? copy_iovec_from_user+0x77/0x170 [ 438.649265][T12715] ? copy_iovec_from_user+0x77/0x170 [ 438.654567][T12715] iovec_from_user.part.0+0x65/0x130 [ 438.659866][T12715] __import_iovec+0xdc/0x6e0 [ 438.664477][T12715] import_iovec+0x108/0x140 [ 438.668989][T12715] __do_sys_process_madvise+0x142/0x5c0 [ 438.674546][T12715] ? __pfx___do_sys_process_madvise+0x10/0x10 [ 438.680620][T12715] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 438.686613][T12715] ? __fget_files+0x244/0x3f0 [ 438.691300][T12715] ? __pfx_ksys_write+0x10/0x10 [ 438.696164][T12715] ? do_syscall_64+0xcd/0x250 [ 438.700849][T12715] do_syscall_64+0xcd/0x250 [ 438.705365][T12715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.711270][T12715] RIP: 0033:0x7f0757f7dff9 [ 438.715690][T12715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.735393][T12715] RSP: 002b:00007f0758de3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8 [ 438.743818][T12715] RAX: ffffffffffffffda RBX: 00007f0758135f80 RCX: 00007f0757f7dff9 [ 438.751795][T12715] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 000000000000000b [ 438.759767][T12715] RBP: 00007f0758de3090 R08: 0000000000000000 R09: 0000000000000000 [ 438.767742][T12715] R10: fffffffffffffffb R11: 0000000000000246 R12: 0000000000000001 [ 438.775719][T12715] R13: 0000000000000000 R14: 00007f0758135f80 R15: 00007ffe319da168 [ 438.783706][T12715] [ 439.091424][T12727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1625'. [ 439.160007][T12727] net_ratelimit: 46 callbacks suppressed [ 439.160030][T12727] openvswitch: netlink: Flow key attr not present in new flow. [ 439.353824][T12729] FAULT_INJECTION: forcing a failure. [ 439.353824][T12729] name failslab, interval 1, probability 0, space 0, times 0 [ 439.383008][T12729] CPU: 1 UID: 0 PID: 12729 Comm: syz.0.1626 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 439.393825][T12729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 439.403907][T12729] Call Trace: [ 439.407225][T12729] [ 439.410170][T12729] dump_stack_lvl+0x16c/0x1f0 [ 439.414884][T12729] should_fail_ex+0x497/0x5b0 [ 439.419606][T12729] ? fs_reclaim_acquire+0xae/0x160 [ 439.424752][T12729] should_failslab+0xc2/0x120 [ 439.429465][T12729] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 439.434873][T12729] ? __thp_vma_allowable_orders+0x341/0xb40 [ 439.440823][T12729] ? __pmd_alloc+0xc3/0x810 [ 439.445364][T12729] __pmd_alloc+0xc3/0x810 [ 439.449724][T12729] __handle_mm_fault+0x942/0x2a10 [ 439.454766][T12729] ? __pfx_mt_find+0x10/0x10 [ 439.459369][T12729] ? __pfx___handle_mm_fault+0x10/0x10 [ 439.464861][T12729] handle_mm_fault+0x3fa/0xaa0 [ 439.469644][T12729] __get_user_pages+0x90f/0x3b90 [ 439.474598][T12729] ? __pfx_mt_find+0x10/0x10 [ 439.479203][T12729] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 439.484847][T12729] ? __pfx___get_user_pages+0x10/0x10 [ 439.490238][T12729] populate_vma_page_range+0x27f/0x3a0 [ 439.495708][T12729] ? __pfx_populate_vma_page_range+0x10/0x10 [ 439.501698][T12729] ? __pfx_find_vma_intersection+0x10/0x10 [ 439.507510][T12729] ? __do_sys_mlockall+0x2f0/0x580 [ 439.512637][T12729] __mm_populate+0x1d6/0x380 [ 439.517240][T12729] ? __pfx___mm_populate+0x10/0x10 [ 439.522367][T12729] ? up_write+0x1b2/0x520 [ 439.526705][T12729] __do_sys_mlockall+0x4df/0x580 [ 439.531657][T12729] do_syscall_64+0xcd/0x250 [ 439.536171][T12729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.542070][T12729] RIP: 0033:0x7fe18bd7dff9 [ 439.546490][T12729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.566102][T12729] RSP: 002b:00007fe18cb80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 439.574519][T12729] RAX: ffffffffffffffda RBX: 00007fe18bf35f80 RCX: 00007fe18bd7dff9 [ 439.582494][T12729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 439.590467][T12729] RBP: 00007fe18cb80090 R08: 0000000000000000 R09: 0000000000000000 [ 439.598437][T12729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.606408][T12729] R13: 0000000000000000 R14: 00007fe18bf35f80 R15: 00007ffd55221a88 [ 439.614394][T12729] [ 441.204293][T12762] FAULT_INJECTION: forcing a failure. [ 441.204293][T12762] name failslab, interval 1, probability 0, space 0, times 0 [ 441.233786][T12762] CPU: 0 UID: 0 PID: 12762 Comm: syz.2.1637 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 441.244606][T12762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 441.254686][T12762] Call Trace: [ 441.257987][T12762] [ 441.260933][T12762] dump_stack_lvl+0x16c/0x1f0 [ 441.265642][T12762] should_fail_ex+0x497/0x5b0 [ 441.270328][T12762] ? fs_reclaim_acquire+0xae/0x160 [ 441.275447][T12762] should_failslab+0xc2/0x120 [ 441.280135][T12762] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 441.285516][T12762] ? ptlock_alloc+0x1f/0x70 [ 441.290032][T12762] ptlock_alloc+0x1f/0x70 [ 441.294370][T12762] pte_alloc_one+0x74/0x360 [ 441.298875][T12762] do_pte_missing+0x1ae0/0x3e50 [ 441.303733][T12762] ? do_raw_spin_unlock+0x172/0x230 [ 441.308935][T12762] ? __pmd_alloc+0x359/0x810 [ 441.313543][T12762] __handle_mm_fault+0x100a/0x2a10 [ 441.318668][T12762] ? __pfx_mt_find+0x10/0x10 [ 441.323268][T12762] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 441.328912][T12762] ? __pfx___handle_mm_fault+0x10/0x10 [ 441.334398][T12762] ? find_vma+0xc0/0x140 [ 441.338646][T12762] ? __pfx_find_vma+0x10/0x10 [ 441.343326][T12762] handle_mm_fault+0x3fa/0xaa0 [ 441.348104][T12762] do_user_addr_fault+0x7a3/0x13f0 [ 441.353233][T12762] exc_page_fault+0x5c/0xc0 [ 441.357742][T12762] asm_exc_page_fault+0x26/0x30 [ 441.362601][T12762] RIP: 0010:copy_iovec_from_user+0x79/0x170 [ 441.368505][T12762] Code: e8 6c 59 06 fd 4d 85 f6 0f 85 c6 00 00 00 e8 ae 57 06 fd 0f 01 cb 0f ae e8 49 bf 00 00 00 00 00 fc ff df e8 99 57 06 fd 31 db <48> 8b 45 08 31 ff 89 de 49 89 c6 e8 c7 59 06 fd 85 db 0f 85 b1 00 [ 441.388208][T12762] RSP: 0018:ffffc90003b7fc18 EFLAGS: 00050246 [ 441.394278][T12762] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff848656e4 [ 441.402249][T12762] RDX: ffff888027f31e00 RSI: ffffffff84865707 RDI: 0000000000000006 [ 441.410218][T12762] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 441.418188][T12762] R10: 0000000000000090 R11: 0000000000000000 R12: ffff88807c680400 [ 441.426165][T12762] R13: 0000000000000009 R14: 0000000000000000 R15: dffffc0000000000 [ 441.434148][T12762] ? copy_iovec_from_user+0x54/0x170 [ 441.439447][T12762] ? copy_iovec_from_user+0x77/0x170 [ 441.444755][T12762] ? copy_iovec_from_user+0x77/0x170 [ 441.450056][T12762] iovec_from_user.part.0+0x65/0x130 [ 441.455344][T12762] __import_iovec+0xdc/0x6e0 [ 441.459948][T12762] import_iovec+0x108/0x140 [ 441.464464][T12762] __do_sys_process_madvise+0x142/0x5c0 [ 441.470021][T12762] ? __pfx___do_sys_process_madvise+0x10/0x10 [ 441.476091][T12762] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 441.482080][T12762] ? __fget_files+0x244/0x3f0 [ 441.486770][T12762] ? __pfx_ksys_write+0x10/0x10 [ 441.491630][T12762] ? do_syscall_64+0xcd/0x250 [ 441.496310][T12762] do_syscall_64+0xcd/0x250 [ 441.500822][T12762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.506725][T12762] RIP: 0033:0x7f1bf577dff9 [ 441.511142][T12762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.530762][T12762] RSP: 002b:00007f1bf64ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8 [ 441.539265][T12762] RAX: ffffffffffffffda RBX: 00007f1bf5935f80 RCX: 00007f1bf577dff9 [ 441.547240][T12762] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 000000000000000b [ 441.555308][T12762] RBP: 00007f1bf64ce090 R08: 0000000000000000 R09: 0000000000000000 [ 441.563289][T12762] R10: fffffffffffffffb R11: 0000000000000246 R12: 0000000000000001 [ 441.571261][T12762] R13: 0000000000000000 R14: 00007f1bf5935f80 R15: 00007ffe3375d028 [ 441.579243][T12762] [ 442.178292][T12777] FAULT_INJECTION: forcing a failure. [ 442.178292][T12777] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 442.217911][T12777] CPU: 1 UID: 0 PID: 12777 Comm: syz.3.1641 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 442.228736][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 442.238818][T12777] Call Trace: [ 442.242123][T12777] [ 442.245070][T12777] dump_stack_lvl+0x16c/0x1f0 [ 442.249785][T12777] should_fail_ex+0x497/0x5b0 [ 442.254514][T12777] ? fs_reclaim_acquire+0xae/0x160 [ 442.259660][T12777] should_fail_alloc_page+0xe7/0x130 [ 442.264981][T12777] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 442.271167][T12777] ? hlock_class+0x4e/0x130 [ 442.275719][T12777] __alloc_pages_noprof+0x190/0x25c0 [ 442.281039][T12777] ? stack_trace_save+0x95/0xd0 [ 442.285920][T12777] ? __pfx_stack_trace_save+0x10/0x10 [ 442.291323][T12777] ? stack_depot_save_flags+0x28/0x900 [ 442.296826][T12777] ? rcu_is_watching+0x12/0xc0 [ 442.301626][T12777] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 442.307391][T12777] ? hlock_class+0x4e/0x130 [ 442.311946][T12777] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 442.318053][T12777] ? policy_nodemask+0xea/0x4e0 [ 442.322942][T12777] alloc_pages_mpol_noprof+0x2c9/0x610 [ 442.328442][T12777] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 442.334461][T12777] ? find_held_lock+0x2d/0x110 [ 442.339264][T12777] ? __pmd_alloc+0x354/0x810 [ 442.343890][T12777] pte_alloc_one+0x20/0x360 [ 442.348420][T12777] do_pte_missing+0x1ae0/0x3e50 [ 442.353306][T12777] ? do_raw_spin_unlock+0x172/0x230 [ 442.358533][T12777] ? __pmd_alloc+0x359/0x810 [ 442.363162][T12777] __handle_mm_fault+0x100a/0x2a10 [ 442.368315][T12777] ? __pfx_mt_find+0x10/0x10 [ 442.372944][T12777] ? __pfx___handle_mm_fault+0x10/0x10 [ 442.378463][T12777] handle_mm_fault+0x3fa/0xaa0 [ 442.383278][T12777] __get_user_pages+0x90f/0x3b90 [ 442.388265][T12777] ? __pfx_mt_find+0x10/0x10 [ 442.393080][T12777] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 442.398747][T12777] ? __pfx___get_user_pages+0x10/0x10 [ 442.404170][T12777] populate_vma_page_range+0x27f/0x3a0 [ 442.409674][T12777] ? __pfx_populate_vma_page_range+0x10/0x10 [ 442.415688][T12777] ? __pfx_find_vma_intersection+0x10/0x10 [ 442.421525][T12777] ? __do_sys_mlockall+0x2f0/0x580 [ 442.426683][T12777] __mm_populate+0x1d6/0x380 [ 442.431313][T12777] ? __pfx___mm_populate+0x10/0x10 [ 442.436463][T12777] ? up_write+0x1b2/0x520 [ 442.440820][T12777] __do_sys_mlockall+0x4df/0x580 [ 442.445804][T12777] do_syscall_64+0xcd/0x250 [ 442.450362][T12777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.456285][T12777] RIP: 0033:0x7f0757f7dff9 [ 442.460724][T12777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.480361][T12777] RSP: 002b:00007f0758de3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 442.488807][T12777] RAX: ffffffffffffffda RBX: 00007f0758135f80 RCX: 00007f0757f7dff9 [ 442.496814][T12777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 442.504826][T12777] RBP: 00007f0758de3090 R08: 0000000000000000 R09: 0000000000000000 [ 442.512824][T12777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.520821][T12777] R13: 0000000000000000 R14: 00007f0758135f80 R15: 00007ffe319da168 [ 442.528847][T12777] [ 443.463672][T12792] FAULT_INJECTION: forcing a failure. [ 443.463672][T12792] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 443.494671][T12792] CPU: 1 UID: 0 PID: 12792 Comm: syz.2.1647 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 443.505509][T12792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 443.515595][T12792] Call Trace: [ 443.518896][T12792] [ 443.521847][T12792] dump_stack_lvl+0x16c/0x1f0 [ 443.526563][T12792] should_fail_ex+0x497/0x5b0 [ 443.531279][T12792] ? fs_reclaim_acquire+0xae/0x160 [ 443.536422][T12792] should_fail_alloc_page+0xe7/0x130 [ 443.541756][T12792] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 443.547958][T12792] __alloc_pages_noprof+0x190/0x25c0 [ 443.553377][T12792] ? __pfx_mark_lock+0x10/0x10 [ 443.558180][T12792] ? __pfx___lock_acquire+0x10/0x10 [ 443.563416][T12792] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 443.569191][T12792] ? hlock_class+0x4e/0x130 [ 443.573722][T12792] ? __lock_acquire+0xbdd/0x3ce0 [ 443.578701][T12792] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 443.584631][T12792] ? policy_nodemask+0xea/0x4e0 [ 443.589515][T12792] alloc_pages_mpol_noprof+0x2c9/0x610 [ 443.595008][T12792] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 443.601029][T12792] ? find_held_lock+0x2d/0x110 [ 443.605826][T12792] folio_alloc_mpol_noprof+0x36/0xd0 [ 443.611133][T12792] shmem_alloc_folio+0x135/0x160 [ 443.616098][T12792] shmem_alloc_and_add_folio+0x48b/0xc00 [ 443.621765][T12792] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 443.627948][T12792] ? shmem_allowable_huge_orders+0x208/0x440 [ 443.633965][T12792] shmem_get_folio_gfp+0x689/0x1530 [ 443.639199][T12792] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 443.644863][T12792] ? filemap_map_pages+0xf93/0x16a0 [ 443.650100][T12792] shmem_fault+0x200/0xae0 [ 443.654552][T12792] ? __pfx_shmem_fault+0x10/0x10 [ 443.659542][T12792] ? do_pte_missing+0xdc2/0x3e50 [ 443.664517][T12792] ? __pfx_lock_release+0x10/0x10 [ 443.669579][T12792] __do_fault+0x10a/0x490 [ 443.673935][T12792] do_pte_missing+0xea8/0x3e50 [ 443.678735][T12792] ? do_raw_spin_unlock+0x172/0x230 [ 443.683963][T12792] ? __pmd_alloc+0x359/0x810 [ 443.688582][T12792] __handle_mm_fault+0x100a/0x2a10 [ 443.693730][T12792] ? __pfx_mt_find+0x10/0x10 [ 443.698354][T12792] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 443.704024][T12792] ? __pfx___handle_mm_fault+0x10/0x10 [ 443.709541][T12792] ? find_vma+0xc0/0x140 [ 443.713813][T12792] ? __pfx_find_vma+0x10/0x10 [ 443.718525][T12792] handle_mm_fault+0x3fa/0xaa0 [ 443.723504][T12792] do_user_addr_fault+0x7a3/0x13f0 [ 443.728661][T12792] exc_page_fault+0x5c/0xc0 [ 443.733281][T12792] asm_exc_page_fault+0x26/0x30 [ 443.738160][T12792] RIP: 0010:copy_iovec_from_user+0x79/0x170 [ 443.744094][T12792] Code: e8 6c 59 06 fd 4d 85 f6 0f 85 c6 00 00 00 e8 ae 57 06 fd 0f 01 cb 0f ae e8 49 bf 00 00 00 00 00 fc ff df e8 99 57 06 fd 31 db <48> 8b 45 08 31 ff 89 de 49 89 c6 e8 c7 59 06 fd 85 db 0f 85 b1 00 [ 443.763729][T12792] RSP: 0018:ffffc90002e4fc18 EFLAGS: 00050246 [ 443.769825][T12792] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff848656e4 [ 443.777820][T12792] RDX: ffff88802afabc00 RSI: ffffffff84865707 RDI: 0000000000000006 [ 443.785814][T12792] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 443.793804][T12792] R10: 0000000000000090 R11: 0000000000000000 R12: ffff888087f0bc00 [ 443.801799][T12792] R13: 0000000000000009 R14: 0000000000000000 R15: dffffc0000000000 [ 443.809802][T12792] ? copy_iovec_from_user+0x54/0x170 [ 443.815126][T12792] ? copy_iovec_from_user+0x77/0x170 [ 443.820456][T12792] ? copy_iovec_from_user+0x77/0x170 [ 443.825784][T12792] iovec_from_user.part.0+0x65/0x130 [ 443.831098][T12792] __import_iovec+0xdc/0x6e0 [ 443.835721][T12792] import_iovec+0x108/0x140 [ 443.840257][T12792] __do_sys_process_madvise+0x142/0x5c0 [ 443.845833][T12792] ? __pfx___do_sys_process_madvise+0x10/0x10 [ 443.851928][T12792] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 443.857941][T12792] ? __fget_files+0x244/0x3f0 [ 443.862650][T12792] ? __pfx_ksys_write+0x10/0x10 [ 443.867533][T12792] ? do_syscall_64+0xcd/0x250 [ 443.872239][T12792] do_syscall_64+0xcd/0x250 [ 443.876779][T12792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.882703][T12792] RIP: 0033:0x7f1bf577dff9 [ 443.887139][T12792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.901511][T11533] Bluetooth: hci2: command 0x0406 tx timeout [ 443.906746][T12792] RSP: 002b:00007f1bf64ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8 [ 443.921159][T12792] RAX: ffffffffffffffda RBX: 00007f1bf5935f80 RCX: 00007f1bf577dff9 [ 443.929153][T12792] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 000000000000000b [ 443.937147][T12792] RBP: 00007f1bf64ce090 R08: 0000000000000000 R09: 0000000000000000 [ 443.945142][T12792] R10: fffffffffffffffb R11: 0000000000000246 R12: 0000000000000001 [ 443.953135][T12792] R13: 0000000000000000 R14: 00007f1bf5935f80 R15: 00007ffe3375d028 [ 443.961152][T12792] [ 444.395222][T12813] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1651'. [ 445.051273][T12830] FAULT_INJECTION: forcing a failure. [ 445.051273][T12830] name failslab, interval 1, probability 0, space 0, times 0 [ 445.064952][T12830] CPU: 1 UID: 0 PID: 12830 Comm: syz.3.1656 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 445.075754][T12830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 445.085834][T12830] Call Trace: [ 445.089130][T12830] [ 445.092080][T12830] dump_stack_lvl+0x16c/0x1f0 [ 445.096791][T12830] should_fail_ex+0x497/0x5b0 [ 445.101508][T12830] ? fs_reclaim_acquire+0xae/0x160 [ 445.106658][T12830] should_failslab+0xc2/0x120 [ 445.111380][T12830] kmem_cache_alloc_node_noprof+0x71/0x310 [ 445.117219][T12830] ? __alloc_skb+0x2b3/0x380 [ 445.121846][T12830] __alloc_skb+0x2b3/0x380 [ 445.126304][T12830] ? __pfx___alloc_skb+0x10/0x10 [ 445.131282][T12830] ? lock_acquire+0x2f/0xb0 [ 445.135819][T12830] netlink_alloc_large_skb+0x69/0x130 [ 445.141201][T12830] netlink_sendmsg+0x689/0xd70 [ 445.145978][T12830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.151280][T12830] ____sys_sendmsg+0x9ae/0xb40 [ 445.156092][T12830] ? copy_msghdr_from_user+0x10b/0x160 [ 445.161569][T12830] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.166868][T12830] ? __pfx___lock_acquire+0x10/0x10 [ 445.172082][T12830] ___sys_sendmsg+0x135/0x1e0 [ 445.176788][T12830] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.182006][T12830] ? lock_acquire+0x2f/0xb0 [ 445.186524][T12830] ? __fget_files+0x40/0x3f0 [ 445.191141][T12830] ? fdget+0x176/0x210 [ 445.195212][T12830] __sys_sendmsg+0x117/0x1f0 [ 445.199812][T12830] ? __pfx___sys_sendmsg+0x10/0x10 [ 445.205015][T12830] ? __fget_files+0x244/0x3f0 [ 445.209708][T12830] do_syscall_64+0xcd/0x250 [ 445.214222][T12830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.220121][T12830] RIP: 0033:0x7f0757f7dff9 [ 445.224536][T12830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.244156][T12830] RSP: 002b:00007f0758de3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.252581][T12830] RAX: ffffffffffffffda RBX: 00007f0758135f80 RCX: 00007f0757f7dff9 [ 445.260559][T12830] RDX: 0000000000004000 RSI: 0000000020000ac0 RDI: 0000000000000003 [ 445.268532][T12830] RBP: 00007f0758de3090 R08: 0000000000000000 R09: 0000000000000000 [ 445.276510][T12830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.284487][T12830] R13: 0000000000000000 R14: 00007f0758135f80 R15: 00007ffe319da168 [ 445.292473][T12830] [ 445.713932][T12843] FAULT_INJECTION: forcing a failure. [ 445.713932][T12843] name failslab, interval 1, probability 0, space 0, times 0 [ 445.771813][T12843] CPU: 0 UID: 0 PID: 12843 Comm: syz.1.1659 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 445.782647][T12843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 445.792731][T12843] Call Trace: [ 445.796028][T12843] [ 445.798984][T12843] dump_stack_lvl+0x16c/0x1f0 [ 445.803704][T12843] should_fail_ex+0x497/0x5b0 [ 445.808423][T12843] ? fs_reclaim_acquire+0xae/0x160 [ 445.813581][T12843] should_failslab+0xc2/0x120 [ 445.818293][T12843] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 445.823711][T12843] ? ptlock_alloc+0x1f/0x70 [ 445.828258][T12843] ptlock_alloc+0x1f/0x70 [ 445.832627][T12843] pte_alloc_one+0x74/0x360 [ 445.837162][T12843] do_pte_missing+0x1ae0/0x3e50 [ 445.842055][T12843] ? do_raw_spin_unlock+0x172/0x230 [ 445.847310][T12843] ? __pmd_alloc+0x359/0x810 [ 445.851937][T12843] __handle_mm_fault+0x100a/0x2a10 [ 445.857095][T12843] ? __pfx_mt_find+0x10/0x10 [ 445.861728][T12843] ? __pfx___handle_mm_fault+0x10/0x10 [ 445.867253][T12843] handle_mm_fault+0x3fa/0xaa0 [ 445.872150][T12843] __get_user_pages+0x90f/0x3b90 [ 445.877135][T12843] ? __pfx_mt_find+0x10/0x10 [ 445.881764][T12843] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 445.887442][T12843] ? __pfx___get_user_pages+0x10/0x10 [ 445.892868][T12843] populate_vma_page_range+0x27f/0x3a0 [ 445.898369][T12843] ? __pfx_populate_vma_page_range+0x10/0x10 [ 445.904387][T12843] ? __pfx_find_vma_intersection+0x10/0x10 [ 445.910230][T12843] ? __do_sys_mlockall+0x2f0/0x580 [ 445.915392][T12843] __mm_populate+0x1d6/0x380 [ 445.920025][T12843] ? __pfx___mm_populate+0x10/0x10 [ 445.925177][T12843] ? up_write+0x1b2/0x520 [ 445.929539][T12843] __do_sys_mlockall+0x4df/0x580 [ 445.934518][T12843] do_syscall_64+0xcd/0x250 [ 445.939059][T12843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.944977][T12843] RIP: 0033:0x7fcecd97dff9 [ 445.949418][T12843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.969068][T12843] RSP: 002b:00007fcece7aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 445.977525][T12843] RAX: ffffffffffffffda RBX: 00007fcecdb35f80 RCX: 00007fcecd97dff9 [ 445.985532][T12843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 445.993550][T12843] RBP: 00007fcece7aa090 R08: 0000000000000000 R09: 0000000000000000 [ 446.001551][T12843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.009639][T12843] R13: 0000000000000000 R14: 00007fcecdb35f80 R15: 00007ffddf280e88 [ 446.017665][T12843] [ 446.023687][T12847] FAULT_INJECTION: forcing a failure. [ 446.023687][T12847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.039052][T12847] CPU: 0 UID: 0 PID: 12847 Comm: syz.2.1663 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 446.049865][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 446.059943][T12847] Call Trace: [ 446.063227][T12847] [ 446.066159][T12847] dump_stack_lvl+0x16c/0x1f0 [ 446.070853][T12847] should_fail_ex+0x497/0x5b0 [ 446.075560][T12847] _copy_to_user+0x30/0xc0 [ 446.079996][T12847] simple_read_from_buffer+0xd0/0x160 [ 446.085402][T12847] proc_fail_nth_read+0x198/0x270 [ 446.090560][T12847] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 446.096151][T12847] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 446.101722][T12847] vfs_read+0x1ce/0xbd0 [ 446.105896][T12847] ? __fget_files+0x23a/0x3f0 [ 446.110580][T12847] ? fdget_pos+0x24c/0x360 [ 446.115001][T12847] ? __pfx_lock_release+0x10/0x10 [ 446.120040][T12847] ? trace_lock_acquire+0x14a/0x1d0 [ 446.125249][T12847] ? __pfx_vfs_read+0x10/0x10 [ 446.129928][T12847] ? __pfx___mutex_lock+0x10/0x10 [ 446.134967][T12847] ? __fget_files+0x244/0x3f0 [ 446.139673][T12847] ksys_read+0x12f/0x260 [ 446.143947][T12847] ? __pfx_ksys_read+0x10/0x10 [ 446.148731][T12847] do_syscall_64+0xcd/0x250 [ 446.153262][T12847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.159179][T12847] RIP: 0033:0x7f1bf577ca3c [ 446.163609][T12847] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 446.183239][T12847] RSP: 002b:00007f1bf64ce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 446.191680][T12847] RAX: ffffffffffffffda RBX: 00007f1bf5935f80 RCX: 00007f1bf577ca3c [ 446.199678][T12847] RDX: 000000000000000f RSI: 00007f1bf64ce0a0 RDI: 0000000000000003 [ 446.207675][T12847] RBP: 00007f1bf64ce090 R08: 0000000000000000 R09: 0000000000000000 [ 446.215838][T12847] R10: fffffffffffffffb R11: 0000000000000246 R12: 0000000000000001 [ 446.223829][T12847] R13: 0000000000000000 R14: 00007f1bf5935f80 R15: 00007ffe3375d028 [ 446.231832][T12847] [ 448.624950][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1683'. [ 449.278979][T11533] Bluetooth: hci4: command 0x0406 tx timeout [ 449.816381][ T30] INFO: task syz-executor:9432 blocked for more than 143 seconds. [ 449.847204][ T30] Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 449.855036][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 449.865057][ T30] task:syz-executor state:D stack:24288 pid:9432 tgid:9432 ppid:1 flags:0x00004004 [ 449.876763][ T30] Call Trace: [ 449.881192][ T30] [ 449.884249][ T30] __schedule+0xef5/0x5750 [ 449.888789][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 449.895432][ T30] ? __pfx___schedule+0x10/0x10 [ 449.900522][ T30] ? schedule+0x298/0x350 [ 449.908020][ T30] ? __pfx_lock_release+0x10/0x10 [ 449.913648][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 449.919586][ T30] ? lock_acquire+0x2f/0xb0 [ 449.925557][ T30] ? schedule+0x1fd/0x350 [ 449.930028][ T30] schedule+0xe7/0x350 [ 449.934647][ T30] schedule_preempt_disabled+0x13/0x30 [ 449.941603][ T30] __mutex_lock+0x5b8/0x9c0 [ 449.946797][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 449.952220][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 449.957853][ T30] ? __pfx_lock_release+0x10/0x10 [ 449.963038][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 449.969545][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 449.974800][ T30] nfsd_umount+0x48/0xe0 [ 449.982299][ T30] deactivate_locked_super+0xbe/0x1a0 [ 449.990004][ T30] deactivate_super+0xde/0x100 [ 449.995146][ T30] cleanup_mnt+0x222/0x450 [ 450.000127][ T30] task_work_run+0x14e/0x250 [ 450.004858][ T30] ? __pfx_task_work_run+0x10/0x10 [ 450.017071][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 450.031772][ T30] do_syscall_64+0xda/0x250 [ 450.036429][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.086362][ T30] RIP: 0033:0x7f2368f7f327 [ 450.090944][ T30] RSP: 002b:00007ffffd7df018 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 450.102014][ T30] RAX: 0000000000000000 RBX: 00007f2368ff0134 RCX: 00007f2368f7f327 [ 450.139149][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffd7e0150 [ 450.153729][ T30] RBP: 00007ffffd7e013c R08: 0000000000000000 R09: 00007f2369cb6080 [ 450.174843][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffd7e0150 [ 450.196757][ T30] R13: 00007f2368ff0134 R14: 000000000004585c R15: 00007ffffd7e0190 [ 450.228199][ T30] [ 450.239790][ T30] [ 450.239790][ T30] Showing all locks held in the system: [ 450.259004][ T30] 1 lock held by pool_workqueue_/3: [ 450.273381][ T30] #0: ffffffff8ddc3178 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 450.298313][ T30] 1 lock held by khungtaskd/30: [ 450.315293][ T30] #0: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 450.348215][ T30] 3 locks held by kworker/u8:5/148: [ 450.378413][ T30] 2 locks held by getty/4983: [ 450.396052][ T30] #0: ffff88802ebb30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 450.424227][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 450.456345][ T30] 5 locks held by kworker/u8:14/6940: [ 450.471876][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 450.508126][ T30] #1: ffffc90004717d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 450.535013][ T30] #2: ffffffff8faace90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 450.555525][ T30] #3: ffffffff8fac2aa8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0x8f/0x9b0 [ 450.585290][ T30] #4: ffffffff8ddc3178 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 450.615302][ T30] 2 locks held by kworker/u8:56/7371: [ 450.631965][ T30] #0: ffff8881416cc948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 450.657943][ T30] #1: ffffc90003f87d80 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 450.687747][ T30] 2 locks held by syz-executor/9432: [ 450.705923][ T30] #0: ffff88802d9d80e0 (&type->s_umount_key#54){++++}-{3:3}, at: deactivate_super+0xd6/0x100 [ 450.735069][ T30] #1: ffffffff8e1d19e8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 450.770903][ T30] 2 locks held by syz.3.939/9747: [ 450.794456][ T30] #0: ffffffff8fb60b10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 450.823977][ T30] #1: ffffffff8e1d19e8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_threads_set_doit+0x694/0xbe0 [ 450.867626][ T30] 2 locks held by syz.0.1091/10355: [ 450.887153][ T30] #0: ffffffff8fb60b10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 450.915713][ T30] #1: ffffffff8e1d19e8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_threads_set_doit+0x694/0xbe0 [ 450.959432][ T30] 2 locks held by syz.1.1098/10379: [ 450.969632][ T30] #0: ffff88807a7740e0 (&type->s_umount_key#54){++++}-{3:3}, at: deactivate_super+0xd6/0x100 [ 451.003869][ T30] #1: ffffffff8e1d19e8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 451.044422][ T30] 2 locks held by syz-executor/10593: [ 451.057654][ T30] #0: ffff88804b6140e0 (&type->s_umount_key#54){++++}-{3:3}, at: deactivate_super+0xd6/0x100 [ 451.090553][ T30] #1: ffffffff8e1d19e8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 451.119992][ T30] 2 locks held by syz.2.1194/10956: [ 451.146128][ T30] #0: ffffffff8fb60b10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 451.180305][ T30] #1: ffffffff8e1d19e8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_threads_set_doit+0x694/0xbe0 [ 451.210613][ T30] 2 locks held by syz.3.1331/11524: [ 451.215956][ T30] #0: ffffffff8fb60b10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 451.235835][ T30] #1: ffffffff8e1d19e8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_threads_set_doit+0x694/0xbe0 [ 451.263201][ T30] 2 locks held by syz.0.1343/11569: [ 451.280634][ T30] #0: ffffffff8fb60b10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 451.302550][ T30] #1: ffffffff8e1d19e8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_threads_set_doit+0x694/0xbe0 [ 451.325435][ T30] 2 locks held by syz.0.1676/12885: [ 451.338479][ T30] 2 locks held by syz.2.1680/12893: [ 451.358471][ T30] 3 locks held by syz.2.1680/12894: [ 451.373716][ T30] 2 locks held by syz.2.1680/12898: [ 451.387693][ T30] 2 locks held by syz.0.1682/12909: [ 451.406634][ T30] 2 locks held by syz.3.1683/12908: [ 451.422838][ T30] 1 lock held by syz.3.1688/12921: [ 451.434204][ T30] #0: ffffffff8fac2aa8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x612/0x4960 [ 451.463399][ T30] [ 451.481801][ T30] ============================================= [ 451.481801][ T30] [ 451.526570][ T30] NMI backtrace for cpu 1 [ 451.530951][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 451.541477][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 451.551532][ T30] Call Trace: [ 451.554807][ T30] [ 451.557735][ T30] dump_stack_lvl+0x116/0x1f0 [ 451.562423][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 451.567361][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 451.573357][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 451.579342][ T30] watchdog+0xf0c/0x1240 [ 451.583604][ T30] ? __pfx_watchdog+0x10/0x10 [ 451.588294][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 451.593500][ T30] ? __kthread_parkme+0x148/0x220 [ 451.598529][ T30] ? __pfx_watchdog+0x10/0x10 [ 451.603211][ T30] kthread+0x2c1/0x3a0 [ 451.607282][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.612482][ T30] ? __pfx_kthread+0x10/0x10 [ 451.617078][ T30] ret_from_fork+0x45/0x80 [ 451.621493][ T30] ? __pfx_kthread+0x10/0x10 [ 451.626097][ T30] ret_from_fork_asm+0x1a/0x30 [ 451.630878][ T30] [ 451.635517][ T30] Sending NMI from CPU 1 to CPUs 0: [ 451.642094][ C0] NMI backtrace for cpu 0 [ 451.642107][ C0] CPU: 0 UID: 0 PID: 6946 Comm: kworker/u8:20 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 451.642134][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 451.642150][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 451.642177][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x5a/0x90 [ 451.642215][ C0] Code: 4c 8b 75 00 31 db 4d 85 f6 74 1e 48 8b 74 dd 10 4c 89 e2 4c 89 ef 48 83 c3 01 48 8b 4c 24 28 e8 8c fd ff ff 49 39 de 75 e2 5b <5d> 41 5c 41 5d 41 5e c3 cc cc cc cc 48 83 f8 40 41 bd 07 00 00 00 [ 451.642237][ C0] RSP: 0018:ffffc9000463f670 EFLAGS: 00000246 [ 451.642255][ C0] RAX: 0000000000000000 RBX: 0000000000000006 RCX: ffffffff8a9067a1 [ 451.642270][ C0] RDX: ffff88802dd9da00 RSI: 00000000000000f4 RDI: 0000000000000001 [ 451.642285][ C0] RBP: ffffffff8c9dfb80 R08: 0000000000000001 R09: 00000000000000f4 [ 451.642300][ C0] R10: 0000000000000000 R11: 000000000000004f R12: 0000000000000000 [ 451.642314][ C0] R13: 0000000000000001 R14: 0000000000000020 R15: ffff88806b3bc975 [ 451.642330][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 451.642352][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 451.642368][ C0] CR2: 00007f1bf5908178 CR3: 000000000db7c000 CR4: 00000000003526f0 [ 451.642384][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 451.642398][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 451.642412][ C0] Call Trace: [ 451.642419][ C0] [ 451.642426][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 451.642453][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 451.642487][ C0] ? nmi_handle+0x1a9/0x5c0 [ 451.642512][ C0] ? __sanitizer_cov_trace_switch+0x5a/0x90 [ 451.642545][ C0] ? default_do_nmi+0x6a/0x160 [ 451.642566][ C0] ? exc_nmi+0x170/0x1e0 [ 451.642586][ C0] ? end_repeat_nmi+0xf/0x53 [ 451.642617][ C0] ? _ieee802_11_parse_elems_full+0x271/0x4300 [ 451.642644][ C0] ? __sanitizer_cov_trace_switch+0x5a/0x90 [ 451.642677][ C0] ? __sanitizer_cov_trace_switch+0x5a/0x90 [ 451.642716][ C0] ? __sanitizer_cov_trace_switch+0x5a/0x90 [ 451.642749][ C0] [ 451.642756][ C0] [ 451.642764][ C0] _ieee802_11_parse_elems_full+0x271/0x4300 [ 451.642795][ C0] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 451.642823][ C0] ? trace_kmalloc+0x2d/0xe0 [ 451.642857][ C0] ? __kmalloc_noprof+0x207/0x410 [ 451.642886][ C0] ? cfg80211_find_elem_match+0x156/0x190 [ 451.642918][ C0] ieee802_11_parse_elems_full+0x8bc/0x1630 [ 451.642948][ C0] ? __pfx_mark_lock+0x10/0x10 [ 451.642980][ C0] ? __pfx_mark_lock+0x10/0x10 [ 451.643010][ C0] ? debug_object_activate+0x199/0x540 [ 451.643038][ C0] ? hlock_class+0x4e/0x130 [ 451.643064][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 451.643089][ C0] ? hlock_class+0x4e/0x130 [ 451.643115][ C0] ? __lock_acquire+0x163e/0x3ce0 [ 451.643147][ C0] ? __pfx_mark_lock+0x10/0x10 [ 451.643180][ C0] ? hlock_class+0x4e/0x130 [ 451.643205][ C0] ? __lock_acquire+0x163e/0x3ce0 [ 451.643240][ C0] ieee80211_ibss_rx_queued_mgmt+0xc54/0x3030 [ 451.643266][ C0] ? hlock_class+0x4e/0x130 [ 451.643291][ C0] ? mark_lock+0xb5/0xc60 [ 451.643321][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 451.643353][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 451.643387][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 451.643412][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 451.643445][ C0] ? find_held_lock+0x2d/0x110 [ 451.643469][ C0] ? find_held_lock+0x2d/0x110 [ 451.643496][ C0] ? kcov_remote_start+0x370/0x6e0 [ 451.643530][ C0] ? mark_held_locks+0x9f/0xe0 [ 451.643562][ C0] ? kcov_remote_start+0x3cf/0x6e0 [ 451.643597][ C0] ieee80211_iface_work+0xc0b/0xf00 [ 451.643625][ C0] cfg80211_wiphy_work+0x3d9/0x550 [ 451.643649][ C0] process_one_work+0x958/0x1b30 [ 451.643687][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 451.643718][ C0] ? __pfx_process_one_work+0x10/0x10 [ 451.643755][ C0] ? assign_work+0x1a0/0x250 [ 451.643787][ C0] worker_thread+0x6c8/0xf00 [ 451.643826][ C0] ? __pfx_worker_thread+0x10/0x10 [ 451.643859][ C0] kthread+0x2c1/0x3a0 [ 451.643883][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.643908][ C0] ? __pfx_kthread+0x10/0x10 [ 451.643932][ C0] ret_from_fork+0x45/0x80 [ 451.643952][ C0] ? __pfx_kthread+0x10/0x10 [ 451.643977][ C0] ret_from_fork_asm+0x1a/0x30 [ 451.644016][ C0] [ 451.924661][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 451.924679][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 451.924706][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 451.924719][ T30] Call Trace: [ 451.924726][ T30] [ 451.924735][ T30] dump_stack_lvl+0x3d/0x1f0 [ 451.924770][ T30] panic+0x71d/0x800 [ 451.924799][ T30] ? __pfx_panic+0x10/0x10 [ 451.924827][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 451.924853][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 451.924884][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 451.924908][ T30] ? watchdog+0xd76/0x1240 [ 451.924938][ T30] ? watchdog+0xd69/0x1240 [ 451.924970][ T30] watchdog+0xd87/0x1240 [ 451.925004][ T30] ? __pfx_watchdog+0x10/0x10 [ 451.925032][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 451.925060][ T30] ? __kthread_parkme+0x148/0x220 [ 451.925087][ T30] ? __pfx_watchdog+0x10/0x10 [ 451.925116][ T30] kthread+0x2c1/0x3a0 [ 451.925138][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.925162][ T30] ? __pfx_kthread+0x10/0x10 [ 451.925187][ T30] ret_from_fork+0x45/0x80 [ 451.925207][ T30] ? __pfx_kthread+0x10/0x10 [ 451.925231][ T30] ret_from_fork_asm+0x1a/0x30 [ 451.925273][ T30] [ 452.201085][ T30] Kernel Offset: disabled [ 452.205398][ T30] Rebooting in 86400 seconds..