last executing test programs: 3m31.949292786s ago: executing program 0 (id=391): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x3, 0x9, 0xffffffffffffffff, 0x66f4, 0x1e, 0x3) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x3) r1 = socket(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x160, r2, 0x1, 0x70bd29, 0x25cfdbfd, {}, [@ETHTOOL_A_FEC_MODES={0x149, 0x2, "2c78bbd486144602543afaeb48d47db230b6fccb9f80b12beea70a54c3483404b46defc5a6c58345e6c94e7db5b8ab5f5221193805b2ef79d3446602cfc96a7d1658196a32c8dd8df733ce0a63af950057b5c92dc5f5b4999bb85648256f90341a3b7337d7f730259c684b365df552f8adf3c94f9bda3ce361db0a26c6f35395b710a25d8eb22e1727e6d0b07c5aeceae60bc34f49c784c0ebeebf540cb0452b506f03373588ee9395ea65b50843e65363a4f127cd515d620b7638b08e1cf24bbfe86f6af24616f6bb9ac7e612560600caf5d29c19f82b3c25a7cc1d0f0a41af6500aa3adf244943d50f24175d74a777c3ea22e6fb1d3323a861e5a1e122590a8ae2be3868c3bb73a75ba059c11eadd14d073b11b0aed5b9af05d20e34c338f8d1ec710ea21f76c3697c902cf27e2bd5008b24be9818725b0980d86fc0e804deb833e95089"}]}, 0x160}, 0x1, 0x0, 0x0, 0x200018d0}, 0x60040800) sendmsg$auto_ETHTOOL_MSG_MM_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x800, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_MM_HEADER={0x7, 0x1, "1af0df"}, @ETHTOOL_A_MM_HEADER={0x7, 0x1, 's2L'}, @ETHTOOL_A_MM_HEADER={0x7, 0x1, "1aeff1"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x2) 3m31.723994994s ago: executing program 0 (id=393): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x200000040eb1, 0x401, 0x300000000000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) clone$auto(0x127, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) seccomp$auto(0x0, 0x100000000, 0xfffffffffffffffc) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 3m31.328341801s ago: executing program 0 (id=397): mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':\xf2b', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') (async, rerun: 32) madvise$auto(0x0, 0x7fffffffffffffff, 0xe) (async, rerun: 32) r0 = socket(0xa, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0xff) (async) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x10000c, 0x9, 0x0, 0x10000000000008}, 0x283) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) (async, rerun: 32) select$auto(0x7, 0x0, &(0x7f0000000100)={[0x9, 0x2, 0x0, 0xfffffffffffffff6, 0x7, 0xfffffffffffdffff, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x1e, 0x7, 0x3, 0x200, 0x1, 0xe]}, 0x0, 0x0) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0x2, 0x6, 0x0) (async, rerun: 32) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="ffff", @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4004054}, 0x2dd47201f6cc571e) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xff00) (async, rerun: 64) write$auto(0x3, 0x0, 0xfdef) (async, rerun: 64) mmap$auto(0x3, 0x5, 0x3, 0x3ff, 0x6, 0x8a) mmap$auto(0x0, 0x20009, 0x8d28, 0xeb0, 0x401, 0x8000) (async) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="6a2f7ff43519eb7100"}, 0x55) (async, rerun: 32) write$auto(0x3, 0x0, 0xfdef) (async, rerun: 32) recvmmsg$auto(0x3, 0x0, 0x8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x3, 0x73) mmap$auto(0x0, 0x8, 0xdf, 0xeb0, 0x401, 0x4) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min='\x00\x00\x00\x00\b\x00'}, 0x3) (async) sendmmsg$auto(r0, 0x0, 0x200, 0x4) 3m30.156372127s ago: executing program 0 (id=403): r0 = socket(0x26, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502000080"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) 3m29.858076911s ago: executing program 0 (id=405): r0 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x30, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c090}, 0x20040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) tkill$auto(0x1, 0x7) (async) tkill$auto(0x1, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x40000000084, 0x6f, 0xfffffffffffffffe, 0x0) (async) getsockopt$auto(0x6, 0x40000000084, 0x6f, 0xfffffffffffffffe, 0x0) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$auto_MAC802154_HWSIM(&(0x7f0000000040), r1) 3m27.771840657s ago: executing program 0 (id=413): r0 = socket(0x10, 0x3, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x3, 0x6) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)=ANY=[@ANYBLOB="2c0000001200c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) r1 = gettid() pidfd_open$auto(r1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 3m27.524683598s ago: executing program 32 (id=413): r0 = socket(0x10, 0x3, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x3, 0x6) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)=ANY=[@ANYBLOB="2c0000001200c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) r1 = gettid() pidfd_open$auto(r1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 3m10.748204197s ago: executing program 3 (id=495): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unshare$auto(0x20000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x100000000000036, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0xa, 0x0, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rseq$auto(&(0x7f0000000180)={0x9, 0xf2, 0xf5d, 0x401, 0x8, 0x5, "e892d767125048d451d4f7340d8f58283314e77b94f521111fc46704cc6e25c6d4bbe7235dab99b4eafa3b7d03cb1dee275490108204ae2f4c4232f290b2449f08e01ec993191591527aadd74f0bab141e997a91658beebd83a042d6e2c7f3a2b750bf33fea7ee1d996b2abf833d5dfcdc4c85f17586"}, 0x1, 0x1bb, 0xec3c) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timer_delete$auto(0x10000) r1 = open(&(0x7f0000000000)='./file0\x00', 0xaf44529eb48ad963, 0x17c) ioctl$sock_SIOCGIFINDEX(r1, 0x801c581f, 0x0) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rename$auto(&(0x7f0000000080)='}[,&*}\x00', &(0x7f0000000000)='g\xb8\x11\x80\xe0\x1d') 3m8.976575538s ago: executing program 3 (id=506): syz_genetlink_get_family_id$auto_TIPCv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x4000054) sendmsg$auto_NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0xc4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x3, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0x101, 0x0, 0x1c) socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) pivot_root$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000040)='.\x00') close_range$auto(0x2, 0x8, 0x0) munmap$auto(0x20001000, 0x2000000c) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22242, 0x155) socket(0x2, 0x2, 0x5) socket(0x2, 0x3, 0x6) 3m7.706114798s ago: executing program 3 (id=513): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x83, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x9, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x80000008000) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x2, 0x200000, 0x100000001, 0xc, 0xf, 0x0, 0x8, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) mmap$auto(0xfffffffffffffc00, 0x98f, 0x7, 0x10, 0x0, 0x7) r0 = socket(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r1) sendmsg$auto_OVS_DP_CMD_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r2, 0x374fe8f90a251713, 0x70bd29, 0x25dfdbff, {}, [@OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x9}]}, 0x1c}}, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) bind$auto(r0, &(0x7f0000000080)={0x1, @sa_data_min="40a9777a661a037dc2995d13f791"}, 0xb) listen$auto(0x3, 0x81) 3m7.249980983s ago: executing program 3 (id=516): fanotify_init$auto(0x9, 0x80) fanotify_init$auto(0x5, 0x4) fanotify_init$auto(0x81, 0x7) fanotify_init$auto(0xc113, 0x0) ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0xa00, 0x4}, 0x3, &(0x7f0000000040)={0x3, 0x7}, &(0x7f0000000080)={0x8}, 0x1) io_cancel$auto(0x27f, &(0x7f00000000c0)={0x6, 0x5, 0x4236, 0x10, 0x7, 0x6, 0xfffffffffffffffa, 0x9, 0xc, 0x0, 0x7fffffff, 0xffffffffffffffff}, &(0x7f0000000100)={0xf5d, 0xa315, 0x3ff, 0xe}) bpf$auto(0x9, &(0x7f0000000140)=@bpf_attr_4={0x1000, r0, 0xc0c, r1}, 0x5) setfsuid$auto(0x4) io_uring_setup$auto(0xffff, &(0x7f0000000200)={0x2, 0x94e, 0x8, 0x7, 0xaa7d, 0x80, r0, [0x1, 0xfff, 0x7f], {0x2, 0x1, 0xe, 0x6, 0xe, 0x50, 0x22d7dcda, 0x5, 0x1}, {0x0, 0xfcd, 0x5, 0x3, 0x4, 0x6, 0x432, 0x7, 0x8001}}) io_uring_setup$auto(0x7ff, &(0x7f0000000280)={0x8001, 0xfffffffc, 0x0, 0x0, 0x4, 0xffffffff, r4, [0x8, 0x9, 0x1000], {0x0, 0x4, 0xa, 0xe8b2, 0x43, 0x1000, 0x10000, 0x8}, {0x9, 0x2579f3ca, 0x4, 0x7fff, 0xc, 0x1, 0x5, 0xf, 0xff}}) sendmsg$auto_IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x91823a317a0d9d5c}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x4}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20042841}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000440), r2) sendmsg$auto_TIPC_NL_NET_SET(r6, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x238, r7, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NAME_TABLE={0x38, 0x8, "d41e00aad5a0c58e0f2f0f28f7d456bd21bf5f0d53a36c8543640b52327c5a4dcf43e161f021321dda27c2cd230a0de5e39c37b1"}, @TIPC_NLA_PUBL={0xf9, 0x3, "824eabb07e38e5282bcce22d3224859a8fd8ce138d0ca9605a2ee71e6b9571451a0608833d49c5f1a10275dd51e4f85d0b3c0f8f55393c7e7dd1e3b9c4cf940b7468cfeea8b0b5ec9e9b154738e97562fcd1c06c7f7bc1a8d2bb3c4a2e82637f05d091b01ead6d5c64e74e11e798e527a7d99bb4dc0f93574d7085a15a9a119cfb4a46fe094c0fb6d3bea9e912a28570ec87e4dad3801309d304b0b658dc6fbec20bb7ffe42631e57437d4e2e884933ac9332ee6e17b24a7bc12d31441db082a26302b54aec720f862e8bf64e9616fd27a41fad4031acbd9bc347d3cf8233587dc500792c88306aacac6039ae7808f028bf5235162"}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_UNSPEC={0xec, 0x0, "93c99887ebad4e8ae10d30e437bb37a2359c0d3ce06ad57260b71f08794f00afadc56c697128345937a11bd988be493e718f3c105f7e81ebbe6dd515127f7d5155123a600d503ccd591c25557a61ce6c3c6b9f97099b2cd5d85b4d5da7ba57ba8bf20b925bff9b5e2ef19ecc952088697587914e435fc28575f81c5829e959c353fc62e5a8045d98e59d7d0117a6638cdf28aafd00c22e5c865a6043cf71f0c11eece594901fdf06ebede7b82ca64c40699e548e2472b70bcfe28b05dd9b05e930a22f627eea004fadcefbc48f639f515ca822ffff64d18cd31fa8899ff9e06f082f261101107d57"}]}, 0x238}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) setfsuid$auto(0x3) sendmsg$auto_TIPC_NL_MEDIA_GET(r3, &(0x7f0000001a80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000780)={0x1298, r7, 0x2, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x6e, 0x3, "8048007cae17a95f29a7811b298a308842adda0ea11dedca9c70edea8ae0a360e3dbdf9ff2f03a414b745f202044aa87eec7769f32436fe41c18ede9d77d31c6f9b7068e72e2414a2f899f80173bbc59c9454c5c333eda3a8e72f8c5da133400c4fb5349005187f495d2"}, @TIPC_NLA_MON={0x86, 0x9, "2e7c9f624d96231bcc5ccdd15ab2ed60c971cd9349b8326dc1828b6c615638f19a42361b691babac1dd219bd02fb81d69e59e1ca24ea0543df84e57f3ff5d63770d54e2896d52b5fe9975bb26e0eb5388f35bd314a0e10e66854e302a7250be38108011e5ec5389fff7752ffe43f5e8b59aab4c7758edc078ead44ff455809343316"}, @TIPC_NLA_LINK={0xfb, 0x4, "f055c2a5c13cb5d0b8ade2ef59ce01d684773fc11d0eeaba9efe84f99fe39f85b030394a9e2f34fb4e4547c18f301f78bfbfc2503c8805323daddcc4c713b422d4140de60bce933469fcf85ad7ee7a1119b9252ac94153a427b0d70f07c2e3f1f7f4f508f1407015906b6126e4f28818ac1daf0924599520bf31d0695c80ced849a70d435fed5ef4db4ba1f5dcaf648f5837fb65dbf6dfc23925bf2a3a040fedf9b48d1dc760f2961f8be002b089a41521a464680061be064c977539f30d44c897dce7ca2843536f1d0e53503f3d39b83f124158b3303d12beea960001bbfed10454397793c60411cf6fefba4a041278089dcbe02356f6"}, @TIPC_NLA_NODE={0x1004, 0x6, "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"}, @TIPC_NLA_UNSPEC={0x63, 0x0, "830d7816fd98fd8805ae18db12e3ff5c9dff68fd4dbdd7ce8e296d2c5b315f78dc2f60aaa1e900152ab3d4707b078f17a31e749a3246edb2e22773f8ce721b1a7839e6f2e2d6b3e4ead176a6530d805531666c5e29c638c9e175f78dbd9979"}, @TIPC_NLA_SOCK={0x25, 0x2, "3a50e4003fcb73a02fae64d7389863d20fb665273c149ca5a612abc0ad13d3eb39"}]}, 0x1298}, 0x1, 0x0, 0x0, 0x4081}, 0x8040) mprotect$auto(0x10000, 0xb770, 0xfffffffffffffffa) fanotify_init$auto(0x5, 0x6) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001b00), r3) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x20, r8, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4004004) close_range$auto(r4, r1, 0x8fe7) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x64, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_MESH_ID={0x1e, 0x18, "f6147ad095cc1a4871ac52dc1dc8dfb9c1ae37f238f6b4bd2f3e"}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x9}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x16, 0xbb, "24f0bf7c9cfe89e6fceff197fc464e404d2f"}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "ef27eb0d246f8bdc692832b8"}]}, 0x64}, 0x1, 0x0, 0x0, 0x8c0}, 0x40) fanotify_init$auto(0x785, 0x401) r9 = syz_genetlink_get_family_id$auto_HSR(&(0x7f0000001d80), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_LIST(r4, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x5c, r9, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0x4}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x4}, @HSR_A_IF1_AGE={0x8}, @HSR_A_IF2_AGE={0x8, 0x4, 0x7}, @HSR_A_IF1_AGE={0x8, 0x3, 0xce67}, @HSR_A_NODE_ADDR_B={0xa, 0x5, "8566d00c4439"}, @HSR_A_NODE_ADDR_B={0xa, 0x5, "ba91572e4488"}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x840) cachestat$auto(r2, &(0x7f0000001ec0)={0xfff, 0x9322}, &(0x7f0000001f00)={0x4, 0xd3, 0x34d, 0x3, 0xfb33}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r10, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x20, r8, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x67e}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) setfsuid$auto(0xe99) sendmsg$auto_IPVS_CMD_SET_CONFIG(r4, &(0x7f0000003300)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000032c0)={&(0x7f00000020c0)={0x11f4, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x4f, 0x2, "fb79f4f6c36f2c6c666af51282fa674ce4e7edafdb67cd3e017263f166b6e3ad3b6df1fe235fb265f284d9df85a116ec00d2c116d69a085a7f79c40551c5737b35c063ee4e9bb0fe83bf84"}, @IPVS_CMD_ATTR_SERVICE={0xd2, 0x1, "369d4a48084735e703e81f28f457a04b4db80b9385eb919157a45481be872786d5f3a5a655bfdfcb72e8609ac8e6d14adb04249805bf9d5ef96f942c180d012d9b2ce2989b98da256cc2f345a4f150d28869bbc121a75ef090419923c101f462b244a0ddd8c7cb638849d387d4e331cb014ad28df98ff20a3471afaa93d3dacac6fda19114cc2e1e671f0ed1e9288d7ea29a0a6e70f49bc06da315b1bbebffc138625cf7ba705674cada0eb89206438fdb9f695654e9f58345da6cbff60172869b8b424803feb6cf964848158935"}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_SERVICE={0x1004, 0x1, "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"}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0xa0, 0x2, "44083b00c03867df7f9f9f0830a0da7e5940be21ce1f80de2c5f6c4f6bc7962d289b8089e8aa0272411e37b14d0ae6d35605914d5bedb32ddded8b0e3ebe92a1ee7d269c29f3a2c5911914b20f6733d006c3e0b3ef32a959a9c2ead194c507f8a5cd7ca4f6a33537c4bade5feec930b06e473c526d3a26c1511a0d8d3c8333d4ef7affb07e16758e910c4dffc0a64e1b130ba1e15ca042343bd2cb11"}]}, 0x11f4}, 0x1, 0x0, 0x0, 0x40}, 0x1) 3m6.994531015s ago: executing program 3 (id=517): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x1507, 0x400005, 0xdf, 0x16, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 3m6.803793615s ago: executing program 3 (id=519): r0 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto(0x2, 0xc, 0x0) madvise$auto(0xff03000000000000, 0x2000000080000001, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x3) socket(0x1, 0x2, 0x0) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x6, 0x40000000029, 0x45, 0xfffffffffffffffe, 0x0) (async) getsockopt$auto(0x6, 0x40000000029, 0x45, 0xfffffffffffffffe, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7020fddbdf251400000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7020fddbdf251400000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) socket(0x1a, 0x2, 0x9) (async) r4 = socket(0x1a, 0x2, 0x9) setsockopt$auto(r4, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\xfe\xb5\x00\x00\x00\x00\x00\x00\x00', 0x910) (async) setsockopt$auto(r4, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\xfe\xb5\x00\x00\x00\x00\x00\x00\x00', 0x910) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40080) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) write$auto(0xc8, 0x0, 0x40f6) (async) write$auto(0xc8, 0x0, 0x40f6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) io_uring_setup$auto(0x6, 0x0) sendto$auto(0x3, 0x0, 0x8, 0xe, &(0x7f00000000c0)={0xfffe, @sa_data_min="943c50f219fbb180399ed20ac9f4"}, 0x1c) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) 2m51.516030386s ago: executing program 33 (id=519): r0 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto(0x2, 0xc, 0x0) madvise$auto(0xff03000000000000, 0x2000000080000001, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x3) socket(0x1, 0x2, 0x0) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x6, 0x40000000029, 0x45, 0xfffffffffffffffe, 0x0) (async) getsockopt$auto(0x6, 0x40000000029, 0x45, 0xfffffffffffffffe, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7020fddbdf251400000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7020fddbdf251400000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) socket(0x1a, 0x2, 0x9) (async) r4 = socket(0x1a, 0x2, 0x9) setsockopt$auto(r4, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\xfe\xb5\x00\x00\x00\x00\x00\x00\x00', 0x910) (async) setsockopt$auto(r4, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\xfe\xb5\x00\x00\x00\x00\x00\x00\x00', 0x910) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40080) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) write$auto(0xc8, 0x0, 0x40f6) (async) write$auto(0xc8, 0x0, 0x40f6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) io_uring_setup$auto(0x6, 0x0) sendto$auto(0x3, 0x0, 0x8, 0xe, &(0x7f00000000c0)={0xfffe, @sa_data_min="943c50f219fbb180399ed20ac9f4"}, 0x1c) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) 2m5.750414658s ago: executing program 4 (id=776): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) adjtimex$auto(0x0) (rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) adjtimex$auto(0x0) (async) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x20040000) (async) socket(0x2, 0x1, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) ioctl$auto(0x1, 0x8941, 0x8) (async, rerun: 32) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x20040000) (async, rerun: 32) socket(0x2, 0x1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) brk$auto(0x7) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETFAMILY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="044e84"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20008000) (async) syz_genetlink_get_family_id$auto_SMC_GEN_NETLINK(&(0x7f0000000180), r3) (async) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000200), r0) sendmsg$auto_ILA_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) (async) ioctl$auto(0x1, 0x8941, 0x8) 2m3.311304212s ago: executing program 4 (id=783): socketpair$auto(0x1000, 0xe, 0x0, &(0x7f0000000000)=0x9) socketpair$auto(0x25c, 0xd, 0x9, &(0x7f0000000040)=0x2) (async) socketpair$auto(0x72, 0x3, 0x1, &(0x7f0000000080)=0x7c) io_uring_setup$auto(0xb0d, &(0x7f00000000c0)={0x87, 0x3dca, 0x100, 0x8, 0x0, 0x0, 0xffffffffffffffff, [0x9, 0x0, 0x1], {0xa, 0x5, 0x80000000, 0x9, 0x5, 0x7, 0x6, 0x80000000, 0x7}, {0x1, 0x2, 0xfff, 0x0, 0x8, 0xab5, 0xffffff3b, 0x4, 0x100}}) sendmmsg$auto(r0, &(0x7f0000000240)={{&(0x7f0000000140)=[0xace, 0x3, 0xfb], 0x4, &(0x7f00000001c0)={&(0x7f0000000180)=[0x100], 0x8}, 0xff, &(0x7f0000000200)=[0x400, 0x1, 0xfffffffffffffffd, 0x5], 0x0, 0x6}, 0x2}, 0x0, 0xcb01) (async) recvmsg$auto(r0, &(0x7f0000000380)={&(0x7f0000000280)=[0x2, 0x6, 0x4], 0x9, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0xfffffffffffffffe, 0x4, 0x800, 0x9, 0xfffffffffffffff2], 0x3}, 0xffffffff, &(0x7f0000000340)=[0x4, 0x7fffffff, 0x5], 0xfffffffffffffffd, 0x7}, 0x7fff) (async) socketpair$auto(0x1, 0xe, 0x80000000, &(0x7f00000003c0)=0x1) rt_sigaction$auto(0x10, &(0x7f0000000500)={&(0x7f0000000440)=&(0x7f0000000400)=0x7, 0x7, &(0x7f00000004c0)=&(0x7f0000000480)=0x3, {0x3}}, &(0x7f0000000640)={&(0x7f0000000580)=&(0x7f0000000540)=0xffffffff, 0x1, &(0x7f0000000600)=&(0x7f00000005c0)=0x6eb0}, 0x9) (async) mknod$auto(&(0x7f0000000680)=',@:/\x00', 0x1, 0xffffff4b) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'syz_tun\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NETDEV_A_QSTATS_SCOPE={0xc}, @NETDEV_A_QSTATS_IFINDEX={0x8, 0x1, r1}, @NETDEV_A_QSTATS_SCOPE={0xc, 0x4, 0x100000001}, @NETDEV_A_QSTATS_SCOPE={0xc, 0x4, 0xfec6}, @NETDEV_A_QSTATS_SCOPE={0xc, 0x4, 0xfff}, @NETDEV_A_QSTATS_SCOPE={0xc, 0x4, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004091}, 0x0) (async) unshare$auto(0x7) (async) socketpair$auto(0x1, 0x8, 0x4, &(0x7f0000000840)=0xa) r2 = open(&(0x7f0000000880)='./file0\x00', 0x101000, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f00000008c0), r3) (async) bind$auto(r2, &(0x7f0000000900)={0x81, @sa_data_min="599f08fa7569ac7d66020f0df099"}, 0x233e) (async) mlock$auto(0x8, 0x7e) (async) rt_sigaction$auto(0xdf, &(0x7f0000000a40)={&(0x7f0000000980)=&(0x7f0000000940)=0x401, 0x8000000000000000, &(0x7f0000000a00)=&(0x7f00000009c0)=0xfffffffffffff854, {0x2}}, &(0x7f0000000b80)={&(0x7f0000000ac0)=&(0x7f0000000a80)=0x7ff, 0x1, &(0x7f0000000b40)=&(0x7f0000000b00)=0x6, {0x3}}, 0x1) socketpair$auto(0x2, 0x0, 0x6, &(0x7f0000000bc0)=0xf1d4) r4 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000c40), r2) sendmsg$auto_VDPA_CMD_DEV_DEL(r3, &(0x7f0000000e00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10c, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@VDPA_ATTR_MGMTDEV_DEV_NAME={0x6, 0x2, '{#'}, @VDPA_ATTR_DEV_NET_CFG_MACADDR={0xa9, 0xa, "3e529ac1c957db6326ff05137b85b7a63c2ec3df70563b22d72dd5c59c854b176789e8f0d32a3051a1555b835d19b2cf3b1d81a495272a8ce4f50669b0164b4f9e969acb515d5c302138e8cffac7634523d15e0b41453326b9b257fddb60fd38365e5f7a7a7ccde3c31bd40ee5afdcfc57a447d086bbee9e7e4fe45f8e6c13191a511abb166bca93dbeedfb7d3de9d572e5dabaf54553f1e052a627f4ecad3e13c96e2a69a"}, @VDPA_ATTR_MGMTDEV_DEV_NAME={0x6, 0x2, '{}'}, @VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0x4}, @VDPA_ATTR_DEV_NET_CFG_MACADDR={0x23, 0xa, "8c021779795c7658b3cf62f7a2a7e6eced6f29f9698a5cd489169b5cce5724"}, @VDPA_ATTR_MGMTDEV_DEV_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, 0x10c}}, 0x80) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000e80), r2) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r3, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x9c, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_COORDINATOR={0x86, 0x1e, "4f01e0e91102deae3d56ae26edaaff1fa79b25a4e607a9a34794bafa2245a985e6534f3d7566817b7d3409df2844d0cc2b4fe5682531b5a12c9b9b5efc33f6d5f2b2a228ae56dd87130a31c03a5ca2f8422cbe721038ad8335bcd769632aac8fbf6a41dce434578aa5b6274799f84af7f73758201901d3a62015385319544d62e5db"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x20000014) (async) name_to_handle_at$auto(r0, &(0x7f0000001000)='(\x00', &(0x7f0000001040)={0xc2, 0x1ff, "a8ccb2bcbdd3d33fb46e25c45e200ff670c7cde35d6d5d7caae59baec87dbe53be97d44a9708bcd9c3ea07fbf8f9856982ebb44ce9dd5f60d9f342e5d723b71e720f78e4c70125f6b168c24fd2f6c4e756d866ed2c50f8cf0660e8bb7a57ad858de1bbe1f4e01a8cb9415736bbac9f424799e25d0fc945dfeae8d78115199451caa87b82488464dfea0dfaef2f56be61548ccf026138e3474a5d5fdaa27552dea77fdc6f8d8edaed2cde15c3d0539a3bc592783c268780ae794a265a359239406479"}, &(0x7f0000001140)=[0x9, 0xae, 0x9], 0x8001) (async) unshare$auto(0x1) (async) io_cancel$auto(0x35, &(0x7f0000001180)={0x1, 0x4, 0xff, 0x8ece, 0x7ff, 0x5c1, 0x3, 0x9, 0x7fffffff, 0x0, 0x9, r2}, &(0x7f00000011c0)={0x4, 0x8, 0x0, 0x1}) (async) mprotect$auto(0xfffffffffffffffe, 0x2, 0x4) (async) pipe$auto(&(0x7f0000001200)=0x9) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x6, 0x6, ':\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4821}, 0x40040) 2m2.903785828s ago: executing program 4 (id=787): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) r1 = socket(0x3a, 0x3857380bb649e741, 0x3a) setsockopt$auto(r1, 0x29, 0x4b, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x2) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x3) setsockopt$auto(0x4, 0x88, 0x1, &(0x7f0000000000)='!/*:(*\'\x00', 0xe) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) fsetxattr$auto(r1, &(0x7f0000000080)='\xda\xcd\xfb\x98\x8b\xe6\x82\x04\x04\xa5\x16\x18\x88\xe1\xf5\x86\x02?\xac\xd9\x00\aTy\x93\xcf\xa5\xf3\xdbQ\x10i\xb9\xad\xbc\xfe\xb7\xe2\xff90x62f4, @target_fd=0x4, 0x8, 0x3ed}, 0x9) close_range$auto(r1, 0xfffffffffffff000, 0x1) memfd_create$auto(0x0, 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0xff, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001e80), r2) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000804) fcntl$auto(0xff80000000000000, 0x409, 0x3f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4000a, 0xdb, 0x9b72, 0x7, 0x28000) socket(0xa, 0x3, 0x3a) fchown$auto(0x2, 0xffffffff, 0xa1a9) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="00000000f5ffffffffffffff00"}, 0x55) 1.141387397s ago: executing program 5 (id=1269): get_mempolicy$auto(0xfffffffffffffffe, 0xfffffffffffffffd, 0x2, 0x0, 0x1) get_mempolicy$auto(0x0, &(0x7f0000000140)=0x3, 0x8, 0xfffffffffffff654, 0x7) (async) get_mempolicy$auto(0x0, &(0x7f0000000140)=0x3, 0x8, 0xfffffffffffff654, 0x7) socket(0x28, 0x5, 0x0) settimeofday$auto(&(0x7f0000000180)={0x1ed5d7403, 0x1}, 0x0) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) write$auto(0x3, 0x0, 0x10001) (async) write$auto(0x3, 0x0, 0x10001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x4000004) move_pages$auto(0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8000400000000000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') (async) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') 1.113210602s ago: executing program 1 (id=1270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0xa, 0x0) bpf$auto(0x2, &(0x7f00000001c0)=@link_create={@prog_fd=r2, @target_fd=r1, 0x401, 0x2, @kprobe_multi={0x6, 0xfffffffc, 0x9a, 0x0, 0x1}}, 0xc) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) memfd_secret$auto(0x0) socket(0xa, 0x2, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0xffff, @old_map_fd=0x3ff}, 0xa3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) memfd_create$auto(0x0, 0xe) 911.801549ms ago: executing program 6 (id=1271): wait4$auto(0x1, 0xfffffffffffffffc, 0x60000000, 0x0) socket(0xa, 0x1, 0x84) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x1c) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) 803.169894ms ago: executing program 5 (id=1272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="34e4ffff", @ANYRES16=r1, @ANYBLOB="010026bd7020f8dbdf2501000000", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB="08000900a3"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) 691.15834ms ago: executing program 5 (id=1273): socket(0x10, 0x2, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) r0 = socket(0x2, 0x800, 0x0) bind$auto(r0, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) kexec_load$auto(0x40, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\r\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="ec9f28bd7000fedbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000008}, 0x41001) recvfrom$auto(r0, 0x0, 0x0, 0x5, &(0x7f00000005c0)={0x9, @sa_data_min="46d7e69a10201519d3e86178cd1c"}, &(0x7f0000000600)=0x90) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x2a, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1, 0x1, 0x1) mlockall$auto(0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x2cbd5d) r3 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf250403000000007100"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) writev$auto(0x5, &(0x7f0000000540)={&(0x7f0000000500)=[0x3d88], 0x1}, 0x7) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x48000) pipe2$auto(0x0, 0x80) 230.408µs ago: executing program 6 (id=1274): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000002c0), r1) mmap$auto(0x3, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000280), r3) sendmsg$auto_HWSIM_CMD_GET_RADIO(r3, &(0x7f0000000340)={0x0, 0x59, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0xb01, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x10000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYRES8=r3], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) read$auto(0x3, 0x0, 0x7) sendmsg$auto_GTP_CMD_DELPDP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r2, 0x201, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) sendmsg$auto_GTP_CMD_ECHOREQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100029bf7000fedbdf250300000014000b00040000000e0000000100000006000000"], 0x28}, 0x1, 0x0, 0x0, 0x20008011}, 0x4004894) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_SMC_GEN_NETLINK(&(0x7f0000000000), r5) pwritev2$auto(0xf29, &(0x7f0000000180)={&(0x7f0000000140)=[0x2, 0x7, 0x8001]}, 0x6000, 0x9, 0xfffffffffffffffc, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r6 = socket(0x10, 0x2, 0x14) sendmsg$auto_IEEE802154_LIST_PHY(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0xffffffffffffffba, 0x0, 0x4, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0xc8, 0x0, 0xe80) 0s ago: executing program 1 (id=1275): madvise$auto(0x5, 0x3ac7, 0x19) madvise$auto(0x0, 0x80000001, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) r0 = socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x18, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'}) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r1, @ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="f5168382168b5051e1920b696f93ded241c44e0173e4d1"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20040812) getsockopt$auto(0x6, 0x84, 0x7f, 0x0, &(0x7f0000000000)=0x9a) madvise$auto(0x2, 0x0, 0x2) socket(0xa, 0x2, 0x88) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x10, 0x3680, 0x5, 0x80000011, 0xfffffffffffe0002, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): t 'hsr' already present! [ 63.541324][ T5847] Cannot create hsr debugfs directory [ 63.604216][ T5150] Bluetooth: hci0: command tx timeout [ 63.604263][ T5850] Bluetooth: hci1: command tx timeout [ 63.650974][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.665686][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.685341][ T5850] Bluetooth: hci3: command tx timeout [ 63.691283][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.698296][ T5850] Bluetooth: hci2: command tx timeout [ 63.719507][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.752252][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.765864][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.778086][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.804990][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.863369][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.879693][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.905689][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.915089][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.961340][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.971535][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.001338][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.011158][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.057576][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.086901][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.127006][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.148915][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.177725][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.185043][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.196639][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.203757][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.230255][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.237401][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.246414][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.253491][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.276646][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.294590][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.350022][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.357136][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.368647][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.375862][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.394492][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.477916][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.502800][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.530828][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.557366][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.564528][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.577066][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.584282][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.790152][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.813174][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.893298][ T5834] veth0_vlan: entered promiscuous mode [ 64.907898][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.917802][ T5836] veth0_vlan: entered promiscuous mode [ 64.935370][ T5836] veth1_vlan: entered promiscuous mode [ 64.963003][ T5834] veth1_vlan: entered promiscuous mode [ 65.021656][ T5835] veth0_vlan: entered promiscuous mode [ 65.032568][ T5836] veth0_macvtap: entered promiscuous mode [ 65.051995][ T5836] veth1_macvtap: entered promiscuous mode [ 65.065665][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.077069][ T5835] veth1_vlan: entered promiscuous mode [ 65.092473][ T5834] veth0_macvtap: entered promiscuous mode [ 65.101825][ T5834] veth1_macvtap: entered promiscuous mode [ 65.119610][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.159043][ T5835] veth0_macvtap: entered promiscuous mode [ 65.181847][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.195011][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.205380][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.214863][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.223582][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.235354][ T5835] veth1_macvtap: entered promiscuous mode [ 65.255341][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.266277][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.278331][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.289318][ T5847] veth0_vlan: entered promiscuous mode [ 65.308135][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.319818][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.331059][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.342477][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.351531][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.361020][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.372502][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.406169][ T5847] veth1_vlan: entered promiscuous mode [ 65.447476][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.458199][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.468508][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.479552][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.491065][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.501486][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.512354][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.522316][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.535410][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.546334][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.593091][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.601510][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.618195][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.629422][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.639558][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.649393][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.684018][ T5850] Bluetooth: hci1: command tx timeout [ 65.684772][ T5150] Bluetooth: hci0: command tx timeout [ 65.706985][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.710700][ T5847] veth0_macvtap: entered promiscuous mode [ 65.723943][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.743318][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.752242][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.756980][ T5847] veth1_macvtap: entered promiscuous mode [ 65.766852][ T5150] Bluetooth: hci2: command tx timeout [ 65.772593][ T5150] Bluetooth: hci3: command tx timeout [ 65.860048][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.860273][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.869835][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.888152][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.899772][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.908910][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.922261][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.933933][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.944493][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.955664][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.982580][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.997091][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.007517][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.018061][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.027978][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.038562][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.050222][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.091730][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.102111][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.115733][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.124664][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.162127][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.183078][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.265524][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.283357][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.465989][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.493499][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.557681][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.572476][ T5903] raw_sendmsg: syz.1.2 forgot to set AF_INET. Fix it! [ 66.581800][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.335812][ T5917] netlink: 'syz.1.7': attribute type 11 has an invalid length. [ 67.362733][ T5917] netlink: 'syz.1.7': attribute type 11 has an invalid length. [ 67.755994][ T5922] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.770030][ T5150] Bluetooth: hci1: command tx timeout [ 67.770040][ T5850] Bluetooth: hci0: command tx timeout [ 67.863904][ T5150] Bluetooth: hci3: command tx timeout [ 67.867252][ T5850] Bluetooth: hci2: command tx timeout [ 68.381560][ T29] audit: type=1326 audit(1730675287.167:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.3.8" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e05b7e719 code=0x0 [ 68.871628][ T5948] ======================================================= [ 68.871628][ T5948] WARNING: The mand mount option has been deprecated and [ 68.871628][ T5948] and is ignored by this kernel. Remove the mand [ 68.871628][ T5948] option from the mount to silence this warning. [ 68.871628][ T5948] ======================================================= [ 69.863714][ T5850] Bluetooth: hci0: command tx timeout [ 69.867024][ T5150] Bluetooth: hci1: command tx timeout [ 69.925312][ T5150] Bluetooth: hci3: command tx timeout [ 69.930865][ T5150] Bluetooth: hci2: command tx timeout [ 70.261371][ T5969] HfR: entered promiscuous mode [ 70.307621][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21'. [ 70.344197][ T5969] HfR: left promiscuous mode [ 70.793973][ T5994] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.607873][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.616815][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.380082][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 73.453394][ T6035] macvtap0: entered promiscuous mode [ 73.477449][ T6035] macvtap0: entered allmulticast mode [ 73.482886][ T6035] veth0_macvtap: entered allmulticast mode [ 73.885705][ T6021] openvswitch: netlink: Key 4 has unexpected len 13 expected 12 [ 73.935917][ T6021] Zero length message leads to an empty skb [ 75.268712][ T6051] kexec: Could not allocate control_code_buffer [ 75.693928][ T6060] mmap: syz.0.45 (6060) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.698323][ T6121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.63'. [ 80.908731][ T6125] process 'syz.3.64' launched ':,' with NULL argv: empty string added [ 81.000119][ T29] audit: type=1804 audit(1730675299.787:3): pid=6130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.58" name="#)-\&[}" dev="mqueue" ino=7682 res=1 errno=0 [ 81.021120][ T6130] kernel read not supported for file /#)-\&[} (pid: 6130 comm: syz.1.58) [ 81.070063][ T29] audit: type=1800 audit(1730675299.857:4): pid=6130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.58" name="#)-\&[}" dev="mqueue" ino=7682 res=0 errno=0 [ 81.861912][ T969] cfg80211: failed to load regulatory.db [ 81.924756][ T6150] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[6150] [ 82.103412][ T29] audit: type=1326 audit(1730675300.887:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.3.71" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e05b7e719 code=0x0 [ 82.547499][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.73'. [ 83.046663][ T6165] kexec: Could not allocate control_code_buffer [ 84.977891][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.88'. [ 86.485957][ T6257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.98'. [ 88.165361][ T6282] netlink: 'syz.3.105': attribute type 11 has an invalid length. [ 89.273954][ T6302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.109'. [ 90.738264][ T6333] svc: failed to register nfsdv3 RPC service (errno 111). [ 90.754079][ T6333] svc: failed to register nfsaclv3 RPC service (errno 512). [ 91.295949][ T6332] svc: failed to register nfsdv3 RPC service (errno 111). [ 91.324519][ T6332] svc: failed to register nfsaclv3 RPC service (errno 512). [ 91.531392][ T6321] Process accounting resumed [ 96.226425][ T6467] netlink: 338 bytes leftover after parsing attributes in process `syz.2.149'. [ 96.698613][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 97.590164][ T6482] kexec: Could not allocate control_code_buffer [ 98.617060][ T6528] netlink: 'syz.1.166': attribute type 11 has an invalid length. [ 98.771927][ T6528] netlink: 'syz.1.166': attribute type 11 has an invalid length. [ 99.047270][ T6539] HfR: entered promiscuous mode [ 100.102740][ T6566] netlink: 334 bytes leftover after parsing attributes in process `syz.0.174'. [ 101.380848][ T6586] netlink: 'syz.2.178': attribute type 11 has an invalid length. [ 101.430683][ T6586] netlink: 'syz.2.178': attribute type 11 has an invalid length. [ 102.077268][ T6598] sctp: [Deprecated]: syz.2.180 (pid 6598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.077268][ T6598] Use struct sctp_sack_info instead [ 102.770446][ T6621] netlink: zone id is out of range [ 102.783636][ T6621] netlink: zone id is out of range [ 102.788785][ T6621] netlink: zone id is out of range [ 102.825673][ T6621] netlink: zone id is out of range [ 102.879949][ T6621] netlink: zone id is out of range [ 102.885107][ T6621] netlink: zone id is out of range [ 102.948015][ T6621] netlink: zone id is out of range [ 102.991031][ T6621] netlink: zone id is out of range [ 108.819882][ T6730] netlink: 342 bytes leftover after parsing attributes in process `syz.1.214'. [ 109.538675][ T6726] Process accounting resumed [ 115.816045][ T3018] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.918261][ T6897] netlink: 'syz.1.260': attribute type 12 has an invalid length. [ 115.926417][ T6897] netlink: 322 bytes leftover after parsing attributes in process `syz.1.260'. [ 116.097567][ T3018] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.305038][ T3018] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.457155][ T3018] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.736065][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.750444][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.760288][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.778043][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.789829][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 116.812147][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.022170][ T3018] bridge_slave_1: left allmulticast mode [ 117.033529][ T3018] bridge_slave_1: left promiscuous mode [ 117.040449][ T3018] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.084479][ T3018] bridge_slave_0: left allmulticast mode [ 117.100381][ T3018] bridge_slave_0: left promiscuous mode [ 117.106710][ T3018] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.963283][ T3018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.986088][ T3018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.007853][ T3018] bond0 (unregistering): Released all slaves [ 118.776867][ T6915] chnl_net:caif_netlink_parms(): no params data found [ 118.880609][ T5150] Bluetooth: hci2: command tx timeout [ 119.065482][ T3018] hsr_slave_0: left promiscuous mode [ 119.078480][ T3018] hsr_slave_1: left promiscuous mode [ 119.099419][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.109188][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.134113][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.151796][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.184325][ T3018] veth1_macvtap: left promiscuous mode [ 119.205661][ T3018] veth0_macvtap: left promiscuous mode [ 119.217997][ T3018] veth1_vlan: left promiscuous mode [ 119.232862][ T3018] veth0_vlan: left promiscuous mode [ 120.094505][ T3018] team0 (unregistering): Port device team_slave_1 removed [ 120.143890][ T3018] team0 (unregistering): Port device team_slave_0 removed [ 120.572667][ T6915] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.579867][ T6915] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.587576][ T6915] bridge_slave_0: entered allmulticast mode [ 120.602338][ T6915] bridge_slave_0: entered promiscuous mode [ 120.652322][ T6915] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.659949][ T6915] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.675407][ T6915] bridge_slave_1: entered allmulticast mode [ 120.686468][ T6915] bridge_slave_1: entered promiscuous mode [ 120.865729][ T6915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.922498][ T6915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.963716][ T5150] Bluetooth: hci2: command tx timeout [ 121.396135][ T6915] team0: Port device team_slave_0 added [ 121.519424][ T6915] team0: Port device team_slave_1 added [ 121.526977][ T7043] ptrace attach of "./syz-executor exec"[5835] was attempted by ""[7043] [ 121.693121][ T6915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.705433][ T6915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.732570][ T6915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.769022][ T6915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.786082][ T6915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.872202][ T6915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.047315][ T6915] hsr_slave_0: entered promiscuous mode [ 122.071550][ T6915] hsr_slave_1: entered promiscuous mode [ 122.090305][ T6915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.115107][ T6915] Cannot create hsr debugfs directory [ 123.039348][ T5150] Bluetooth: hci2: command tx timeout [ 123.153892][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.299'. [ 123.196407][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'. [ 123.409951][ T6915] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.432949][ T6915] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.463799][ T6915] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.500379][ T7108] FAULT_INJECTION: forcing a failure. [ 123.500379][ T7108] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 123.519664][ T6915] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.540297][ T7108] CPU: 0 UID: 0 PID: 7108 Comm: syz.1.301 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 123.550942][ T7108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.561035][ T7108] Call Trace: [ 123.564337][ T7108] [ 123.567291][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 123.572016][ T7108] should_fail_ex+0x497/0x5b0 [ 123.576728][ T7108] _copy_from_user+0x2e/0xd0 [ 123.581358][ T7108] copy_msghdr_from_user+0x99/0x160 [ 123.586586][ T7108] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 123.592434][ T7108] ? __pfx___lock_acquire+0x10/0x10 [ 123.597680][ T7108] ___sys_sendmsg+0xff/0x1e0 [ 123.602308][ T7108] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.607555][ T7108] ? lock_acquire+0x2f/0xb0 [ 123.612098][ T7108] ? __fget_files+0x40/0x3f0 [ 123.616733][ T7108] ? fdget+0x176/0x210 [ 123.620836][ T7108] __sys_sendmsg+0x117/0x1f0 [ 123.625460][ T7108] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.630605][ T7108] ? __fget_files+0x244/0x3f0 [ 123.635330][ T7108] do_syscall_64+0xcd/0x250 [ 123.639867][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.645810][ T7108] RIP: 0033:0x7f21abd7e719 [ 123.650270][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.669923][ T7108] RSP: 002b:00007f21acc17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.678372][ T7108] RAX: ffffffffffffffda RBX: 00007f21abf35f80 RCX: 00007f21abd7e719 [ 123.686371][ T7108] RDX: 0000000000000080 RSI: 0000000020000140 RDI: 0000000000000003 [ 123.694371][ T7108] RBP: 00007f21acc17090 R08: 0000000000000000 R09: 0000000000000000 [ 123.702371][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.710364][ T7108] R13: 0000000000000000 R14: 00007f21abf35f80 R15: 00007ffcb28f41a8 [ 123.718381][ T7108] [ 123.906475][ T6915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.992795][ T6915] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.148166][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.155640][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.187283][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.194518][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.732693][ T6915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.864654][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 124.894504][ T6915] veth0_vlan: entered promiscuous mode [ 124.919336][ T7161] FAULT_INJECTION: forcing a failure. [ 124.919336][ T7161] name failslab, interval 1, probability 0, space 0, times 1 [ 124.932257][ T7161] CPU: 1 UID: 0 PID: 7161 Comm: syz.2.312 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 124.937281][ T6915] veth1_vlan: entered promiscuous mode [ 124.942852][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 124.942867][ T7161] Call Trace: [ 124.942874][ T7161] [ 124.942883][ T7161] dump_stack_lvl+0x16c/0x1f0 [ 124.942913][ T7161] should_fail_ex+0x497/0x5b0 [ 124.942937][ T7161] ? fs_reclaim_acquire+0xae/0x150 [ 124.966276][ T7157] HfR: entered promiscuous mode [ 124.969388][ T7161] should_failslab+0xc2/0x120 [ 124.969428][ T7161] kmem_cache_alloc_node_noprof+0x71/0x310 [ 124.969460][ T7161] ? __alloc_skb+0x2b3/0x380 [ 124.999182][ T7161] __alloc_skb+0x2b3/0x380 [ 125.003626][ T7161] ? __pfx___alloc_skb+0x10/0x10 [ 125.008592][ T7161] ? lock_acquire+0x2f/0xb0 [ 125.013140][ T7161] netlink_alloc_large_skb+0x69/0x130 [ 125.018547][ T7161] netlink_sendmsg+0x689/0xd70 [ 125.023354][ T7161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.028677][ T7161] ____sys_sendmsg+0x9ae/0xb40 [ 125.033483][ T7161] ? copy_msghdr_from_user+0x10b/0x160 [ 125.038973][ T7161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.044292][ T7161] ? __pfx___lock_acquire+0x10/0x10 [ 125.049509][ T7161] ___sys_sendmsg+0x135/0x1e0 [ 125.054193][ T7161] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.059418][ T7161] ? lock_acquire+0x2f/0xb0 [ 125.063936][ T7161] ? __fget_files+0x40/0x3f0 [ 125.068541][ T7161] ? fdget+0x176/0x210 [ 125.072613][ T7161] __sys_sendmsg+0x117/0x1f0 [ 125.077210][ T7161] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.082324][ T7161] ? __fget_files+0x244/0x3f0 [ 125.087026][ T7161] do_syscall_64+0xcd/0x250 [ 125.091538][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.097443][ T7161] RIP: 0033:0x7f4dc4b7e719 [ 125.101856][ T7161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.121461][ T7161] RSP: 002b:00007f4dc5a05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.129878][ T7161] RAX: ffffffffffffffda RBX: 00007f4dc4d35f80 RCX: 00007f4dc4b7e719 [ 125.137847][ T7161] RDX: 0000000000000080 RSI: 0000000020000140 RDI: 0000000000000003 [ 125.145836][ T7161] RBP: 00007f4dc5a05090 R08: 0000000000000000 R09: 0000000000000000 [ 125.153825][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.161804][ T7161] R13: 0000000000000000 R14: 00007f4dc4d35f80 R15: 00007ffd60fcab78 [ 125.169794][ T7161] [ 125.175325][ T6915] veth0_macvtap: entered promiscuous mode [ 125.212132][ T6915] veth1_macvtap: entered promiscuous mode [ 125.255914][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.268650][ T5150] Bluetooth: hci2: command tx timeout [ 125.288752][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.298835][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.309493][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.358228][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.418684][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.464001][ T6915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.551538][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.658419][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.668272][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.728594][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.779183][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.808469][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.830005][ T6915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.873733][ T6915] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.918385][ T6915] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.948400][ T6915] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.957146][ T6915] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.223509][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.266850][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.340165][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.388522][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.607309][ T7218] netlink: 'syz.0.259': attribute type 11 has an invalid length. [ 126.636925][ T7218] netlink: 'syz.0.259': attribute type 11 has an invalid length. [ 126.986956][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 127.039273][ T7234] HfR: entered promiscuous mode [ 128.283437][ T7275] GUP no longer grows the stack in syz.0.328 (7275): 14000-41000 (4000) [ 128.341949][ T7275] CPU: 1 UID: 0 PID: 7275 Comm: syz.0.328 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 128.352608][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.362705][ T7275] Call Trace: [ 128.366014][ T7275] [ 128.368975][ T7275] dump_stack_lvl+0x16c/0x1f0 [ 128.373689][ T7275] gup_vma_lookup+0x1d2/0x220 [ 128.378414][ T7275] __get_user_pages+0x236/0x3b50 [ 128.383407][ T7275] ? __pfx___get_user_pages+0x10/0x10 [ 128.388841][ T7275] __gup_longterm_locked+0x22e/0x1b30 [ 128.394274][ T7275] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 128.399957][ T7275] ? __pfx___gup_longterm_locked+0x10/0x10 [ 128.405809][ T7275] ? rwsem_read_trylock+0x12d/0x250 [ 128.411023][ T7275] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 128.416592][ T7275] ? process_vm_rw_core.constprop.0+0x40d/0x9f0 [ 128.422872][ T7275] pin_user_pages_remote+0xee/0x150 [ 128.428091][ T7275] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 128.433908][ T7275] ? down_read+0xc9/0x330 [ 128.438259][ T7275] process_vm_rw_core.constprop.0+0x439/0x9f0 [ 128.444359][ T7275] ? futex_wait_queue+0x101/0x1f0 [ 128.449418][ T7275] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 128.456039][ T7275] process_vm_rw+0x301/0x360 [ 128.460653][ T7275] ? __pfx_process_vm_rw+0x10/0x10 [ 128.465870][ T7275] ? up_write+0x1b2/0x520 [ 128.470220][ T7275] ? __pfx___do_sys_mremap+0x10/0x10 [ 128.475525][ T7275] ? xfd_validate_state+0x5d/0x180 [ 128.480661][ T7275] ? rcu_is_watching+0x12/0xc0 [ 128.485434][ T7275] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 128.491118][ T7275] ? do_syscall_64+0x91/0x250 [ 128.495809][ T7275] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.501025][ T7275] do_syscall_64+0xcd/0x250 [ 128.505545][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.511458][ T7275] RIP: 0033:0x7fe71a57e719 [ 128.515895][ T7275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.535522][ T7275] RSP: 002b:00007fe71b377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 128.543946][ T7275] RAX: ffffffffffffffda RBX: 00007fe71a735f80 RCX: 00007fe71a57e719 [ 128.551932][ T7275] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000015 [ 128.559910][ T7275] RBP: 00007fe71a5f132e R08: 0000000000000006 R09: 0000000000000000 [ 128.567884][ T7275] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 128.575855][ T7275] R13: 0000000000000000 R14: 00007fe71a735f80 R15: 00007fff537d2a98 [ 128.583843][ T7275] [ 130.766303][ T7331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.340'. [ 130.775451][ T7322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.340'. [ 131.180689][ T7351] FAULT_INJECTION: forcing a failure. [ 131.180689][ T7351] name failslab, interval 1, probability 0, space 0, times 0 [ 131.223998][ T7351] CPU: 0 UID: 0 PID: 7351 Comm: syz.2.347 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 131.234659][ T7351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 131.244744][ T7351] Call Trace: [ 131.248050][ T7351] [ 131.251002][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 131.255715][ T7351] should_fail_ex+0x497/0x5b0 [ 131.260455][ T7351] should_failslab+0xc2/0x120 [ 131.265162][ T7351] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 131.270576][ T7351] ? skb_clone+0x190/0x3f0 [ 131.275030][ T7351] skb_clone+0x190/0x3f0 [ 131.279309][ T7351] netlink_deliver_tap+0xb26/0xcf0 [ 131.284460][ T7351] netlink_unicast+0x5e1/0x7f0 [ 131.289261][ T7351] ? __pfx_netlink_unicast+0x10/0x10 [ 131.294584][ T7351] ? __phys_addr_symbol+0x30/0x80 [ 131.299644][ T7351] ? __check_object_size+0x488/0x710 [ 131.304972][ T7351] netlink_sendmsg+0x8b8/0xd70 [ 131.309782][ T7351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.315145][ T7351] ____sys_sendmsg+0x9ae/0xb40 [ 131.319949][ T7351] ? copy_msghdr_from_user+0x10b/0x160 [ 131.325433][ T7351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.330765][ T7351] ? __pfx___lock_acquire+0x10/0x10 [ 131.336010][ T7351] ___sys_sendmsg+0x135/0x1e0 [ 131.340719][ T7351] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.345961][ T7351] ? lock_acquire+0x2f/0xb0 [ 131.350506][ T7351] ? __fget_files+0x40/0x3f0 [ 131.355170][ T7351] ? fdget+0x176/0x210 [ 131.359277][ T7351] __sys_sendmsg+0x117/0x1f0 [ 131.363899][ T7351] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.369041][ T7351] ? __fget_files+0x244/0x3f0 [ 131.373773][ T7351] do_syscall_64+0xcd/0x250 [ 131.378310][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.384240][ T7351] RIP: 0033:0x7f4dc4b7e719 [ 131.388682][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.408324][ T7351] RSP: 002b:00007f4dc5a05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.416778][ T7351] RAX: ffffffffffffffda RBX: 00007f4dc4d35f80 RCX: 00007f4dc4b7e719 [ 131.424781][ T7351] RDX: 0000000000000080 RSI: 0000000020000140 RDI: 0000000000000003 [ 131.432785][ T7351] RBP: 00007f4dc5a05090 R08: 0000000000000000 R09: 0000000000000000 [ 131.440787][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.448786][ T7351] R13: 0000000000000000 R14: 00007f4dc4d35f80 R15: 00007ffd60fcab78 [ 131.456803][ T7351] [ 131.646819][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 131.699264][ T7351] HfR: entered promiscuous mode [ 132.060231][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 133.035212][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.044998][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.327862][ T7386] Invalid ELF header magic: != ELF [ 134.557861][ T7404] syz.2.361 (7404) used greatest stack depth: 20192 bytes left [ 135.184325][ T7417] svc: failed to register nfsdv3 RPC service (errno 111). [ 135.295337][ T7417] svc: failed to register nfsaclv3 RPC service (errno 111). [ 135.957094][ T7405] svc: failed to register nfsdv3 RPC service (errno 111). [ 136.006419][ T7405] svc: failed to register nfsaclv3 RPC service (errno 512). [ 136.096620][ T7439] netlink: 40 bytes leftover after parsing attributes in process `syz.2.370'. [ 136.109751][ T7439] HSR: entered promiscuous mode [ 137.810585][ T7446] delete_channel: no stack [ 138.016364][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 138.061250][ T7471] FAULT_INJECTION: forcing a failure. [ 138.061250][ T7471] name failslab, interval 1, probability 0, space 0, times 0 [ 138.097610][ T7471] CPU: 0 UID: 0 PID: 7471 Comm: syz.2.379 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 138.108266][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 138.118352][ T7471] Call Trace: [ 138.121657][ T7471] [ 138.124610][ T7471] dump_stack_lvl+0x16c/0x1f0 [ 138.129317][ T7471] should_fail_ex+0x497/0x5b0 [ 138.134016][ T7471] ? fs_reclaim_acquire+0xae/0x150 [ 138.139160][ T7471] should_failslab+0xc2/0x120 [ 138.143957][ T7471] kmem_cache_alloc_node_noprof+0x71/0x310 [ 138.149796][ T7471] ? __alloc_skb+0x2b3/0x380 [ 138.154421][ T7471] __alloc_skb+0x2b3/0x380 [ 138.158882][ T7471] ? __pfx___alloc_skb+0x10/0x10 [ 138.163852][ T7471] ? __nla_validate_parse+0x540/0x2b10 [ 138.169359][ T7471] ovs_dp_cmd_new+0x168/0xe50 [ 138.174075][ T7471] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 138.179310][ T7471] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 138.186723][ T7471] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 138.194151][ T7471] genl_family_rcv_msg_doit+0x202/0x2f0 [ 138.199739][ T7471] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 138.205852][ T7471] ? bpf_lsm_capable+0x9/0x10 [ 138.210607][ T7471] ? security_capable+0x7e/0x260 [ 138.215586][ T7471] ? ns_capable+0xd7/0x110 [ 138.220121][ T7471] genl_rcv_msg+0x565/0x800 [ 138.224670][ T7471] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.229741][ T7471] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 138.234992][ T7471] netlink_rcv_skb+0x165/0x410 [ 138.239799][ T7471] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.244868][ T7471] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.250212][ T7471] ? down_read+0xc9/0x330 [ 138.254579][ T7471] ? __pfx_down_read+0x10/0x10 [ 138.259385][ T7471] ? netlink_deliver_tap+0x1ae/0xcf0 [ 138.264711][ T7471] genl_rcv+0x28/0x40 [ 138.268733][ T7471] netlink_unicast+0x53c/0x7f0 [ 138.273548][ T7471] ? __pfx_netlink_unicast+0x10/0x10 [ 138.278881][ T7471] ? __phys_addr_symbol+0x30/0x80 [ 138.283939][ T7471] ? __check_object_size+0x488/0x710 [ 138.289262][ T7471] netlink_sendmsg+0x8b8/0xd70 [ 138.294110][ T7471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.299443][ T7471] ____sys_sendmsg+0x9ae/0xb40 [ 138.304244][ T7471] ? copy_msghdr_from_user+0x10b/0x160 [ 138.309737][ T7471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.315068][ T7471] ? __pfx___lock_acquire+0x10/0x10 [ 138.320306][ T7471] ___sys_sendmsg+0x135/0x1e0 [ 138.325020][ T7471] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.330267][ T7471] ? lock_acquire+0x2f/0xb0 [ 138.334809][ T7471] ? __fget_files+0x40/0x3f0 [ 138.339447][ T7471] ? fdget+0x176/0x210 [ 138.343548][ T7471] __sys_sendmsg+0x117/0x1f0 [ 138.348169][ T7471] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.353313][ T7471] ? __fget_files+0x244/0x3f0 [ 138.358232][ T7471] do_syscall_64+0xcd/0x250 [ 138.362768][ T7471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.368703][ T7471] RIP: 0033:0x7f4dc4b7e719 [ 138.373174][ T7471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.392830][ T7471] RSP: 002b:00007f4dc5a05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.401290][ T7471] RAX: ffffffffffffffda RBX: 00007f4dc4d35f80 RCX: 00007f4dc4b7e719 [ 138.409298][ T7471] RDX: 0000000000000080 RSI: 0000000020000140 RDI: 0000000000000003 [ 138.417298][ T7471] RBP: 00007f4dc5a05090 R08: 0000000000000000 R09: 0000000000000000 [ 138.425300][ T7471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.433307][ T7471] R13: 0000000000000000 R14: 00007f4dc4d35f80 R15: 00007ffd60fcab78 [ 138.441332][ T7471] [ 140.608229][ T7512] unsupported nla_type 15018 [ 142.430355][ T7568] netlink: 342 bytes leftover after parsing attributes in process `syz.0.403'. [ 142.509064][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 142.628874][ T7573] openvswitch: HfR: Dropping previously announced user features [ 145.078931][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.295218][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.305192][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.315184][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.327533][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.336463][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.344740][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.708155][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.403165][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.481634][ T7617] chnl_net:caif_netlink_parms(): no params data found [ 146.779233][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.919066][ T7659] netlink: 342 bytes leftover after parsing attributes in process `syz.2.425'. [ 147.225245][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.233050][ T7617] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.251324][ T7617] bridge_slave_0: entered allmulticast mode [ 147.275535][ T7617] bridge_slave_0: entered promiscuous mode [ 147.295425][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.302640][ T7617] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.320173][ T7617] bridge_slave_1: entered allmulticast mode [ 147.327696][ T7617] bridge_slave_1: entered promiscuous mode [ 147.424121][ T5150] Bluetooth: hci2: command tx timeout [ 147.443605][ T7617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.510519][ T7617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.735389][ T7677] syz.2.431 uses obsolete (PF_INET,SOCK_PACKET) [ 147.738860][ T7617] team0: Port device team_slave_0 added [ 147.783194][ T7617] team0: Port device team_slave_1 added [ 148.045968][ T7617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.064167][ T7617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.140743][ T7617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.184110][ T7617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.191161][ T7617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.279759][ T7617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.318586][ T52] bridge_slave_1: left allmulticast mode [ 148.343816][ T52] bridge_slave_1: left promiscuous mode [ 148.349887][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.441608][ T52] bridge_slave_0: left allmulticast mode [ 148.447429][ T52] bridge_slave_0: left promiscuous mode [ 148.453338][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.736950][ T7705] nbd: must specify at least one socket [ 149.496794][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.514188][ T5150] Bluetooth: hci2: command tx timeout [ 149.618308][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.650758][ T52] bond0 (unregistering): Released all slaves [ 149.891083][ T29] audit: type=1107 audit(1730675400.697:6): pid=7736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 149.969056][ T7617] hsr_slave_0: entered promiscuous mode [ 150.028833][ T7617] hsr_slave_1: entered promiscuous mode [ 150.061731][ T7617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.078981][ T7617] Cannot create hsr debugfs directory [ 150.090884][ T52] HfR: left promiscuous mode [ 151.595049][ T5150] Bluetooth: hci2: command tx timeout [ 152.014359][ T7764] sctp: [Deprecated]: syz.3.448 (pid 7764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.014359][ T7764] Use struct sctp_sack_info instead [ 152.201112][ T7617] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 152.262104][ T7617] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 152.412256][ T7617] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 152.577771][ T52] hsr_slave_0: left promiscuous mode [ 152.583803][ T52] hsr_slave_1: left promiscuous mode [ 152.644203][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.651660][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.716168][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.723619][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.851170][ T52] veth1_macvtap: left promiscuous mode [ 152.866629][ T52] veth0_macvtap: left promiscuous mode [ 152.872274][ T52] veth1_vlan: left promiscuous mode [ 152.879686][ T52] veth0_vlan: left promiscuous mode [ 153.664622][ T5150] Bluetooth: hci2: command tx timeout [ 153.793840][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 153.802919][ T7839] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 154.055986][ T7847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.466'. [ 154.494642][ T52] team0 (unregistering): Port device team_slave_1 removed [ 154.674618][ T52] team0 (unregistering): Port device team_slave_0 removed [ 155.558665][ T7617] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.768083][ T7617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.836944][ T7617] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.876777][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.883913][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.930799][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.937993][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.076303][ T7617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.352281][ T7911] FAULT_INJECTION: forcing a failure. [ 156.352281][ T7911] name failslab, interval 1, probability 0, space 0, times 0 [ 156.405054][ T7911] CPU: 0 UID: 0 PID: 7911 Comm: syz.2.478 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 156.415699][ T7911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 156.425789][ T7911] Call Trace: [ 156.429088][ T7911] [ 156.432041][ T7911] dump_stack_lvl+0x16c/0x1f0 [ 156.436761][ T7911] should_fail_ex+0x497/0x5b0 [ 156.441469][ T7911] ? fs_reclaim_acquire+0xae/0x150 [ 156.446617][ T7911] should_failslab+0xc2/0x120 [ 156.451333][ T7911] __kmalloc_noprof+0xcb/0x410 [ 156.456129][ T7911] ? __pfx___mutex_trylock_common+0x10/0x10 [ 156.462055][ T7911] ? genl_rcv_msg+0x580/0x800 [ 156.466777][ T7911] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 156.473930][ T7911] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 156.479429][ T7911] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 156.485542][ T7911] ? bpf_lsm_capable+0x9/0x10 [ 156.490254][ T7911] ? security_capable+0x7e/0x260 [ 156.495230][ T7911] genl_rcv_msg+0x565/0x800 [ 156.499780][ T7911] ? __pfx_genl_rcv_msg+0x10/0x10 [ 156.504845][ T7911] ? __pfx_smc_pnet_del+0x10/0x10 [ 156.509909][ T7911] netlink_rcv_skb+0x165/0x410 [ 156.514709][ T7911] ? __pfx_genl_rcv_msg+0x10/0x10 [ 156.519775][ T7911] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.525107][ T7911] ? down_read+0xc9/0x330 [ 156.529465][ T7911] ? __pfx_down_read+0x10/0x10 [ 156.534257][ T7911] ? netlink_deliver_tap+0x1ae/0xcf0 [ 156.539582][ T7911] genl_rcv+0x28/0x40 [ 156.543598][ T7911] netlink_unicast+0x53c/0x7f0 [ 156.548401][ T7911] ? __pfx_netlink_unicast+0x10/0x10 [ 156.553722][ T7911] ? __phys_addr_symbol+0x30/0x80 [ 156.558776][ T7911] ? __check_object_size+0x488/0x710 [ 156.564107][ T7911] netlink_sendmsg+0x8b8/0xd70 [ 156.568910][ T7911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.574241][ T7911] ____sys_sendmsg+0x9ae/0xb40 [ 156.579034][ T7911] ? copy_msghdr_from_user+0x10b/0x160 [ 156.584523][ T7911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.589855][ T7911] ? __pfx___lock_acquire+0x10/0x10 [ 156.595097][ T7911] ___sys_sendmsg+0x135/0x1e0 [ 156.599807][ T7911] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.605048][ T7911] ? lock_acquire+0x2f/0xb0 [ 156.609581][ T7911] ? __fget_files+0x40/0x3f0 [ 156.614213][ T7911] ? fdget+0x176/0x210 [ 156.618319][ T7911] __sys_sendmsg+0x117/0x1f0 [ 156.622937][ T7911] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.628073][ T7911] ? __fget_files+0x244/0x3f0 [ 156.632811][ T7911] do_syscall_64+0xcd/0x250 [ 156.637352][ T7911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.643282][ T7911] RIP: 0033:0x7f4dc4b7e719 [ 156.647720][ T7911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.667361][ T7911] RSP: 002b:00007f4dc5a05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.675809][ T7911] RAX: ffffffffffffffda RBX: 00007f4dc4d35f80 RCX: 00007f4dc4b7e719 [ 156.683805][ T7911] RDX: 0000000028004002 RSI: 0000000020001780 RDI: 0000000000000003 [ 156.691795][ T7911] RBP: 00007f4dc5a05090 R08: 0000000000000000 R09: 0000000000000000 [ 156.699788][ T7911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.707783][ T7911] R13: 0000000000000000 R14: 00007f4dc4d35f80 R15: 00007ffd60fcab78 [ 156.715801][ T7911] [ 156.889352][ T7617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.013447][ T7923] openvswitch: HfR: Dropping previously announced user features [ 157.592350][ T7617] veth0_vlan: entered promiscuous mode [ 157.640719][ T7617] veth1_vlan: entered promiscuous mode [ 157.721291][ T7617] veth0_macvtap: entered promiscuous mode [ 157.753768][ T7617] veth1_macvtap: entered promiscuous mode [ 157.859859][ T7617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.892024][ T7617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.941146][ T7617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.975269][ T7617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.014184][ T7617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.074368][ T7617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.142955][ T7617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.178495][ T7617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.230621][ T7617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.248670][ T7617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.271290][ T7617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.313064][ T7617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.330129][ T7617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.342853][ T7617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.416420][ T7617] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.430010][ T7617] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.440458][ T7617] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.454535][ T7617] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.726977][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.765211][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.796463][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.826841][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.119041][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'. [ 159.160595][ T7961] HfR: entered promiscuous mode [ 161.437478][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 161.451569][ T8025] openvswitch: HfR: Dropping previously announced user features [ 161.575203][ T8026] nbd: couldn't find device at index 511 [ 162.202388][ T8029] can: request_module (can-proto-0) failed. [ 162.757975][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 162.774723][ T8075] openvswitch: HfR: Dropping previously announced user features [ 164.371077][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 165.734337][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.515'. [ 165.754500][ T8144] openvswitch: HfR: Dropping previously announced user features [ 169.905404][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.537'. [ 170.788243][ T8263] Invalid ELF header magic: != ELF [ 172.093474][ T8275] netlink: 342 bytes leftover after parsing attributes in process `syz.4.541'. [ 176.133461][ T8341] svc: failed to register nfsdv3 RPC service (errno 111). [ 176.204770][ T8341] svc: failed to register nfsaclv3 RPC service (errno 111). [ 179.121739][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 179.392855][ T8381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.560'. [ 179.649951][ T8383] openvswitch: HfR: Dropping previously announced user features [ 181.341621][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.563'. [ 181.843225][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.853866][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.864254][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.873444][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.882879][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 181.892998][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.674115][ T8442] chnl_net:caif_netlink_parms(): no params data found [ 183.438844][ T8442] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.464079][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.471338][ T8442] bridge_slave_0: entered allmulticast mode [ 183.515171][ T8442] bridge_slave_0: entered promiscuous mode [ 183.547279][ T8442] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.584464][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.591720][ T8442] bridge_slave_1: entered allmulticast mode [ 183.665271][ T8442] bridge_slave_1: entered promiscuous mode [ 183.984160][ T5850] Bluetooth: hci4: command tx timeout [ 184.006675][ T8442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.076913][ T8442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.563657][ T8498] openvswitch: netlink: Message has 195 unknown bytes. [ 184.769267][ T8442] team0: Port device team_slave_0 added [ 185.016962][ T8442] team0: Port device team_slave_1 added [ 185.376529][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.383526][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.478409][ T8442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.536639][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.543634][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.653655][ T8442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.880988][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 186.116734][ T5840] Bluetooth: hci4: command tx timeout [ 186.389831][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 186.389858][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 186.396624][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 186.592311][ T8442] hsr_slave_0: entered promiscuous mode [ 186.666943][ T8442] hsr_slave_1: entered promiscuous mode [ 186.694917][ T8442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.726305][ T8442] Cannot create hsr debugfs directory [ 187.508362][ T8442] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 187.544550][ T8442] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 187.579066][ T8442] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 187.648362][ T8442] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 187.862037][ T8442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.909290][ T8442] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.954799][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.961977][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.986264][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.993460][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.164118][ T5845] Bluetooth: hci4: command tx timeout [ 188.332074][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 188.513690][ T8442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.009072][ T8442] veth0_vlan: entered promiscuous mode [ 189.019883][ T8442] veth1_vlan: entered promiscuous mode [ 189.046313][ T8442] veth0_macvtap: entered promiscuous mode [ 189.055622][ T8442] veth1_macvtap: entered promiscuous mode [ 189.070197][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.080734][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.090781][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.101312][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.111518][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.122154][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.132057][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.142544][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.153757][ T8442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.198858][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.228211][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.252126][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.290188][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.300417][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.348175][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.370011][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.424852][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.445400][ T8442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.477077][ T8442] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.494985][ T8442] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.554034][ T8442] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.594166][ T8442] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.003368][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.595'. [ 190.012993][ T8597] openvswitch: HfR: Dropping previously announced user features [ 190.132585][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.140777][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.228896][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.237090][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.260143][ T5845] Bluetooth: hci4: command tx timeout [ 191.016952][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.603'. [ 191.055665][ T8629] openvswitch: HfR: Dropping previously announced user features [ 191.387409][ T8635] svc: failed to register nfsdv3 RPC service (errno 111). [ 191.406506][ T8635] svc: failed to register nfsaclv3 RPC service (errno 111). [ 192.097174][ T8661] team0: entered allmulticast mode [ 192.114593][ T8661] team_slave_0: entered allmulticast mode [ 192.151217][ T8661] team_slave_1: entered allmulticast mode [ 192.343046][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.612'. [ 192.380887][ T8668] HfR: entered promiscuous mode [ 193.088525][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'. [ 193.118947][ T8688] tc_dump_action: action bad kind [ 193.543059][ T8697] syz.2.619 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 194.071739][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'. [ 194.094935][ T8716] openvswitch: HfR: Dropping previously announced user features [ 194.468345][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.474740][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.353180][ T8766] openvswitch: HfR: Dropping previously announced user features [ 198.890410][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'. [ 198.933640][ T8766] HfR: left promiscuous mode [ 199.698691][ T8760] RDS: rds_bind could not find a transport for fe80::300:0:0:0, load rds_tcp or rds_rdma? [ 200.953727][ T8817] delete_channel: no stack [ 201.594099][ T8835] svc: failed to register nfsdv3 RPC service (errno 111). [ 201.710191][ T8838] Invalid ELF header magic: != ELF [ 201.714126][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.659'. [ 201.739240][ T8835] svc: failed to register nfsaclv3 RPC service (errno 111). [ 202.333989][ T8844] syz.2.662(8844): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 210.788550][ T8982] netlink: zone id is out of range [ 210.793724][ T8982] netlink: zone id is out of range [ 210.827310][ T8985] netlink: 342 bytes leftover after parsing attributes in process `syz.1.698'. [ 210.844409][ T8982] netlink: zone id is out of range [ 210.854521][ T8982] netlink: zone id is out of range [ 210.859677][ T8982] netlink: del zone limit has 4 unknown bytes [ 211.294748][ T8997] block nbd0: not configured, cannot reconfigure [ 215.499477][ T9093] svc: failed to register nfsdv3 RPC service (errno 111). [ 215.544905][ T9093] svc: failed to register nfsaclv3 RPC service (errno 111). [ 219.035357][ T9151] netlink: 2 bytes leftover after parsing attributes in process `syz.4.741'. [ 222.546677][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.758'. [ 223.098038][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.762'. [ 223.253233][ T9216] nbd: must specify an index to disconnect [ 223.715813][ T9230] svc: failed to register nfsdv3 RPC service (errno 111). [ 223.789888][ T9230] svc: failed to register nfsaclv3 RPC service (errno 111). [ 230.313189][ T9354] FAULT_INJECTION: forcing a failure. [ 230.313189][ T9354] name failslab, interval 1, probability 0, space 0, times 0 [ 230.423451][ T9354] CPU: 1 UID: 0 PID: 9354 Comm: syz.2.789 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 230.434113][ T9354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 230.444211][ T9354] Call Trace: [ 230.447514][ T9354] [ 230.450482][ T9354] dump_stack_lvl+0x16c/0x1f0 [ 230.455201][ T9354] should_fail_ex+0x497/0x5b0 [ 230.459910][ T9354] ? fs_reclaim_acquire+0xae/0x150 [ 230.465061][ T9354] should_failslab+0xc2/0x120 [ 230.469775][ T9354] kmem_cache_alloc_node_noprof+0x71/0x310 [ 230.475620][ T9354] ? __alloc_skb+0x2b3/0x380 [ 230.480244][ T9354] __alloc_skb+0x2b3/0x380 [ 230.484692][ T9354] ? __pfx___alloc_skb+0x10/0x10 [ 230.489662][ T9354] ? __pfx___lock_acquire+0x10/0x10 [ 230.494895][ T9354] ? hlock_class+0x4e/0x130 [ 230.499435][ T9354] ? __lock_acquire+0x163e/0x3ce0 [ 230.504504][ T9354] __ip6_append_data.isra.0+0x2a9e/0x4540 [ 230.510288][ T9354] ? __pfx_raw6_getfrag+0x10/0x10 [ 230.515358][ T9354] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 230.521462][ T9354] ? ip6_mtu+0x231/0x4a0 [ 230.525741][ T9354] ? ip6_setup_cork+0xc1b/0x1360 [ 230.530720][ T9354] ip6_append_data+0x1e6/0x500 [ 230.535526][ T9354] ? __pfx_raw6_getfrag+0x10/0x10 [ 230.540586][ T9354] rawv6_sendmsg+0x1578/0x43e0 [ 230.545385][ T9354] ? __lock_acquire+0xbdd/0x3ce0 [ 230.550376][ T9354] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 230.555522][ T9354] ? __pfx___lock_acquire+0x10/0x10 [ 230.560778][ T9354] ? trace_lock_acquire+0x14a/0x1d0 [ 230.566030][ T9354] ? __pfx___might_resched+0x10/0x10 [ 230.571358][ T9354] ? __pfx_aa_sk_perm+0x10/0x10 [ 230.576251][ T9354] ? find_held_lock+0x2d/0x110 [ 230.581044][ T9354] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 230.586194][ T9354] ? inet_sendmsg+0x119/0x140 [ 230.590900][ T9354] inet_sendmsg+0x119/0x140 [ 230.595445][ T9354] sock_write_iter+0x4ac/0x5b0 [ 230.600240][ T9354] ? __pfx_sock_write_iter+0x10/0x10 [ 230.605586][ T9354] ? bpf_lsm_file_permission+0x9/0x10 [ 230.610993][ T9354] ? security_file_permission+0x71/0x210 [ 230.616663][ T9354] vfs_write+0x5ae/0x1150 [ 230.621023][ T9354] ? __pfx_sock_write_iter+0x10/0x10 [ 230.626341][ T9354] ? trace_lock_acquire+0x14a/0x1d0 [ 230.631573][ T9354] ? __pfx_vfs_write+0x10/0x10 [ 230.636372][ T9354] ? __fget_files+0x40/0x3f0 [ 230.641004][ T9354] ksys_write+0x1fa/0x260 [ 230.645362][ T9354] ? __pfx_ksys_write+0x10/0x10 [ 230.650249][ T9354] do_syscall_64+0xcd/0x250 [ 230.654778][ T9354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.660719][ T9354] RIP: 0033:0x7f4dc4b7e719 [ 230.665158][ T9354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.684798][ T9354] RSP: 002b:00007f4dc59c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.693242][ T9354] RAX: ffffffffffffffda RBX: 00007f4dc4d36130 RCX: 00007f4dc4b7e719 [ 230.701244][ T9354] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 230.709239][ T9354] RBP: 00007f4dc59c3090 R08: 0000000000000000 R09: 0000000000000000 [ 230.717235][ T9354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.725238][ T9354] R13: 0000000000000000 R14: 00007f4dc4d36130 R15: 00007ffd60fcab78 [ 230.733255][ T9354] [ 232.214620][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.798'. [ 232.273237][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.282685][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.292321][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.300795][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.308718][ T5150] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 232.318566][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.005954][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.796'. [ 233.790273][ T9382] chnl_net:caif_netlink_parms(): no params data found [ 234.008018][ T3018] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.375947][ T3018] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.394183][ T5845] Bluetooth: hci2: command tx timeout [ 234.655999][ T3018] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.114492][ T3018] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.149366][ T9382] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.159319][ T9382] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.172005][ T9382] bridge_slave_0: entered allmulticast mode [ 235.181944][ T9382] bridge_slave_0: entered promiscuous mode [ 235.192475][ T9382] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.199883][ T9382] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.214778][ T9382] bridge_slave_1: entered allmulticast mode [ 235.222005][ T9382] bridge_slave_1: entered promiscuous mode [ 235.361472][ T9382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.389582][ T9382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.544955][ T9382] team0: Port device team_slave_0 added [ 235.557656][ T9446] netlink: 342 bytes leftover after parsing attributes in process `syz.1.811'. [ 235.572795][ T9382] team0: Port device team_slave_1 added [ 235.955889][ T9382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.984066][ T9382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.043948][ T9382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.074268][ T3018] bridge_slave_1: left allmulticast mode [ 236.079966][ T3018] bridge_slave_1: left promiscuous mode [ 236.088074][ T3018] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.137621][ T9458] netlink: 4528 bytes leftover after parsing attributes in process `syz.1.815'. [ 236.154829][ T3018] bridge_slave_0: left allmulticast mode [ 236.161476][ T3018] bridge_slave_0: left promiscuous mode [ 236.175587][ T3018] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.474313][ T5845] Bluetooth: hci2: command tx timeout [ 238.303075][ T3018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.424424][ T3018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.446773][ T3018] bond0 (unregistering): Released all slaves [ 238.516315][ T9382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.544359][ T5845] Bluetooth: hci2: command tx timeout [ 238.557258][ T9382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.634080][ T9382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.925465][ T3018] HfR: left promiscuous mode [ 239.037544][ T9382] hsr_slave_0: entered promiscuous mode [ 239.114437][ T9382] hsr_slave_1: entered promiscuous mode [ 239.194332][ T9382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.210212][ T9382] Cannot create hsr debugfs directory [ 240.624054][ T5845] Bluetooth: hci2: command tx timeout [ 241.004772][ T3018] hsr_slave_0: left promiscuous mode [ 241.071167][ T3018] hsr_slave_1: left promiscuous mode [ 241.147164][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.155069][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.212330][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.233997][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.554441][ T3018] veth1_macvtap: left promiscuous mode [ 241.560016][ T3018] veth0_macvtap: left promiscuous mode [ 241.604292][ T3018] veth1_vlan: left promiscuous mode [ 241.609659][ T3018] veth0_vlan: left promiscuous mode [ 243.237977][ T3018] team0 (unregistering): Port device team_slave_1 removed [ 243.312663][ T3018] team0 (unregistering): Port device team_slave_0 removed [ 243.545485][ T9556] svc: failed to register nfsdv3 RPC service (errno 111). [ 243.563085][ T9556] svc: failed to register nfsaclv3 RPC service (errno 111). [ 244.267600][ T9382] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 244.318867][ T9382] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 244.376187][ T9382] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 244.437060][ T9382] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 244.696968][ T9382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.780981][ T9382] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.810220][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.817433][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.900510][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.907770][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.431082][ T9382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.975725][ T9382] veth0_vlan: entered promiscuous mode [ 246.000949][ T9382] veth1_vlan: entered promiscuous mode [ 246.078885][ T9382] veth0_macvtap: entered promiscuous mode [ 246.113784][ T9382] veth1_macvtap: entered promiscuous mode [ 246.138193][ T9382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.150129][ T9382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.160043][ T9382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.170610][ T9382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.180509][ T9382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.191040][ T9382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.201349][ T9382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.212287][ T9382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.223596][ T9382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.246386][ T9382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.257718][ T9382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.267669][ T9382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.278195][ T9382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.288098][ T9382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.299022][ T9382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.309742][ T9382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.320390][ T9382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.331685][ T9382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.375461][ T9382] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.413280][ T9382] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.454019][ T9382] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.462776][ T9382] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.673419][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.681734][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.753788][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.762747][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.595627][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.851'. [ 248.056442][ T9685] can: request_module (can-proto-0) failed. [ 250.610438][ T9788] can: request_module (can-proto-0) failed. [ 251.815601][ T9828] svc: failed to register nfsdv3 RPC service (errno 111). [ 251.842284][ T9828] svc: failed to register nfsaclv3 RPC service (errno 111). [ 255.504042][ T9904] netlink: 334 bytes leftover after parsing attributes in process `syz.1.895'. [ 255.844560][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.853391][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.861589][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.870447][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.878674][ T5150] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 255.887871][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.919512][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.940602][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.387847][ T9925] netlink: 20 bytes leftover after parsing attributes in process `syz.6.899'. [ 256.590703][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.856792][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.449444][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.543591][ T9915] chnl_net:caif_netlink_parms(): no params data found [ 257.564982][ T9947] team0: entered allmulticast mode [ 257.570152][ T9947] team_slave_0: entered allmulticast mode [ 257.584096][ T9947] team_slave_1: entered allmulticast mode [ 257.781846][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.984242][ T5845] Bluetooth: hci1: command tx timeout [ 258.174278][ T9915] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.181693][ T9915] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.203231][ T9915] bridge_slave_0: entered allmulticast mode [ 258.210715][ T9915] bridge_slave_0: entered promiscuous mode [ 258.219030][ T9915] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.227612][ T9915] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.235181][ T9915] bridge_slave_1: entered allmulticast mode [ 258.242335][ T9915] bridge_slave_1: entered promiscuous mode [ 258.413283][ T9915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.490492][ T9915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.715477][ T9915] team0: Port device team_slave_0 added [ 258.905668][ T9915] team0: Port device team_slave_1 added [ 258.911717][ T35] bridge_slave_1: left allmulticast mode [ 258.933498][ T35] bridge_slave_1: left promiscuous mode [ 258.956911][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.029087][ T35] bridge_slave_0: left allmulticast mode [ 259.044066][ T35] bridge_slave_0: left promiscuous mode [ 259.060259][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.064364][ T5845] Bluetooth: hci1: command tx timeout [ 260.351905][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.401657][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.423230][ T35] bond0 (unregistering): Released all slaves [ 260.592557][ T35] HfR: left promiscuous mode [ 260.657903][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.664963][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.691111][ T9915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.734740][ T35] HSR: left promiscuous mode [ 260.882381][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.903988][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.010422][ T9915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.278951][ T9915] hsr_slave_0: entered promiscuous mode [ 261.314320][ T9915] hsr_slave_1: entered promiscuous mode [ 261.351788][ T9915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.370757][ T9915] Cannot create hsr debugfs directory [ 262.144100][ T5845] Bluetooth: hci1: command tx timeout [ 262.493066][T10036] RDS: rds_bind could not find a transport for fe80::300:0:0:0, load rds_tcp or rds_rdma? [ 262.859433][T10050] netlink: 123 bytes leftover after parsing attributes in process `syz.5.919'. [ 262.931948][T10050] netlink: 91 bytes leftover after parsing attributes in process `syz.5.919'. [ 262.959101][ T29] audit: type=1326 audit(8277292086.483:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.6.920" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f370857e719 code=0x0 [ 264.224056][ T5845] Bluetooth: hci1: command tx timeout [ 264.255781][ T35] hsr_slave_0: left promiscuous mode [ 264.464280][ T35] hsr_slave_1: left promiscuous mode [ 264.573399][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.588235][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.634567][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.642182][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.763164][ T35] veth1_macvtap: left promiscuous mode [ 264.786123][T10082] nbd: must specify at least one socket [ 264.786390][ T35] veth0_macvtap: left promiscuous mode [ 264.817858][ T35] veth1_vlan: left promiscuous mode [ 264.823210][ T35] veth0_vlan: left promiscuous mode [ 264.941804][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.6.926'. [ 266.427903][ T35] team0 (unregistering): Port device team_slave_1 removed [ 267.384405][ T35] team0 (unregistering): Port device team_slave_0 removed [ 267.441527][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.932'. [ 268.211378][T10100] HfR: entered promiscuous mode [ 268.254254][T10123] openvswitch: HfR: Dropping previously announced user features [ 268.630717][ T9915] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 268.701516][ T9915] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 268.805188][ T9915] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 268.874878][ T9915] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 269.142180][ T9915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.172579][ T9915] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.330443][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.337615][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.368548][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.375714][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.489888][ T9915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.999544][ T9915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.136462][ T9915] veth0_vlan: entered promiscuous mode [ 270.176406][ T9915] veth1_vlan: entered promiscuous mode [ 270.280546][ T9915] veth0_macvtap: entered promiscuous mode [ 270.313532][ T9915] veth1_macvtap: entered promiscuous mode [ 270.396288][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.424026][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.448988][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.484021][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.513735][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.544740][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.576455][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.619758][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.649402][ T9915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.694195][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.706766][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.5.943'. [ 270.728407][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.739301][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.750305][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.760857][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.792167][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.813030][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.834374][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.846479][ T9915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.914071][T10227] openvswitch: HfR: Dropping previously announced user features [ 270.925155][ T9915] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.949775][ T9915] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.974028][ T9915] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.002737][ T9915] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.201804][T10200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.225442][T10200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.480143][T10196] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.568170][T10202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.576076][T10202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.801913][T10196] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.187084][T10196] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.407281][T10196] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.706592][T10196] bridge_slave_1: left allmulticast mode [ 272.720488][T10196] bridge_slave_1: left promiscuous mode [ 272.726400][T10196] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.743028][T10196] bridge_slave_0: left allmulticast mode [ 272.764107][T10196] bridge_slave_0: left promiscuous mode [ 272.788246][T10196] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.561284][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.954'. [ 273.888773][T10196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.964860][T10196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.022901][T10196] bond0 (unregistering): Released all slaves [ 274.124184][T10304] openvswitch: HfR: Dropping previously announced user features [ 274.255562][T10196] HfR: left promiscuous mode [ 274.465509][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 275.383783][T10348] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 275.384606][T10196] hsr_slave_0: left promiscuous mode [ 275.479802][T10196] hsr_slave_1: left promiscuous mode [ 275.502292][T10348] CIFS mount error: No usable UNC path provided in device string! [ 275.502292][T10348] [ 275.543736][T10196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.567302][T10196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.618108][T10348] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 275.634673][T10196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.642128][T10196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.802373][T10196] veth1_macvtap: left promiscuous mode [ 275.857218][T10196] veth0_macvtap: left allmulticast mode [ 275.862966][T10196] veth0_macvtap: left promiscuous mode [ 275.934724][T10196] veth1_vlan: left promiscuous mode [ 275.940516][T10196] veth0_vlan: left promiscuous mode [ 276.307044][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.964'. [ 278.053491][T10196] team0 (unregistering): Port device team_slave_1 removed [ 278.266263][T10196] team0 (unregistering): Port device team_slave_0 removed [ 280.173947][T10376] openvswitch: HfR: Dropping previously announced user features [ 281.474127][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.6.984'. [ 281.554493][T10466] openvswitch: HfR: Dropping previously announced user features [ 283.953201][T10572] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1000'. [ 285.665223][T10637] netlink: 'syz.2.1013': attribute type 11 has an invalid length. [ 285.721298][T10637] netlink: 'syz.2.1013': attribute type 11 has an invalid length. [ 286.393767][T10666] netlink: 350 bytes leftover after parsing attributes in process `syz.6.1018'. [ 288.360295][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'. [ 288.496698][T10728] HfR: entered promiscuous mode [ 292.681284][T10831] netlink: 'syz.1.1041': attribute type 11 has an invalid length. [ 292.793662][T10831] netlink: 'syz.1.1041': attribute type 11 has an invalid length. [ 296.387983][T10932] FAULT_INJECTION: forcing a failure. [ 296.387983][T10932] name failslab, interval 1, probability 0, space 0, times 0 [ 296.550689][T10932] CPU: 0 UID: 0 PID: 10932 Comm: syz.5.1053 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 296.561519][T10932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 296.571695][T10932] Call Trace: [ 296.575000][T10932] [ 296.577957][T10932] dump_stack_lvl+0x16c/0x1f0 [ 296.582667][T10932] should_fail_ex+0x497/0x5b0 [ 296.587372][T10932] ? fs_reclaim_acquire+0xae/0x150 [ 296.592521][T10932] should_failslab+0xc2/0x120 [ 296.597233][T10932] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 296.602992][T10932] ? xas_split_alloc+0x158/0x4f0 [ 296.607965][T10932] xas_split_alloc+0x158/0x4f0 [ 296.612770][T10932] split_huge_page_to_list_to_order+0xb9a/0x4ef0 [ 296.619134][T10932] ? const_folio_flags.constprop.0+0x56/0x150 [ 296.625241][T10932] ? shmem_get_folio_gfp+0x315/0x1530 [ 296.630627][T10932] ? __pfx_split_huge_page_to_list_to_order+0x10/0x10 [ 296.637403][T10932] ? __pfx___might_resched+0x10/0x10 [ 296.642699][T10932] split_folio_to_list+0x9b/0x180 [ 296.647730][T10932] truncate_inode_partial_folio+0x3c6/0x860 [ 296.653632][T10932] shmem_undo_range+0x6e9/0x1170 [ 296.658584][T10932] ? __pfx_shmem_undo_range+0x10/0x10 [ 296.663959][T10932] ? __pfx_lock_release+0x10/0x10 [ 296.668989][T10932] ? uprobe_munmap+0x20/0x5c0 [ 296.673692][T10932] ? find_held_lock+0x2d/0x110 [ 296.678481][T10932] ? __pfx_unmap_mapping_range+0x10/0x10 [ 296.684116][T10932] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 296.689487][T10932] ? lock_acquire+0x2f/0xb0 [ 296.694003][T10932] ? shmem_fallocate+0x9b9/0xfb0 [ 296.698949][T10932] shmem_fallocate+0xa35/0xfb0 [ 296.703715][T10932] ? hlock_class+0x4e/0x130 [ 296.708218][T10932] ? __lock_acquire+0x163e/0x3ce0 [ 296.713254][T10932] ? __pfx_shmem_fallocate+0x10/0x10 [ 296.718546][T10932] ? __pfx___lock_acquire+0x10/0x10 [ 296.723777][T10932] ? __pfx_shmem_fallocate+0x10/0x10 [ 296.729070][T10932] vfs_fallocate+0x459/0xf90 [ 296.733669][T10932] madvise_vma_behavior+0x180f/0x19e0 [ 296.739054][T10932] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 296.744783][T10932] ? find_vma_prev+0xdb/0x160 [ 296.749467][T10932] ? __pfx_find_vma_prev+0x10/0x10 [ 296.754587][T10932] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 296.760132][T10932] ? do_madvise+0x3cd/0x700 [ 296.764657][T10932] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 296.770385][T10932] madvise_walk_vmas+0x1cf/0x2c0 [ 296.775333][T10932] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 296.780797][T10932] ? __mutex_unlock_slowpath+0x164/0x650 [ 296.786447][T10932] do_madvise+0x29d/0x700 [ 296.790787][T10932] ? __pfx_do_madvise+0x10/0x10 [ 296.795650][T10932] ? ksys_write+0x1ad/0x260 [ 296.800152][T10932] ? __pfx_ksys_write+0x10/0x10 [ 296.805013][T10932] __x64_sys_madvise+0xa9/0x110 [ 296.809860][T10932] ? lockdep_hardirqs_on+0x7c/0x110 [ 296.815065][T10932] do_syscall_64+0xcd/0x250 [ 296.819570][T10932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.825470][T10932] RIP: 0033:0x7f68c7b7e719 [ 296.829888][T10932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.849498][T10932] RSP: 002b:00007f68c89c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 296.857918][T10932] RAX: ffffffffffffffda RBX: 00007f68c7d36058 RCX: 00007f68c7b7e719 [ 296.865894][T10932] RDX: 0000000000000009 RSI: 0000000000000053 RDI: 0000000000000000 [ 296.873866][T10932] RBP: 00007f68c89c1090 R08: 0000000000000000 R09: 0000000000000000 [ 296.881848][T10932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.889816][T10932] R13: 0000000000000000 R14: 00007f68c7d36058 R15: 00007ffef35408c8 [ 296.897799][T10932] [ 297.462000][T10196] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.782189][T10196] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.076606][T10196] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.109025][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.121563][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.129789][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.148417][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.156649][ T5150] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 298.165181][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.357890][T10196] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.789737][T10196] bridge_slave_1: left allmulticast mode [ 298.821697][T10196] bridge_slave_1: left promiscuous mode [ 298.854221][T10196] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.893418][T10196] bridge_slave_0: left allmulticast mode [ 298.919260][T10196] bridge_slave_0: left promiscuous mode [ 298.935300][T10196] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.892896][T10196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.912253][T10196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.928794][T10196] bond0 (unregistering): Released all slaves [ 300.040327][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1064'. [ 300.077753][T11015] team0: entered promiscuous mode [ 300.082852][T11015] team_slave_0: entered promiscuous mode [ 300.144494][T11015] team_slave_1: entered promiscuous mode [ 300.236593][ T5150] Bluetooth: hci1: command tx timeout [ 300.665513][T10978] chnl_net:caif_netlink_parms(): no params data found [ 301.034094][T10196] hsr_slave_0: left promiscuous mode [ 301.043818][T10196] hsr_slave_1: left promiscuous mode [ 301.224180][T10196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.244194][T10196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.256274][T10196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.284335][T10196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.351100][T10196] veth1_macvtap: left promiscuous mode [ 301.368138][T10196] veth0_macvtap: left promiscuous mode [ 301.382110][T10196] veth1_vlan: left promiscuous mode [ 301.401008][T10196] veth0_vlan: left promiscuous mode [ 302.309460][ T5845] Bluetooth: hci1: command tx timeout [ 302.683782][T10196] team0 (unregistering): Port device team_slave_1 removed [ 302.781472][T10196] team0 (unregistering): Port device team_slave_0 removed [ 304.040722][T10978] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.054151][T10978] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.061415][T10978] bridge_slave_0: entered allmulticast mode [ 304.064055][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 304.120030][T10978] bridge_slave_0: entered promiscuous mode [ 304.153711][T10978] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.194359][T10978] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.229098][T10978] bridge_slave_1: entered allmulticast mode [ 304.252829][T10978] bridge_slave_1: entered promiscuous mode [ 304.384095][ T5150] Bluetooth: hci1: command tx timeout [ 304.613477][T10978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.636524][T10978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.853480][T10978] team0: Port device team_slave_0 added [ 304.878983][T10978] team0: Port device team_slave_1 added [ 305.004717][T10978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.011711][T10978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.102863][T10978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.131615][T10978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.141627][T10978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.194100][T10978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.444146][T10978] hsr_slave_0: entered promiscuous mode [ 305.469078][T10978] hsr_slave_1: entered promiscuous mode [ 305.488463][T10978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.515890][T10978] Cannot create hsr debugfs directory [ 306.426788][T10978] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 306.444217][T10978] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 306.465760][ T5845] Bluetooth: hci1: command tx timeout [ 306.486311][T10978] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 306.505070][T10978] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 306.703676][T10978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.763420][T10978] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.800301][T10196] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.807540][T10196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.885216][T10209] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.892390][T10209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.421094][T10978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.448615][T11137] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1082'. [ 307.529933][T10978] veth0_vlan: entered promiscuous mode [ 307.541186][T10978] veth1_vlan: entered promiscuous mode [ 307.571643][T10978] veth0_macvtap: entered promiscuous mode [ 307.581766][T10978] veth1_macvtap: entered promiscuous mode [ 307.599042][T10978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.609766][T10978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.619956][T10978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.630470][T10978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.640366][T10978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.650936][T10978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.662092][T10978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.674176][T10978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.685195][T10978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.695876][T10978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.706823][T10978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.716706][T10978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.727213][T10978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.738337][T10978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.786695][T10978] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.795706][T10978] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.804521][T10978] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.813246][T10978] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.241264][T10209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.311605][T10209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.432725][T10197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.441721][T10197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.566434][T11186] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1088'. [ 309.216958][ T67] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.677005][ T67] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.957618][ T67] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.009339][T11241] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1097'. [ 310.197726][ T67] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.209606][ T5150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.221308][ T5150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 310.233730][ T5150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 310.254426][ T5150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.262835][ T5150] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 310.270438][ T5150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 310.290662][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'. [ 310.796027][ T67] bridge_slave_1: left allmulticast mode [ 310.823235][ T67] bridge_slave_1: left promiscuous mode [ 310.829898][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.903525][ T67] bridge_slave_0: left allmulticast mode [ 310.915092][ T67] bridge_slave_0: left promiscuous mode [ 310.921655][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.388243][T11289] svc: failed to register nfsdv3 RPC service (errno 111). [ 311.406311][T11289] svc: failed to register nfsaclv3 RPC service (errno 111). [ 311.949161][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.972008][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.988536][ T67] bond0 (unregistering): Released all slaves [ 312.175574][ T67] HfR: left promiscuous mode [ 312.400603][ T5150] Bluetooth: hci3: command tx timeout [ 312.758584][T11248] chnl_net:caif_netlink_parms(): no params data found [ 313.301870][ T67] hsr_slave_0: left promiscuous mode [ 313.309771][ T67] hsr_slave_1: left promiscuous mode [ 313.316097][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.323525][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.354851][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.362304][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.449080][ T67] veth1_macvtap: left promiscuous mode [ 313.469005][ T67] veth0_macvtap: left promiscuous mode [ 313.500010][ T67] veth1_vlan: left promiscuous mode [ 313.505912][ T67] veth0_vlan: left promiscuous mode [ 314.474359][ T5150] Bluetooth: hci3: command tx timeout [ 314.626629][ T67] team0 (unregistering): Port device team_slave_1 removed [ 314.802484][ T67] team0 (unregistering): Port device team_slave_0 removed [ 315.633748][T11357] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1114'. [ 315.874918][T11248] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.882060][T11248] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.895817][T11248] bridge_slave_0: entered allmulticast mode [ 315.902820][T11248] bridge_slave_0: entered promiscuous mode [ 315.917073][T11248] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.962004][T11248] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.974234][T11248] bridge_slave_1: entered allmulticast mode [ 315.985386][T11248] bridge_slave_1: entered promiscuous mode [ 316.100944][T11248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.137990][T11248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.352102][T11248] team0: Port device team_slave_0 added [ 316.390302][T11248] team0: Port device team_slave_1 added [ 316.550694][ T5150] Bluetooth: hci3: command tx timeout [ 316.566138][T11248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.573260][T11248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.599328][T11248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.619371][T11248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.627430][T11248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.654015][T11248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.763042][T11248] hsr_slave_0: entered promiscuous mode [ 316.814372][T11248] hsr_slave_1: entered promiscuous mode [ 316.861147][T11248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.869088][T11248] Cannot create hsr debugfs directory [ 317.348649][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.355208][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.638640][ T5150] Bluetooth: hci3: command tx timeout [ 318.650965][T11248] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 318.719764][T11248] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 318.760886][T11248] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 318.806378][T11248] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 318.954289][T11248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.009035][T11248] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.020789][T10192] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.027956][T10192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.082897][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.090097][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.159636][T11444] sctp: [Deprecated]: syz.6.1127 (pid 11444) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.159636][T11444] Use struct sctp_sack_info instead [ 319.172247][T11248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.637124][T11248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.283141][T11248] veth0_vlan: entered promiscuous mode [ 320.298551][T11248] veth1_vlan: entered promiscuous mode [ 320.320791][T11248] veth0_macvtap: entered promiscuous mode [ 320.379197][T11248] veth1_macvtap: entered promiscuous mode [ 320.472803][T11248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.517914][T11248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.553809][T11248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.584208][T11248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.604433][T11248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.632279][T11248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.665273][T11248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.696304][T11248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.728022][T11248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.767734][T11248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.804176][T11248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.843982][T11248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.884016][T11248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.926095][T11248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.050045][T11248] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.081450][T11248] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.124085][T11248] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.153923][T11248] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.594113][T10209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.620091][T10209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.725212][T10204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.745082][T10204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.058345][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1156'. [ 326.117842][T11641] HfR: entered promiscuous mode [ 328.948231][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'. [ 329.018124][T11679] openvswitch: HfR: Dropping previously announced user features [ 329.814174][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 330.418904][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1172'. [ 331.384955][T11747] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1175'. [ 331.422962][T11747] HSR: entered promiscuous mode [ 331.922099][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1176'. [ 331.990613][T11769] HfR: entered promiscuous mode [ 333.247665][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1191'. [ 333.304894][T11832] openvswitch: HfR: Dropping previously announced user features [ 335.136653][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1200'. [ 335.344330][T11892] openvswitch: HfR: Dropping previously announced user features [ 336.766971][T10204] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.888485][T10204] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.116351][T10204] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.356755][T10204] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.420371][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.434185][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.441849][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.455875][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.467794][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.480196][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.693563][T10204] bridge_slave_1: left allmulticast mode [ 337.703928][T10204] bridge_slave_1: left promiscuous mode [ 337.709658][T10204] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.779324][T10204] bridge_slave_0: left allmulticast mode [ 337.798554][T10204] bridge_slave_0: left promiscuous mode [ 337.814087][T10204] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.510958][T10204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.522107][T10204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.532483][T10204] bond0 (unregistering): Released all slaves [ 338.603019][T10204] HfR: left promiscuous mode [ 338.946204][T11955] chnl_net:caif_netlink_parms(): no params data found [ 339.444069][T10204] hsr_slave_0: left promiscuous mode [ 339.466809][T10204] hsr_slave_1: left promiscuous mode [ 339.488736][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.503350][T10204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.514111][ T5150] Bluetooth: hci3: command tx timeout [ 339.532897][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.554126][T10204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.656434][T10204] veth1_macvtap: left promiscuous mode [ 339.662003][T10204] veth0_macvtap: left promiscuous mode [ 339.684295][T10204] veth1_vlan: left promiscuous mode [ 339.694376][T10204] veth0_vlan: left promiscuous mode [ 340.460662][T10204] team0 (unregistering): Port device team_slave_1 removed [ 340.520616][T10204] team0 (unregistering): Port device team_slave_0 removed [ 341.051391][T11955] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.059150][T11955] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.067120][T11955] bridge_slave_0: entered allmulticast mode [ 341.074605][T11955] bridge_slave_0: entered promiscuous mode [ 341.082387][T11955] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.089731][T11955] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.096981][T11955] bridge_slave_1: entered allmulticast mode [ 341.104240][T11955] bridge_slave_1: entered promiscuous mode [ 341.232576][T11955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.268598][T11955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.468093][T11955] team0: Port device team_slave_0 added [ 341.496809][T11955] team0: Port device team_slave_1 added [ 341.585187][ T5150] Bluetooth: hci3: command tx timeout [ 341.602883][T11955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.610020][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.636575][T11955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.653061][T11955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.663291][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.698396][T11955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.832881][T11955] hsr_slave_0: entered promiscuous mode [ 341.857159][T11955] hsr_slave_1: entered promiscuous mode [ 341.868257][T11955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.883944][T11955] Cannot create hsr debugfs directory [ 342.241219][T12062] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1226'. [ 342.580256][T12069] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1229'. [ 342.826515][T11955] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 342.851969][T11955] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 342.914558][T11955] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 342.962626][T11955] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 343.179855][T11955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.252451][T11955] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.287298][T10191] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.294461][T10191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.365418][T10191] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.372589][T10191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.567676][T11955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.664311][ T5150] Bluetooth: hci3: command tx timeout [ 344.330223][T11955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.165878][T11955] veth0_vlan: entered promiscuous mode [ 345.208678][T11955] veth1_vlan: entered promiscuous mode [ 345.289453][T11955] veth0_macvtap: entered promiscuous mode [ 345.338667][T11955] veth1_macvtap: entered promiscuous mode [ 345.395678][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.411072][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.434430][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.455806][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.483964][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.501793][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.525188][T11955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.568754][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.594813][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.622732][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.653914][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.664582][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.693946][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.706076][T11955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.739389][T11955] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.749191][ T5150] Bluetooth: hci3: command tx timeout [ 345.784267][T11955] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.793026][T11955] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.814251][T11955] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.330595][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.351840][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.429595][T10201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.457498][T10201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.002535][T10204] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.271610][T10204] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.549769][T10204] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.761132][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.804477][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.818606][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.829866][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.838629][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 347.848101][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.925492][T10204] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.122285][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1254'. [ 348.184151][T12224] openvswitch: HfR: Dropping previously announced user features [ 348.359751][T10204] bridge_slave_1: left allmulticast mode [ 348.374589][T10204] bridge_slave_1: left promiscuous mode [ 348.381154][T10204] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.400618][T12230] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1255'. [ 348.412478][T12230] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1255'. [ 348.455157][T10204] bridge_slave_0: left allmulticast mode [ 348.460958][T10204] bridge_slave_0: left promiscuous mode [ 348.515840][T10204] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.794747][ T29] audit: type=1107 audit(8277292067.846:8): pid=12237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 349.554268][T10204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.586051][T10204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.645896][T10204] bond0 (unregistering): Released all slaves [ 349.774756][T10204] HfR: left promiscuous mode [ 349.850410][T10204] HSR: left promiscuous mode [ 349.904155][ T5150] Bluetooth: hci1: command tx timeout [ 350.057626][T12216] chnl_net:caif_netlink_parms(): no params data found [ 350.945986][T12216] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.969982][T12216] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.002825][T12216] bridge_slave_0: entered allmulticast mode [ 351.015147][T12216] bridge_slave_0: entered promiscuous mode [ 351.067668][T12216] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.095676][T12216] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.102930][T12216] bridge_slave_1: entered allmulticast mode [ 351.146466][T12216] bridge_slave_1: entered promiscuous mode [ 351.202738][T10204] hsr_slave_0: left promiscuous mode [ 351.210213][T10204] hsr_slave_1: left promiscuous mode [ 351.310403][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.331160][T10204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.355496][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.372668][T10204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.430919][T10204] veth1_macvtap: left promiscuous mode [ 351.454376][T10204] veth0_macvtap: left promiscuous mode [ 351.465407][T10204] veth1_vlan: left promiscuous mode [ 351.494519][T10204] veth0_vlan: left promiscuous mode [ 351.983994][ T5150] Bluetooth: hci1: command tx timeout [ 352.279431][T10204] team0 (unregistering): Port device team_slave_1 removed [ 352.343389][T10204] team0 (unregistering): Port device team_slave_0 removed [ 352.978536][T12322] [ 352.980904][T12322] ====================================================== [ 352.987971][T12322] WARNING: possible circular locking dependency detected [ 352.995008][T12322] 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 Not tainted [ 353.002131][T12322] ------------------------------------------------------ [ 353.009157][T12322] syz.1.1275/12322 is trying to acquire lock: [ 353.015581][T12322] ffffffff8fac53e8 (rtnl_mutex){+.+.}-{3:3}, at: ipv6_sock_ac_close+0xd9/0x110 [ 353.024588][T12322] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 353.024588][T12322] but task is already holding lock: [ 353.032046][T12322] ffff888028d666a8 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_clcsock_release+0x75/0xe0 [ 353.042434][T12322] [ 353.042434][T12322] which lock already depends on the new lock. [ 353.042434][T12322] [ 353.052854][T12322] [ 353.052854][T12322] the existing dependency chain (in reverse order) is: [ 353.061885][T12322] [ 353.061885][T12322] -> #2 (&smc->clcsock_release_lock){+.+.}-{3:3}: [ 353.070520][T12322] __mutex_lock+0x175/0x9c0 [ 353.075569][T12322] smc_switch_to_fallback+0x2d/0xa00 [ 353.081403][T12322] smc_sendmsg+0x13d/0x520 [ 353.086364][T12322] ____sys_sendmsg+0x9ae/0xb40 [ 353.091770][T12322] ___sys_sendmsg+0x135/0x1e0 [ 353.096986][T12322] __sys_sendmsg+0x117/0x1f0 [ 353.102119][T12322] do_syscall_64+0xcd/0x250 [ 353.107163][T12322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.113606][T12322] [ 353.113606][T12322] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 353.121358][T12322] lock_sock_nested+0x3a/0xf0 [ 353.126575][T12322] sockopt_lock_sock+0x54/0x70 [ 353.131880][T12322] do_ipv6_setsockopt+0x1f55/0x4800 [ 353.137625][T12322] ipv6_setsockopt+0xcb/0x170 [ 353.142854][T12322] udpv6_setsockopt+0x7d/0xd0 [ 353.148078][T12322] do_sock_setsockopt+0x222/0x480 [ 353.153649][T12322] __sys_setsockopt+0x1a4/0x270 [ 353.159057][T12322] __x64_sys_setsockopt+0xbd/0x160 [ 353.164712][T12322] do_syscall_64+0xcd/0x250 [ 353.169752][T12322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.176196][T12322] [ 353.176196][T12322] -> #0 (rtnl_mutex){+.+.}-{3:3}: [ 353.183432][T12322] __lock_acquire+0x250b/0x3ce0 [ 353.188834][T12322] lock_acquire.part.0+0x11b/0x380 [ 353.194493][T12322] __mutex_lock+0x175/0x9c0 [ 353.199539][T12322] ipv6_sock_ac_close+0xd9/0x110 [ 353.205026][T12322] inet6_release+0x47/0x70 [ 353.209985][T12322] sock_release+0x8e/0x1d0 [ 353.214948][T12322] smc_clcsock_release+0xb7/0xe0 [ 353.220426][T12322] __smc_release+0x5c2/0x880 [ 353.225562][T12322] smc_release+0x1fc/0x5f0 [ 353.230530][T12322] __sock_release+0xb0/0x270 [ 353.235667][T12322] sock_close+0x1c/0x30 [ 353.240360][T12322] __fput+0x3f6/0xb60 [ 353.244900][T12322] task_work_run+0x14e/0x250 [ 353.250038][T12322] do_exit+0xadd/0x2d70 [ 353.254738][T12322] do_group_exit+0xd3/0x2a0 [ 353.259798][T12322] get_signal+0x2658/0x26d0 [ 353.264845][T12322] arch_do_signal_or_restart+0x90/0x7e0 [ 353.270946][T12322] syscall_exit_to_user_mode+0x150/0x2a0 [ 353.277151][T12322] do_syscall_64+0xda/0x250 [ 353.282201][T12322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.288650][T12322] [ 353.288650][T12322] other info that might help us debug this: [ 353.288650][T12322] [ 353.298916][T12322] Chain exists of: [ 353.298916][T12322] rtnl_mutex --> sk_lock-AF_INET6 --> &smc->clcsock_release_lock [ 353.298916][T12322] [ 353.312586][T12322] Possible unsafe locking scenario: [ 353.312586][T12322] [ 353.320035][T12322] CPU0 CPU1 [ 353.325392][T12322] ---- ---- [ 353.330746][T12322] lock(&smc->clcsock_release_lock); [ 353.336121][T12322] lock(sk_lock-AF_INET6); [ 353.343153][T12322] lock(&smc->clcsock_release_lock); [ 353.351057][T12322] lock(rtnl_mutex); [ 353.355040][T12322] [ 353.355040][T12322] *** DEADLOCK *** [ 353.355040][T12322] [ 353.363179][T12322] 2 locks held by syz.1.1275/12322: [ 353.368369][T12322] #0: ffff8880235a2c08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x270 [ 353.378930][T12322] #1: ffff888028d666a8 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_clcsock_release+0x75/0xe0 [ 353.389818][T12322] [ 353.389818][T12322] stack backtrace: [ 353.395698][T12322] CPU: 0 UID: 0 PID: 12322 Comm: syz.1.1275 Not tainted 6.12.0-rc5-syzkaller-00330-ga33ab3f94f51 #0 [ 353.406459][T12322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.416598][T12322] Call Trace: [ 353.419883][T12322] [ 353.422807][T12322] dump_stack_lvl+0x116/0x1f0 [ 353.427661][T12322] print_circular_bug+0x419/0x5d0 [ 353.432689][T12322] check_noncircular+0x31a/0x400 [ 353.437629][T12322] ? __pfx_check_noncircular+0x10/0x10 [ 353.443109][T12322] ? lockdep_lock+0xc6/0x200 [ 353.447710][T12322] ? __pfx_lockdep_lock+0x10/0x10 [ 353.452741][T12322] __lock_acquire+0x250b/0x3ce0 [ 353.457607][T12322] ? __pfx___lock_acquire+0x10/0x10 [ 353.462814][T12322] ? __pfx___lock_acquire+0x10/0x10 [ 353.468022][T12322] lock_acquire.part.0+0x11b/0x380 [ 353.473141][T12322] ? ipv6_sock_ac_close+0xd9/0x110 [ 353.478258][T12322] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 353.483896][T12322] ? rcu_is_watching+0x12/0xc0 [ 353.488657][T12322] ? trace_lock_acquire+0x14a/0x1d0 [ 353.493854][T12322] ? ipv6_sock_ac_close+0xd9/0x110 [ 353.498974][T12322] ? lock_acquire+0x2f/0xb0 [ 353.503476][T12322] ? ipv6_sock_ac_close+0xd9/0x110 [ 353.508590][T12322] __mutex_lock+0x175/0x9c0 [ 353.513087][T12322] ? ipv6_sock_ac_close+0xd9/0x110 [ 353.518632][T12322] ? ipv6_sock_ac_close+0xd9/0x110 [ 353.523761][T12322] ? __pfx___mutex_lock+0x10/0x10 [ 353.528780][T12322] ? __pfx___mutex_lock+0x10/0x10 [ 353.533801][T12322] ? ipv6_sock_ac_close+0xd9/0x110 [ 353.538912][T12322] ? rtnl_lock+0x9/0x20 [ 353.543067][T12322] ipv6_sock_ac_close+0xd9/0x110 [ 353.548015][T12322] inet6_release+0x47/0x70 [ 353.552429][T12322] sock_release+0x8e/0x1d0 [ 353.556848][T12322] smc_clcsock_release+0xb7/0xe0 [ 353.561783][T12322] __smc_release+0x5c2/0x880 [ 353.566375][T12322] ? __pfx_sock_def_error_report+0x10/0x10 [ 353.572185][T12322] smc_release+0x1fc/0x5f0 [ 353.576603][T12322] __sock_release+0xb0/0x270 [ 353.581189][T12322] ? __pfx_sock_close+0x10/0x10 [ 353.586033][T12322] sock_close+0x1c/0x30 [ 353.590183][T12322] __fput+0x3f6/0xb60 [ 353.594166][T12322] task_work_run+0x14e/0x250 [ 353.598772][T12322] ? __pfx_task_work_run+0x10/0x10 [ 353.603888][T12322] ? do_raw_spin_unlock+0x172/0x230 [ 353.609095][T12322] do_exit+0xadd/0x2d70 [ 353.613251][T12322] ? get_signal+0x8fb/0x26d0 [ 353.617834][T12322] ? __pfx_do_exit+0x10/0x10 [ 353.622426][T12322] ? do_raw_spin_lock+0x12d/0x2c0 [ 353.627449][T12322] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 353.632815][T12322] do_group_exit+0xd3/0x2a0 [ 353.637316][T12322] get_signal+0x2658/0x26d0 [ 353.641814][T12322] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 353.647360][T12322] ? __pfx_get_signal+0x10/0x10 [ 353.652204][T12322] ? __pfx_do_futex+0x10/0x10 [ 353.656978][T12322] arch_do_signal_or_restart+0x90/0x7e0 [ 353.662527][T12322] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 353.668683][T12322] ? rcu_is_watching+0x12/0xc0 [ 353.673446][T12322] syscall_exit_to_user_mode+0x150/0x2a0 [ 353.679083][T12322] do_syscall_64+0xda/0x250 [ 353.683580][T12322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.689474][T12322] RIP: 0033:0x7f21abd7e719 [ 353.693882][T12322] Code: Unable to access opcode bytes at 0x7f21abd7e6ef. [ 353.700888][T12322] RSP: 002b:00007f21acc170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 353.709296][T12322] RAX: fffffffffffffe00 RBX: 00007f21abf35f88 RCX: 00007f21abd7e719 [ 353.717266][T12322] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f21abf35f88 [ 353.725229][T12322] RBP: 00007f21abf35f80 R08: 0000000000000000 R09: 0000000000000000 [ 353.733192][T12322] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f21abf35f8c [ 353.741154][T12322] R13: 0000000000000000 R14: 00007ffcb28f40c0 R15: 00007ffcb28f41a8 [ 353.749128][T12322] [ 353.754517][T12216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.349990][T10204] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.495796][T10204] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.570381][T10204] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.629195][T10204] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.707127][T10204] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.738676][T10204] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.789367][T10204] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.860474][T10204] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.976670][T10204] bridge_slave_1: left allmulticast mode [ 354.982353][T10204] bridge_slave_1: left promiscuous mode [ 354.988664][T10204] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.998783][T10204] bridge_slave_0: left allmulticast mode [ 355.004564][T10204] bridge_slave_0: left promiscuous mode [ 355.010231][T10204] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.019243][T10204] bridge_slave_1: left allmulticast mode [ 355.025159][T10204] bridge_slave_1: left promiscuous mode [ 355.030771][T10204] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.038674][T10204] bridge_slave_0: left allmulticast mode [ 355.045307][T10204] bridge_slave_0: left promiscuous mode [ 355.050944][T10204] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.059196][T10204] bridge_slave_1: left allmulticast mode [ 355.064936][T10204] bridge_slave_1: left promiscuous mode [ 355.070573][T10204] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.079033][T10204] bridge_slave_0: left allmulticast mode [ 355.084814][T10204] bridge_slave_0: left promiscuous mode [ 355.090708][T10204] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.308715][T10204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.318601][T10204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.328467][T10204] bond0 (unregistering): Released all slaves [ 355.337460][T10204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.347526][T10204] bond0 (unregistering): Released all slaves [ 355.359747][T10204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.371006][T10204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.381384][T10204] bond0 (unregistering): Released all slaves [ 355.433174][T10204] HfR: left promiscuous mode [ 355.475616][T10204] HfR: left promiscuous mode [ 355.981447][T10204] hsr_slave_0: left promiscuous mode [ 355.988933][T10204] hsr_slave_1: left promiscuous mode [ 355.996456][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.005460][T10204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.013101][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.022266][T10204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.033610][T10204] hsr_slave_0: left promiscuous mode [ 356.039763][T10204] hsr_slave_1: left promiscuous mode [ 356.047092][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.055581][T10204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.064781][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.072174][T10204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.081883][T10204] veth1_macvtap: left promiscuous mode [ 356.087484][T10204] veth0_macvtap: left promiscuous mode [ 356.096130][T10204] veth1_vlan: left promiscuous mode [ 356.101342][T10204] veth0_vlan: left promiscuous mode [ 356.107433][T10204] veth1_macvtap: left promiscuous mode [ 356.112917][T10204] veth0_macvtap: left promiscuous mode [ 356.118629][T10204] veth1_vlan: left promiscuous mode [ 356.124179][T10204] veth0_vlan: left promiscuous mode [ 356.262905][T10204] team_slave_1 (unregistering): left allmulticast mode [ 356.270539][T10204] team0 (unregistering): Port device team_slave_1 removed [ 356.291800][T10204] team_slave_0 (unregistering): left allmulticast mode [ 356.299310][T10204] team0 (unregistering): Port device team_slave_0 removed [ 356.380914][T10204] team0 (unregistering): left allmulticast mode [ 356.503263][T10204] team_slave_1 (unregistering): left promiscuous mode [ 356.510827][T10204] team_slave_1 (unregistering): left allmulticast mode [ 356.518669][T10204] team0 (unregistering): Port device team_slave_1 removed [ 356.542416][T10204] team_slave_0 (unregistering): left promiscuous mode [ 356.549463][T10204] team_slave_0 (unregistering): left allmulticast mode [ 356.557251][T10204] team0 (unregistering): Port device team_slave_0 removed [ 356.680609][T10204] team0 (unregistering): left allmulticast mode [ 357.403052][T10204] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.449586][T10204] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.500071][T10204] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.553187][T10204] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.650652][T10204] bridge_slave_1: left allmulticast mode [ 357.657016][T10204] bridge_slave_1: left promiscuous mode [ 357.662702][T10204] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.672444][T10204] bridge_slave_0: left allmulticast mode [ 357.678425][T10204] bridge_slave_0: left promiscuous mode [ 357.684429][T10204] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.779968][T10204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.791467][T10204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.802959][T10204] bond0 (unregistering): Released all slaves [ 357.951861][T10204] hsr_slave_0: left promiscuous mode [ 357.957781][T10204] hsr_slave_1: left promiscuous mode [ 357.963516][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.973020][T10204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.981773][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.994143][T10204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.003193][T10204] veth1_macvtap: left promiscuous mode [ 358.009103][T10204] veth0_macvtap: left promiscuous mode [ 358.015050][T10204] veth1_vlan: left promiscuous mode [ 358.020333][T10204] veth0_vlan: left promiscuous mode [ 358.151693][T10204] team0 (unregistering): Port device team_slave_1 removed [ 358.171190][T10204] team0 (unregistering): Port device team_slave_0 removed