last executing test programs: 29.441725377s ago: executing program 1 (id=1215): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioperm$auto(0xe0, 0x9, 0x5003fe) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0xb8a, &(0x7f0000000000)=@bpf_attr_7={@btf_id=0xc, 0x2, 0xaa}, 0xf4) munlock$auto(0x0, 0x6) (async) mq_unlink$auto(&(0x7f00000000c0)=':\x00') 25.019905064s ago: executing program 1 (id=1226): fsync$auto(0x7995) fsync$auto(0x6) fsync$auto(0x515) fsync$auto(0x1) fsync$auto(0x4) fsync$auto(0x6) fsync$auto(0x3) fsync$auto(0xc) fsync$auto(0x232) fsync$auto(0x4) fsync$auto(0x3) fsync$auto(0xf0000000) fsync$auto(0x2) fsync$auto(0x9) fsync$auto(0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x9}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '.I\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x80000001}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0xff}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '/.&&^\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x6}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2eb}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) fsync$auto(0x4) fsync$auto(0x5000) fsync$auto(0xfffff09d) fsync$auto(0x80) fsync$auto(0x9) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x110, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC_HINT={0x8a, 0xc8, "cd742a976e6052cf7ce529472749ebde2cdefc17f7af5f346f39eefff3427e736725c7e8f91bb4e57f82205d44cb40b491187a3b9b065d8ffc6600e535a3f6f08f196bd245a17aa29261df89788076a9f644e25da5cfe29abe27a8723158923a2c87b6409f284afcc42f33cadd397433af973b95c078c039c75ad35ca93775c191c1c38089bd"}, @NL80211_ATTR_QOS_MAP={0x6d, 0xc7, "2ac57e8b941f8a4fd5238e8dcf25b337a6418611e011d98ec26c2560a7b5d1ce6576c4db90af3e955810364e545718895be02f775ddaed53d83686052f0cf78454834e58cd214b57cb928bdc6c7d0bf002f6ae7b32fac550d14a20227392f98ef112e82ee30b96f321"}]}, 0x110}, 0x1, 0x0, 0x0, 0x48005}, 0x20000000) fsync$auto(0x400) fsync$auto(0x5) fsync$auto(0x1) sendmsg$auto_NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0x39, 0x136, "f23bf7585b58261e60897fa219d8bcf2440123858d4ec41d5e2fd64ec0b64994921a5ca016719af9f10476c4bcc9c44e6f004e08e0"}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x40}]}, 0x60}}, 0x8040) fsync$auto(0xffff) fsync$auto(0x8f4) 23.745869086s ago: executing program 1 (id=1233): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1cc6dfe900db86a83b2a232fd8ef3b7300000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250800000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x2000888c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="080027bd7000fddbdf257b00000008006a00faffffff0400460004006c0008"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4804) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x81, 0x2, 0x8000000000000000, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x261c2, 0x21) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) write$auto(0x3, 0x0, 0x296) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x1, 0x1ff, 0xdf, 0xebf, 0x40000000000a5, 0x7ffc) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x1, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="012dbd"], 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x20008000) syz_genetlink_get_family_id$auto_SMC_GEN_NETLINK(&(0x7f0000000000), r3) r4 = syz_genetlink_get_family_id$auto_MAC802154_HWSIM(&(0x7f0000000280), r3) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="8f632dbd7000fddbdf2505fffffe"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) mq_timedsend$auto(0x2, 0x0, 0x4, 0xf, &(0x7f00000000c0)={0x15c042e8}) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0x1}, 0x10a, 0x0, 0x0, 0x3ff}, 0xed7138c}, 0x200, 0x0) 10.805151364s ago: executing program 3 (id=1277): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1000, 0xffffffffffff0400, 0x15) syslog$auto(0x3, &(0x7f0000000040)='V/\x00', 0x7ff) dup2$auto(0x0, 0x3) semctl$auto(0x8, 0x2, 0x13, 0x9) pwritev2$auto(0x3, 0x0, 0x9, 0xffffffffffffffff, 0x2, 0xc) socket(0x28, 0x5, 0x0) settimeofday$auto(&(0x7f0000000180)={0x1ed5d7403, 0x1}, 0x0) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) read$auto(0x3, 0x0, 0x7) madvise$auto(0x0, 0x10001, 0x100000003) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fcntl$auto(0x0, 0x402, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) close_range$auto(0x1, 0x10, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x3000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000180)={0xa, @sockaddr_1_1={"79187eae67fbcc"}}, 0x55) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000040), r0) recvmmsg$auto(0x200, &(0x7f00000002c0)={{&(0x7f0000000100)="89f509300f565717f04de79fe8c992c406266036d1f65c285b32412d854cfb3cc2d8399560de78274f556dd1d512121b5c8a76dbc6f8b5147451a32918ccc595e9f4c333ce3d02de73bcbaa2e12f6c48ab21dc98e4ccef849eb65735c614f073d558fc35f670d8ea2787239f400f28c430ca70cd4c84900b7b9f34c9a63a393ac49db1a7893f02", 0x6, &(0x7f00000003c0)={&(0x7f00000001c0)="d4ad73954e55fc60c99277b36c080aa7c61c8886a841b20b9e4310706b49294c517e61146ae4fcb9461351a2f665d57014932c6523590a45d64644299b1fdd18009be35b9578370e8fa5a8394c6f252d356a182c4eaaefcb462b9719df09b5c26d6d", 0x6}, 0xbe, &(0x7f0000000400)="b13e8f1b0a2e65e401fd97011cf40f75e3098eadcdbaa45fb8b45d9ae06721b39fbb254e6971221d5468f83f58b763ef652d6bd28955b7e34d60cc84b8a0270b66edb3463aae5bfab041964997a7d409704be3a1e31959b61774bca5544b6a5d74da9990ae692eefe21c27d0d617d72e81a6ba8b63b3e8658fe87335ac1a0800385a9c62051639cd31790d219fc39fd56c08", 0x5, 0x7}, 0x2601}, 0xf3, 0xd8f, &(0x7f0000000300)={0x5, 0x100000000}) 7.729699941s ago: executing program 3 (id=1293): get_mempolicy$auto(0xfffffffffffffffe, 0xfffffffffffffffd, 0x2, 0x0, 0x1) madvise$auto(0x0, 0x2000040080000004, 0x50a) syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x8, 0xffffffffffff0009, 0x17) madvise$auto(0x0, 0x53, 0x9) (async) madvise$auto(0x0, 0x53, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf2502000000080003005e000000080001008d6f00004366ade1d081e423cd024570697fcde63cfec108bb32bad183264d957d7c9b7fd77843773a1257b43b14bd8dc050f5c6c10de7260b288f525edca9fee1899f584fbfc57a8100c652063d41faf967f947dd84b91a439f5b964ff962d2ebac09d61a96bd841d8414c5"], 0x24}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) socket(0xa, 0x2, 0x73) (async) r2 = socket(0xa, 0x2, 0x73) sendmsg$auto_NL80211_CMD_SET_PMK(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20080080}, 0x4044040) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0x1}, 0x10a, 0x0, 0x0, 0x3ff}, 0xed7138c}, 0x200, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0x1}, 0x10a, 0x0, 0x0, 0x3ff}, 0xed7138c}, 0x200, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) (async) ioctl$auto(0x3, 0x80000541b, 0x38) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x100, 0x4, 0x9, 0x408000000000010, 0x5, 0x597) (async) mmap$auto(0x100, 0x4, 0x9, 0x408000000000010, 0x5, 0x597) madvise$auto(0x1ffff000, 0x5510, 0x8) (async) madvise$auto(0x1ffff000, 0x5510, 0x8) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xc, 0x8000) clone$auto(0x8000000000000000, 0x104, 0xfffffffffffffffc, 0x0, 0x100000000) mmap$auto(0x4ab8df25, 0x9, 0x4, 0x16, 0x8, 0x2) madvise$auto(0x0, 0x3, 0x15) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x8000) 6.144052925s ago: executing program 2 (id=1297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000016c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000700), r0) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x74d8af7e}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x8080) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000000), r0) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001b4379f2528620627a88179766dbdf50de75f09084feb4a1cc6f60d9a27ebe5681178e32cc3fa8d27bbf952672b33f14fc89e856e54c1bf9133129e92371ba0eaab7b01c5adfeebfa4102acba65e34085c4aaeaa948e03cf02b7884268a3c02a5b8bf220b904006016695d0a0837f7b4059f2baba741ebc27e0e94795521bd62b506eb674b25c499dfe7c8bb5e03", @ANYRES16=r1, @ANYBLOB="050328bd7000fddbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), r0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x1, 0xfffffffffffff000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) r5 = socket(0x2b, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_STATION(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001900)={0x20, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x10) eventfd2$auto(0x6, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), r7) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r9, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r10, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NFSD_A_POOL_MODE_MODE={0xe, 0x1, 'ovs_meter\x00'}, @NFSD_A_POOL_MODE_MODE={0xb, 0x1, 'nlctrl\x00'}, @NFSD_A_POOL_MODE_MODE={0x6, 0x1, '#\x00'}, @NFSD_A_POOL_MODE_MODE={0x6, 0x1, '@\x00'}, @NFSD_A_POOL_MODE_MODE={0xb, 0x1, 'nlctrl\x00'}, @NFSD_A_POOL_MODE_MODE={0xb, 0x1, 'nlctrl\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$auto_NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x1fc, r8, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xf0, 0xbe, "e0860105a0baa96fef6befd88cb2e721525f0fd0afc031c3f86c790a7e32408a879b97ab73b8b96fb6e37176d419b1efdcd7f378d80040c193e0dd1ef1e079129723083cd89063b180434ba0a55f50f4871c40ff434e800e6082e2d1c447f5185256365fc09872649de8340db32f2952d25e20a1f61c644ed554094d3b74da88bbaec63f88cea027086893088d7da6d74193740268946d796f5d3909aa17ace346f253ef695409839b76df1cf914d202627d5c17a61dd3b27dc50fdcbd6f68791f0646e2dab0f73ce361091c4162b823131e9204a9f25c510584ba43b3dab321ec0f4f3ae35febe4d247effb"}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_MESH_CONFIG={0xcc, 0x23, "7866feb8c1aca0595dc609a6ede3a10fd456f0296d26afc8adcb6b55976701938365cd03920cb21f971e315588337b6daa79006ef9e848831580aedc0f245530f21551bce8e7912eb4771dc6515eea7499430f5d13d20fe99f9fee2e879016a5c49c4be925e6db39dc07432ebefd29f949e1045a7c1ad81a88dd42a127768c7d709d6b7c6c5da75e18e4ffb117edda683b583da6188cb19e99efeeb6e501777cad96a63308db99c161d445057f789e8b1836d488a43ebc60aa09d8a4ae31453ae9f80027d3fe53c1"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x14, 0x13, "cee2d6d58a2e9cfed7457364eee57f4f"}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8080}, 0x10) getsockopt$auto(0x6, 0x84, 0x7a, 0x0, &(0x7f0000000080)=0x9c8) sendmsg$auto_CTRL_CMD_GETFAMILY(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x9}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x8}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xb}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x7}, @CTRL_ATTR_FAMILY_NAME={0xb, 0x2, 'nlctrl\x00'}, @CTRL_ATTR_FAMILY_NAME={0xe, 0x2, 'ovs_meter\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20004004) 5.47848411s ago: executing program 2 (id=1299): keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) clone$auto(0x3, 0x3, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1b) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x5, 0xffff7ffffffffffd, 0x4, 0x10, 0x4, 0xa) ioctl$auto(0x6, 0x400454ce, 0x40000000005c8d) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x21, 0x2, 0x400482) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x2) prctl$auto(0x8, 0x80, 0xeb0, 0xffffffffffffffff, 0xff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x5, 0x104000000000010e, 0x20000c, 0x0, 0x18) sendfile$auto(0x6, 0x3, 0x0, 0xc01) write$auto(0x3, 0x0, 0x100082) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00\xcf_\xde,8\xf2\x88\xc7E\xddz\xde\x87\xc0\xe1B\xac.\xb6\xf6\x99\'\x92\x82a\r\xe6\xc9(9\xd3{\xed`\t\xd1\xf0)\xa7\xb0\xfb$J\"D\xcb4M\x19\be\x03@I\xc1\xb5\xad\xc5\xa3 {9\\\xa1Q`\x964 u\x8a\x96\xf7Y;\xd2G$\xab\xb9q\xe1\xe93\xe8\xe2\x95\xdb\r\xd3{9#\xc4/\xcfK\xf8\x00\x95\x85\xff\xd7\xb0\xee\xd4\xad\x85\xee\xcd\xb4\x02W\xb1\x12B\x92V\x90P\xe9\xf8K\x82\x98\xf8\x82\xda\xc5\xa7I\x8c6\x95u\x98IMG\x18\v0\x12\xa0\'P_1x\xe7c\xbe\x9d7\x02\x06M\xcd!\xfb,<\xc2\xc8\xe2\x12\x1e\xfdw\xd6G\xc7\xc5\x12\x80\xba\xfa3^\x1a\x19Y\xe5\xa11\xef\xa8\xfd \xd6', 0x0, 0x11ea0000, 0x0) socketpair$auto(0x6, 0x3, 0xd3, &(0x7f0000000040)=0x6) recvfrom$auto(0x4, 0x0, 0xee1c, 0x3ffffd, 0x0, 0x0) 4.089317873s ago: executing program 2 (id=1302): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0xfffffffffffffff6, 0x4, 0x5, 0x10004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_HSR(&(0x7f0000000dc0), 0xffffffffffffffff) socket(0xa, 0x801, 0x106) setsockopt$auto(0x400000000000003, 0x29, 0x14, 0x0, 0x56b) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0b6926bd7000fedbdf250300000008000200", @ANYRES32=0x0, @ANYBLOB="f2d95b7fae3e46c796ed85668d29b7db1e5248f93b0b836c945728b64a50bc578dd03010214f8a62428b9fd134f3b09b39f41cfd710cae208f14655a4f4d09ea44603aac45057fac82607c96e173fdc0b21fc1946cc5df75dbb0528cc5a6c8668f17c5eea0e7fa26c74cc82386ee6becc71f4a3c5795cd1d14d2d695af8018146e0dee029b9c90a4e78678bdfac35cef4bd75df57a079d293b3fd409c46569dfacaf9ae42eea309f2849b9b0c47612c261a5d6a788"], 0x1c}}, 0x4000) futex_waitv$auto(&(0x7f0000000000)={0xffffffffffffffff, 0xf4, 0x1, 0x4}, 0x77, 0x0, 0x0, 0x42bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x5, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x5, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x7, 0x7, 0x5, 0x5, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfffff654, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffffcd, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) select$auto(0xa, 0x0, &(0x7f0000000180)={[0x20000000000d, 0x203, 0x0, 0x10, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x5, 0x9]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) socket(0xa, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x4, 0x0, 0x7, 0x101, 0x3, 0x6, 0x2, 0x9, 0x45e58296f, 0x4000000000000000, 0x8, 0x3, 0xffffffffffffffff, 0xc, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x4, 0x7fffffff, 0x11, 0xfffffffffffffe00, 0xfffffffffffffff5) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x23, 0x18) mknod$auto(&(0x7f0000000200)='HSR\x00', 0x78b, 0x6) utimensat$auto(0x2875, 0xffffffffffffffff, 0x0, 0x6) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x10000000084, 0x71, 0x0, 0x8) 3.424951641s ago: executing program 0 (id=1303): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffdfff6, 0x9) clock_getres$auto(0x9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f00000000c0), 0xffffffffffffffff) socket(0x1e, 0x80805, 0x0) pipe2$auto(&(0x7f0000000000)=0x1, 0x3) sendmsg$auto_TIPC_NL_SOCK_GET(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000001700)={0x14, r1, 0x301, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x87}, 0x10000) prctl$auto(0x1000000003b, 0x7fffffffe, 0xbf, 0x205, 0x7f2a) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) futex$auto(0x0, 0x5, 0x3, 0x0, 0x0, 0x2000005) 3.293918764s ago: executing program 3 (id=1304): socket(0xa, 0x3, 0x100) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) socketpair$auto(0x3, 0x5, 0x7, 0x0) write$auto(0x3, 0x0, 0xfdef) 3.254017925s ago: executing program 0 (id=1305): mmap$auto(0x0, 0x8, 0xdf, 0x209b72, 0x4e477f5a, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigaction$auto(0x6, 0x0, 0x0, 0x8) r0 = socket(0x1, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000c80), r2) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x14, r3, 0x121, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000002900), r1) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002940)={0x14, r4, 0x1d, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$auto(0x6, &(0x7f0000000140)={0x1, @sa_data_min="2e00e79000000000000000043700"}, 0xd) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x40040) listen$auto(0x3, 0x81) 3.203099643s ago: executing program 0 (id=1306): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2a, 0x5, 0x106) setsockopt$auto(0x3, 0x1, 0x19, 0xffffffffffffffff, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfd, 0x0, 0xfffffffffffffffd) socket(0xa, 0x5, 0x0) socket(0x18, 0x5, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1e, 0x5, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0xa) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x0, 0x400008, 0xe3, 0x809b72, 0x0, 0x8000) socket(0xa, 0x2, 0x0) socket(0x11, 0x80003, 0x300) select$auto(0x3, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x0, 0xc, 0x8, 0x3, 0x6, 0x2, 0x9, 0x5e582970, 0x4000000000000000, 0x2, 0x4, 0x5, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"d9ef7f"}}, 0x55) write$auto(0x3, 0x0, 0x8) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x22, 0x5, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) move_pages$auto(0x0, 0xd0, &(0x7f0000001100)=0x0, 0x0, 0x0, 0x2) setsockopt$auto(0x7ffffffe, 0x43, 0x0, &(0x7f0000000100)='\b\x00\xd6$\x91\xf5t\x93\xcc\xe2H6\xa6\xd1N\xf7\x1d\xb1\xa2@\xfa\x9d\x91f\x1a\x13\xc6\x9a\x99Sp\xae\xe9Uj7\x8cw\xb5N\xe0L+ct\xd6t\b\x92O\x81BV\xb5\xca0\xeew\xf7}4\x94S\xdc\x97\x0f;n\x9c\x88i1\xd6\xd5\xe5\xc3\x97\x8eV\xec\x83A\xc31E\xd8z \x177\xdet}_~\xc5\xf7\x87\xacoZ\n\xed\xaf\x96\xe2\xb2f\x16\xf7\x99\xce\x89\xf6Z\xf6\xdd\a\xe9H\xe3\x15\xd7\"g\xcf\"\xf2\r\xe5\x85\x96,\xd4N\xcc\xb7f\x8e\x92\xff\xc8SF<[&J\x10G\xdd\tl4\x90\x8fb\xd7\x88\x00'/175, 0x5) fanotify_init$auto(0x4, 0x2000000002) write$auto(0x3, 0x0, 0x10001) write$auto(0xca, 0x0, 0x4) 2.901320986s ago: executing program 2 (id=1307): madvise$auto(0x0, 0x4, 0xa) unshare$auto(0x200) r0 = syz_open_procfs$namespace(0x0, 0x0) setns(r0, 0x0) socket(0xa, 0x806, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4ff0700"}, 0x55) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) read$auto(0x3, 0x0, 0x80) recvfrom$auto(0x3, 0x0, 0x142e, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb3, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYBLOB="04002d"], 0x14}, 0x1, 0x0, 0x0, 0x4004801}, 0x20) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000004c0), r1) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24040081}, 0x8040) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket(0x28, 0x1, 0xf2) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000300), r3) sendmsg$auto_TCP_METRICS_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r5, @ANYBLOB="010500bd7006000000250100000008000b00e000000208000100ff"], 0x24}, 0x1, 0x0, 0x0, 0x40004000}, 0x40000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2.888435381s ago: executing program 3 (id=1308): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x801, 0x106) (async) socket(0x10, 0x2, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) socket(0x28, 0x5, 0x0) settimeofday$auto(&(0x7f0000000180)={0x1ed5d7403, 0x1}, 0x0) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) (async, rerun: 32) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x36, 0x828, 0x9, 0x8000000000000000, 0x8, 0x7, 0x9, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0xf, 0x0, 0x9, 0x10001, 0x5, [0x9, 0x7f, 0x77, 0x1, 0x7fffffffffffffff, 0xe06, 0x400, 0x3, 0x80000000, 0x8, 0x3, 0xfffffffffffffff9, 0x10, 0x3, 0x35c4, 0x1, 0x6, 0x8, 0xea8, 0x8, 0xd9, 0x8, 0x5, 0x1, 0x200000000803, 0x9, 0x5, 0x401, 0x800, 0x8000000000000000, 0x2ab, 0x8, 0x7ff, 0x1, 0x1, 0x3, 0xffffffffffff0000, 0x6b, 0xfffffffffffffff9, 0x4, 0x2b7, 0x4, 0xf, 0xffffffffffffff26, 0xecc, 0x7fffffff, 0x6, 0x7d, 0xdc]}, 0xe3c, 0x0) (async) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfd, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) (async) socket(0x10, 0x3, 0x6) socket(0x22, 0x2, 0x2) (async, rerun: 64) setsockopt$auto(0x6, 0x8000000000000006, 0x3, 0x0, 0x7ffffc) (rerun: 64) ftruncate$auto(0x8000, 0xd) 2.272551093s ago: executing program 0 (id=1309): setreuid$auto(0x5, 0x6) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) setresuid$auto(0x2, 0x7, 0x8080) unshare$auto(0x100000000) shmget$auto(0x8, 0x10563, 0x568d1af2) 2.199785483s ago: executing program 0 (id=1310): unshare$auto(0x40000080) socket(0xb, 0xa, 0xb) r0 = socket(0x1, 0x1, 0x1) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) epoll_ctl$auto(0x7f, 0x7, 0x5, 0xfffffffffffffffe) remap_file_pages$auto(0x6a27, 0x0, 0x0, 0x3, 0x4) mlock2$auto(0x1, 0x8001, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mmap$auto(0x80000001, 0x8, 0xdd, 0x9b72, 0x1, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(0xfffffffffffffffe, 0xffffffffffffffff) readv$auto(0x3, 0x0, 0x400) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, {@u6_addr8="3e34545dc4f7ccb3b3507dcaf5de5313"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8004) r4 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), r0) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x5}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) keyctl$auto(0x5, 0xfffffffd, 0x8, 0x1, 0xb8b) keyctl$auto(0x7, 0xfffffffd, 0x2400005, 0x4, 0xd) mmap$auto(0x8, 0x7, 0x8000000000000002, 0x11, 0xd, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket$nl_generic(0x10, 0x3, 0x10) setresgid$auto(0x6, 0x7, 0x0) bind$auto(0x3, &(0x7f0000000140)={0x1, @sa_data_min="af7af2952a203b6cdd8c8f51372e"}, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fchown$auto(0x5, 0x8, 0x3) fcntl$auto(0x8000000000000001, 0x5, 0x8) 1.182075753s ago: executing program 2 (id=1311): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000080)={0x51c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_BEACON_HEAD={0x4f7, 0xe, "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"}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x9a}, @NL80211_ATTR_PBSS={0x4}]}, 0x51c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) msgrcv$auto(0x7, &(0x7f0000000640)={0x6, 0x6}, 0x6, 0x8, 0x6f85) r3 = syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000000680), r1) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r0) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa0, r4, 0x102, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x40}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6a, 0xbe, "0589e5fc060c7d3669e17ec4161e455070b1d18cd0799805094c2a109bf8419e6c3ba9e0f085226ad6bda408e6d54dba8afeab3938707a9fb5890c9a7557c781a17529112cae3e6820bd3adabe96ef3720f981284669ea7bd0e78c2569a6da52f4e0361c827f"}, @NL80211_ATTR_SCAN_SSIDS={0x12, 0x2d, "a746ea0d5ab7ed75c7c9ca459c86"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40608c0) fanotify_mark$auto(0x9, 0x8, 0x2, 0x3, &(0x7f0000000880)='802_15_4_MAC\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'veth0_to_team\x00'}) r6 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000940), r5) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x1}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x7}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x1}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0xd6}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x6}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x4}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048010}, 0x4000) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x25001000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1e0, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x6}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x11, 0x6e, "3bcaf731128f21017ff30fbbe9"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc2f}, @NL80211_ATTR_KEY={0xf6, 0x50, "b722b1d0f4a36c330cddc66f99cd0df60c0e73c306a42199e52782bcef34a2e1009a9743ff75e8426179650eadbbed863485e1e4bcfdd32dac5274a23a2e7a96dbbfb70ea20be752b4499dbfeae54fd330419d8a42f872bf731c9baffea4333991579927810a8e0d9dd55a2f2c17ee677b0e6fe8b2f5fc3746d4f93fda3a9ff78780a0680f24477fa3b58111ca892e2410a522e642d405f1edf2816f5518217464ad7e9a00d952e6629e5c4a5192d118a541ca44e12b0a1843a3f7fb37da4bec1ff46b557c788e7fe2d542f973c7d7bfe275cc0e7ddc87aab0e4f2206b293d5e14cd0eeb6ed28f4aa3cc1d405d31c57642dd"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xe0}, @NL80211_ATTR_FRAME_MATCH={0x74, 0x5b, "b4c41e342fc068efe4c84b350e3aa1de111c716042b323b07cf384fb6cd3d83d08a32baf068127fdb1ea76d0eaa52f89df4e84456c45fb2304cb202c5ddb5c0cbe5f04f592818c067fc980eaa0a97ace5bb1f2f950e2e812d99af807909c9918e975938ec3edc9cbc7b8ca2edcbf9b44"}, @NL80211_ATTR_VENDOR_DATA={0x23, 0xc5, "3a3de97cd1abd9836f4a0e90e1a402df3b536bf574efa62807f7666f1a58a9"}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x2}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20008094}, 0x840) memfd_create$auto(&(0x7f0000000d40)='veth0_to_team\x00', 0x8) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000001340)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001300)={&(0x7f0000000dc0)={0x540, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_FLAGS2={0x8c, 0x43, "7da3cc977b2420c7010846c2d85d18a18bb20996577de795c38bfbcacf7df94da7a817c46f7d1564c2ef30ce1999dda2f54446ac83757f5cb74dfd1b26de257026baf1dea646ec390adeedff04dee314504366695bb7a71360717ebb380d527a6e71c8e5fed6165281dfe7910415035f9fbd0a0f79b545a9b9006999cbc973039bbaa1f5de18732e"}, @NL80211_ATTR_S1G_CAPABILITY={0x34, 0x128, "ba682b47e2bd8df676817682e68c4faf5d36aa024ec1cea1472315bbae178bce6bcf1c92c2f62f5cdbb5db42c06e1be9"}, @NL80211_ATTR_SSID={0xd, 0x34, "b51bd5581bb995d0d5"}, @NL80211_ATTR_FRAME={0x440, 0x33, "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"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xa}]}, 0x540}, 0x1, 0x0, 0x0, 0x8080}, 0x10) quotactl$auto(0x1, &(0x7f0000001380)=']\x00', 0x0, &(0x7f00000013c0)="3bfe4f3ab83155e9af818483af3d73c77b3e85436d85951d6b8125b9d58fd79fc3c98ab9785a7b339395898c62737df3166dbd2673c89f5410dce5cf556b2ef0840a9a5fceef6b37a05350706887597444d77a45a458f10621a4d1781f967668c9570c0538ee25453619710580d379414d7f0c1a3d228c7f49e5caf20109a9c44a33aeae6208ebe4eec20d176d2e0036bca107df53fabe9307397c401aa17b8d61e8806bbd9847cddc78526fa204f576475f5beca6af2dd5a5e7e4b839c1d3312649d355118af466977cdc5c95b3b776ddc6a4b4be2755b20722fd8771a810f48cc48fc53a3551c0345f") sendmsg$auto_IEEE802154_ADD_IFACE(r5, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x3c, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, 0xd5b5}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000001600), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001740)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0x94, r7, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x4}, @HWSIM_ATTR_COOKIE={0xc, 0x8, 0x2}, @HWSIM_ATTR_CIPHER_SUPPORT={0x69, 0x18, "2d0754caf6d7bb6310f7cf865ba934010d4933731d3e3a468affc72d0bd6bec08d421a24156f3f60342dbce588b733a4605c1962a0a6462e29a755caeeb7af1c938cd68950ee46c2b7ac414e139848cac88731c9b85c197bd310d1de9b62add28b57e1ac4e"}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) close_range$auto(0x0, 0x8, 0x800) sendmsg$auto_NL80211_CMD_SET_PMK(r0, &(0x7f0000001a00)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x69fd5851ea2890ea}, 0xc, &(0x7f00000019c0)={&(0x7f00000017c0)={0x1e0, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x6}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x73, 0x21, "1f92e5e29b97085043e3d238c56c843fe8fb7811754e802fa3d7b3c9c1a07ed266c711c4fe36b05cdb032bf1187b32f3c334212a62434253453aac9e7ac446fc538dada774a6068058c4327d3030a7e871142ab49a3a22b11aac93b3b5a310e10bcd66fafb04f7a6b320a4e9e981ae"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0xe1, 0x2a, "0a795c55032df6a2940b559aedf67eee7d7e59b421a20e57dbd1010372e35ad7a6ddbb903c9b33a97aaf04aa504e5239f08bd740469e7211adeb8652acd5778836df55ba6cd8f3ffb65d14d71de3fa5b6972eded0f98066fb06b840d32f8d0adecdec947d9a67adaed4c94d3afe2d2e4530ed132c3b87bae1fb714e4e5a6400b88740fb9360deb50bb24b958706b227d9ee84c24085fc68b55d20fa34e8460b97e73a23d6b92d99e2c4c53919df5a2150eec2aad8d8fb90515015113d235fea16cc18416bea13f68d3883cc880ed76e4eb949e2904d35b00426566a353"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xc}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, "96956ebe7f1e7a75516916c2566e7031ba2c056e88bc639c9911ddba13589c5a59376c41c3a73b0d0c9c5ccf9c602090c4b2e1ff744ddf10cad60f6424047520b01ea161a6a5e99c1359f437bcc929bfc08eb36e"}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40040}, 0x800) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001a80), r5) sendmsg$auto_NL80211_CMD_COLOR_CHANGE_REQUEST(r1, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x30, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_TID_CONFIG={0x11, 0x11d, "8daab09b9aaaf917708bd52241"}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0xbf4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008804}, 0x20000000) prctl$auto(0x7, 0x9, 0x1, 0x8, 0x1) sched_setattr$auto(0x10, &(0x7f0000001b80)={0x4, 0x7bf, 0xe45, 0x80000001, 0x5, 0x6000000, 0x9, 0x2, 0x5, 0x101}, 0xb3) splice$auto(0x0, &(0x7f0000001bc0)=0x4, 0x8, &(0x7f0000001c00)=0x2, 0x0, 0x4) socket(0x15, 0x80000, 0x4) recvmmsg$auto(0xfffffffb, &(0x7f0000001f00)={{&(0x7f0000001c40)="1fdf74418504b731124c9ca2261f0e32384ea0c51c1be8dd2294a5fba73b6ccad5df0fffbca13a3b0f312065b9293c8dec4315e5cefc6bee7e90742c4da23578af6768b83eadd3df57861223e0d96d2bf7ae1540140ffc8e", 0x6, &(0x7f0000001dc0)={&(0x7f0000001cc0)="51be08930e967173ae8f9b986990897d60b4fbd0ad3d6776e1716c30729e1cda5f37f420d9e0242790c18819e64a7542234a97b6367596d56fec2156d613b17ebd90d673c4c51836f8cfd6445ab7adade8ed44ac97f79d09f80de5336622163f7375444065a1183204a69ac43f69bc790a92c430cedd5cd7d980bfddbf9050681c0745b5c3a7c9f3473b2a952676e8dae358658eaec972a694469f412441cfbd27c3b9add1b45a4ea1a4faae18981e86f4b9f152fb985d548b6b8408e4eac6493f45eafc95b87b086ee74687fa1c894cdb9fb61f", 0x86f}, 0x7, &(0x7f0000001e00)="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", 0xffffffff, 0x3}}, 0xffffffff, 0x2, &(0x7f0000001f40)={0x400, 0x9}) fanotify_mark$auto(0x5, 0x5, 0x81, 0x5, &(0x7f0000001f80)='veth0_to_team\x00') 1.073736855s ago: executing program 1 (id=1264): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) write$auto(0x3, 0x0, 0x296) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x101, 0x1ff, 0x200, 0xc, 0x2) pidfd_open$auto(0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd77dcb7fcdf250300000001000000000000000100"], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x10000000) 875.704005ms ago: executing program 2 (id=1312): mmap$auto(0x94f, 0x400008, 0xdf, 0x9b72, 0x2, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) utimensat$auto(0x7fff, 0x0, 0x0, 0x7ff) mq_timedsend$auto(0x7, &(0x7f0000000080)='}[,&*}\x00', 0x2, 0x8aac, &(0x7f00000000c0)={0x81, 0x1}) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, 0x0, 0x0) faccessat2$auto(0x1, &(0x7f0000000040)='\x00', 0x4, 0x1000) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400005, 0x9bbc, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) utime$auto(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd77dcb7fcdf25030000003f000000011f"], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x10000000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) utimensat$auto(0x7fff, 0x0, 0x0, 0x7ff) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, 0x0, 0x0) faccessat2$auto(0x1, &(0x7f0000000040)='\x00', 0x4, 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) 842.211041ms ago: executing program 1 (id=1313): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x58, 0x5, 0x0, 0xfffffffffffffffc, 0x6) mmap$auto(0xee6a, 0x9, 0x1000000004, 0x9b72, 0x4002, 0x8080) clone$auto(0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x0, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) 442.888319ms ago: executing program 1 (id=1314): madvise$auto(0x0, 0x2000040080000004, 0xe) futex_waitv$auto(0xffffffffffffffff, 0x1004, 0x8, 0xfffffffffffffffd, 0x7) mmap$auto(0x0, 0x4, 0x4000000000df, 0x17, 0x402, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x1, 0x2000000000003, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x40000000084, 0x82, 0xfffffffffffffffe, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0x3b, 0xf99b, 0x6) preadv2$auto(0x100000000, 0xfffffffffffffffc, 0x2, 0x400, 0xfffffffffffffffe, 0x400) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_ECHOREQ(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001b92bd0f3e62752f54d19ffe1ccf527297dafd6be0a8251e63611ee7a2c171a91fdb0b6a16eab820439a58070fe5416573bd7d780cb8ce56f229341c7c66e10f9ab087797aa025b25e3976dac655c4bbea7d238e4310d67e91f8e38cebd984fbd49f926362eca9d6db85c0b8f3b3634d6c15a8821482a6f670ebae0aaed43bad912d6288692d8490eacb017e8920642d76003b563639eb", @ANYRES16=r2, @ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x4040012}, 0x40800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x80000, 0x9) poll$auto(0x0, 0x2, 0xc) getdents$auto(0x600000000, 0xfffffffffffffffd, 0xd00) setsockopt$auto(0x3, 0x29, 0x39, 0xffffffffffffffff, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x3, 0x6) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) clone$auto(0x0, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x9) pipe2$auto(0x0, 0x80) 368.015114ms ago: executing program 3 (id=1315): socket(0xa, 0x3, 0x100) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0x0, 0x1ff, 0x800000000000008, 0xe, 0x9, 0xfffffffffffffff9, 0x9, 0xfffffffffffffffe, 0x9c, 0x5e582972, 0x4000000200000000, 0x12, 0x94, 0xffffffffffffff17, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) socketpair$auto(0x3, 0x5, 0x7, 0x0) write$auto(0x3, 0x0, 0xfdef) 150.640322ms ago: executing program 0 (id=1316): r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x2, 0x800, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x780) clock_settime$auto(0x0, &(0x7f0000000000)={0x100000000, 0x6}) mmap$auto(0x0, 0x8, 0xdf, 0x209b72, 0x4e477f5a, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mq_timedsend$auto(0x9, 0xfffffffffffffffe, 0x3, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r0) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000001400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="88110000", @ANYRES16=r3, @ANYBLOB="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"], 0x1188}, 0x1, 0x0, 0x0, 0x4004854}, 0x4) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24044810}, 0x20004881) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000000), r4) 0s ago: executing program 3 (id=1317): keyctl$auto(0x10, 0x0, 0x9, 0x5, 0x80000003) keyctl$auto(0x6, 0x1, 0x101, 0x401, 0x7fffffff) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x8, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) prctl$auto(0x41, 0x101, 0x2, 0x0, 0x8) r0 = getpid() socket(0xa, 0x2, 0x6) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/cgroup\x00') kernel console output (not intermixed with test programs): 2 family 0 port 6081 - 0 [ 165.654369][ T7445] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.687372][ T7445] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.079165][ T5546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.087015][ T5546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.207651][ T5552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.215520][ T5552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.420425][ T5549] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.522282][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.544733][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.552777][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.587723][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.595901][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 166.605333][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.720373][ T5549] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.905605][ T5549] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.966032][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.988786][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.004084][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.013255][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.026361][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 167.035759][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.080104][ T5549] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.590351][ T5549] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.748572][ T7691] chnl_net:caif_netlink_parms(): no params data found [ 167.852790][ T5549] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.026314][ T5549] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.290672][ T5549] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.559344][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.566514][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.606513][ T7691] bridge_slave_0: entered allmulticast mode [ 168.622841][ T7691] bridge_slave_0: entered promiscuous mode [ 168.641028][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.671213][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.687709][ T7691] bridge_slave_1: entered allmulticast mode [ 168.698655][ T7691] bridge_slave_1: entered promiscuous mode [ 168.730264][ T5239] Bluetooth: hci2: command tx timeout [ 168.782663][ T7691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.865767][ T7707] chnl_net:caif_netlink_parms(): no params data found [ 168.895659][ T7691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.062493][ T7691] team0: Port device team_slave_0 added [ 169.116376][ T7691] team0: Port device team_slave_1 added [ 169.127745][ T5239] Bluetooth: hci3: command tx timeout [ 169.291034][ T5549] bridge_slave_1: left allmulticast mode [ 169.296741][ T5549] bridge_slave_1: left promiscuous mode [ 169.327513][ T5549] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.367746][ T5549] bridge_slave_0: left allmulticast mode [ 169.378010][ T5549] bridge_slave_0: left promiscuous mode [ 169.383880][ T5549] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.455282][ T5549] bridge_slave_1: left allmulticast mode [ 169.478097][ T5549] bridge_slave_1: left promiscuous mode [ 169.483869][ T5549] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.516332][ T5549] bridge_slave_0: left allmulticast mode [ 169.527741][ T5549] bridge_slave_0: left promiscuous mode [ 169.533681][ T5549] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.408038][ T5549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.425101][ T5549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.435473][ T5549] bond0 (unregistering): Released all slaves [ 170.525767][ T5549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.536474][ T5549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.547781][ T5549] bond0 (unregistering): Released all slaves [ 170.595992][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.608600][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.648756][ T7691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.670476][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.685178][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.717686][ T7691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.812597][ T5239] Bluetooth: hci2: command tx timeout [ 170.956462][ T7707] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.972159][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.004600][ T7707] bridge_slave_0: entered allmulticast mode [ 171.016042][ T7707] bridge_slave_0: entered promiscuous mode [ 171.082625][ T7691] hsr_slave_0: entered promiscuous mode [ 171.107936][ T7691] hsr_slave_1: entered promiscuous mode [ 171.115067][ T7691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.124065][ T7691] Cannot create hsr debugfs directory [ 171.137381][ T7707] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.144579][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.157505][ T7707] bridge_slave_1: entered allmulticast mode [ 171.164647][ T7707] bridge_slave_1: entered promiscuous mode [ 171.211992][ T5239] Bluetooth: hci3: command tx timeout [ 171.378620][ T7707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.421738][ T7707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.676420][ T7707] team0: Port device team_slave_0 added [ 171.740392][ T7707] team0: Port device team_slave_1 added [ 171.830919][ T7868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.554'. [ 171.843249][ T7868] netlink: 32 bytes leftover after parsing attributes in process `syz.0.554'. [ 172.063158][ T5549] hsr_slave_0: left promiscuous mode [ 172.085367][ T5549] hsr_slave_1: left promiscuous mode [ 172.106899][ T5549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.114738][ T5549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.143851][ T5549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.153337][ T5549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.168375][ T5549] hsr_slave_0: left promiscuous mode [ 172.187096][ T5549] hsr_slave_1: left promiscuous mode [ 172.211302][ T5549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.226241][ T5549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.254470][ T5549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.263122][ T5549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.302668][ T5549] veth1_macvtap: left promiscuous mode [ 172.308466][ T5549] veth0_macvtap: left promiscuous mode [ 172.314097][ T5549] veth1_vlan: left promiscuous mode [ 172.320255][ T5549] veth0_vlan: left promiscuous mode [ 172.335934][ T5549] veth1_macvtap: left promiscuous mode [ 172.341718][ T5549] veth0_macvtap: left promiscuous mode [ 172.347407][ T5549] veth1_vlan: left promiscuous mode [ 172.352906][ T5549] veth0_vlan: left promiscuous mode [ 172.853129][ T5549] team0 (unregistering): Port device team_slave_1 removed [ 172.890678][ T5239] Bluetooth: hci2: command tx timeout [ 172.900112][ T5549] team0 (unregistering): Port device team_slave_0 removed [ 173.287531][ T5239] Bluetooth: hci3: command tx timeout [ 173.515145][ T5549] team0 (unregistering): Port device team_slave_1 removed [ 173.554966][ T5549] team0 (unregistering): Port device team_slave_0 removed [ 173.913033][ T7707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.920405][ T7707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.947106][ T7707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.982406][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 173.995275][ T7707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.006613][ T7707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.034876][ T7707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.169641][ T7707] hsr_slave_0: entered promiscuous mode [ 174.184605][ T7707] hsr_slave_1: entered promiscuous mode [ 174.218220][ T7707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.225924][ T7707] Cannot create hsr debugfs directory [ 174.878354][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.887442][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.896247][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.904839][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.913485][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 174.921003][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.927891][ T7691] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.968513][ T5233] Bluetooth: hci2: command tx timeout [ 175.010546][ T7691] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.038223][ T7691] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.142014][ T7691] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.221888][ T7691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.243306][ T7691] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.254567][ T5566] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.261719][ T5566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.381653][ T5566] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.388849][ T5566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.398627][ T5233] Bluetooth: hci3: command tx timeout [ 175.577045][ T5549] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.706769][ T5549] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.781879][ T7707] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.794855][ T7707] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.856136][ T5549] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.879895][ T7707] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.906411][ T7899] chnl_net:caif_netlink_parms(): no params data found [ 175.962375][ T5549] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.032658][ T7707] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.107152][ T7707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.124330][ T7707] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.157287][ T7707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.167790][ T7707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.234551][ T5546] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.241754][ T5546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.250898][ T5546] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.258056][ T5546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.318125][ T7899] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.325250][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.340093][ T7899] bridge_slave_0: entered allmulticast mode [ 176.363634][ T7899] bridge_slave_0: entered promiscuous mode [ 176.445840][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.454411][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.462482][ T7899] bridge_slave_1: entered allmulticast mode [ 176.472889][ T7899] bridge_slave_1: entered promiscuous mode [ 176.633929][ T7899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.665968][ T7899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.695844][ T5549] bridge_slave_1: left allmulticast mode [ 176.706396][ T5549] bridge_slave_1: left promiscuous mode [ 176.717045][ T5549] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.745681][ T5549] bridge_slave_0: left allmulticast mode [ 176.757234][ T5549] bridge_slave_0: left promiscuous mode [ 176.763043][ T5549] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.968029][ T5233] Bluetooth: hci0: command tx timeout [ 177.214609][ T5549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.233251][ T5549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.245136][ T5549] bond0 (unregistering): Released all slaves [ 177.279447][ T7707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.300495][ T7691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.399257][ T7899] team0: Port device team_slave_0 added [ 177.432793][ T7899] team0: Port device team_slave_1 added [ 177.467617][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.474651][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.501032][ T7899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.559140][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.570418][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.597365][ T7899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.696607][ T7707] veth0_vlan: entered promiscuous mode [ 177.751828][ T5549] hsr_slave_0: left promiscuous mode [ 177.768125][ T5549] hsr_slave_1: left promiscuous mode [ 177.778694][ T5549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.786236][ T5549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.808331][ T5549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.815788][ T5549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.855527][ T5549] veth1_macvtap: left promiscuous mode [ 177.863540][ T5549] veth0_macvtap: left promiscuous mode [ 177.869932][ T5549] veth1_vlan: left promiscuous mode [ 177.875284][ T5549] veth0_vlan: left promiscuous mode [ 178.055601][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.071106][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.083133][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.110266][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.119567][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 178.129165][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.435380][ T5549] team0 (unregistering): Port device team_slave_1 removed [ 178.472830][ T5549] team0 (unregistering): Port device team_slave_0 removed [ 178.814906][ T7899] hsr_slave_0: entered promiscuous mode [ 178.822203][ T7899] hsr_slave_1: entered promiscuous mode [ 178.830096][ T7899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.843091][ T7899] Cannot create hsr debugfs directory [ 178.872938][ T7691] veth0_vlan: entered promiscuous mode [ 178.886234][ T7707] veth1_vlan: entered promiscuous mode [ 178.912238][ T7691] veth1_vlan: entered promiscuous mode [ 179.039664][ T7707] veth0_macvtap: entered promiscuous mode [ 179.048794][ T5239] Bluetooth: hci0: command tx timeout [ 179.114060][ T7707] veth1_macvtap: entered promiscuous mode [ 179.173588][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.186156][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.205801][ T7707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.235731][ T7707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.253549][ T7707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.266259][ T7707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.280726][ T7691] veth0_macvtap: entered promiscuous mode [ 179.312856][ T7691] veth1_macvtap: entered promiscuous mode [ 179.356363][ T7707] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.375892][ T7707] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.386537][ T7707] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.401736][ T7707] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.520648][ T7691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.532471][ T7691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.543567][ T7691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.554968][ T7691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.566492][ T7691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.595952][ T7964] chnl_net:caif_netlink_parms(): no params data found [ 179.614313][ T7691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.625098][ T7691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.635444][ T7691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.646565][ T7691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.658837][ T7691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.695772][ T5549] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.780010][ T7691] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.789007][ T7691] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.798294][ T7691] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.809895][ T7691] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.843096][ T5549] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.933224][ T5549] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.951251][ T5564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.960917][ T5564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.008566][ T5549] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.041607][ T7964] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.056385][ T7964] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.063759][ T7964] bridge_slave_0: entered allmulticast mode [ 180.072728][ T7964] bridge_slave_0: entered promiscuous mode [ 180.081797][ T7964] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.089858][ T7964] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.097057][ T7964] bridge_slave_1: entered allmulticast mode [ 180.104115][ T7964] bridge_slave_1: entered promiscuous mode [ 180.151098][ T7964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.163623][ T7964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.216133][ T5566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.225685][ T5566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.247856][ T5239] Bluetooth: hci1: command tx timeout [ 180.255480][ T7964] team0: Port device team_slave_0 added [ 180.283632][ T7964] team0: Port device team_slave_1 added [ 180.382081][ T7964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.389299][ T7964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.415688][ T7964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.429304][ T7964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.436274][ T7964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.462256][ T7964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.575587][ T7899] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.597097][ T7899] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.620494][ T5546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.635675][ T5546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.655625][ T5549] bridge_slave_1: left allmulticast mode [ 180.662814][ T5549] bridge_slave_1: left promiscuous mode [ 180.674438][ T5549] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.695717][ T5549] bridge_slave_0: left allmulticast mode [ 180.712680][ T5549] bridge_slave_0: left promiscuous mode [ 180.721959][ T5549] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.124094][ T5549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.137329][ T5239] Bluetooth: hci0: command tx timeout [ 181.144934][ T5549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.156525][ T5549] bond0 (unregistering): Released all slaves [ 181.176539][ T7964] hsr_slave_0: entered promiscuous mode [ 181.183219][ T7964] hsr_slave_1: entered promiscuous mode [ 181.196339][ T7964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.204306][ T7964] Cannot create hsr debugfs directory [ 181.222951][ T7899] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.315813][ T7899] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.385298][ T5534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.407671][ T5534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.056358][ T5549] hsr_slave_0: left promiscuous mode [ 182.127477][ T5549] hsr_slave_1: left promiscuous mode [ 182.154522][ T5549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.172205][ T5549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.193580][ T5549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.211425][ T5549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.249517][ T5549] veth1_macvtap: left promiscuous mode [ 182.255736][ T5549] veth0_macvtap: left promiscuous mode [ 182.262162][ T5549] veth1_vlan: left promiscuous mode [ 182.274441][ T5549] veth0_vlan: left promiscuous mode [ 182.327761][ T5239] Bluetooth: hci1: command tx timeout [ 183.079412][ T5549] team0 (unregistering): Port device team_slave_1 removed [ 183.101771][ T8036] Process accounting resumed [ 183.136192][ T5549] team0 (unregistering): Port device team_slave_0 removed [ 183.209638][ T5239] Bluetooth: hci0: command tx timeout [ 183.926448][ T7899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.058956][ T7899] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.083415][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.090597][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.122858][ T5566] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.130116][ T5566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.236893][ T7899] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.272371][ T7899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.413918][ T5239] Bluetooth: hci1: command tx timeout [ 184.499890][ T7964] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 184.552814][ T7964] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 184.601578][ T7964] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.636944][ T7964] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 184.856458][ T8080] FAULT_INJECTION: forcing a failure. [ 184.856458][ T8080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.893626][ T7899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.896613][ T8080] CPU: 0 UID: 0 PID: 8080 Comm: syz.3.578 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 184.911011][ T8080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 184.921092][ T8080] Call Trace: [ 184.924391][ T8080] [ 184.927346][ T8080] dump_stack_lvl+0x16c/0x1f0 [ 184.932057][ T8080] should_fail_ex+0x497/0x5b0 [ 184.936776][ T8080] _copy_to_user+0x30/0xc0 [ 184.941232][ T8080] simple_read_from_buffer+0xd0/0x160 [ 184.946645][ T8080] proc_fail_nth_read+0x198/0x270 [ 184.951707][ T8080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.957305][ T8080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.962886][ T8080] vfs_read+0x1ce/0xbd0 [ 184.967076][ T8080] ? __fget_files+0x23a/0x3f0 [ 184.971783][ T8080] ? fdget_pos+0x24c/0x360 [ 184.976225][ T8080] ? __pfx_lock_release+0x10/0x10 [ 184.981280][ T8080] ? trace_lock_acquire+0x14a/0x1d0 [ 184.986511][ T8080] ? __pfx_vfs_read+0x10/0x10 [ 184.991222][ T8080] ? __pfx___mutex_lock+0x10/0x10 [ 184.996290][ T8080] ? __fget_files+0x244/0x3f0 [ 185.001001][ T8080] ksys_read+0x12f/0x260 [ 185.005275][ T8080] ? __pfx_ksys_read+0x10/0x10 [ 185.009733][ T7899] veth0_vlan: entered promiscuous mode [ 185.010056][ T8080] do_syscall_64+0xcd/0x250 [ 185.020032][ T8080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.025958][ T8080] RIP: 0033:0x7f53f117ca3c [ 185.030395][ T8080] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 185.036408][ T7964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.050003][ T8080] RSP: 002b:00007f53f1f0b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.050034][ T8080] RAX: ffffffffffffffda RBX: 00007f53f1335f80 RCX: 00007f53f117ca3c [ 185.050049][ T8080] RDX: 000000000000000f RSI: 00007f53f1f0b0a0 RDI: 0000000000000004 [ 185.050063][ T8080] RBP: 00007f53f1f0b090 R08: 0000000000000000 R09: 0000000000000000 [ 185.050077][ T8080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.050091][ T8080] R13: 0000000000000000 R14: 00007f53f1335f80 R15: 00007ffdbec34fa8 [ 185.050121][ T8080] [ 185.164163][ T7899] veth1_vlan: entered promiscuous mode [ 185.220756][ T7899] veth0_macvtap: entered promiscuous mode [ 185.333156][ T7899] veth1_macvtap: entered promiscuous mode [ 185.349451][ T7964] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.374034][ T5546] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.381218][ T5546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.522987][ T5546] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.530186][ T5546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.592918][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.618573][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.635412][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.657264][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.669244][ T7899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.739897][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.760776][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.777879][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.808886][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.838468][ T7899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.900928][ T7899] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.936608][ T7899] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.968699][ T7899] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.997587][ T7899] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.194807][ T5549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.220293][ T5549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.291623][ T5564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.327275][ T5564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.492249][ T5239] Bluetooth: hci1: command tx timeout [ 186.521499][ T7964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.665437][ T7964] veth0_vlan: entered promiscuous mode [ 186.695301][ T7964] veth1_vlan: entered promiscuous mode [ 186.741468][ T7964] veth0_macvtap: entered promiscuous mode [ 186.755978][ T7964] veth1_macvtap: entered promiscuous mode [ 186.834337][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.860980][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.886675][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.911159][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.924116][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.938864][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.955877][ T7964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.990172][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.011779][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.025209][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.040206][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.053964][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.081625][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.106476][ T7964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.133746][ T7964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.149004][ T7964] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.162298][ T7964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.191159][ T7964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.315853][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.338315][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.418713][ T5564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.426573][ T5564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.817386][ T8161] net_ratelimit: 8 callbacks suppressed [ 189.817408][ T8161] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 190.271409][ T29] audit: type=1326 audit(8277262397.360:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53f117dff9 code=0x0 [ 191.489428][ T8205] svc: failed to register nfsdv3 RPC service (errno 111). [ 191.498210][ T8205] svc: failed to register nfsaclv3 RPC service (errno 111). [ 191.995544][ T8220] netlink: zone id is out of range [ 192.027369][ T8220] netlink: zone id is out of range [ 192.032538][ T8220] netlink: zone id is out of range [ 192.052734][ T8220] netlink: zone id is out of range [ 192.067326][ T8220] netlink: zone id is out of range [ 192.072543][ T8220] netlink: zone id is out of range [ 192.087705][ T8220] netlink: zone id is out of range [ 192.098697][ T8220] netlink: zone id is out of range [ 194.490314][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.496656][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.756469][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 197.786651][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 201.006146][ T5566] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.180536][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.206333][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.217473][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 201.227059][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.237353][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 201.245063][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.482371][ T5566] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.873591][ T5566] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.145111][ T5566] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.605914][ T8398] chnl_net:caif_netlink_parms(): no params data found [ 202.798623][ T5566] bridge_slave_1: left allmulticast mode [ 202.804310][ T5566] bridge_slave_1: left promiscuous mode [ 202.823166][ T5566] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.888177][ T5566] bridge_slave_0: left allmulticast mode [ 202.895100][ T5566] bridge_slave_0: left promiscuous mode [ 202.912128][ T5566] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.287432][ T5233] Bluetooth: hci2: command tx timeout [ 204.111127][ T5566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.146451][ T5566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.158476][ T5566] bond0 (unregistering): Released all slaves [ 204.679439][ T8398] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.686577][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.707510][ T8398] bridge_slave_0: entered allmulticast mode [ 204.714612][ T8398] bridge_slave_0: entered promiscuous mode [ 204.778504][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.786049][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.851082][ T8398] bridge_slave_1: entered allmulticast mode [ 204.878410][ T8398] bridge_slave_1: entered promiscuous mode [ 205.379853][ T5233] Bluetooth: hci2: command tx timeout [ 205.425206][ T8398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.451159][ T8398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.659044][ T8398] team0: Port device team_slave_0 added [ 205.672493][ T5566] hsr_slave_0: left promiscuous mode [ 205.758020][ T5566] hsr_slave_1: left promiscuous mode [ 205.765860][ T5566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.779346][ T5566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.855054][ T5566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.862729][ T5566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.931479][ T5566] veth1_macvtap: left promiscuous mode [ 205.937067][ T5566] veth0_macvtap: left promiscuous mode [ 205.943874][ T5566] veth1_vlan: left promiscuous mode [ 205.949498][ T5566] veth0_vlan: left promiscuous mode [ 207.447305][ T5233] Bluetooth: hci2: command tx timeout [ 207.983723][ T5566] team0 (unregistering): Port device team_slave_1 removed [ 208.023374][ T8532] netlink: 2 bytes leftover after parsing attributes in process `syz.1.678'. [ 208.126670][ T5566] team0 (unregistering): Port device team_slave_0 removed [ 208.848898][ T8398] team0: Port device team_slave_1 added [ 208.902712][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.917038][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.944529][ T8398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.964419][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.982506][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.086130][ T8398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.127384][ T8556] can: request_module (can-proto-5) failed. [ 209.326232][ T8398] hsr_slave_0: entered promiscuous mode [ 209.402472][ T8398] hsr_slave_1: entered promiscuous mode [ 209.527497][ T5233] Bluetooth: hci2: command tx timeout [ 210.222619][ T8398] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.246270][ T8398] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.271572][ T8398] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.295568][ T8398] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.375507][ T8621] svc: failed to register nfsdv3 RPC service (errno 111). [ 210.424895][ T8621] svc: failed to register nfsaclv3 RPC service (errno 111). [ 210.635708][ T8398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.721000][ T8398] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.767354][ T5566] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.774488][ T5566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.808791][ T5566] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.815929][ T5566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.493419][ T8398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.840736][ T8398] veth0_vlan: entered promiscuous mode [ 211.885605][ T8398] veth1_vlan: entered promiscuous mode [ 211.969681][ T8398] veth0_macvtap: entered promiscuous mode [ 212.001739][ T8398] veth1_macvtap: entered promiscuous mode [ 212.079093][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.126374][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.164444][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.195716][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.216046][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.236663][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.269796][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.296354][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.332825][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.365582][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.406375][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.437368][ T8398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.459458][ T8398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.486674][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.543663][ T8398] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.579030][ T8398] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.605449][ T8398] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.637218][ T8398] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.788849][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.822927][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.937080][ T5543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.947208][ T5543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.051323][ T8785] nbd: illegal input index 50331648 [ 215.813980][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'. [ 216.653843][ T8853] netlink: zone id is out of range [ 216.659600][ T8853] netlink: zone id is out of range [ 216.666862][ T8853] netlink: zone id is out of range [ 216.672310][ T8853] netlink: zone id is out of range [ 216.677661][ T8853] netlink: zone id is out of range [ 216.683142][ T8853] netlink: zone id is out of range [ 216.688551][ T8853] netlink: zone id is out of range [ 216.694083][ T8853] netlink: zone id is out of range [ 216.699940][ T8853] netlink: zone id is out of range [ 216.705272][ T8853] netlink: zone id is out of range [ 216.744836][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'. [ 219.250648][ T8934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.768'. [ 220.166947][ T29] audit: type=1107 audit(8277292056.200:4): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 220.985372][ T29] audit: type=1326 audit(8277292057.020:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.0.783" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19a057dff9 code=0x0 [ 227.548132][ T9112] raw_sendmsg: syz.0.810 forgot to set AF_INET. Fix it! [ 231.700876][ T9198] HSR: entered promiscuous mode [ 234.765821][ T9232] svc: failed to register nfsdv3 RPC service (errno 111). [ 235.273472][ T9232] svc: failed to register nfsaclv3 RPC service (errno 111). [ 236.999486][ T9248] netlink: 'syz.2.840': attribute type 11 has an invalid length. [ 237.384829][ T9261] nbd: nbd7204 already in use [ 238.820027][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.837318][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.962826][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.319068][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.327515][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 239.335273][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.460980][ T9271] chnl_net:caif_netlink_parms(): no params data found [ 241.381634][ T5566] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.392431][ T5233] Bluetooth: hci4: command tx timeout [ 241.681792][ T9271] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.712863][ T9271] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.733152][ T9271] bridge_slave_0: entered allmulticast mode [ 241.757487][ T9271] bridge_slave_0: entered promiscuous mode [ 241.788766][ T9271] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.795886][ T9271] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.817991][ T9271] bridge_slave_1: entered allmulticast mode [ 241.860322][ T9271] bridge_slave_1: entered promiscuous mode [ 241.878825][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.887299][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.895288][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.903232][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.917084][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 241.924524][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.145967][ T5566] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.230255][ T9271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.279889][ T5566] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.345715][ T9271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.533630][ T5566] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.713924][ T9271] team0: Port device team_slave_0 added [ 242.740719][ T9271] team0: Port device team_slave_1 added [ 242.984815][ T9271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.004979][ T9271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.056749][ T9271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.092261][ T9271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.117511][ T9271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.213122][ T9271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.448154][ T5233] Bluetooth: hci4: command tx timeout [ 243.550032][ T9271] hsr_slave_0: entered promiscuous mode [ 243.568023][ T9271] hsr_slave_1: entered promiscuous mode [ 243.587388][ T9271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.622936][ T9271] Cannot create hsr debugfs directory [ 243.988457][ T5566] bridge_slave_1: left allmulticast mode [ 244.007558][ T5233] Bluetooth: hci0: command tx timeout [ 244.020622][ T5566] bridge_slave_1: left promiscuous mode [ 244.026369][ T5566] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.176960][ T5566] bridge_slave_0: left allmulticast mode [ 244.183539][ T5566] bridge_slave_0: left promiscuous mode [ 244.196503][ T5566] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.318559][ T9356] Process accounting resumed [ 245.436084][ T5566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.489391][ T5566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.512530][ T5566] bond0 (unregistering): Released all slaves [ 245.527373][ T5233] Bluetooth: hci4: command tx timeout [ 245.562688][ T9286] chnl_net:caif_netlink_parms(): no params data found [ 246.087533][ T5233] Bluetooth: hci0: command tx timeout [ 246.372824][ T9271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.475855][ T9286] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.489779][ T9286] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.506947][ T9286] bridge_slave_0: entered allmulticast mode [ 246.519293][ T9286] bridge_slave_0: entered promiscuous mode [ 246.665867][ T9271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.715837][ T9286] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.737343][ T9286] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.744594][ T9286] bridge_slave_1: entered allmulticast mode [ 246.765560][ T9286] bridge_slave_1: entered promiscuous mode [ 246.882331][ T9271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.951945][ T9286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.062730][ T9271] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.104042][ T9286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.391287][ T5566] hsr_slave_0: left promiscuous mode [ 247.406729][ T5566] hsr_slave_1: left promiscuous mode [ 247.495088][ T5566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.502643][ T5566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.543144][ T5566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.551310][ T5566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.585289][ T5566] veth1_macvtap: left promiscuous mode [ 247.596051][ T5566] veth0_macvtap: left promiscuous mode [ 247.608613][ T5233] Bluetooth: hci4: command tx timeout [ 247.609704][ T5566] veth1_vlan: left promiscuous mode [ 247.661777][ T5566] veth0_vlan: left promiscuous mode [ 248.167513][ T5233] Bluetooth: hci0: command tx timeout [ 248.553370][ T5566] team0 (unregistering): Port device team_slave_1 removed [ 248.617027][ T5566] team0 (unregistering): Port device team_slave_0 removed [ 249.205643][ T9286] team0: Port device team_slave_0 added [ 249.223367][ T9286] team0: Port device team_slave_1 added [ 249.356343][ T9286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.381933][ T9286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.416339][ T9286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.467794][ T9286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.474776][ T9286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.503408][ T9286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.649569][ T9271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.671267][ T9271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.684626][ T9286] hsr_slave_0: entered promiscuous mode [ 249.692736][ T9286] hsr_slave_1: entered promiscuous mode [ 249.703159][ T9286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.711612][ T9286] Cannot create hsr debugfs directory [ 249.744922][ T9271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.824417][ T9271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 249.976829][ T5566] bridge_slave_1: left allmulticast mode [ 249.982652][ T5566] bridge_slave_1: left promiscuous mode [ 249.997598][ T5566] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.006772][ T5566] bridge_slave_0: left allmulticast mode [ 250.033210][ T5566] bridge_slave_0: left promiscuous mode [ 250.039335][ T5566] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.247681][ T5233] Bluetooth: hci0: command tx timeout [ 250.574583][ T5566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.591711][ T5566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.604365][ T5566] bond0 (unregistering): Released all slaves [ 250.897721][ T9429] netlink: 20 bytes leftover after parsing attributes in process `syz.0.865'. [ 251.068949][ T9435] net_ratelimit: 3 callbacks suppressed [ 251.068968][ T9435] netlink: zone id is out of range [ 251.117285][ T9435] netlink: zone id is out of range [ 251.139595][ T9435] netlink: zone id is out of range [ 251.145240][ T9435] netlink: zone id is out of range [ 251.168892][ T9435] netlink: zone id is out of range [ 251.188457][ T9435] netlink: zone id is out of range [ 251.193614][ T9435] netlink: zone id is out of range [ 251.224884][ T9435] netlink: zone id is out of range [ 251.236629][ T9435] netlink: zone id is out of range [ 251.263147][ T9271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.271015][ T9435] netlink: zone id is out of range [ 251.485116][ T9271] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.544201][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.551371][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.744069][ T5549] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.751234][ T5549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.834335][ T9286] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 251.910963][ T9286] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 251.931277][ T9286] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 252.027776][ T9286] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 252.117375][ T5566] hsr_slave_0: left promiscuous mode [ 252.125758][ T5566] hsr_slave_1: left promiscuous mode [ 252.247590][ T5566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.255133][ T5566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.268408][ T5566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.275857][ T5566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.320348][ T5566] veth1_macvtap: left promiscuous mode [ 252.326078][ T5566] veth0_macvtap: left promiscuous mode [ 252.338118][ T5566] veth1_vlan: left promiscuous mode [ 252.343452][ T5566] veth0_vlan: left promiscuous mode [ 253.038055][ T5566] team0 (unregistering): Port device team_slave_1 removed [ 253.104292][ T5566] team0 (unregistering): Port device team_slave_0 removed [ 253.634994][ T9271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.645504][ T9271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.875749][ T9286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.923879][ T9286] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.956441][ T9271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.012164][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.019335][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.040605][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.047778][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.183166][ T9271] veth0_vlan: entered promiscuous mode [ 254.194343][ T9271] veth1_vlan: entered promiscuous mode [ 254.303370][ T9271] veth0_macvtap: entered promiscuous mode [ 254.312637][ T9271] veth1_macvtap: entered promiscuous mode [ 254.490605][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.510147][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.533846][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.546851][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.560825][ T9271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.676589][ T9286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.691745][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.703972][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.720100][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.731010][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.742487][ T9271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.752970][ T9271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.761831][ T9271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.770663][ T9271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.779470][ T9271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.905624][ T9286] veth0_vlan: entered promiscuous mode [ 255.002054][ T9286] veth1_vlan: entered promiscuous mode [ 255.085778][ T5566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.108167][ T5566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.328722][ T9286] veth0_macvtap: entered promiscuous mode [ 255.359026][ T5566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.377779][ T5566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.378637][ T9286] veth1_macvtap: entered promiscuous mode [ 255.477351][ T9286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.517246][ T9286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.527102][ T9286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.574209][ T9286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.617024][ T9286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.656388][ T9286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.684453][ T9286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.736624][ T9286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.757267][ T9286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.796603][ T9286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.825249][ T9286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.863585][ T9286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.891052][ T9286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.903168][ T9286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.934113][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.940684][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.066945][ T9286] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.097457][ T9286] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.122694][ T9286] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.131848][ T9286] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.425233][ T5540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.466278][ T5540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.542498][ T5561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.554655][ T5561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.108628][ T9737] futex_wake_op: syz.3.919 tries to shift op by -256; fix this program [ 263.052464][ T9765] ptrace attach of "./syz-executor exec"[7964] was attempted by "./syz-executor exec"[9765] [ 264.999364][ T5549] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.139177][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 265.148360][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 265.156969][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 265.165362][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 265.202392][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 265.209880][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 265.381431][ T5549] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.600593][ T5549] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.843720][ T5549] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.135826][ T5549] bridge_slave_1: left allmulticast mode [ 266.156091][ T5549] bridge_slave_1: left promiscuous mode [ 266.177235][ T5549] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.201899][ T5549] bridge_slave_0: left allmulticast mode [ 266.222236][ T5549] bridge_slave_0: left promiscuous mode [ 266.244172][ T5549] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.297314][ T5239] Bluetooth: hci3: command tx timeout [ 267.472777][ T5549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.503154][ T5549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.533452][ T5549] bond0 (unregistering): Released all slaves [ 267.657842][ T9826] chnl_net:caif_netlink_parms(): no params data found [ 268.000666][ T9826] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.025877][ T9826] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.051867][ T9826] bridge_slave_0: entered allmulticast mode [ 268.075690][ T9826] bridge_slave_0: entered promiscuous mode [ 268.103724][ T9826] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.121667][ T9826] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.133025][ T9826] bridge_slave_1: entered allmulticast mode [ 268.145083][ T9826] bridge_slave_1: entered promiscuous mode [ 268.290805][ T9826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.333155][ T5549] hsr_slave_0: left promiscuous mode [ 268.343599][ T5549] hsr_slave_1: left promiscuous mode [ 268.363970][ T5549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.382238][ T5549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.393327][ T5549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.408017][ T5549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.442248][ T5549] veth1_macvtap: left promiscuous mode [ 268.448443][ T5549] veth0_macvtap: left promiscuous mode [ 268.469572][ T5549] veth1_vlan: left promiscuous mode [ 268.481727][ T5549] veth0_vlan: left promiscuous mode [ 268.794325][ T9943] can: request_module (can-proto-4) failed. [ 268.932883][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.963'. [ 269.370659][ T5239] Bluetooth: hci3: command tx timeout [ 269.510120][ T5549] team0 (unregistering): Port device team_slave_1 removed [ 269.621177][ T5549] team0 (unregistering): Port device team_slave_0 removed [ 270.619666][ T9826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.743540][ T9826] team0: Port device team_slave_0 added [ 270.779885][ T9826] team0: Port device team_slave_1 added [ 270.919694][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.928226][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.985027][ T9826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.094633][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.106104][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.142508][ T9826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.315786][ T9826] hsr_slave_0: entered promiscuous mode [ 271.339143][ T9826] hsr_slave_1: entered promiscuous mode [ 271.368752][ T9826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.384172][ T9826] Cannot create hsr debugfs directory [ 271.447227][ T5239] Bluetooth: hci3: command tx timeout [ 272.643362][ T9826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.703271][ T9826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.822119][ T9826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.876188][ T9826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 273.081208][ T9826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.154850][ T9826] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.180689][ T5540] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.187882][ T5540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.254365][ T5540] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.261558][ T5540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.505380][T10067] could not allocate digest TFM handle [ 273.527252][ T5239] Bluetooth: hci3: command tx timeout [ 273.894202][ T9826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.044735][ T9826] veth0_vlan: entered promiscuous mode [ 274.098248][ T9826] veth1_vlan: entered promiscuous mode [ 274.180142][ T9826] veth0_macvtap: entered promiscuous mode [ 274.210391][ T9826] veth1_macvtap: entered promiscuous mode [ 274.246333][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.298051][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.337175][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.373754][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.412106][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.432253][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.458903][ T9826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.544946][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.593006][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.627334][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.672344][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.696168][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.739101][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.758753][ T9826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.798013][ T9826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.833460][ T9826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.862641][ T9826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.919386][ T9826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.285039][ T5549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.310605][ T5549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.364096][ T5561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.400105][ T5561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.263771][T10263] unsupported nlmsg_type 40 [ 280.419494][T10228] HfR: entered promiscuous mode [ 280.680686][T10228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1009'. [ 280.957372][T10228] HfR: left promiscuous mode [ 281.879392][T10276] delete_channel: no stack [ 281.922985][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.932998][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.940913][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.953434][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.968821][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 281.976348][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.169229][ T29] audit: type=1326 audit(8277262379.050:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10280 comm="syz.0.1023" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19a057dff9 code=0x0 [ 282.252724][ T5561] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.685314][ T5561] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.130982][ T5561] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.173475][T10281] chnl_net:caif_netlink_parms(): no params data found [ 283.517092][ T5561] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.007420][ T5239] Bluetooth: hci3: command tx timeout [ 284.074460][T10281] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.090309][T10281] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.106550][T10281] bridge_slave_0: entered allmulticast mode [ 284.116092][T10281] bridge_slave_0: entered promiscuous mode [ 284.129369][T10281] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.136902][T10281] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.153315][T10281] bridge_slave_1: entered allmulticast mode [ 284.188703][T10281] bridge_slave_1: entered promiscuous mode [ 284.479186][T10304] )zV: entered promiscuous mode [ 284.562508][T10281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.610364][T10281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.974025][T10281] team0: Port device team_slave_0 added [ 285.010088][T10281] team0: Port device team_slave_1 added [ 285.417779][T10281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.424767][T10281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.547284][T10281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.570974][T10281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.583414][T10281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.633163][T10281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.659584][ T5561] bridge_slave_1: left allmulticast mode [ 285.665678][ T5561] bridge_slave_1: left promiscuous mode [ 285.679307][ T5561] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.738090][ T5561] bridge_slave_0: left allmulticast mode [ 285.747800][ T5561] bridge_slave_0: left promiscuous mode [ 285.767318][ T5561] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.087337][ T5239] Bluetooth: hci3: command tx timeout [ 288.155876][ T5561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.177564][ T5239] Bluetooth: hci3: command tx timeout [ 288.206888][ T5561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.319056][ T5561] bond0 (unregistering): Released all slaves [ 288.872080][T10281] hsr_slave_0: entered promiscuous mode [ 288.917756][T10281] hsr_slave_1: entered promiscuous mode [ 288.948954][T10281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.967062][T10281] Cannot create hsr debugfs directory [ 289.625291][ T5561] hsr_slave_0: left promiscuous mode [ 289.638660][ T5561] hsr_slave_1: left promiscuous mode [ 289.646296][ T5561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.654972][ T5561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.667892][ T5561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.684855][ T5561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.815166][ T5561] veth1_macvtap: left promiscuous mode [ 289.833541][ T5561] veth0_macvtap: left promiscuous mode [ 289.850004][ T5561] veth1_vlan: left promiscuous mode [ 289.873663][ T5561] veth0_vlan: left promiscuous mode [ 290.257312][ T5239] Bluetooth: hci3: command tx timeout [ 291.545884][ T5561] team0 (unregistering): Port device team_slave_1 removed [ 291.560562][T10438] net_ratelimit: 8 callbacks suppressed [ 291.560582][T10438] netlink: zone id is out of range [ 291.607360][T10438] netlink: zone id is out of range [ 291.638250][T10438] netlink: zone id is out of range [ 291.686521][T10438] netlink: zone id is out of range [ 291.708057][ T5561] team0 (unregistering): Port device team_slave_0 removed [ 291.737478][T10438] netlink: zone id is out of range [ 291.757179][T10438] netlink: zone id is out of range [ 291.762344][T10438] netlink: zone id is out of range [ 291.797180][T10438] netlink: zone id is out of range [ 291.817264][T10438] netlink: zone id is out of range [ 291.834713][T10438] netlink: zone id is out of range [ 293.344203][T10437] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 293.377228][T10437] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 295.344860][T10281] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 295.398554][T10281] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 295.439894][T10281] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 295.491547][T10281] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 295.840654][T10536] FAULT_INJECTION: forcing a failure. [ 295.840654][T10536] name failslab, interval 1, probability 0, space 0, times 1 [ 295.921774][T10281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.955103][T10536] CPU: 0 UID: 0 PID: 10536 Comm: syz.2.1074 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 295.966010][T10536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.967863][T10281] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.976066][T10536] Call Trace: [ 295.985952][T10536] [ 295.988972][T10536] dump_stack_lvl+0x16c/0x1f0 [ 295.993696][T10536] should_fail_ex+0x497/0x5b0 [ 295.998409][T10536] ? fs_reclaim_acquire+0xae/0x160 [ 296.002098][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.003540][T10536] should_failslab+0xc2/0x120 [ 296.010653][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.015195][T10536] kmem_cache_alloc_node_noprof+0x71/0x310 [ 296.028217][T10536] ? __alloc_skb+0x2b3/0x380 [ 296.032852][T10536] __alloc_skb+0x2b3/0x380 [ 296.037303][T10536] ? __pfx___alloc_skb+0x10/0x10 [ 296.042278][T10536] ? __pfx___lock_acquire+0x10/0x10 [ 296.047521][T10536] ? hlock_class+0x4e/0x130 [ 296.052055][T10536] ? __lock_acquire+0x163e/0x3ce0 [ 296.057119][T10536] __ip6_append_data.isra.0+0x2a9e/0x4540 [ 296.062877][T10536] ? __pfx_raw6_getfrag+0x10/0x10 [ 296.067921][T10536] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 296.074001][T10536] ? ip6_mtu+0x231/0x4a0 [ 296.078249][T10536] ? ip6_setup_cork+0xc1b/0x1360 [ 296.083198][T10536] ip6_append_data+0x1e6/0x500 [ 296.087975][T10536] ? __pfx_raw6_getfrag+0x10/0x10 [ 296.093009][T10536] rawv6_sendmsg+0x1578/0x43e0 [ 296.097782][T10536] ? __lock_acquire+0xbdd/0x3ce0 [ 296.102762][T10536] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 296.107905][T10536] ? __pfx___lock_acquire+0x10/0x10 [ 296.113154][T10536] ? trace_lock_acquire+0x14a/0x1d0 [ 296.118403][T10536] ? __pfx___might_resched+0x10/0x10 [ 296.123728][T10536] ? __pfx_aa_sk_perm+0x10/0x10 [ 296.128601][T10536] ? find_held_lock+0x2d/0x110 [ 296.133386][T10536] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 296.138515][T10536] ? inet_sendmsg+0x119/0x140 [ 296.143198][T10536] inet_sendmsg+0x119/0x140 [ 296.147757][T10536] sock_write_iter+0x4ac/0x5b0 [ 296.152549][T10536] ? __pfx_sock_write_iter+0x10/0x10 [ 296.157868][T10536] ? bpf_lsm_file_permission+0x9/0x10 [ 296.163277][T10536] ? security_file_permission+0x71/0x210 [ 296.168946][T10536] vfs_write+0x6b5/0x1140 [ 296.173292][T10536] ? __pfx_sock_write_iter+0x10/0x10 [ 296.178591][T10536] ? trace_lock_acquire+0x14a/0x1d0 [ 296.183802][T10536] ? __pfx_vfs_write+0x10/0x10 [ 296.188574][T10536] ? __fget_files+0x40/0x3f0 [ 296.193183][T10536] ksys_write+0x1fa/0x260 [ 296.197524][T10536] ? __pfx_ksys_write+0x10/0x10 [ 296.202390][T10536] do_syscall_64+0xcd/0x250 [ 296.206908][T10536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.212817][T10536] RIP: 0033:0x7fb39957dff9 [ 296.217244][T10536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.236869][T10536] RSP: 002b:00007fb39a430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.245298][T10536] RAX: ffffffffffffffda RBX: 00007fb399735f80 RCX: 00007fb39957dff9 [ 296.253278][T10536] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 296.261255][T10536] RBP: 00007fb39a430090 R08: 0000000000000000 R09: 0000000000000000 [ 296.269234][T10536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.277212][T10536] R13: 0000000000000000 R14: 00007fb399735f80 R15: 00007ffc75fe3eb8 [ 296.285210][T10536] [ 296.360667][ T5566] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.367872][ T5566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.854768][T10281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.209525][T10281] veth0_vlan: entered promiscuous mode [ 297.260148][T10281] veth1_vlan: entered promiscuous mode [ 297.301114][T10281] veth0_macvtap: entered promiscuous mode [ 297.318448][T10281] veth1_macvtap: entered promiscuous mode [ 297.334709][T10281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.345707][T10281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.356258][T10281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.381602][T10281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.402033][T10281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.429720][T10281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.458829][T10281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.524402][T10281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.578044][T10281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.612072][T10281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.657311][T10281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.683772][T10281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.705351][T10281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.748433][T10281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.001594][T10281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.032266][T10281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.066567][T10281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.097239][T10281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.295267][T10593] netlink: 'syz.0.1081': attribute type 282 has an invalid length. [ 298.511218][ T5566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.557160][ T5566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.629304][ T5566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.651934][ T5566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.290473][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'. [ 302.327597][T10705] net_ratelimit: 18 callbacks suppressed [ 302.327618][T10705] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 302.935750][ T5540] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.161228][ T5540] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.218854][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 303.383240][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.393539][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.401724][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.412513][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.425681][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 303.442419][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.479532][ T5540] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.802332][ T5540] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.040500][T10724] chnl_net:caif_netlink_parms(): no params data found [ 304.099044][ T5233] Bluetooth: hci1: command 0x0406 tx timeout [ 304.528169][ T5540] bridge_slave_1: left allmulticast mode [ 304.533894][ T5540] bridge_slave_1: left promiscuous mode [ 304.539971][ T5540] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.611636][ T5540] bridge_slave_0: left allmulticast mode [ 304.637253][ T5540] bridge_slave_0: left promiscuous mode [ 304.645402][ T5540] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.197081][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 305.527304][ T5239] Bluetooth: hci2: command tx timeout [ 306.035231][ T5540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.108847][ T5540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.139538][ T5540] bond0 (unregistering): Released all slaves [ 306.243477][ T5540] HSR: left promiscuous mode [ 306.275938][T10724] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.289674][T10724] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.296994][T10724] bridge_slave_0: entered allmulticast mode [ 306.318844][T10724] bridge_slave_0: entered promiscuous mode [ 306.394823][T10724] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.411845][T10724] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.427516][T10724] bridge_slave_1: entered allmulticast mode [ 306.434709][T10724] bridge_slave_1: entered promiscuous mode [ 306.562780][T10724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.864739][T10724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.228388][T10724] team0: Port device team_slave_0 added [ 307.579724][T10724] team0: Port device team_slave_1 added [ 307.607681][ T5239] Bluetooth: hci2: command tx timeout [ 307.644906][ T5540] hsr_slave_0: left promiscuous mode [ 307.683213][ T5540] hsr_slave_1: left promiscuous mode [ 307.699318][ T5540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.706776][ T5540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.813279][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 307.828573][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 307.836394][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 307.855198][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 307.867484][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 307.887200][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 307.898226][ T5540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.905787][ T5540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.008181][ T5540] veth1_macvtap: left promiscuous mode [ 308.013752][ T5540] veth0_macvtap: left promiscuous mode [ 308.027306][ T5540] veth1_vlan: left promiscuous mode [ 308.032666][ T5540] veth0_vlan: left promiscuous mode [ 308.371161][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.381936][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.395482][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.406485][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.416298][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 308.423780][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.069596][ T5540] team0 (unregistering): Port device team_slave_1 removed [ 309.167749][ T5540] team0 (unregistering): Port device team_slave_0 removed [ 309.688980][ T5239] Bluetooth: hci2: command tx timeout [ 309.937384][ T5239] Bluetooth: hci1: command tx timeout [ 310.182184][T10724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.202130][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.229758][T10724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.249468][T10724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.256754][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.283362][T10724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.377934][T10724] hsr_slave_0: entered promiscuous mode [ 310.385297][T10724] hsr_slave_1: entered promiscuous mode [ 310.488507][ T5239] Bluetooth: hci3: command tx timeout [ 311.088050][T10849] chnl_net:caif_netlink_parms(): no params data found [ 311.281681][ T5541] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.450581][ T5541] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.477553][T10853] chnl_net:caif_netlink_parms(): no params data found [ 311.504427][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1138'. [ 311.577082][ T5541] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.593411][T10849] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.601325][T10849] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.610596][T10849] bridge_slave_0: entered allmulticast mode [ 311.617766][T10849] bridge_slave_0: entered promiscuous mode [ 311.626520][T10849] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.634670][T10849] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.643611][T10849] bridge_slave_1: entered allmulticast mode [ 311.651517][T10849] bridge_slave_1: entered promiscuous mode [ 311.689788][ T5541] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.776904][T10849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.786089][ T5239] Bluetooth: hci2: command tx timeout [ 311.795006][T10849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.804622][T10724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 311.814858][T10724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 311.851738][T10724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 311.867616][T10853] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.875718][T10853] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.883864][T10853] bridge_slave_0: entered allmulticast mode [ 311.892015][T10853] bridge_slave_0: entered promiscuous mode [ 311.902823][T10849] team0: Port device team_slave_0 added [ 311.912535][T10849] team0: Port device team_slave_1 added [ 311.919758][T10724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 311.929431][T10853] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.936517][T10853] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.948319][T10853] bridge_slave_1: entered allmulticast mode [ 311.955015][T10853] bridge_slave_1: entered promiscuous mode [ 312.017560][ T5239] Bluetooth: hci1: command tx timeout [ 312.046025][T10849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.053284][T10849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.080796][T10849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.095654][T10853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.136991][ T5541] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.158170][T10849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.165137][T10849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.191715][T10849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.205623][T10853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.278478][ T5541] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.305450][T10853] team0: Port device team_slave_0 added [ 312.316297][T10853] team0: Port device team_slave_1 added [ 312.330882][T10849] hsr_slave_0: entered promiscuous mode [ 312.339149][T10849] hsr_slave_1: entered promiscuous mode [ 312.345195][T10849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.354415][T10849] Cannot create hsr debugfs directory [ 312.391583][ T5541] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.416753][T10853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.436287][T10853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.470392][T10853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.483634][T10853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.491038][T10853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.518462][T10853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.567383][ T5239] Bluetooth: hci3: command tx timeout [ 312.618028][ T5541] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.771038][T10853] hsr_slave_0: entered promiscuous mode [ 312.788415][T10853] hsr_slave_1: entered promiscuous mode [ 312.797185][T10853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.815345][T10853] Cannot create hsr debugfs directory [ 313.074394][T10724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.106104][ T5541] bridge_slave_1: left allmulticast mode [ 313.116902][ T5541] bridge_slave_1: left promiscuous mode [ 313.128277][ T5541] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.149996][ T5541] bridge_slave_0: left allmulticast mode [ 313.155679][ T5541] bridge_slave_0: left promiscuous mode [ 313.161555][ T5541] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.179041][ T5541] bridge_slave_1: left allmulticast mode [ 313.184731][ T5541] bridge_slave_1: left promiscuous mode [ 313.191406][ T5541] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.205035][ T5541] bridge_slave_0: left allmulticast mode [ 313.213068][ T5541] bridge_slave_0: left promiscuous mode [ 313.219640][ T5541] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.805889][T10949] FAULT_INJECTION: forcing a failure. [ 313.805889][T10949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.826485][T10949] CPU: 1 UID: 0 PID: 10949 Comm: syz.1.1143 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 313.837306][T10949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 313.847396][T10949] Call Trace: [ 313.850698][T10949] [ 313.853651][T10949] dump_stack_lvl+0x16c/0x1f0 [ 313.858372][T10949] should_fail_ex+0x497/0x5b0 [ 313.863089][T10949] _copy_from_user+0x30/0xf0 [ 313.867711][T10949] csum_and_copy_from_iter_full+0x218/0x1eb0 [ 313.873738][T10949] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 313.880194][T10949] ? rcu_is_watching+0x12/0xc0 [ 313.884992][T10949] ? trace_kmalloc+0x2d/0xe0 [ 313.889620][T10949] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 313.896249][T10949] ? __alloc_skb+0x164/0x380 [ 313.900882][T10949] ip_generic_getfrag+0x175/0x260 [ 313.905946][T10949] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 313.911532][T10949] ? __pfx___alloc_skb+0x10/0x10 [ 313.916518][T10949] raw6_getfrag+0x1ed/0x270 [ 313.921059][T10949] ? __lock_acquire+0x163e/0x3ce0 [ 313.926131][T10949] __ip6_append_data.isra.0+0x2d27/0x4540 [ 313.931901][T10949] ? __pfx_raw6_getfrag+0x10/0x10 [ 313.936964][T10949] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 313.943069][T10949] ? ip6_mtu+0x231/0x4a0 [ 313.947430][T10949] ? ip6_setup_cork+0xc1b/0x1360 [ 313.952410][T10949] ip6_append_data+0x1e6/0x500 [ 313.957214][T10949] ? __pfx_raw6_getfrag+0x10/0x10 [ 313.962269][T10949] rawv6_sendmsg+0x1578/0x43e0 [ 313.967061][T10949] ? __lock_acquire+0xbdd/0x3ce0 [ 313.972046][T10949] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 313.977184][T10949] ? __pfx___lock_acquire+0x10/0x10 [ 313.982438][T10949] ? trace_lock_acquire+0x14a/0x1d0 [ 313.987668][T10949] ? __pfx___might_resched+0x10/0x10 [ 313.992996][T10949] ? __pfx_aa_sk_perm+0x10/0x10 [ 313.997883][T10949] ? find_held_lock+0x2d/0x110 [ 314.002713][T10949] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 314.007857][T10949] ? inet_sendmsg+0x119/0x140 [ 314.012560][T10949] inet_sendmsg+0x119/0x140 [ 314.017101][T10949] sock_write_iter+0x4ac/0x5b0 [ 314.021899][T10949] ? __pfx_sock_write_iter+0x10/0x10 [ 314.027229][T10949] ? bpf_lsm_file_permission+0x9/0x10 [ 314.032631][T10949] ? security_file_permission+0x71/0x210 [ 314.038304][T10949] vfs_write+0x6b5/0x1140 [ 314.042670][T10949] ? __pfx_sock_write_iter+0x10/0x10 [ 314.047993][T10949] ? trace_lock_acquire+0x14a/0x1d0 [ 314.053226][T10949] ? __pfx_vfs_write+0x10/0x10 [ 314.058026][T10949] ? __fget_files+0x40/0x3f0 [ 314.062660][T10949] ksys_write+0x1fa/0x260 [ 314.067019][T10949] ? __pfx_ksys_write+0x10/0x10 [ 314.071910][T10949] do_syscall_64+0xcd/0x250 [ 314.076448][T10949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.082372][T10949] RIP: 0033:0x7f0c1bd7dff9 [ 314.086897][T10949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.106975][T10949] RSP: 002b:00007f0c1cae4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 314.115422][T10949] RAX: ffffffffffffffda RBX: 00007f0c1bf35f80 RCX: 00007f0c1bd7dff9 [ 314.123426][T10949] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 314.131426][T10949] RBP: 00007f0c1cae4090 R08: 0000000000000000 R09: 0000000000000000 [ 314.139421][T10949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.147422][T10949] R13: 0000000000000000 R14: 00007f0c1bf35f80 R15: 00007ffce9c0fae8 [ 314.155444][T10949] [ 314.180723][ T5239] Bluetooth: hci1: command tx timeout [ 314.647327][ T5239] Bluetooth: hci3: command tx timeout [ 314.658950][ T5541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.673966][ T5541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.684971][ T5541] bond0 (unregistering): Released all slaves [ 314.782508][ T5541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.793327][ T5541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.804149][ T5541] bond0 (unregistering): Released all slaves [ 314.879860][ T5541] )zV: left promiscuous mode [ 314.945076][T10724] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.029034][ T2476] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.036123][ T2476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.136423][ T5540] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.143627][ T5540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.500625][ T5541] hsr_slave_0: left promiscuous mode [ 315.516783][ T5541] hsr_slave_1: left promiscuous mode [ 315.527925][ T5541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.537456][ T5541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.546230][ T5541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.567075][ T5541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.590245][ T5541] hsr_slave_0: left promiscuous mode [ 315.620381][ T5541] hsr_slave_1: left promiscuous mode [ 315.626682][ T5541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.635623][ T5541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.644363][ T5541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.652045][ T5541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.675870][ T5541] veth1_macvtap: left promiscuous mode [ 315.681511][ T5541] veth0_macvtap: left promiscuous mode [ 315.687697][ T5541] veth1_vlan: left promiscuous mode [ 315.693010][ T5541] veth0_vlan: left promiscuous mode [ 315.699378][ T5541] veth1_macvtap: left promiscuous mode [ 315.704876][ T5541] veth0_macvtap: left promiscuous mode [ 315.710657][ T5541] veth1_vlan: left promiscuous mode [ 315.715966][ T5541] veth0_vlan: left promiscuous mode [ 316.151223][ T5541] team0 (unregistering): Port device team_slave_1 removed [ 316.193270][ T5541] team0 (unregistering): Port device team_slave_0 removed [ 316.251959][ T5239] Bluetooth: hci1: command tx timeout [ 316.732912][ T5239] Bluetooth: hci3: command tx timeout [ 316.850720][ T5541] team0 (unregistering): Port device team_slave_1 removed [ 316.889924][ T5541] team0 (unregistering): Port device team_slave_0 removed [ 317.305877][T10849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 317.318725][T10849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 317.359258][T10849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 317.369583][T10849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 317.385600][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.392427][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.425620][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1147'. [ 317.823108][T10724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.937032][T10849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.998763][T10849] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.085662][ T5543] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.092852][ T5543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.113191][T10853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 318.155806][ T5543] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.163090][ T5543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.182930][T10853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 318.201790][T10853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 318.228957][T10853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 318.285992][T10724] veth0_vlan: entered promiscuous mode [ 318.336766][T10724] veth1_vlan: entered promiscuous mode [ 318.422687][T10724] veth0_macvtap: entered promiscuous mode [ 318.455636][T10724] veth1_macvtap: entered promiscuous mode [ 318.535026][T10853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.551149][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.588924][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.613123][T10724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.639482][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.651197][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.668537][T10724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.699435][T10853] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.709429][T10724] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.725658][T10724] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.753783][T10724] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.768223][T10724] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.790851][T10849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.863658][ T5541] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.870857][ T5541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.885327][ T5541] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.892508][ T5541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.953269][T10853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.965522][T10853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.069727][ T5541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.088018][ T5538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.090012][ T5541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.095848][ T5538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.198597][T10849] veth0_vlan: entered promiscuous mode [ 319.231191][T10849] veth1_vlan: entered promiscuous mode [ 319.436403][T10849] veth0_macvtap: entered promiscuous mode [ 319.481334][T10849] veth1_macvtap: entered promiscuous mode [ 319.590213][T10853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.629569][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.657236][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.682196][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.702343][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.715965][T10849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.782003][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.810761][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.829531][T10849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.844378][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.869125][T10849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.906765][T10849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.934023][T10849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.967248][T10849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.975997][T10849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.111760][T10853] veth0_vlan: entered promiscuous mode [ 320.166861][T10853] veth1_vlan: entered promiscuous mode [ 320.249205][ T5541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.261313][T10853] veth0_macvtap: entered promiscuous mode [ 320.297188][ T5541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.372324][T10853] veth1_macvtap: entered promiscuous mode [ 320.401344][T10853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.422789][T10853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.432945][T10853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.443801][T10853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.454026][T10853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.464576][T10853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.475870][T10853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.488200][T10853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.498942][T10853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.509014][T10853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.519770][T10853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.529832][T10853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.540623][T10853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.554084][T10853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.580605][T10853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.593456][T10853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.598540][ T5538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.613999][ T5538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.619812][T10853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.637258][T10853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.743779][ T5560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.784092][ T5560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.839432][ T5541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.867198][ T5541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.318939][T11105] block nbd0: not configured, cannot reconfigure [ 327.386083][T11231] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1191'. [ 329.233909][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 330.323697][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.335667][ T5233] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.344503][ T5233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.436382][ T5233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.454191][ T5233] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 330.461583][ T5233] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.058175][T11290] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 331.147266][T11290] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 331.547991][T11305] svc: failed to register nfsdv3 RPC service (errno 111). [ 331.569996][T11305] svc: failed to register nfsaclv3 RPC service (errno 111). [ 331.635352][T11288] chnl_net:caif_netlink_parms(): no params data found [ 332.520173][T11288] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.555507][T11288] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.577182][ T5239] Bluetooth: hci4: command tx timeout [ 332.599149][T11288] bridge_slave_0: entered allmulticast mode [ 332.610820][T11288] bridge_slave_0: entered promiscuous mode [ 332.710743][T11288] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.747284][T11288] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.767348][T11288] bridge_slave_1: entered allmulticast mode [ 332.787559][T11288] bridge_slave_1: entered promiscuous mode [ 332.940619][T11337] cgroup: fork rejected by pids controller in /syz1 [ 332.959733][T11288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.982231][T11288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.385138][ T5538] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.653619][T11288] team0: Port device team_slave_0 added [ 333.832543][ T5538] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.889062][T11288] team0: Port device team_slave_1 added [ 334.649719][ T5239] Bluetooth: hci4: command tx timeout [ 336.727252][ T5239] Bluetooth: hci4: command tx timeout [ 337.874502][ T5538] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.944018][T11288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.967152][T11288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.022995][T11288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.035627][T11288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.042778][T11288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.069015][T11288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.809546][ T5239] Bluetooth: hci4: command tx timeout [ 339.040184][ T5538] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.070400][T11288] hsr_slave_0: entered promiscuous mode [ 339.079003][T11288] hsr_slave_1: entered promiscuous mode [ 339.097188][T11288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.116856][T11288] Cannot create hsr debugfs directory [ 339.219040][T11480] syz.0.1236(11480): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 339.677856][ T5538] bridge_slave_1: left allmulticast mode [ 339.684266][ T5538] bridge_slave_1: left promiscuous mode [ 339.690287][ T5538] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.727811][ T5538] bridge_slave_0: left allmulticast mode [ 339.733511][ T5538] bridge_slave_0: left promiscuous mode [ 339.739380][ T5538] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.062489][T11512] Process accounting resumed [ 341.256897][ T5538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.284170][ T5538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.329277][ T5538] bond0 (unregistering): Released all slaves [ 342.484048][ T5538] hsr_slave_0: left promiscuous mode [ 342.496651][ T5538] hsr_slave_1: left promiscuous mode [ 342.514181][ T5538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.535852][ T5538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.548059][ T5538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.559055][ T5538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.586275][ T5538] veth1_macvtap: left promiscuous mode [ 342.602244][ T5538] veth0_macvtap: left promiscuous mode [ 342.618950][ T5538] veth1_vlan: left promiscuous mode [ 342.624807][ T5538] veth0_vlan: left promiscuous mode [ 344.236659][ T5538] team0 (unregistering): Port device team_slave_1 removed [ 344.338030][ T5538] team0 (unregistering): Port device team_slave_0 removed [ 345.162750][T11288] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 345.230936][T11288] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 345.275709][T11288] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 345.288197][T11288] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 345.675866][T11288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.735700][T11288] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.804838][ T5540] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.812088][ T5540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.875996][ T5541] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.883223][ T5541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.295435][T11288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.370172][T11288] veth0_vlan: entered promiscuous mode [ 346.388029][T11288] veth1_vlan: entered promiscuous mode [ 346.410723][T11288] veth0_macvtap: entered promiscuous mode [ 346.419938][T11288] veth1_macvtap: entered promiscuous mode [ 346.435268][T11288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.446207][T11288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.456796][T11288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.467901][T11288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.478073][T11288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.488856][T11288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.500678][T11288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.510417][T11288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.521058][T11288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.531205][T11288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.541931][T11288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.552087][T11288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.563050][T11288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.574662][T11288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.617506][T11288] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.626262][T11288] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.652320][T11288] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.666788][T11288] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.827814][ T5541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.857935][ T5541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.909251][ T5540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.926626][ T5540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.188973][T11600] netlink: 'syz.2.1256': attribute type 11 has an invalid length. [ 347.217341][T11600] netlink: 'syz.2.1256': attribute type 11 has an invalid length. [ 348.140953][T11615] cgroup: fork rejected by pids controller in /syz0 [ 348.197505][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 349.540871][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.559658][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.569554][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.581483][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.592131][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 349.617180][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.990734][T11677] chnl_net:caif_netlink_parms(): no params data found [ 350.851303][T11677] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.858832][T11677] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.866055][T11677] bridge_slave_0: entered allmulticast mode [ 350.908315][T11677] bridge_slave_0: entered promiscuous mode [ 350.918038][T11677] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.925253][T11677] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.932520][T11677] bridge_slave_1: entered allmulticast mode [ 350.939581][T11677] bridge_slave_1: entered promiscuous mode [ 351.115162][T11345] syz.1.1213 (11345) used greatest stack depth: 19344 bytes left [ 351.218183][T11709] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1272'. [ 351.458234][T11677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.472595][T11677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.572265][T11677] team0: Port device team_slave_0 added [ 351.588850][T11677] team0: Port device team_slave_1 added [ 351.687587][ T5233] Bluetooth: hci2: command tx timeout [ 351.906410][T11677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.916914][T11677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.968305][T11677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.015427][T11677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.057196][T11677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.123172][T11677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.613899][T11677] hsr_slave_0: entered promiscuous mode [ 352.640076][T11677] hsr_slave_1: entered promiscuous mode [ 353.064019][T11677] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.650644][T11677] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.767278][ T5233] Bluetooth: hci2: command tx timeout [ 354.251359][T11677] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.979677][T11352] syz.1.1213 (11352) used greatest stack depth: 19184 bytes left [ 354.996966][T11677] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.093187][T11765] HfR: entered promiscuous mode [ 355.425541][T11677] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 355.619775][T11677] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 355.716923][T11788] svc: failed to register nfsdv3 RPC service (errno 111). [ 355.719227][T11677] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 355.793191][T11788] svc: failed to register nfsaclv3 RPC service (errno 111). [ 355.847190][ T5233] Bluetooth: hci2: command tx timeout [ 355.926198][T11677] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 356.270731][T11677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.368082][T11677] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.505275][T11677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.565761][T11677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.727849][ T5541] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.734983][ T5541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.759512][ T5541] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.766702][ T5541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.928821][ T5233] Bluetooth: hci2: command tx timeout [ 358.086769][T11677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.200408][T11677] veth0_vlan: entered promiscuous mode [ 358.242418][T11677] veth1_vlan: entered promiscuous mode [ 358.447313][T11677] veth0_macvtap: entered promiscuous mode [ 358.502145][T11677] veth1_macvtap: entered promiscuous mode [ 358.551715][T11677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.587242][T11677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.619443][T11677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.650363][T11677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.681608][T11677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.709589][T11677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.741633][T11677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.765511][T11677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.792104][T11677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.822319][T11677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.855700][T11677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.893257][T11677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.922784][T11677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.956466][T11677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.988152][T11677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.038680][T11677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.075943][T11677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.111600][T11677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.165423][T11677] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.197328][T11677] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.206076][T11677] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.243101][T11677] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.882599][ T5560] bridge_slave_1: left allmulticast mode [ 359.888061][ T2476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.899666][ T5560] bridge_slave_1: left promiscuous mode [ 359.914353][ T5560] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.921565][ T2476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.955032][ T5560] bridge_slave_0: left allmulticast mode [ 359.974080][ T5560] bridge_slave_0: left promiscuous mode [ 360.007571][ T5560] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.127661][ T5560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.148107][ T5560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.191832][ T5560] bond0 (unregistering): Released all slaves [ 361.325678][ T5541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.346146][ T5541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.604603][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1264'. [ 362.310898][T11872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1312'. [ 362.627333][ T5560] hsr_slave_0: left promiscuous mode [ 362.688225][T11888] ------------[ cut here ]------------ [ 362.694589][T11888] WARNING: CPU: 0 PID: 11888 at mm/huge_memory.c:1602 copy_huge_pmd+0x16dd/0x2500 [ 362.704008][T11888] Modules linked in: [ 362.707984][T11888] CPU: 0 UID: 0 PID: 11888 Comm: syz.1.1314 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 362.718840][T11888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 362.729252][T11888] RIP: 0010:copy_huge_pmd+0x16dd/0x2500 [ 362.735143][T11888] Code: 01 e9 dd f5 ff ff e8 72 bc 9a ff 4c 89 e3 31 ff 83 e3 02 48 89 de e8 d2 be 9a ff 48 85 db 0f 84 a0 07 00 00 e8 54 bc 9a ff 90 <0f> 0b 90 e9 88 ef ff ff e8 46 bc 9a ff 49 89 ec 31 ff 41 81 e4 ff [ 362.755169][T11888] RSP: 0018:ffffc900090a7660 EFLAGS: 00010287 [ 362.761335][T11888] RAX: 000000000000122d RBX: 0000000000000002 RCX: ffffc90009f5c000 [ 362.769397][T11888] RDX: 0000000000040000 RSI: ffffffff81f1eb6c RDI: 0000000000000007 [ 362.777677][T11888] RBP: ffffea00019bb180 R08: 0000000000000007 R09: 0000000000000000 [ 362.785775][T11888] R10: 0000000000000002 R11: 0000000000000000 R12: d7f0000000000e02 [ 362.794007][T11888] R13: d7ffe7fff933fe02 R14: 0000000000000200 R15: ffff888027b4a1f0 [ 362.802060][T11888] FS: 00007f5f031dc6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 362.811215][T11888] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.817865][T11888] CR2: 0000001b2d1adff8 CR3: 00000000335a4000 CR4: 00000000003526f0 [ 362.825957][T11888] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.834118][T11888] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.842306][T11888] Call Trace: [ 362.845607][T11888] [ 362.848596][T11888] ? __warn+0xea/0x3d0 [ 362.852701][T11888] ? copy_huge_pmd+0x16dd/0x2500 [ 362.857707][T11888] ? report_bug+0x3c0/0x580 [ 362.862251][T11888] ? handle_bug+0x54/0xa0 [ 362.866613][T11888] ? exc_invalid_op+0x17/0x50 [ 362.871390][T11888] ? asm_exc_invalid_op+0x1a/0x20 [ 362.876579][T11888] ? copy_huge_pmd+0x16dc/0x2500 [ 362.881761][T11888] ? copy_huge_pmd+0x16dd/0x2500 [ 362.886744][T11888] ? __pfx_lock_release+0x10/0x10 [ 362.892134][T11888] ? __pfx_copy_huge_pmd+0x10/0x10 [ 362.897466][T11888] copy_page_range+0xa6b/0x5a50 [ 362.902363][T11888] ? mas_wr_store_entry+0x4e5/0x31a0 [ 362.907870][T11888] ? __pfx_copy_page_range+0x10/0x10 [ 362.913163][T11888] ? mas_store+0x53b/0xad0 [ 362.917609][T11888] ? __pfx_mas_store+0x10/0x10 [ 362.922425][T11888] ? lock_acquire+0x2f/0xb0 [ 362.926949][T11888] ? copy_mm+0x1063/0x2550 [ 362.931528][T11888] ? up_write+0x1b2/0x520 [ 362.935854][T11888] copy_mm+0x134f/0x2550 [ 362.940405][T11888] ? __pfx_copy_mm+0x10/0x10 [ 362.944996][T11888] ? copy_process+0x3c7d/0x6ee0 [ 362.949877][T11888] ? __raw_spin_lock_init+0x3a/0x110 [ 362.955158][T11888] copy_process+0x3e43/0x6ee0 [ 362.959898][T11888] ? __pfx_copy_process+0x10/0x10 [ 362.964923][T11888] ? futex_wait+0x121/0x380 [ 362.969464][T11888] kernel_clone+0xfd/0x960 [ 362.973883][T11888] ? __pfx_kernel_clone+0x10/0x10 [ 362.979081][T11888] ? do_futex+0x123/0x350 [ 362.983417][T11888] ? __pfx_do_futex+0x10/0x10 [ 362.988218][T11888] ? 0xffffffff81000000 [ 362.992363][T11888] ? 0xffffffffff600000 [ 362.996505][T11888] __do_sys_clone+0xba/0x100 [ 363.001285][T11888] ? __pfx___do_sys_clone+0x10/0x10 [ 363.006613][T11888] ? 0xffffffffff600000 [ 363.010775][T11888] ? 0xffffffff81000000 [ 363.014916][T11888] ? 0xffffffffff600000 [ 363.019174][T11888] do_syscall_64+0xcd/0x250 [ 363.023678][T11888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.029587][T11888] RIP: 0033:0x7f5f0237dff9 [ 363.033991][T11888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.053816][T11888] RSP: 002b:00007f5f031dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 363.062334][T11888] RAX: ffffffffffffffda RBX: 00007f5f02536058 RCX: 00007f5f0237dff9 [ 363.070344][T11888] RDX: ffffffffff600000 RSI: 0000000000000005 RDI: 0000000000000000 [ 363.078355][T11888] RBP: 00007f5f023f0296 R08: 0000000000000009 R09: 0000000000000000 [ 363.086403][T11888] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.094497][T11888] R13: 0000000000000000 R14: 00007f5f02536058 R15: 00007ffd8fde6f58 [ 363.102489][T11888] ? 0xffffffff81000000 [ 363.106643][T11888] ? 0xffffffffff600000 [ 363.110815][T11888] [ 363.113821][T11888] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 363.121081][T11888] CPU: 0 UID: 0 PID: 11888 Comm: syz.1.1314 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 363.131824][T11888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 363.141870][T11888] Call Trace: [ 363.145131][T11888] [ 363.148053][T11888] dump_stack_lvl+0x3d/0x1f0 [ 363.152674][T11888] panic+0x71d/0x800 [ 363.156563][T11888] ? __pfx_panic+0x10/0x10 [ 363.160987][T11888] ? show_trace_log_lvl+0x29d/0x3d0 [ 363.166187][T11888] ? copy_huge_pmd+0x16dd/0x2500 [ 363.171116][T11888] check_panic_on_warn+0xab/0xb0 [ 363.176050][T11888] __warn+0xf6/0x3d0 [ 363.179940][T11888] ? copy_huge_pmd+0x16dd/0x2500 [ 363.184865][T11888] report_bug+0x3c0/0x580 [ 363.189191][T11888] handle_bug+0x54/0xa0 [ 363.193339][T11888] exc_invalid_op+0x17/0x50 [ 363.197841][T11888] asm_exc_invalid_op+0x1a/0x20 [ 363.202681][T11888] RIP: 0010:copy_huge_pmd+0x16dd/0x2500 [ 363.208215][T11888] Code: 01 e9 dd f5 ff ff e8 72 bc 9a ff 4c 89 e3 31 ff 83 e3 02 48 89 de e8 d2 be 9a ff 48 85 db 0f 84 a0 07 00 00 e8 54 bc 9a ff 90 <0f> 0b 90 e9 88 ef ff ff e8 46 bc 9a ff 49 89 ec 31 ff 41 81 e4 ff [ 363.227825][T11888] RSP: 0018:ffffc900090a7660 EFLAGS: 00010287 [ 363.233884][T11888] RAX: 000000000000122d RBX: 0000000000000002 RCX: ffffc90009f5c000 [ 363.241843][T11888] RDX: 0000000000040000 RSI: ffffffff81f1eb6c RDI: 0000000000000007 [ 363.249804][T11888] RBP: ffffea00019bb180 R08: 0000000000000007 R09: 0000000000000000 [ 363.257768][T11888] R10: 0000000000000002 R11: 0000000000000000 R12: d7f0000000000e02 [ 363.265732][T11888] R13: d7ffe7fff933fe02 R14: 0000000000000200 R15: ffff888027b4a1f0 [ 363.273719][T11888] ? copy_huge_pmd+0x16dc/0x2500 [ 363.278679][T11888] ? __pfx_lock_release+0x10/0x10 [ 363.283706][T11888] ? __pfx_copy_huge_pmd+0x10/0x10 [ 363.288814][T11888] copy_page_range+0xa6b/0x5a50 [ 363.293674][T11888] ? mas_wr_store_entry+0x4e5/0x31a0 [ 363.298958][T11888] ? __pfx_copy_page_range+0x10/0x10 [ 363.304236][T11888] ? mas_store+0x53b/0xad0 [ 363.308643][T11888] ? __pfx_mas_store+0x10/0x10 [ 363.313389][T11888] ? lock_acquire+0x2f/0xb0 [ 363.317885][T11888] ? copy_mm+0x1063/0x2550 [ 363.322300][T11888] ? up_write+0x1b2/0x520 [ 363.326619][T11888] copy_mm+0x134f/0x2550 [ 363.330865][T11888] ? __pfx_copy_mm+0x10/0x10 [ 363.335454][T11888] ? copy_process+0x3c7d/0x6ee0 [ 363.340302][T11888] ? __raw_spin_lock_init+0x3a/0x110 [ 363.345601][T11888] copy_process+0x3e43/0x6ee0 [ 363.350298][T11888] ? __pfx_copy_process+0x10/0x10 [ 363.355331][T11888] ? futex_wait+0x121/0x380 [ 363.359835][T11888] kernel_clone+0xfd/0x960 [ 363.364329][T11888] ? __pfx_kernel_clone+0x10/0x10 [ 363.369447][T11888] ? do_futex+0x123/0x350 [ 363.373767][T11888] ? __pfx_do_futex+0x10/0x10 [ 363.378446][T11888] ? 0xffffffff81000000 [ 363.382585][T11888] ? 0xffffffffff600000 [ 363.386721][T11888] __do_sys_clone+0xba/0x100 [ 363.391305][T11888] ? __pfx___do_sys_clone+0x10/0x10 [ 363.396512][T11888] ? 0xffffffffff600000 [ 363.400660][T11888] ? 0xffffffff81000000 [ 363.404800][T11888] ? 0xffffffffff600000 [ 363.408956][T11888] do_syscall_64+0xcd/0x250 [ 363.413634][T11888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.419523][T11888] RIP: 0033:0x7f5f0237dff9 [ 363.423928][T11888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.443531][T11888] RSP: 002b:00007f5f031dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 363.451946][T11888] RAX: ffffffffffffffda RBX: 00007f5f02536058 RCX: 00007f5f0237dff9 [ 363.459911][T11888] RDX: ffffffffff600000 RSI: 0000000000000005 RDI: 0000000000000000 [ 363.467875][T11888] RBP: 00007f5f023f0296 R08: 0000000000000009 R09: 0000000000000000 [ 363.475839][T11888] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.483812][T11888] R13: 0000000000000000 R14: 00007f5f02536058 R15: 00007ffd8fde6f58 [ 363.491784][T11888] ? 0xffffffff81000000 [ 363.495941][T11888] ? 0xffffffffff600000 [ 363.500109][T11888] [ 363.503513][T11888] Kernel Offset: disabled [ 363.508153][T11888] Rebooting in 86400 seconds..