last executing test programs: 18.178814512s ago: executing program 2 (id=4099): madvise$auto(0x0, 0x2000040080000004, 0xe) memfd_secret$auto(0x0) mmap$auto(0x0, 0x8, 0xfffffffffffffffa, 0x13, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) migrate_pages$auto(0x0, 0x4, &(0x7f0000000100)=0x7f, &(0x7f0000000140)=0x3) socket(0x11, 0xa, 0x300) io_uring_register$auto(0x9, 0x10001, &(0x7f0000000000)="70daeb18e8", 0x0) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0x22240, 0x155) open(0x0, 0xa240, 0x1de) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000040), 0xffffffffffffffff) 17.546151723s ago: executing program 2 (id=4101): io_uring_setup$auto(0x7, 0xffffffffffffffff) socketpair$auto(0x11, 0x1, 0x8000000000000000, 0xffffffffffffffff) socket(0xa, 0x3, 0x73) socket(0x25, 0x1, 0x3) write$auto(0x3, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x0, 0x1, 0x49, &(0x7f0000000040)='\x00\xf3\x81\xfck~\xf1\x16*^\x97\xe4\xebm\x0f\x18\xc4:.\x84JZ|\xafj\xb4\xa4\xf4)\x97~\xc6\x8f\x97\xad\x159r^\x98WynB\xfdZ\x9e\xcf.LQC\v\xd1H\'\xc8\xe6+\xdc\a\x10K\xf0,v\xec\xa8\xa0\xb8\xf5Z\x80X}\xfev\x94hn\xa0\xb0\x15\v\xeb\xae\\JE\xab\x04\xb8\x13r\x89|O\xca\x92\xc9i\xea+\x02\x83\x17\xb8H\xcdA\xe5\f\xbd\xd0\xab\xa3\x9c\x89\n]a6\xc6\xabo[1 \n\x10\x947\'\xb2\x19\x9bd0>\xed\x84\x80\x82\x16|\xdc\x85\xfa8P{\xa6\x87\xdbO\x94\x9bDc0Z\xeaO\xa6\xad#\xd4\xa1\xc5\xcd\xf9tJD\v\xd3\n\xfeG8\xc6<', 0xbb) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0x6, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x700fc00) socket(0x6, 0x5, 0x8) shutdown$auto(0x5, 0x2) recvmmsg$auto(0x3, 0xfffffffffffffffe, 0x7fffff80, 0x1560, 0xffffffffffffffff) sysfs$auto(0x0, 0x2, 0x7ff) syz_open_procfs$namespace(0x0, 0x0) connect$auto(0x5, &(0x7f0000000000)={0xf341, @sa_data_min="6ae23ccec0acd1a9019fe7e2e8aa"}, 0x7fff) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) socket(0xa, 0x3, 0x6) open(0x0, 0x261c2, 0x47) setreuid$auto(0x3, 0x7) socket(0x1a, 0x5, 0x0) setuid$auto(0xe) shmctl$auto(0x0, 0xc, 0x0) epoll_ctl$auto(0x0, 0xcb6, 0x3, &(0x7f0000000040)={0xffffff92, 0xf7a6}) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0xfffffffffffffffd, 0x2000d, 0x5, 0x80000000eb1, 0x401, 0x8000) fspick$auto(0x8000000000000001, 0x0, 0x3) 16.810554334s ago: executing program 2 (id=4104): mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) (async) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) (async) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) mknod$auto(&(0x7f0000000040)='Vq\xf4\xc4z6\xb9\x00', 0x2, 0x401) mount$auto(&(0x7f0000000280)='Vq\xf4\xc4z6\xb9\x00', &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0xb71e, 0x0) mount$auto(&(0x7f0000000100)='\x00I\xa8\xc0\xa7\x87mR\xff\xa7H\xc9V6G\xbd\x8c]k\xbe+\x18\xc7\xb2\xdaA<\x0e\xd0*O\x02\x00\x00\x00z\xfc\x9d\x9a\xed\x87Hm\n\xf5\xf2\xcb\xf8\x1a\xbc\"\xfd\x83\xe3\xec;{?\\G|\xa0jC\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000002c0)='}[,&*}\x001\xe9\x84,\x11h\x9ez<\xc3\xd1\a\xfa\x9aJ\xb1R=XX\x8c\xa2\xf2\t\x06\xb3|S>\xa9\x14gl\xbb\x83\x9e\xa4\x91\x80\x89\xbd\xf6\xd7;\x11\x16odR$\x12c\x8b$[j\xb0\xf7\xd4\x1d\x7f\xcf\x1fj\xad\xd3bvi\xf4\xb7n\xb2\xe2\xa8\x82\xec\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\xa0~\xf0\xb1z\x9a/ \x8e\xed\xd4\xe7\xc4-\xf5\xd7{\bc%\xfc\x05MH\xea\xbe|9@,+`\x05\xb8\xb2:\x1a\xfb\x91\xe6\xae+\x17\xbf:.\x91\xc9d\x1b\xf0\xd4i\xdfW\xb6\xa4\xe9\n~,n\xdc\xc9\x9c\x9f\x10\x0e\x04\x80Q\xbc\xfa\x13\xd2\xdc|\x93\xa3\xf7^\x1b\xe3\xc7\xcd\x18@T\xf4\xe5%T\xcbn\x96JS\xfe\x03\xebc\xd1(\xc4\x9e\x9a\xae\xd5\x1d\x93oA\x8d\xc6Q\x99\xce}\x1b\xf3\xe3\x9bJ/\x80\x99v\x8c\xe3O\xc0{\xcf\xe5\xf4?\xa6fc\xed\x9a\xfa\xf7\xa7u\xcd\x90mL\x10w R\x85\xfe\rM\x8dM\x17\x92\x1e\xea\x97\x91\xd7\x1a.4\x84\xb7\x8eA\x03\x1c`V\xf7HBS\x11\xeb@I\xe2VIc\x9f\\\xe3\xeb\xc0-\xedO\x9d\x00', 0x0, 0x2003be3, 0x0) mseal$auto(0x1ffff000, 0x7dda, 0x0) 16.199770263s ago: executing program 2 (id=4105): socket$nl_generic(0x10, 0x3, 0x10) setresuid$auto(0x2, 0x7f, 0x200) ioctl$auto(0xc8, 0x54e3, 0x5c8d) socket(0x25, 0x1, 0x0) setsockopt$auto(0x4, 0x2000000000000116, 0x80, 0xfffffffffffffffd, 0x1003c) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$auto(0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff9, 0x0) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x6, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="f51b0000005bf481e974"], 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) mmap$auto(0x0, 0x401, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x0, 0x1, 0x0) fcntl$auto(0x0, 0x6, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000780)={0x14, r2, 0x323, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x488d0}, 0x48054) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000000), r0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmmsg$auto(0x5, &(0x7f0000000200)={{&(0x7f0000000040)="f464f8d5d5609b368971dac3ac218e203bab1044710e85907545ea16405e1e86eba4ebcf80d15d11e8d8a847c083d638", 0x2, &(0x7f0000000180)={&(0x7f0000000140)="b66a657b58f39b75a042b86c10bb2deb7f7e3e4f481ae558a6211366ce8d0785c88b1cf5835c8e4b8e027375e9fcebc71080073b715657", 0x1}, 0x1, &(0x7f00000001c0)="8072dc62ce1778", 0x8, 0x10}, 0x1ff}, 0x4, 0x4) madvise$auto(0xdc7, 0x7fffffffffffffff, 0x130946c6) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) dup3$auto(0xcc, 0x7, 0x81) dup3$auto(0xd, 0x3, 0xe) dup$auto(0x1) symlink$auto(0x0, 0x0) 15.76362822s ago: executing program 2 (id=4108): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') clone$auto(0x3b46, 0x6, 0xfffffffffffffffe, 0x0, 0x10) socketpair$auto(0x3, 0x5, 0x7, 0x0) bpf$auto(0x0, 0x0, 0xaf1) socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0x7, 0x6, 0x2) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x8000000000000001, 0x26, 0x8) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) fcntl$auto(0x8000000000000001, 0x26, 0x2) 13.418121446s ago: executing program 2 (id=4115): madvise$auto(0x1000000042, 0x7fffffffffffffff, 0x400bd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) 12.067270275s ago: executing program 3 (id=4117): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r0 = getpid() prctl$auto(0x1000000001d, 0xffff, 0x2, 0x9, 0x1) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') r1 = socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) splice$auto(0x2, &(0x7f0000000080)=0x200, 0xd, &(0x7f00000000c0)=0x5, 0x3, 0xe00) socket(0x2b, 0x1, 0x1) r2 = socket(0x25, 0x5, 0x0) syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000000700), r2) connect$auto(0x3, 0xfffffffffffffffe, 0x0) open(0x0, 0x595200, 0xdd) syz_genetlink_get_family_id$auto_MAC802154_HWSIM(&(0x7f0000000100), r1) socket(0x2, 0xa, 0x0) socket(0x11, 0x80003, 0x300) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x0, 0x0) tgkill$auto(0x1, 0x1, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) mmap$auto(0x0, 0x40000a, 0xdc, 0x811, 0x2, 0x8004) clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2) connect$auto(0x5, &(0x7f0000000140)={0x5, @sa_data_min="589d4a9cae44a95bedf3b182b0b0"}, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 11.224042488s ago: executing program 3 (id=4118): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) semctl$auto(0x8, 0x2, 0x13, 0x9) pwritev2$auto(0x4, 0x0, 0x9, 0xffffffffffffffff, 0x6, 0xa) move_pages$auto(0x3, 0x8, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x3) shmget$auto(0x14, 0x2, 0xe64) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) semctl$auto(0x8, 0x2, 0x13, 0x9) (async) pwritev2$auto(0x4, 0x0, 0x9, 0xffffffffffffffff, 0x6, 0xa) (async) move_pages$auto(0x3, 0x8, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x3) (async) shmget$auto(0x14, 0x2, 0xe64) (async) 10.874963628s ago: executing program 0 (id=4119): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x13, 0x3, 0x8000f500) 10.435872102s ago: executing program 3 (id=4120): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) setreuid$auto(0x2, 0x87) keyctl$auto(0x4, 0xfffffffd, 0x2, 0x0, 0x8) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) splice$auto(0x7, &(0x7f0000000040)=0x1, 0x7fff, &(0x7f0000000080)=0xf0, 0x1000, 0x400) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) mremap$auto(0x0, 0x2, 0x9, 0x3, 0x7fffffffb000) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) madvise$auto(0x4, 0x5, 0x15) socket(0xa, 0x1, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x48804) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x6, 0x1ff, 0x8000000000000001, 0x7, 0x6) clock_gettime$auto(0x1, 0x0) close_range$auto(0x80, 0x2000800d, 0x2) dup2$auto(0x2000000000000000, 0xff) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fchownat$auto(0x2, 0x0, 0x80000004, 0x8001, 0x1000) 10.331032832s ago: executing program 0 (id=4121): close_range$auto(0x0, 0xfffffffffffff001, 0x2) mknod$auto(&(0x7f0000000000)='+\x00', 0x1182, 0x8a) io_setup$auto(0x2, &(0x7f0000000040)=0x40) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') socket(0x2, 0x1, 0x106) setsockopt$auto(0x4, 0x1, 0x2, 0xfffffffffffffffd, 0x800000) (async) setsockopt$auto(0x4, 0x1, 0x2, 0xfffffffffffffffd, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x6, 0xf) dup2$auto(0x0, 0x3) (async) dup2$auto(0x0, 0x3) mlock$auto(0xfbe8, 0x5f626901) (async) mlock$auto(0xfbe8, 0x5f626901) socket(0xa, 0x5, 0x0) (async) socket(0xa, 0x5, 0x0) syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000080), r0) getsockopt$auto(0x6, 0x40000000084, 0x20, 0xfffffffffffffffe, 0x0) socket(0x1e, 0x1, 0x0) (async) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) (async) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x8000000, 0xf0ffff, 0x1000000016, 0x13, 0x3, 0x180000000) mmap$auto(0x8000000, 0x9f, 0x1000000016, 0x13, 0x3, 0x180000000) (async) mmap$auto(0x8000000, 0x9f, 0x1000000016, 0x13, 0x3, 0x180000000) 9.362514964s ago: executing program 0 (id=4122): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r0 = socket(0xa, 0x801, 0x106) connect$auto(0x3, &(0x7f00000000c0)={0x405, @sockaddr_1_1={"8abf6acbd473c553f4b0e44e554d314ca7"}}, 0x55) r1 = syz_genetlink_get_family_id$auto_HSR(&(0x7f0000000080), r0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xa, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000) prctl$auto(0xf, 0x2, 0x80000001, 0x401, 0x3ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r6) fsetxattr$auto(0x3, &(0x7f00000002c0)='[#%:G]!\\\x00', &(0x7f0000000300)="9d268c2029c5a13afe658c49eb7f1a4feb6c664cf037794ee59aa4377c6d318cc10f2e5645003bd21e1050f3a52e0fa3", 0x8, 0x7) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="70110000", @ANYRES16=r7, @ANYBLOB="08002abd7000fcdbdf2520000000041003007bc79428734e1ea58bc1228890c78b31876f5e5f4cd661fd57924da91c465a60f4477956f010e15cb9acef1df511bcca97b15ec35cc9ba347877258eaa3609a4a77277138be143658323efae6ba77b33d7e8604bc5960885a2b51b69046045b65863ff2edfbb9a908b2b672d42038269f73f6cbe9dfe1238181ea209f6aad4247a23f1e4fa40b0f4784cb02959f0b25abd02e05bba10a073bf42a521d063bd28d5ad9a0f413f073f72933a02c6a5e7556fe4e4dd163f9d37b7ddbabf3f7b2e31817e9747d59d946c6a10a8f0108e1669e9bfad6e7ebb01d6279f843d6fa44517bba9bf2beb1cd6b2d5189e1b2247f597c636d0bad243f8c551ba59d5146732e45d31088757610707f4649097bfd9174a2fcf121d9897ec80c16f282b95afb1d18fc6403a506928e03f63f6a59ff073d499c1d9261dd603acd9b1612fc5f5c27f40489cec5f78a76971fb33b539f5defa62025995a65c0926f8dbf7a4691b16c58220e122ecb9cf435fcf4a4ccb01867a87285d0b989687a7f977b3292971e442f0e7b319e28c22bb174084da789751c83e5ae63bd290fcd239cf1c6533602c96788f0d30cf7eba778cea940e7502bb932dcf4f0a083a824b4e82cee21bc79230bd0b97ba51596a1a2a5e05d54964a37388bc6fea663da35845ee2dcd00b778462a0a112803bf429237e225cfc6992272271a78eb8e8b6df8e851f037633a4b561d04666bced5fe0b0eb887f920d41fdf4ef9d2aacd61a896f058b27a3e18728884a88767d0ba6997c9f76de705301e1e8ec41871f1c67380486f3d0e067221a8034bd68224fc3518ec1c29a3ac754ceb8c09d0d7a9146babf4933c89b7c72559c1f72acde4c50294e81a64876cf44c9e35e07f2df94db726d5ad78669326617bc2017f4d1b7af34154e994a93be63b7cf44eaa10e29dc09b323cce2e11823cf93bb66d721d15f57ff6297d880dae94047fd9dad2c7d7035c2da753986ebab914f62dfd2ec5a2ca0d77b5b011e59d30897029ca34b963918238cd67fb801e891e977aa1692b17311ca4f51886beb21236480a66cb38a33302d5dc03f53283c1f81fc22ab92a96cae08b2254b6dc4a8fbb3b01e27daa6b0db5e8c877c7744e05a15ee540a84761cd12a79949c20854815c4831170523d29091374e34dd8c4a48d9c84eef038dc8784998e68a5f56fc09e7ded306a9c61cc187d345f13e0ade59aa1c94902738b11c600f852bfb62ce125529d314c364d046c4041146f9371ec6db64751bd096212ef68acc52185707fafb3c9c279c231e26ccf3b5185a9efe667bc4903a0a888a06329765f10724ef7d9ffc944c14ce263ced5bedcde7a42474162460fbc68c961a632c77f41f99f435403c543896c54d4ac4852bdfda82cae021712443acc0dc1fa8c2bda8e093d2e6c8787db673f927e96becc15a4be6eb498ac6563a354af21bbfed69ea79f8ee17efc86ecc33f4ace218625a056f7d6e7b4cc7d2bb33d614853814ee9ec12c18c28e5ecdd0a6e5ebba1201d4674979819aac67595a1ac56565c7745c1dfa76aebc70f440397e8efbc0609a891eed9aa25227ec453fd47fc428cf3f5b3f12122abea7a3ef3e5d88e1480cb9c2ff6913d55696feb13ae57dce680fbb71f84c29553c54a07ce60c960aa17666c7db588a78affd47131e4c99593713e91d59c5cfebe9f2859467e41ef435fbc6d3efa8cf4a493e96276231d9d1ba2408bf753adbf0c2aaf7a38ef51443bcf010a5de8746fb70f842bba25410b88f9fae1ad41ac0be46d46f1c34264a817751e590ecb963cfcb217fe6f0d389efa7df946a4967fa7aefc964a028020d4e4f486741025833b1030e1dc69d92d5beba59cd136bea0daef8ec76910675976897be067bea1fdfb5365909ff37fbbe17075e08195b26fc8cb8e3b6cd2592bef8683aa47852507e38a7dc321ffa631558db4c83ef40fa382a5d8d28cfc2e9408c7a1098b622b36118cb1c8de39786bf55f4f0a6028408be95319fc815b65db70e609f5df04e8596722f04a2907f74d50e533a5df127315494608dd14dbce4695ae10b59da5b64a42996068615bca0963a544581f2ce5276e1a07212abeac6022095bf354fb8ac58a2cc262012732516423a46bc62bd358e40f6ad946958c67337858354c675731826390a65aa26bdb050b40eb7d69811a9e06fc8b6cbfbbef9c5dc02cd6251ed8c6f9113296066b59827b17cc05b619b4d69f23f62555c62df20834085acededb4eecf6910ba3ec751b6105a7cae5c7df1c57dafd7bf733022a783f41f6264421145177e39f1037084d9b856a48ef14a3f9527704aff52ee10f7703da6885fbe69b477255fe40399fec6c58eff37784ecc24a62aea5d8a7d717968f5c50d4bfe8a584198f9222f7cc31dd6d5fc7bebc53453e22345dc0e0e6f956feec37bdfc1d4a7bb4cd210223ba9912a206698ed6e8e62d139f5c5734482de470e08815be227cd789e244c9068956b2f51302e9be20195f66da3071f0a2fb8b9a00e98bb48ae3e3e3ec0b3b6f11faa4b6ea0ae8c455e0218be9fcd8e44b1e64c7ae2a67f675cf31e05ef18fdd490b4e9e4c1429d2dde4e1988b7b8557af85418c1219ee3a797bd6134fa04a96d1b6fbf315a59c7adabfac33f8545e08849c808f5eb6868bf4dbde7fc95c792fc1fc987185e69ca5fbd000f7b1f62f310bed4221f97a6e725fb42a34436e89127acca513e5111736c6c61a0edb666599a019685cb0ae9565704027daf292158489479d8700e2033478a433cf8661eb5ed752c587a4d4ecc6afddb2f15423f3f23664be2f3dd037618ec3134e31b95fa62c823a2c2d7894c4e865a7f5e1d8d4b329a76ceed108c891977586c40b3dbaa4877f60b8d417fb33254319a99fd237bf41883f3179235ca10dc0ecc108b7c981f4b01b5a449fc12316ef4089fd45b6e247e062ccd6cb1f9f649fc6630b0dadffff425731f3379eff6cfab75399a2bdd6bbd339bd524dfd472e78d6af59d52ca15a5a0f214f8cfcde0d3e50528eaab0290d9fdd7bfcc837911a0bc859dc890868cc1fccc547baf5756ce4e1338db85178c386f50e37bf842358fed81069a934b7148300ad6eb3eff275a3ccab1a7f42daa5112f001796766481c82b2556e9c517af0186df7d37362448da1c175e9698f39c72d82fc093f990bff254b7a14942d4f1bd789887c3cc2dfcc635694c81f2ef9298db2a1f94fd718722d8469bca80abdac026b93fb5c8b1472b8f16563e3576d654dcb07092d44e7853654df750c31eb898871b69371f79eb7985b9e20aeb841b075211c3c366aa094402efe6447a0f003c514344ec89320c3c19a8a7d4142746a2476a44dcf5cf18bc6181840b9350d2477d4a96ddf2782b026cc2ba85443eac7f00f92c285142be2eca4a5f679f0b4772578ba664cebd504bfc275b5c5651641abe18d9718dd35a5e8d6cbf0310010e1503171815e9fd9f2f1227c0b440066e008626530b3ecaa221d7c50f6877d76735908db69e127b406037e471d019871447830cb619dd320459c1de0d8dd7a4d0dea4d1aa3f165954da36a8263a5bcda1a6c16da9aefa92e416d510dfa21b9308fae59bc8a50a6dc1bf0ddae8a14f19f3784727ab42ea41657aeb0588418d1cc9abdc81956d59742c3b54c971e070098376c7b4fba0a89e3d0eb7c77341b1080655338f8a58885f1fb139f4c8bb07a3b67d2b325c1d8e20b7930024e652889b96b75b2b8240101b022265f163bbcad4e90178f66df37f004917c3657a840738feb7d94588fd4b68320ea8b7800649e6fbaa3f2e56b604234d26af0724f94c45a3cb5ca1507860face11a2270f6ce9cbe447c25555056d087675de6c0cfd561a607d21c5a35fd93c090284666fcf81856744a19d55fe3f3c7708ca147d8a48e596e10cdab7bb8f4a16e59d5f966f069b2bd5ecdc912e626f483cfaa0415ae16050a254202199917036b0c1ef80228cc0b4280afd224f198c35ecd464c4adc8fe1b8a47c46ee177332b819249ac2145299fa1cbad259efe096670f30602b4c054b70c0f4f88b7ce956462680449663153a0e17f532487da0f81e807d5bf4966e263ed366ae814dec54c46b966632bc95ef07377dbbe568e987e77606d5226ca837d601ce22d8d6d6a79cec1b5705608224050d9ad18efa754ac44fe9f0bfa155a135cfd841adff8006f66cf46db491092f7fb35a18e463779b72fa32622a2bdbc0351826923578d880ae33898f1413c029961665dfdf492975ac34cd3ce0edad8f7bec0580214ab8f8863201560c3ebbcf054f9e64c458ee9a8a4424c62a67014a03eecf4f27b2c019e5a54cb5491615f60d6c8a73b505443a21e85c14807f9e3f654b5b18b44ba59ec7dc15634de24ed459e870dee3c137b9ced6fafc783d61608347375ec4bf842e3ad1919305e8261fb7869a8fe835ab2bc397347a665093a4e867d48082ee59bce8fb2e0770e536a5abb14d1adc2563440375c41b7f048930accf51d3907caaad3c330d258b5304dfa35250882c62b9a69319644f7316e1e7773d053f5914eb715e639c75a139ddbc74e8f49a1a900bfa37f9bb5a953d4b74a5316b7e1ae51499c1d2106e1fd8796bd8c47f05ca257c6afde48b31d087a2aca72b6ef4b496cd4a6038accea17e5c67336ed171e0637f8b6276a550ead199f785cf64a6ebd305d0b4acb51a95c72545c7284420a5f8392877cc651b8babbc1cc929c7bf7049c5d462674f590d99d5138a7f20bafca712162a6824ee08dc3cbce42794ec97d862a512a4cf60ece2ef1ebe50104944ebb308fee4d6a7421bed3145fa88b428ff381737e19036a2325cd625973af8711ab1b7892f4778e4ffc7ee4a28f73b3150571c5d2710862fd19d834d66a2aac3711311bd6d933971909e74a0984adc0516b900cd135efab38850f0ff6c704dbcfa0c0af1dbbf910b0f601b8fda9776e707e4cf65cd5fee162b2d52ac22ec50e6046cfc10c7a832dac810506ca6e757dba0cc1956183c919253aba8b941fcfdee2ae1919a49296b70f72092370bb07f70616a75f757e459e2f40018aadfe8490a636e78cae70fe04670885b5dedbb79997e79e75c005c792f4bd453322e09a7099abe72082fa42f46ba2951ff8fff4105b4a098492bbe302cc3ac410c838c58458572ecea366bf9c7ed2df20d8e9f38fc050499ad4a9a1fbd5712fa9ecf6d3eb96d3a59ff94f511b64171c12280b0ee4417b978949e92955b32d321d7bb06dbfc690926f2572488c3913220cb84c5666948a04ee34f01992298b056fb3b283211b1417c97018dc44b472d3958d4ecf23c15b6f4061fe32f7642b40cccddf4749b4b4be74429e9def29f5bd922fdf57dcd91b1a92f1eec3385dfa8b4a3bd2f13ba95465f33ba67afa8733b23e6bf805611da9b3ff536becaa54db3947a2ba6ca0f7c5ba16fb3b179972e69a64a165d022f1efc2f4ada552eb8c0db6020ddf3859f16e876cce7312d01d2f77c7ea023bd3dd7e41faab5fe45ada3215cc0d100e0a5843f030fee7ca902c6bb31117129772c4a552798a05100c0ed33f41b51af4531362d7c66126625cb7a74db24658fde877f429cc14eed02aa8b54fc40423bac96562de3e1b88c9b7198efb8486ba79db35f0f1ccbc1b8116ab3b0f071dbce09511d509f33b9f644b50fc9f55084ef513249c9785e283830f6a71d52d092cd5e0deecd3f234e98c72f3e30ff35c41826c4f368a80f54b018b08f22a940c4a7b8efe0a36e17c3585ec42454484ced99352a7395137391b51a5a0003000c3d501de48d1bb4c7cad90668436e11a18dd1f44bc16fcea2c8a5c58115c8376644069c1a0df7f30d30f7c81048060735cf266c303f8e0879c481ac7ab0be7a9e11e71e687f69d4216e3ccd355868705171410ffa370000070002006610f90007000200a8809800da000300cb48c3aa1e897dc38c9571a0cda60a2d0c997846f24acc657e34bcd4dd548b4084416136ef760fa0e9b95e1dd9fb3cd4c3ec23264cf95336bb80fe98a6bd7f1114ca0e56b7fde9cdd9b39bc70a67c5bec2a9be6ca3c90d5339ee71686840d381811175c66762deb6e4f3fa035f07ba3b9f158fce1a5a0033dd74a9e2b0ed2d052a1100902f86bd185c7af6747a4f847420aae76bf02d15005500626532bc0f7c4849520712ebacfee33e0c8e13352062853dd91cdc90eb58ad9468019ea312bdb534d5b8454a2be4279310a07cb306351bef646dcc63000007000200606f3e0007000200289ec700"], 0x1170}, 0x1, 0x0, 0x0, 0x1}, 0x10840) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf256000000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x803}, 0x80) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00042bbd7000ffdbdf250300000008000200", @ANYRES32=r5, @ANYBLOB="5d248aaadf68ba76a51479275d0d8442ebb764e9c9a19f6a4663fa813ff4b011f01a9cf75fb77c7b21cdd01079127df278cd2433d0c2269c0c12a50f"], 0x1c}}, 0x40001) listen$auto(0x3, 0x81) 7.32174755s ago: executing program 0 (id=4127): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioperm$auto(0x3, 0x5, 0x149) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r0 = socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x5, 0x0) socket(0x2, 0x1, 0x0) setsockopt$auto(0x6, 0x8000000000000006, 0x2a, 0x0, 0x7ffffc) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x1004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000c40), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_NLBL_MGMT(&(0x7f0000000080), r4) sendmsg$auto_NLBL_MGMT_C_ADD(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'batadv\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x805) sendmsg$auto_NLBL_MGMT_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r5, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x9}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x3}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x100}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'ovs_packet\x00'}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x3}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x114418bf}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x40800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f00000002c0)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x9}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x2ee9}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "000600"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x80000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x10, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2404c0c1) getsid$auto(0x0) 6.417304179s ago: executing program 3 (id=4129): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) r1 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x4004000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) set_mempolicy_home_node$auto(0x8000, 0x10001, 0x0, 0x0) 5.595526854s ago: executing program 1 (id=4131): socket(0x2, 0x80002, 0x73) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffe, 0x4, 0x4000000000df, 0x40ebf, 0x401, 0x300000000000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0x100082) socket(0x2a, 0x80805, 0x0) bind$auto(0x4, 0xfffffffffffffffe, 0x0) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) sendmmsg$auto(0x3, 0xfffffffffffffffd, 0x2, 0x5) setreuid$auto(0x100, 0x9) bpf$auto(0x5, &(0x7f0000003c80)=@bpf_attr_7={@map_id=0x8, 0x81, 0xf}, 0x5) mknod$auto(&(0x7f00000000c0)='}[,\x15-l\x00\x00\x00\x00\x00\x00', 0xffff, 0xb6d) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_SMC_PNETID(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x9) writev$auto(0x5, &(0x7f0000000100)={&(0x7f0000000040), 0x4}, 0x1) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1={"59c7ef"}}, 0x6b) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, 0x0, 0x4) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250100000008000200040000000800010048535200080002000900000008000700000000000800090022956816ac"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x80) 1.976229323s ago: executing program 1 (id=4132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x168, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_PROBE_RESP={0x142, 0x91, "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"}]}, 0x168}, 0x1, 0x0, 0x0, 0x48080}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f00000002c0), r0) sendmsg$auto_TIPC_NL_SOCK_GET(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x114, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, "fcc13d1be173e0f46308f68668e937b340a2ed6892dad0b4ca2daad7d3b7dc0b47b376a29bea73ca2851ff4d2f8d3159e8f7089e5c9848d041fe86c312d47fb0c874fd22b7dd67b37f15169372b907b8dfcd6a67"}, @TIPC_NLA_MON={0x18, 0x9, "20a3ad9850f2468f00cc0af7419c0df464274059"}, @TIPC_NLA_SOCK={0x90, 0x2, "7c3367bcd4cc3f94180b3a9b2a1c47ecd7f36b888e6c8b6d15bebcfb76922d754f86d314e06bb85f13d96c90ef6a8e93160120fd6a103472f2604e3ecddcbb6af50f79f77093b27d315145338773b62d32ce6d088575023d0fb87d43cb97b7753ba5690a5e5f44f15823ebbb0e70ba0d7038326cebbfe7134707ba9c31879444b523d9d216a07fa3883901bf"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4880}, 0x80) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000500), r2) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'TIPCv2\x00'}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x7f}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1000}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x9}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x844) mkdirat$auto(0x3, &(0x7f0000000640)='#\x00', 0x5) sendmsg$auto_NFC_CMD_GET_SE(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x86}, 0x40810) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_SOCK_GET(r5, &(0x7f0000000ac0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000007c0)={0x2c0, r3, 0xa02, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x45, 0x5, "7a081a0b3f947586e3c4358beb4f213b11d2bb5f45f17ab9636d5b353cf5c76e6989a49613a94214dd3131ce494ac6c04827f77cc6124586793e1409c51d7e2c6b"}, @TIPC_NLA_NET={0xdd, 0x7, "ffc8f51286b5972c6f27916df4c793234d8d3114c9aecccd20c537e8d00ba54bb5d40fc41a9beaa413ee9fa7b03505ae8373c858307c8a22b7414fa0441be767cc6ff593a381d74e05e11483ee42d68777bf52a0e4e29aeb75283a1da717f36cfc166ee646fe0b03ebd1f8448da6f4bc0ab43b55cd8482172e103fb6009b0ef68a3d2b580cfaa37ca84d83f65c6cc4f3b8d8dc3d62c9ada5c5a11cc37d2c88b4b06f19bb8059004c9f73cd97bd81316267e6cfb7de9cc856b0eb215b3f2f63c6bd073d9b5d9fe6328d852f2bf4de5635f42a6bfd374a1d6dbd"}, @TIPC_NLA_MON={0xc5, 0x9, "499c5f700815ffcdd118031f33deb12c068e1353c8f941b70a7ffd2d29589eae33d0d0b6c9cf854243a6983cff91006407a1a14518bb9861dfc1523305e1f52de5018c4f190ccfdf1975507c572e0a29fc15fe6ba6ce3e6ecb393199b1efc811a819e0a0832efa325313c3f78515cd1b622e51c45242d8e86084db8d0ad51309a0a7b70851a43e053d6c7f909243ddb63509062951f11da8920d32a0e2442709c3d7ca94c599613bf75cd713be8f740456acc416b2f249e0f814f9d409f817a4ef"}, @TIPC_NLA_PUBL={0x35, 0x3, "f7e908efddab297d9d310dd8fa1c50f1175cf55d2d60aa0dd3868ae248c34a8b3c457f65cbbffe25842fffb5c5f971fd8d"}, @TIPC_NLA_NODE={0x83, 0x6, "54e3b0e0e147012369599157b24e98cd8a5bf3549f62863ec9e6cb6309569606e1d4217d22063482df3695bba10bf0a16075a2286474b87e7b7e84beafb2483f2676ebea66d7d0040aba9cf1930d934bd36fe7486ee8845501974d82fef5126ad84d3ed947303aef18042e1460281577020d972157f5aa494c785ebf9fb820"}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4804}, 0x84050) sendmsg$auto_IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001dc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000008}, 0xc, &(0x7f0000001d80)={&(0x7f0000000b40)={0x1208, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xcd, 0x3, "de3bc6381647cca26b55be1bcb5a0d1c0f6c2a0ed2f3147a3516436cc41144479c88bd1fa9cbd00f1f327476ccc4563f0c636e5be3e03e16853e31a0131838443c084dd9e4d14b36e780dcfd4b1f052732aa65ffd25865ad0c09eddba726955b6b1556640e1b227777db655d59410c1d0c46b877fe8422d2af50a231d3c497dedc522c0f297ba722842c418a81b42535de68d721c42f8b8f1ff6fb9e4a21ebbb49bc713d1ee369b9c6aabb1b2977ff4e39e37df2d7a0df8a81757ffb976bc8e53e6a75be98825ca7fb"}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x1004, 0x1, "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"}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, "212e7aa5ad4a146b6f698408efec2f15b97d2e130a34ea438b89cb2312679d8e02038d41df8bee04744566bac1944fc79ee57bd4a55e464c191626a05c0a5a4fdabf6ad0d148ec06927f5228dbde941b"}, @IPVS_CMD_ATTR_SERVICE={0xb4, 0x1, "68129d9e0e226d9962eb54dbb4442e6a44f7943544e32d7aca3453a4e04f19adc6ae79c714e658a72c7fb69991cf5854bdf68b37522b7a3cc939c5686d62f9b48ba854faa15800d6572db80b6ad2acbdf272d491822c5c0d17758397523dfc25583e539f899bd260bc861df2032f105fdb1366c8092b63c827a4a237179c43cb7c69cf301a19cae3783915726cc29f07d3fb32eacceaec147860efe21beb889649981adc6f14a3bef84a50d581c0f5c1"}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1208}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000001e40), r5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e80)={'sit0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x24, r6, 0x10, 0x1000, 0x25dfdbfe, {}, [@OVS_DP_ATTR_IFINDEX={0x8}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_NET_DM(&(0x7f0000001fc0), r5) sendmsg$auto_NET_DM_CMD_STATS_GET(r8, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x2c, r9, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0x730}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x6}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048005}, 0x20004000) r10 = socket(0xa, 0x6, 0x8) r11 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002100), r10) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000002280)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002240)={&(0x7f0000002140)={0x100, r11, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SCAN_PREAMBLE_CODES={0xe9, 0x22, "6c383bdf88e5ce03a28f395ef3006db965be5eb163814e33994ae9c2d4281f8381e2101e6ec1b174fb5d6c1032a46670eb91252b351b2beb376cbb2491bc3d67c371d33b59fd872e0da743646885fcbfc5e39d52d0535e3992219c55fd7abd9d9e8b17815682ab9b08073c121bb9f3dbb627be60b28dcfd6a50c8eec522fe04a2789f892315ca121ef640dea48d646a099ef134566ad1e1d8d563ff5732eceb3fefa9100c5df7874cb007dd773b07db7c9f92ed622a9903543e6431cd8f51aa3e218b3b1cc3041c44332563069da95ef2a68e98a53e9c0ba83d7c4e2167060ed27feed0a65"}]}, 0x100}, 0x1, 0x0, 0x0, 0x40001}, 0x44080) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r5, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_TZ_MODE={0x8, 0x9, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) r12 = socket(0x3, 0x80000, 0x80) r13 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r12, &(0x7f0000002540)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002500)={&(0x7f0000002400)={0xd8, r11, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r13}, @NL802154_ATTR_PID={0x8, 0x1c, 0x46f}, @NL802154_ATTR_COORDINATOR={0x6f, 0x1e, "3929acf55917c4a935f0fd81bfabe83dc4fc70f49375c11ec6511438eff524dff8483936092e3b0e7c616ecff7f80f716f8428f90bc217073e647f76c6e640628fdd36acfcf0b2c905524ab49c7dc81c577f91ea746f27791916d269324d88d316dfdc8918e8bee259fec7"}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x95}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x29, 0x19, "018258ba0494604982ea5d062ffb5026350841709ed875ec5dc937a82261414b139903e235"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000004}, 0x4010) r14 = syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f00000025c0), r10) sendmsg$auto_IEEE802154_LLSEC_DEL_KEY(r8, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x14, r14, 0xa, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44) syz_genetlink_get_family_id$auto_vdpa(&(0x7f00000026c0), r5) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002880)={&(0x7f0000002780)={0xc4, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_ACTIONS={0xa0, 0x2, "271ec34147c5136bd17e9cddd68b31e00e3d25db99f60bb1ba00c1a7caec45597bab24e0be27f6bc1b988ed1674c6c1d893739973c1e46ae1eeb7aae70860fa952214f4f4090d3f57b62dd9018ba23c2775d4e035c7c77af15a4f2dc5addb8a3737bac4f729ab1081265a194a7b19e3cb5ae2dff05a7bfd1fde54ec2125ca4a7dd5c6202aa9221dd19260510a5d59700bc94608fe8bce896dadfef4d"}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x10}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008804}, 0x4054) 1.79124003s ago: executing program 0 (id=4133): close_range$auto(0x0, 0xfffff001, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) (async) clone$auto(0x81000005, 0x2, 0xfffffffffffffffd, 0xffffffffffffffff, 0x7ffffffd) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000080)=ANY=[@ANYBLOB="071300", @ANYBLOB="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"], 0x1354}}, 0x40001) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x40) (async) madvise$auto(0x3, 0xffffffffffff0008, 0x15) (async) statmount$auto(&(0x7f0000000000)={0x2, 0x8, 0x5, 0xffffffff, 0xfffffffffffffff4}, 0x0, 0x800, 0x2) (async) madvise$auto(0x1ffff000, 0x5510, 0x8) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) statmount$auto(&(0x7f0000000000)={0x81, 0x8, 0x5, 0xffffffff, 0xfffffffffffffff2}, 0x0, 0x800, 0x0) (async, rerun: 32) socket(0x26, 0x80805, 0x0) (async, rerun: 32) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') (async, rerun: 64) open(&(0x7f0000000040)='./cgroup\x00', 0x745240, 0x40) (async, rerun: 64) fanotify_init$auto(0x4, 0x2000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) msgctl$auto(0x2, 0x1, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0x1, &(0x7f0000000040)='~\xd6\x11\x1b', 0x80000000) close_range$auto(0x7, 0xfffffffffffffff8, 0x2) (async) timer_create$auto(0xfffffff9, 0x0, 0x0) madvise$auto(0x6, 0x7, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8002) poll$auto(&(0x7f0000000000)={0x6, 0xe, 0x7f}, 0x3, 0x2) (async) mincore$auto(0x1000, 0x6, 0x0) socket(0x10, 0x3, 0xa) (async) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) ioperm$auto(0x0, 0x7, 0x149) 1.658130882s ago: executing program 1 (id=4134): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pimreg\x00'}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x70bd2b, 0x24dfdbfb, {}, [@BATADV_ATTR_MCAST_FLAGS={0x8, 0x26, 0x4}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x5a}, @BATADV_ATTR_TT_LAST_TTVN={0x5, 0x12, 0x4}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x5}, @BATADV_ATTR_ROUTER={0xa, 0x1d, "6e09b11907b4"}, @BATADV_ATTR_BLA_CRC={0x6, 0x22, 0x100}, @BATADV_ATTR_DAT_CACHE_HWADDRESS={0xa, 0x24, "94507aa6fb7e"}, @BATADV_ATTR_MESH_IFNAME={0x11, 0x4, ',%.(]\'&\\@,\"S-'}, @BATADV_ATTR_BLA_OWN={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x24044014) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x55) sendmsg$auto_NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4000042) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7020fddbdf250700000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000c0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) write$auto(0x3, 0x0, 0xfdef) 1.629351221s ago: executing program 3 (id=4135): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x106) fcntl$auto(0x9, 0x5, 0xecd8) connect$auto(0x3, 0x0, 0x55) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x48004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) io_uring_setup$auto(0x6, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) close_range$auto(0x2, 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01035a0000000000000002"], 0x14}, 0x1, 0x0, 0x0, 0x6004832}, 0x4010) open(0x0, 0xa22c0, 0x155) close_range$auto(0x0, 0xfffffff7, 0x100000) open(0x0, 0xa240, 0x1de) 1.309262505s ago: executing program 1 (id=4136): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1, 0x2, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) socket(0xa, 0x3, 0x3a) (async) rt_sigprocmask$auto(0x40, &(0x7f0000000000)={0xc}, 0x0, 0x8) (async) connect$auto(0x4, 0x0, 0x6) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 1.199935293s ago: executing program 1 (id=4137): mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x6}, 0xf7, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) move_mount$auto(0xc, 0x0, 0x400, 0x0, 0x356) clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) clone$auto(0x200, 0x29e, &(0x7f0000000000)=0x3, 0x0, 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) open(&(0x7f0000000000)='./file1\x00', 0x10677d, 0x37e5c9853cd1b999) fanotify_mark$auto(0x200, 0x1, 0x9, 0x4, 0x0) mknod$auto(&(0x7f0000000000)='$]\x00', 0x7, 0xbc) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 764.978061ms ago: executing program 0 (id=4138): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x1, 0x28000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) name_to_handle_at$auto(0xffff, 0x0, 0x0, 0x0, 0x0) fcntl$auto(0x8000000000000001, 0x6, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0xc, 0xbc5, 0x13, 0x3, 0x8000) socket(0xa, 0x801, 0x106) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup$auto(0x9e, 0x0) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="8a120000cb2a747c346e6f60e31472573b88e117b0bce06e4200484f2d79e67ce03127ef000e23a8cdc1df4bf73458d90e25fde47bffa95761c125924367e229b5faadcf6ae3ad113d8481b5153731a58e0c750f2efdc7dd2464505cbc760479d1d1253e7af25ff86fb589e143c457f11d6784643be0fd61cf3774557a25375939eefa528503ada864f7b47b707753e1b3f1b2a03ec830a9f1", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf25040000000400120008000c0002000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x9, 0xfffffffffffff000, 0x78) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) bpf$auto(0x100000001, 0x0, 0x0) unshare$auto(0x200) mmap$auto(0x0, 0x80, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2a, 0x1, 0x208) socket(0x23, 0x80805, 0x0) ioctl$auto(0x1, 0x541b, 0x8) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r2, 0x0) clone$auto(0xfffffffe00000, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x4) unshare$auto(0x1cffd94e) getrusage$auto(0xffffffff, &(0x7f0000000300)={{0x8000000000000000, 0x7fff}, {0x9, 0x2}, 0xffffffffffffffff, 0x8000, 0x4, 0x8, 0xd, 0x3ff, 0x6, 0x1, 0x3d6, 0x1, 0x5, 0x7, 0x8, 0x8000000000000001}) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(0x0, 0xffffffffffffffff) 357.424005ms ago: executing program 1 (id=4139): socket(0x2, 0x80002, 0x73) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffe, 0x4, 0x4000000000df, 0x40ebf, 0x401, 0x300000000000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0x100082) socket(0x2a, 0x80805, 0x0) bind$auto(0x4, 0xfffffffffffffffe, 0x0) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) sendmmsg$auto(0x3, 0xfffffffffffffffd, 0x2, 0x5) setreuid$auto(0x100, 0x9) bpf$auto(0x5, &(0x7f0000003c80)=@bpf_attr_7={@map_id=0x8, 0x81, 0xf}, 0x5) mknod$auto(&(0x7f00000000c0)='}[,\x15-l\x00\x00\x00\x00\x00\x00', 0xffff, 0xb6d) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_SMC_PNETID(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x9) writev$auto(0x5, &(0x7f0000000100)={&(0x7f0000000040), 0x4}, 0x1) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1={"59c7ef"}}, 0x6b) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, 0x0, 0x4) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250100000008000200040000000800010048535200080002000900000008000700000000000800090022956816ac"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x80) 0s ago: executing program 3 (id=4140): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x2, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x8, 0x5, 0x2eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) select$auto(0x3, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x0, 0xc, 0x8, 0x3, 0x6, 0x2, 0x9, 0x5e582970, 0x4000000000000000, 0x6, 0x4, 0x5, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f00000001c0)={0x2, @sa_data_min="9aceb6b47600d1e75e60707d94e2"}, 0x55) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) write$auto(0x3, 0x0, 0xfdef) kernel console output (not intermixed with test programs): egistering): (slave bond_slave_1): Releasing backup interface [ 956.530610][T15642] bond0 (unregistering): Released all slaves [ 956.639214][T15642] HSR: left promiscuous mode [ 956.678189][T19402] Bluetooth: hci3: command tx timeout [ 956.709506][T21525] veth0_vlan: entered promiscuous mode [ 956.760217][T21525] veth1_vlan: entered promiscuous mode [ 956.872453][T21622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.105438][T21622] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.253682][T21525] veth0_macvtap: entered promiscuous mode [ 957.271404][T21832] chnl_net:caif_netlink_parms(): no params data found [ 957.294077][T16185] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.301234][T16185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.357936][T16172] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.365139][T16172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.411503][T21525] veth1_macvtap: entered promiscuous mode [ 957.677918][T15642] hsr_slave_0: left promiscuous mode [ 957.701160][T15642] hsr_slave_1: left promiscuous mode [ 957.724172][T15642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.731789][T15642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.748865][T15642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 957.756808][T15642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.797893][T15642] veth1_macvtap: left promiscuous mode [ 957.818081][T15642] veth0_macvtap: left promiscuous mode [ 957.823739][T15642] veth1_vlan: left promiscuous mode [ 957.829644][T15642] veth0_vlan: left promiscuous mode [ 958.086897][T21930] svc: failed to register nfsdv3 RPC service (errno 111). [ 958.114123][T21930] svc: failed to register nfsaclv3 RPC service (errno 111). [ 958.697056][T15642] team0 (unregistering): Port device team_slave_1 removed [ 958.759046][T19402] Bluetooth: hci3: command tx timeout [ 958.796662][T15642] team0 (unregistering): Port device team_slave_0 removed [ 959.506811][T21832] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.523433][T21832] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.532965][T21832] bridge_slave_0: entered allmulticast mode [ 959.546434][T21832] bridge_slave_0: entered promiscuous mode [ 959.609974][T21525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 959.640433][T21525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.664137][T21525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 959.690059][T21832] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.706969][T21832] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.728460][T21832] bridge_slave_1: entered allmulticast mode [ 959.735697][T21832] bridge_slave_1: entered promiscuous mode [ 959.811522][T21832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.859132][T21525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 959.895632][T21525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.926189][T21525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.940516][T21832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.997737][T21525] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.023707][T21525] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.038273][T21525] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.057266][T21525] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.103902][T21832] team0: Port device team_slave_0 added [ 960.160551][T21832] team0: Port device team_slave_1 added [ 960.309380][T21832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.343519][T21832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.370327][T21832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.390221][T21832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.397212][T21832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.450188][T21832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.532448][T21832] hsr_slave_0: entered promiscuous mode [ 960.548683][T21832] hsr_slave_1: entered promiscuous mode [ 960.564459][T21832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 960.583234][T21832] Cannot create hsr debugfs directory [ 960.604533][T16172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.624479][T16172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.745070][T15642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.763295][T15642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.816540][T21622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.848062][T19402] Bluetooth: hci3: command tx timeout [ 961.081700][T21622] veth0_vlan: entered promiscuous mode [ 961.196545][T21622] veth1_vlan: entered promiscuous mode [ 961.349618][T21622] veth0_macvtap: entered promiscuous mode [ 961.475310][T21622] veth1_macvtap: entered promiscuous mode [ 961.652563][T21622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.688291][T21622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.708659][T21622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.738110][T21622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.752864][T21622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 961.780864][T21622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.791401][T21622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.801377][T21622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.811863][T21622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.822846][T21622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.834090][T21622] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.842871][T21622] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.852055][T21622] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.861385][T21622] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.187918][T16190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.229650][T16190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.452459][T21832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 962.509164][T21832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 962.586832][T15642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.588617][T21832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 962.602601][T15642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.731665][T21832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 962.922337][T19402] Bluetooth: hci3: command tx timeout [ 963.104215][T21994] FAULT_INJECTION: forcing a failure. [ 963.104215][T21994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 963.162292][T21832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.171024][T21994] CPU: 0 UID: 0 PID: 21994 Comm: syz.3.3209 Not tainted 6.12.0-rc1-syzkaller-00114-g3840cbe24cf0 #0 [ 963.181833][T21994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 963.191905][T21994] Call Trace: [ 963.195190][T21994] [ 963.198219][T21994] dump_stack_lvl+0x16c/0x1f0 [ 963.202932][T21994] should_fail_ex+0x497/0x5b0 [ 963.207646][T21994] _copy_from_user+0x30/0xf0 [ 963.212258][T21994] copy_msghdr_from_user+0x99/0x160 [ 963.217508][T21994] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 963.223347][T21994] ? hlock_class+0x4e/0x130 [ 963.227869][T21994] ? __lock_acquire+0x163e/0x3ce0 [ 963.232944][T21994] ___sys_sendmsg+0xff/0x1e0 [ 963.237672][T21994] ? __pfx____sys_sendmsg+0x10/0x10 [ 963.242902][T21994] ? __pfx___lock_acquire+0x10/0x10 [ 963.248262][T21994] ? __pfx___might_resched+0x10/0x10 [ 963.253564][T21994] ? __might_fault+0xe3/0x190 [ 963.258260][T21994] __sys_sendmmsg+0x1a1/0x450 [ 963.262965][T21994] ? __pfx___sys_sendmmsg+0x10/0x10 [ 963.268396][T21994] ? vfs_write+0x14d/0x1140 [ 963.272940][T21994] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 963.278977][T21994] ? fput+0x30/0x390 [ 963.282897][T21994] ? ksys_write+0x1ad/0x260 [ 963.287413][T21994] ? __pfx_ksys_write+0x10/0x10 [ 963.292287][T21994] __x64_sys_sendmmsg+0x9c/0x100 [ 963.297253][T21994] ? lockdep_hardirqs_on+0x7c/0x110 [ 963.302471][T21994] do_syscall_64+0xcd/0x250 [ 963.306996][T21994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.312913][T21994] RIP: 0033:0x7fe6ea57dff9 [ 963.317344][T21994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 963.336974][T21994] RSP: 002b:00007fe6eb2dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 963.345416][T21994] RAX: ffffffffffffffda RBX: 00007fe6ea735f80 RCX: 00007fe6ea57dff9 [ 963.353405][T21994] RDX: 0000000000000008 RSI: 0000000020000400 RDI: 0000000000000006 [ 963.361394][T21994] RBP: 00007fe6eb2dd090 R08: 0000000000000000 R09: 0000000000000000 [ 963.369381][T21994] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000002 [ 963.377365][T21994] R13: 0000000000000000 R14: 00007fe6ea735f80 R15: 00007fff0a533318 [ 963.385368][T21994] [ 963.444713][T21832] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.516714][T21832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 963.548085][T21832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 963.941511][T16190] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.948705][T16190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.960502][T16190] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.967656][T16190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.572562][T22013] svc: failed to register nfsdv3 RPC service (errno 111). [ 964.594275][T22013] svc: failed to register nfsaclv3 RPC service (errno 111). [ 964.829487][T21832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.925428][T21832] veth0_vlan: entered promiscuous mode [ 964.977539][T22023] Process accounting resumed [ 965.110547][T21832] veth1_vlan: entered promiscuous mode [ 965.139801][T21832] veth0_macvtap: entered promiscuous mode [ 965.149716][T21832] veth1_macvtap: entered promiscuous mode [ 965.167015][T21832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.177566][T21832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.187462][T21832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.198033][T21832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.207871][T21832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.224149][T21832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.236364][T21832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.247266][T21832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.257816][T21832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.267719][T21832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.278468][T21832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.288614][T21832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.299435][T21832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.310865][T21832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.356617][T21832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.365631][T21832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.378028][T21832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.386781][T21832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.868173][T16196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.876070][T16196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.917777][T15642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.978020][T15642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.173464][T22053] FAULT_INJECTION: forcing a failure. [ 966.173464][T22053] name failslab, interval 1, probability 0, space 0, times 0 [ 966.191665][T22053] CPU: 0 UID: 0 PID: 22053 Comm: syz.1.3267 Not tainted 6.12.0-rc1-syzkaller-00114-g3840cbe24cf0 #0 [ 966.202483][T22053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 966.212573][T22053] Call Trace: [ 966.215891][T22053] [ 966.218852][T22053] dump_stack_lvl+0x16c/0x1f0 [ 966.223597][T22053] should_fail_ex+0x497/0x5b0 [ 966.228332][T22053] ? fs_reclaim_acquire+0xae/0x160 [ 966.233494][T22053] should_failslab+0xc2/0x120 [ 966.238226][T22053] kmem_cache_alloc_node_noprof+0x71/0x310 [ 966.244108][T22053] ? __alloc_skb+0x2b3/0x380 [ 966.248767][T22053] __alloc_skb+0x2b3/0x380 [ 966.253243][T22053] ? __pfx___alloc_skb+0x10/0x10 [ 966.258236][T22053] ? __pfx_mark_lock+0x10/0x10 [ 966.263056][T22053] ? __pfx_mark_lock+0x10/0x10 [ 966.267882][T22053] ? lockdep_init_map_type+0x16d/0x7d0 [ 966.273401][T22053] tipc_buf_acquire+0x26/0xe0 [ 966.278124][T22053] tipc_msg_build+0x114/0x10d0 [ 966.282942][T22053] ? hlock_class+0x4e/0x130 [ 966.287500][T22053] ? __lock_acquire+0x163e/0x3ce0 [ 966.292599][T22053] ? __pfx_tipc_msg_build+0x10/0x10 [ 966.297874][T22053] ? hlock_class+0x4e/0x130 [ 966.302431][T22053] __tipc_sendstream+0x6f4/0x1170 [ 966.307524][T22053] ? __pfx___tipc_sendstream+0x10/0x10 [ 966.313035][T22053] ? tipc_sendstream+0x41/0x70 [ 966.317850][T22053] ? __pfx_lock_release+0x10/0x10 [ 966.322948][T22053] ? __pfx_woken_wake_function+0x10/0x10 [ 966.328647][T22053] ? mark_held_locks+0x9f/0xe0 [ 966.333477][T22053] ? tipc_sendstream+0x41/0x70 [ 966.338298][T22053] ? __local_bh_enable_ip+0xa4/0x120 [ 966.343640][T22053] tipc_sendstream+0x4f/0x70 [ 966.348290][T22053] ____sys_sendmsg+0x9ae/0xb40 [ 966.353111][T22053] ? copy_msghdr_from_user+0x10b/0x160 [ 966.358636][T22053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 966.363988][T22053] ? hlock_class+0x4e/0x130 [ 966.368547][T22053] ? __lock_acquire+0x163e/0x3ce0 [ 966.373640][T22053] ___sys_sendmsg+0x135/0x1e0 [ 966.378370][T22053] ? __pfx____sys_sendmsg+0x10/0x10 [ 966.383623][T22053] ? __pfx___lock_acquire+0x10/0x10 [ 966.388918][T22053] ? __pfx___might_resched+0x10/0x10 [ 966.394298][T22053] ? __might_fault+0xe3/0x190 [ 966.399031][T22053] __sys_sendmmsg+0x1a1/0x450 [ 966.403773][T22053] ? __pfx___sys_sendmmsg+0x10/0x10 [ 966.409027][T22053] ? vfs_write+0x14d/0x1140 [ 966.413677][T22053] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 966.419720][T22053] ? fput+0x30/0x390 [ 966.423671][T22053] ? ksys_write+0x1ad/0x260 [ 966.428221][T22053] ? __pfx_ksys_write+0x10/0x10 [ 966.433123][T22053] __x64_sys_sendmmsg+0x9c/0x100 [ 966.438119][T22053] ? lockdep_hardirqs_on+0x7c/0x110 [ 966.443365][T22053] do_syscall_64+0xcd/0x250 [ 966.447936][T22053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.453885][T22053] RIP: 0033:0x7f0a9fb7dff9 [ 966.458339][T22053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 966.478001][T22053] RSP: 002b:00007f0aa0a62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 966.486463][T22053] RAX: ffffffffffffffda RBX: 00007f0a9fd35f80 RCX: 00007f0a9fb7dff9 [ 966.494471][T22053] RDX: 0000000000000008 RSI: 0000000020000400 RDI: 0000000000000006 [ 966.502477][T22053] RBP: 00007f0aa0a62090 R08: 0000000000000000 R09: 0000000000000000 [ 966.510489][T22053] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000002 [ 966.518505][T22053] R13: 0000000000000000 R14: 00007f0a9fd35f80 R15: 00007ffcfd0a4c68 [ 966.526532][T22053] [ 966.885819][T22061] svc: failed to register nfsdv3 RPC service (errno 111). [ 966.894860][T22061] svc: failed to register nfsaclv3 RPC service (errno 111). [ 967.364062][T16190] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.530812][T16190] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.706693][T16190] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.946092][T16190] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.217311][T13503] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 968.238348][T13503] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 968.246339][T13503] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 968.304050][T16190] bridge_slave_1: left allmulticast mode [ 968.318413][T13503] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 968.319776][T16190] bridge_slave_1: left promiscuous mode [ 968.347073][T13503] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 968.388676][T13503] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 968.463293][T16190] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.555364][T16190] bridge_slave_0: left allmulticast mode [ 968.566227][T16190] bridge_slave_0: left promiscuous mode [ 968.583890][T16190] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.618966][T22103] nbd: must specify an index to disconnect [ 970.177443][T16190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.217006][T16190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.240454][T16190] bond0 (unregistering): Released all slaves [ 970.522713][T19402] Bluetooth: hci0: command tx timeout [ 971.389839][T16190] hsr_slave_0: left promiscuous mode [ 971.405163][T16190] hsr_slave_1: left promiscuous mode [ 971.536118][T16190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.545297][T16190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.631446][T16190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.639024][T16190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.917859][T16190] veth1_macvtap: left promiscuous mode [ 971.937123][T16190] veth0_macvtap: left promiscuous mode [ 971.942868][T16190] veth1_vlan: left promiscuous mode [ 971.948421][T16190] veth0_vlan: left promiscuous mode [ 972.653232][T19402] Bluetooth: hci0: command tx timeout [ 974.679004][T19402] Bluetooth: hci0: command tx timeout [ 974.820194][T16190] team0 (unregistering): Port device team_slave_1 removed [ 974.976719][T16190] team0 (unregistering): Port device team_slave_0 removed [ 976.247471][T22093] chnl_net:caif_netlink_parms(): no params data found [ 976.757482][T19402] Bluetooth: hci0: command tx timeout [ 976.806351][T22093] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.833278][T22093] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.851388][T22093] bridge_slave_0: entered allmulticast mode [ 976.873672][T22093] bridge_slave_0: entered promiscuous mode [ 976.914185][T22093] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.949006][T22093] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.963615][T22093] bridge_slave_1: entered allmulticast mode [ 976.983142][T22093] bridge_slave_1: entered promiscuous mode [ 977.349790][T22093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.380496][T22093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.528655][T22093] team0: Port device team_slave_0 added [ 977.736543][T22093] team0: Port device team_slave_1 added [ 977.973593][T22093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.996808][T22093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.042446][T22093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.092463][T22093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.156652][T22093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.227833][T22093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.522931][T22093] hsr_slave_0: entered promiscuous mode [ 978.548426][T22093] hsr_slave_1: entered promiscuous mode [ 978.580960][T22093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 978.600728][T22093] Cannot create hsr debugfs directory [ 980.358261][T22093] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 980.438178][T22093] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 980.473950][T22093] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 980.515731][T22093] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 980.796550][T22093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.846988][T22093] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.880387][T14289] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.887694][T14289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.951391][T14289] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.958700][T14289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.619972][T22093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.759464][T22093] veth0_vlan: entered promiscuous mode [ 981.805553][T22093] veth1_vlan: entered promiscuous mode [ 981.891061][T22093] veth0_macvtap: entered promiscuous mode [ 981.946293][T22093] veth1_macvtap: entered promiscuous mode [ 982.008523][T22093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.050667][T22093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.079309][T22093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.123639][T22093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.164761][T22093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.214699][T22093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.238440][T22093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.269309][T22093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 982.321211][T22093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.352487][T22093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 982.404470][T22093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.434746][T22093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 982.470159][T22093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.496103][T22093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.552252][T22093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.573574][T22093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.634390][T22093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.643273][T22093] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.813609][T22415] svc: failed to register nfsdv3 RPC service (errno 111). [ 982.851628][T22415] svc: failed to register nfsaclv3 RPC service (errno 111). [ 982.932719][T16172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.974228][T16172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.044192][T16196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.052076][T16196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.230598][T22427] sctp: [Deprecated]: syz.0.3329 (pid 22427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 983.230598][T22427] Use struct sctp_sack_info instead [ 989.381133][T22559] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3345'. [ 989.902197][T22569] svc: failed to register nfsdv3 RPC service (errno 111). [ 989.914138][T22569] svc: failed to register nfsaclv3 RPC service (errno 111). [ 990.032207][T19402] Bluetooth: hci1: command 0x0406 tx timeout [ 991.076348][T16196] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.541032][T16196] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.744302][T16196] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.997141][T19402] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 992.006104][T19402] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 992.014228][T19402] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 992.022394][T19402] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 992.048888][T19402] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 992.057280][T19402] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 992.261573][T16196] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.889026][T16196] bridge_slave_1: left allmulticast mode [ 992.903255][T16196] bridge_slave_1: left promiscuous mode [ 992.909037][T16196] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.957100][T16196] bridge_slave_0: left allmulticast mode [ 993.012849][T16196] bridge_slave_0: left promiscuous mode [ 993.018635][T16196] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.461350][T19402] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 993.473087][T19402] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 993.491997][T19402] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 993.501270][T19402] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 993.509027][T19402] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 993.519932][T19402] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 994.125835][T13503] Bluetooth: hci3: command tx timeout [ 994.731781][T16196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.810058][T16196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.836405][T16196] bond0 (unregistering): Released all slaves [ 994.870713][T22598] chnl_net:caif_netlink_parms(): no params data found [ 995.640859][T13503] Bluetooth: hci1: command tx timeout [ 995.651855][T22598] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.662517][T22598] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.670252][T22598] bridge_slave_0: entered allmulticast mode [ 995.688156][T22598] bridge_slave_0: entered promiscuous mode [ 995.743711][T22598] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.824541][T22598] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.893069][T22598] bridge_slave_1: entered allmulticast mode [ 995.910634][T22598] bridge_slave_1: entered promiscuous mode [ 996.187720][T13503] Bluetooth: hci3: command tx timeout [ 996.532670][T22598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.626122][T16196] hsr_slave_0: left promiscuous mode [ 996.679649][T16196] hsr_slave_1: left promiscuous mode [ 996.754498][T22662] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3366'. [ 996.779389][T22672] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3366'. [ 996.809759][T16196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 996.827370][T16196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.882453][T16196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.903061][T16196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.985729][T16196] veth1_macvtap: left promiscuous mode [ 997.001852][T16196] veth0_macvtap: left promiscuous mode [ 997.027304][T16196] veth1_vlan: left promiscuous mode [ 997.032664][T16196] veth0_vlan: left promiscuous mode [ 997.707635][T13503] Bluetooth: hci1: command tx timeout [ 998.192154][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.198605][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.266630][T13503] Bluetooth: hci3: command tx timeout [ 998.955114][T16196] team0 (unregistering): Port device team_slave_1 removed [ 999.035759][T16196] team0 (unregistering): Port device team_slave_0 removed [ 999.786155][T13503] Bluetooth: hci1: command tx timeout [ 999.850880][T22598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.020275][T22598] team0: Port device team_slave_0 added [ 1000.119313][T22598] team0: Port device team_slave_1 added [ 1000.129142][T22623] chnl_net:caif_netlink_parms(): no params data found [ 1000.323893][T22598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.345858][T13503] Bluetooth: hci3: command tx timeout [ 1000.356133][T22598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.421052][T22598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.449983][T22598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.473880][T22598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.516530][T22598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.628952][T22623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.655493][T22623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.675923][T22623] bridge_slave_0: entered allmulticast mode [ 1000.683423][T22623] bridge_slave_0: entered promiscuous mode [ 1000.728076][T22623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.737996][T22623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.745538][T22623] bridge_slave_1: entered allmulticast mode [ 1000.753478][T22623] bridge_slave_1: entered promiscuous mode [ 1001.148674][T22598] hsr_slave_0: entered promiscuous mode [ 1001.201142][T22598] hsr_slave_1: entered promiscuous mode [ 1001.225584][T22598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1001.245135][T22598] Cannot create hsr debugfs directory [ 1001.261842][T22623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.280506][T22623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.438301][T16196] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.547085][T22623] team0: Port device team_slave_0 added [ 1001.610550][T22623] team0: Port device team_slave_1 added [ 1001.691322][T16196] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.823208][T22623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.836221][T22623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.873596][T13503] Bluetooth: hci1: command tx timeout [ 1001.894501][T22623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.937869][T22623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.948392][T22623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.011158][T22623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.092970][T16196] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.324601][T16196] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.526848][T22623] hsr_slave_0: entered promiscuous mode [ 1002.550901][T22623] hsr_slave_1: entered promiscuous mode [ 1002.595466][T22623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1002.603080][T22623] Cannot create hsr debugfs directory [ 1003.521553][T16196] bridge_slave_1: left allmulticast mode [ 1003.527794][T16196] bridge_slave_1: left promiscuous mode [ 1003.533566][T16196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.547319][T16196] bridge_slave_0: left allmulticast mode [ 1003.553022][T16196] bridge_slave_0: left promiscuous mode [ 1003.559610][T16196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.608580][T16196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.639745][T16196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.687284][T16196] bond0 (unregistering): Released all slaves [ 1004.917038][T22598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1004.947097][T22598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1005.020122][T22598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1005.036756][T22598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1005.708408][T22598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.164269][T16196] hsr_slave_0: left promiscuous mode [ 1006.170413][T16196] hsr_slave_1: left promiscuous mode [ 1006.189114][T16196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.204425][T16196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.223666][T16196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.231236][T16196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.281979][T16196] veth1_macvtap: left promiscuous mode [ 1006.302889][T16196] veth0_macvtap: left promiscuous mode [ 1006.308557][T16196] veth1_vlan: left promiscuous mode [ 1006.322650][T16196] veth0_vlan: left promiscuous mode [ 1007.223213][T22781] netlink: 716 bytes leftover after parsing attributes in process `syz.3.3381'. [ 1007.719429][T16196] team0 (unregistering): Port device team_slave_1 removed [ 1007.818228][T16196] team0 (unregistering): Port device team_slave_0 removed [ 1008.603746][T22598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.650445][T16172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.657771][T16172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.727478][T16172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.734778][T16172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.058826][T22623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1009.103741][T22623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1009.180161][T22623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1009.245280][T22623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1009.338819][T22598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1009.371122][T22598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1009.668313][T22623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.722583][T22623] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.743687][T16190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.750901][T16190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.784432][T16186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.791634][T16186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.887890][T22623] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1009.898492][T22623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1009.980414][T22598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.018725][T22598] veth0_vlan: entered promiscuous mode [ 1010.032137][T22598] veth1_vlan: entered promiscuous mode [ 1010.056449][T22598] veth0_macvtap: entered promiscuous mode [ 1010.070187][T22598] veth1_macvtap: entered promiscuous mode [ 1010.094275][T22598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.104991][T22598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.115033][T22598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.125561][T22598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.137075][T22598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.147022][T22598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.157730][T22598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.167862][T22598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.178517][T22598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.190170][T22598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.222302][T22598] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.271239][T22598] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.280017][T22598] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.370605][T22598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.494149][T22623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.738646][T22623] veth0_vlan: entered promiscuous mode [ 1010.801239][T17260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.809109][T17260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.849615][T22623] veth1_vlan: entered promiscuous mode [ 1010.935236][T16190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.960572][T16190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.025962][T22623] veth0_macvtap: entered promiscuous mode [ 1011.046191][T22623] veth1_macvtap: entered promiscuous mode [ 1011.126829][T22623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.161513][T22623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.184213][T22623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.208216][T22623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.236344][T22623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.283989][T22623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.306214][T22623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.332624][T22623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.369501][T22623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.425543][T22623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.450191][T22623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.480282][T22623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.517470][T22623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.561599][T22623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.595007][T22623] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.648250][T22623] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.658384][T22623] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.679907][T22623] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.921940][T16186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.959736][T16186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.025907][T16172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.052248][T16172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.926580][T22912] svc: failed to register nfsdv3 RPC service (errno 111). [ 1012.943262][T22912] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1017.285660][T23071] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1025.440117][T23195] ptrace attach of "./syz-executor exec"[22093] was attempted by "./syz-executor exec"[23195] [ 1025.673385][T23019] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.963803][T23019] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.044790][T23188] Process accounting resumed [ 1026.086341][T19402] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1026.096201][T19402] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1026.104234][T19402] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1026.112453][T19402] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1026.120256][T19402] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1026.130487][T19402] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1026.242372][T23204] svc: failed to register nfsdv3 RPC service (errno 111). [ 1026.268013][T23188] RDS: rds_bind could not find a transport for ::ffff:172.20.20.52, load rds_tcp or rds_rdma? [ 1026.288627][T23204] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1026.429968][T23019] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.875126][T23019] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.501821][T23206] chnl_net:caif_netlink_parms(): no params data found [ 1027.766594][T23019] bridge_slave_1: left allmulticast mode [ 1027.779404][T23019] bridge_slave_1: left promiscuous mode [ 1027.802030][T23019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.836837][T23019] bridge_slave_0: left allmulticast mode [ 1027.858566][T23019] bridge_slave_0: left promiscuous mode [ 1027.872662][T23019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.201832][T13503] Bluetooth: hci1: command tx timeout [ 1029.023406][T23019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.049467][T23019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.072872][T23019] bond0 (unregistering): Released all slaves [ 1029.693380][T23206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.712756][T23206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.730981][T23206] bridge_slave_0: entered allmulticast mode [ 1029.758176][T23206] bridge_slave_0: entered promiscuous mode [ 1029.771746][T23206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.799383][T23206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.807570][T23206] bridge_slave_1: entered allmulticast mode [ 1029.822193][T23206] bridge_slave_1: entered promiscuous mode [ 1030.060383][T23019] hsr_slave_0: left promiscuous mode [ 1030.082346][T23019] hsr_slave_1: left promiscuous mode [ 1030.120807][T23019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.147763][T23019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.156998][T23019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.171214][T23019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.218756][T23019] veth1_macvtap: left promiscuous mode [ 1030.224596][T23019] veth0_macvtap: left promiscuous mode [ 1030.231466][T23019] veth1_vlan: left promiscuous mode [ 1030.236837][T23019] veth0_vlan: left promiscuous mode [ 1030.250684][T13503] Bluetooth: hci1: command tx timeout [ 1030.905724][T23019] team0 (unregistering): Port device team_slave_1 removed [ 1030.963412][T23019] team0 (unregistering): Port device team_slave_0 removed [ 1031.578023][T23206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.622031][T23206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.702630][T23206] team0: Port device team_slave_0 added [ 1031.739352][T23206] team0: Port device team_slave_1 added [ 1031.807546][T23206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.823517][T23206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.904056][T23206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.980791][T23206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.003089][T23206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1032.034125][T23206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.198384][T23206] hsr_slave_0: entered promiscuous mode [ 1032.218500][T23206] hsr_slave_1: entered promiscuous mode [ 1032.329709][T13503] Bluetooth: hci1: command tx timeout [ 1032.459182][T23308] can: request_module (can-proto-0) failed. [ 1033.948816][T23206] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1034.021345][T23206] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1034.075864][T23206] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1034.127154][T23357] HSR: entered promiscuous mode [ 1034.169671][T23206] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1034.390675][T23206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.408607][T13503] Bluetooth: hci1: command tx timeout [ 1034.419336][T23206] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.474538][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.481743][ T5998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.528078][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.535311][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.127633][T23206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.262220][T23206] veth0_vlan: entered promiscuous mode [ 1035.284566][T23206] veth1_vlan: entered promiscuous mode [ 1035.345444][T23206] veth0_macvtap: entered promiscuous mode [ 1035.378747][T23206] veth1_macvtap: entered promiscuous mode [ 1035.424292][T23206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.453899][T23206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.465647][T23206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.481702][T23206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.493756][T23206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.514634][T23206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.550289][T23206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1035.579221][T23206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.599628][T23206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.611776][T23206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.639261][T23206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.671604][T23206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.711777][T23206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.736862][T23206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1035.799458][T23206] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.828112][T23206] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.836888][T23206] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.887810][T23206] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.089260][T23019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.132841][T23019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.177841][T16182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.196468][T16182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.274785][T15646] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.614346][T15646] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.369065][T15646] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.635084][T15646] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.467126][T19402] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1042.487079][T19402] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1042.494960][T19402] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1042.504474][T19402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1042.512736][T19402] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1042.520326][T19402] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1043.016163][T15646] bridge_slave_1: left allmulticast mode [ 1043.033046][T15646] bridge_slave_1: left promiscuous mode [ 1043.058367][T15646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.117604][T15646] bridge_slave_0: left allmulticast mode [ 1043.123323][T15646] bridge_slave_0: left promiscuous mode [ 1043.147619][T15646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.319838][T15646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1044.351974][T15646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.364625][T15646] bond0 (unregistering): Released all slaves [ 1044.576667][T19402] Bluetooth: hci0: command tx timeout [ 1044.765853][T23537] chnl_net:caif_netlink_parms(): no params data found [ 1046.547442][T23537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.561077][T23537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.586978][T23537] bridge_slave_0: entered allmulticast mode [ 1046.597941][T23537] bridge_slave_0: entered promiscuous mode [ 1046.618172][T23537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.625331][T23537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.633138][T23537] bridge_slave_1: entered allmulticast mode [ 1046.640503][T23537] bridge_slave_1: entered promiscuous mode [ 1046.660604][T19402] Bluetooth: hci0: command tx timeout [ 1047.103997][T23537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.147031][T23537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.788117][T15646] hsr_slave_0: left promiscuous mode [ 1047.841598][T15646] hsr_slave_1: left promiscuous mode [ 1047.968772][T15646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.976311][T15646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.096122][T15646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.111686][T15646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.256174][T15646] veth1_macvtap: left promiscuous mode [ 1048.296652][T15646] veth0_macvtap: left promiscuous mode [ 1048.302340][T15646] veth1_vlan: left promiscuous mode [ 1048.317099][T15646] veth0_vlan: left promiscuous mode [ 1048.737891][T19402] Bluetooth: hci0: command tx timeout [ 1048.947750][T23636] Process accounting resumed [ 1050.806579][T13503] Bluetooth: hci0: command tx timeout [ 1051.629315][T15646] team0 (unregistering): Port device team_slave_1 removed [ 1051.957231][T15646] team0 (unregistering): Port device team_slave_0 removed [ 1052.021745][T23679] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3529'. [ 1053.921325][T23537] team0: Port device team_slave_0 added [ 1053.959579][T23537] team0: Port device team_slave_1 added [ 1054.129056][T23537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.136146][T23537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.212075][T23537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.246887][T23537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.274415][T23537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.311477][T23537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.940218][T23537] hsr_slave_0: entered promiscuous mode [ 1054.983337][T23537] hsr_slave_1: entered promiscuous mode [ 1055.053255][T23537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1055.086567][T23537] Cannot create hsr debugfs directory [ 1055.133947][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1055.143362][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1055.158130][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1055.176045][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1055.190399][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1055.199196][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1055.363928][T23705] openvswitch: netlink: Key type 8590 is out of range max 32 [ 1056.579785][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 1056.775335][T23699] chnl_net:caif_netlink_parms(): no params data found [ 1057.287265][T13503] Bluetooth: hci4: command tx timeout [ 1057.601487][T23699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.636643][T23699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.643945][T23699] bridge_slave_0: entered allmulticast mode [ 1057.677419][T23740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3538'. [ 1057.694515][T23699] bridge_slave_0: entered promiscuous mode [ 1057.737464][T23699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.744703][T23699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.763343][T23699] bridge_slave_1: entered allmulticast mode [ 1057.780102][T23699] bridge_slave_1: entered promiscuous mode [ 1058.071056][T15646] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.124908][T23699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.156394][T23699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.281926][T15646] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.491467][T15646] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.553861][T23699] team0: Port device team_slave_0 added [ 1058.563224][T23699] team0: Port device team_slave_1 added [ 1058.685441][T15646] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.745073][T23537] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1058.789471][T23537] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1058.895790][T23699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.912074][T23699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.953075][T23699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.976614][T23537] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1058.993028][T23537] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1059.037299][T23699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.044295][T23699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.099093][T23699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.376823][T13503] Bluetooth: hci4: command tx timeout [ 1059.511227][T23699] hsr_slave_0: entered promiscuous mode [ 1059.537612][T23699] hsr_slave_1: entered promiscuous mode [ 1059.551987][T23699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1059.567066][T23699] Cannot create hsr debugfs directory [ 1059.614113][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.621005][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.741788][T15646] bridge_slave_1: left allmulticast mode [ 1059.749624][T15646] bridge_slave_1: left promiscuous mode [ 1059.755352][T15646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.884162][T15646] bridge_slave_0: left allmulticast mode [ 1059.893500][T15646] bridge_slave_0: left promiscuous mode [ 1059.906734][T15646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.446799][T13503] Bluetooth: hci4: command tx timeout [ 1062.391954][T15646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.423698][T15646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.458336][T15646] bond0 (unregistering): Released all slaves [ 1063.320698][T23537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.527629][T13503] Bluetooth: hci4: command tx timeout [ 1063.761686][T23537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.385240][T15641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.392432][T15641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.545963][T14290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.553198][T14290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.101487][T23537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1065.215024][T23699] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1065.448535][T15646] hsr_slave_0: left promiscuous mode [ 1065.455106][T15646] hsr_slave_1: left promiscuous mode [ 1065.463977][T15646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1065.487167][T15646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1065.509299][T15646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1065.519552][T15646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1065.619537][T15646] veth1_macvtap: left promiscuous mode [ 1065.625213][T15646] veth0_macvtap: left promiscuous mode [ 1065.636729][T15646] veth1_vlan: left promiscuous mode [ 1065.642191][T15646] veth0_vlan: left promiscuous mode [ 1068.047495][T15646] team0 (unregistering): Port device team_slave_1 removed [ 1068.324024][T15646] team0 (unregistering): Port device team_slave_0 removed [ 1069.716965][T23699] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1069.729745][T23699] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1069.796634][T23699] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1069.971169][T23537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.150774][T23699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.251222][T23699] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.273753][T23019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.280948][T23019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.333542][T23537] veth0_vlan: entered promiscuous mode [ 1070.370748][T16192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.378024][T16192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.423855][T23537] veth1_vlan: entered promiscuous mode [ 1070.553118][T23537] veth0_macvtap: entered promiscuous mode [ 1070.579165][T23537] veth1_macvtap: entered promiscuous mode [ 1070.661567][T23537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.686685][T23537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.706657][T23537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.746501][T23537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.778540][T23537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.832061][T23537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1070.876613][T23537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.916514][T23537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1070.946856][T23537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.979715][T23537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.010981][T23537] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.056708][T23537] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.065578][T23537] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.105181][T23537] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.169747][T23699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.486267][T16192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.512657][T16192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.588338][T23699] veth0_vlan: entered promiscuous mode [ 1071.619985][T16182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.634036][T23699] veth1_vlan: entered promiscuous mode [ 1071.642954][T16182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.788856][T23699] veth0_macvtap: entered promiscuous mode [ 1071.805823][T23699] veth1_macvtap: entered promiscuous mode [ 1071.873165][T23699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1071.894917][T23699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.914986][T23699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1071.925598][T23699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.935658][T23699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1071.946201][T23699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.959001][T23699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.972182][T23699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.982694][T23699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.992633][T23699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1072.003572][T23699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.013938][T23699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1072.024428][T23699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.035637][T23699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1072.047109][T23699] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.055867][T23699] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.064739][T23699] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.073589][T23699] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.519024][T23961] netlink: 'syz.1.3566': attribute type 11 has an invalid length. [ 1072.544284][T15641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.561894][T15641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.569430][T23961] netlink: 'syz.1.3566': attribute type 11 has an invalid length. [ 1072.726274][T16182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.737826][T23963] netlink: 'syz.1.3566': attribute type 11 has an invalid length. [ 1072.741911][T16182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.766067][T23963] netlink: 'syz.1.3566': attribute type 11 has an invalid length. [ 1079.467511][T24061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3588'. [ 1081.318531][T16182] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.594737][T16182] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.856945][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1081.871701][T16182] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.872475][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1081.895779][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1081.905451][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1081.913343][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1081.928217][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1082.146887][T16182] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.518811][T16182] bridge_slave_1: left allmulticast mode [ 1082.533339][T16182] bridge_slave_1: left promiscuous mode [ 1082.554540][T16182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.677377][T16182] bridge_slave_0: left allmulticast mode [ 1082.683094][T16182] bridge_slave_0: left promiscuous mode [ 1082.736753][T16182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.007963][ T54] Bluetooth: hci2: command tx timeout [ 1084.403693][T16182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.435637][T16182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.526227][T16182] bond0 (unregistering): Released all slaves [ 1084.661878][T24115] chnl_net:caif_netlink_parms(): no params data found [ 1086.086669][ T54] Bluetooth: hci2: command tx timeout [ 1086.578226][T24115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.585397][T24115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.613054][T24115] bridge_slave_0: entered allmulticast mode [ 1086.624994][T24115] bridge_slave_0: entered promiscuous mode [ 1086.833587][T24115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.886774][T24115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.894038][T24115] bridge_slave_1: entered allmulticast mode [ 1086.924100][T24115] bridge_slave_1: entered promiscuous mode [ 1087.313469][T16182] hsr_slave_0: left promiscuous mode [ 1087.408284][T16182] hsr_slave_1: left promiscuous mode [ 1087.517724][T16182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1087.525198][T16182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.614943][T16182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1087.622764][T16182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.685422][T16182] veth1_macvtap: left promiscuous mode [ 1087.696937][T16182] veth0_macvtap: left promiscuous mode [ 1087.702592][T16182] veth1_vlan: left promiscuous mode [ 1087.736686][T16182] veth0_vlan: left promiscuous mode [ 1088.166870][ T54] Bluetooth: hci2: command tx timeout [ 1089.948410][T16182] team0 (unregistering): Port device team_slave_1 removed [ 1090.045528][T16182] team0 (unregistering): Port device team_slave_0 removed [ 1090.246576][ T54] Bluetooth: hci2: command tx timeout [ 1090.957136][T24115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.028782][T24115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.192922][T24115] team0: Port device team_slave_0 added [ 1091.217401][T24115] team0: Port device team_slave_1 added [ 1091.285229][T24115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.295798][T24115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.333285][T24115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.367742][T24115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.374740][T24115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.404009][T24115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.540999][T24115] hsr_slave_0: entered promiscuous mode [ 1091.548564][T24115] hsr_slave_1: entered promiscuous mode [ 1091.555890][T24115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1091.564744][T24115] Cannot create hsr debugfs directory [ 1091.580440][T24230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3619'. [ 1092.588037][T24115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1092.610498][T24115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1092.639250][T24115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1092.653907][T24115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1092.903173][T24115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.015086][T24115] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.068452][T24254] netlink: 'syz.3.3622': attribute type 2 has an invalid length. [ 1093.086669][T24254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3622'. [ 1093.108724][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.115883][ T5998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.151921][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.159136][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.208678][T24115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1093.219139][T24115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1093.575871][T24115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.696698][T24115] veth0_vlan: entered promiscuous mode [ 1093.719311][T24115] veth1_vlan: entered promiscuous mode [ 1093.761986][T24115] veth0_macvtap: entered promiscuous mode [ 1093.772309][T24115] veth1_macvtap: entered promiscuous mode [ 1093.788482][T24115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1093.799085][T24115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.808964][T24115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1093.819829][T24115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.830286][T24115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1093.840823][T24115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.852427][T24115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1093.908977][T24115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1093.919917][T24115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.930329][T24115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1093.940843][T24115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.950760][T24115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1093.961321][T24115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.972661][T24115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1093.982954][T24115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.991765][T24115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.000579][T24115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.009412][T24115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.542141][T14290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.555203][T14290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.861057][T23019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.901100][T23019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.935415][T24397] nbd: must specify at least one socket [ 1101.516778][T24482] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3661'. [ 1102.819090][ T29] audit: type=1326 audit(8277292119.329:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24494 comm="syz.2.3662" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb277f7dff9 code=0x0 [ 1104.933196][T24506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3667'. [ 1105.094633][T24541] netlink: 'syz.0.3674': attribute type 11 has an invalid length. [ 1105.144944][T24541] netlink: 'syz.0.3674': attribute type 11 has an invalid length. [ 1105.179024][T24541] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3674'. [ 1105.401112][T24541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.425377][ T29] audit: type=1326 audit(8277292124.929:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24603 comm="syz.1.3691" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9a197dff9 code=0x0 [ 1114.326736][T24690] svc: failed to register nfsdv3 RPC service (errno 111). [ 1114.363172][T24690] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1117.867443][T24732] Invalid ELF header magic: != ELF [ 1118.011078][T13503] Bluetooth: hci3: command 0x0406 tx timeout [ 1121.048988][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.056032][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.430417][T24782] netlink: get zone limit has 4 unknown bytes [ 1148.292528][T19402] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1148.303754][T19402] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1148.316877][T19402] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1148.332004][T21529] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1148.340179][T21529] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1148.347648][T21529] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1148.731164][T13503] Bluetooth: hci1: command 0x0406 tx timeout [ 1148.930559][T25076] chnl_net:caif_netlink_parms(): no params data found [ 1150.416536][ T54] Bluetooth: hci4: command tx timeout [ 1151.393507][T25076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.409071][T25076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.426563][T25076] bridge_slave_0: entered allmulticast mode [ 1151.446587][T25076] bridge_slave_0: entered promiscuous mode [ 1151.455255][T25076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.476516][T25076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.483864][T25076] bridge_slave_1: entered allmulticast mode [ 1151.511669][T25076] bridge_slave_1: entered promiscuous mode [ 1152.490536][ T54] Bluetooth: hci4: command tx timeout [ 1154.568955][ T54] Bluetooth: hci4: command tx timeout [ 1155.099252][T25076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.132815][T25076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.259861][T25076] team0: Port device team_slave_0 added [ 1155.409834][ T5998] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.519282][T25076] team0: Port device team_slave_1 added [ 1155.714931][ T5998] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.057491][T25076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.064492][T25076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.125100][T25076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.160216][T25076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.176625][T25076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.224690][T25076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.338944][ T5998] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.646757][ T54] Bluetooth: hci4: command tx timeout [ 1156.721200][ T5998] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.996381][T25076] hsr_slave_0: entered promiscuous mode [ 1157.043432][T25076] hsr_slave_1: entered promiscuous mode [ 1157.136533][T25076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1157.146469][T25076] Cannot create hsr debugfs directory [ 1157.761326][ T5998] bridge_slave_1: left allmulticast mode [ 1157.779466][ T5998] bridge_slave_1: left promiscuous mode [ 1157.785260][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.977341][ T5998] bridge_slave_0: left allmulticast mode [ 1157.983067][ T5998] bridge_slave_0: left promiscuous mode [ 1158.008483][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.523596][T13503] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1159.533800][T13503] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1159.542943][T13503] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1159.553398][T13503] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1159.565099][T13503] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1159.572872][T13503] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1160.546967][ T5998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.749388][ T5998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.872444][ T5998] bond0 (unregistering): Released all slaves [ 1161.606873][ T54] Bluetooth: hci0: command tx timeout [ 1163.694437][ T54] Bluetooth: hci0: command tx timeout [ 1164.409657][ T5998] hsr_slave_0: left promiscuous mode [ 1164.415759][ T5998] hsr_slave_1: left promiscuous mode [ 1164.440015][ T5998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1164.467207][ T5998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1164.505100][ T5998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1164.526695][ T5998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.606238][ T5998] veth1_macvtap: left promiscuous mode [ 1164.649382][ T5998] veth0_macvtap: left promiscuous mode [ 1164.685607][ T5998] veth1_vlan: left promiscuous mode [ 1164.705544][ T5998] veth0_vlan: left promiscuous mode [ 1165.786531][ T54] Bluetooth: hci0: command tx timeout [ 1166.467545][ T5998] team0 (unregistering): Port device team_slave_1 removed [ 1166.563407][ T5998] team0 (unregistering): Port device team_slave_0 removed [ 1167.373874][T25263] nbd: must specify at least one socket [ 1167.846685][ T54] Bluetooth: hci0: command tx timeout [ 1167.949643][T25181] chnl_net:caif_netlink_parms(): no params data found [ 1168.234902][T25076] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1168.353897][T25076] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1168.457936][T25076] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1168.616076][T25076] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1168.771504][T25181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.786572][T25181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.810138][T25181] bridge_slave_0: entered allmulticast mode [ 1168.823367][T25181] bridge_slave_0: entered promiscuous mode [ 1168.867986][T25181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.875992][T25181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.893758][T25181] bridge_slave_1: entered allmulticast mode [ 1168.904854][T25181] bridge_slave_1: entered promiscuous mode [ 1169.000658][T25181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.045274][T25181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.202941][T25181] team0: Port device team_slave_0 added [ 1169.241295][T25181] team0: Port device team_slave_1 added [ 1169.405853][ T5998] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.584242][T25076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.740778][ T5998] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.788809][T25181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.807539][T25181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.851957][T25181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.864950][T25181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.872065][T25181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.898446][T25181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.113929][ T5998] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.289798][T25181] hsr_slave_0: entered promiscuous mode [ 1170.317076][T25181] hsr_slave_1: entered promiscuous mode [ 1170.356621][T25181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1170.364230][T25181] Cannot create hsr debugfs directory [ 1170.429161][T25076] 8021q: adding VLAN 0 to HW filter on device team0 [ 1170.559118][ T5998] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.643870][T23019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.651045][T23019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1170.763575][T23019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.770799][T23019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1171.084073][T25076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1171.236717][ T5998] bridge_slave_1: left allmulticast mode [ 1171.242422][ T5998] bridge_slave_1: left promiscuous mode [ 1171.248235][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.335787][ T5998] bridge_slave_0: left allmulticast mode [ 1171.348623][ T5998] bridge_slave_0: left promiscuous mode [ 1171.354386][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.440399][ T5998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1172.453853][ T5998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1172.500431][T25386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3868'. [ 1172.530639][ T5998] bond0 (unregistering): Released all slaves [ 1172.662152][ T5998] HSR: left promiscuous mode [ 1172.937132][T25076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1173.519163][T25076] veth0_vlan: entered promiscuous mode [ 1173.632679][T25076] veth1_vlan: entered promiscuous mode [ 1173.909796][T25181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1173.953448][T25181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1174.053428][ T5998] hsr_slave_0: left promiscuous mode [ 1174.083967][ T5998] hsr_slave_1: left promiscuous mode [ 1174.094699][ T5998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1174.111496][ T5998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1174.137836][ T5998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1174.145296][ T5998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.186368][ T5998] veth1_macvtap: left promiscuous mode [ 1174.204018][ T5998] veth0_macvtap: left promiscuous mode [ 1174.211736][ T5998] veth1_vlan: left promiscuous mode [ 1174.223759][ T5998] veth0_vlan: left promiscuous mode [ 1174.961336][ T5998] team0 (unregistering): Port device team_slave_1 removed [ 1175.044148][ T5998] team0 (unregistering): Port device team_slave_0 removed [ 1176.189378][T25076] veth0_macvtap: entered promiscuous mode [ 1176.202872][T25181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1176.237929][T25181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1176.281219][T25076] veth1_macvtap: entered promiscuous mode [ 1176.332319][T25076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1176.342956][T25076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.363480][T25076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1176.386775][T25076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.416066][T25076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1176.480500][T25076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1176.516556][T25076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.536495][T25076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1176.556547][T25076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.598704][T25076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1176.620292][T25076] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.637465][T25076] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.646244][T25076] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.676500][T25076] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.093101][T15641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1177.123747][T15641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.219560][T25181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.282882][T25181] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.300124][ T5998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1177.318572][ T5998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.329306][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.336675][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.378501][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.385695][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.559141][T25181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1177.993519][T25181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.039488][T25181] veth0_vlan: entered promiscuous mode [ 1178.055288][T25181] veth1_vlan: entered promiscuous mode [ 1178.081877][T25181] veth0_macvtap: entered promiscuous mode [ 1178.093175][T25181] veth1_macvtap: entered promiscuous mode [ 1178.112451][T25181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.123357][T25181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.133984][T25181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.144838][T25181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.155018][T25181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.165783][T25181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.177570][T25181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.187928][T25181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1178.199360][T25181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.210025][T25181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1178.220933][T25181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.231131][T25181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1178.241730][T25181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.253517][T25181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.310625][T25181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.336586][T25181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.345614][T25181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.367842][T25181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.511966][T16172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.536510][T16172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.612257][T16172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.637030][T16172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.008003][T25602] FAULT_INJECTION: forcing a failure. [ 1180.008003][T25602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.037874][T25602] CPU: 1 UID: 0 PID: 25602 Comm: syz.3.3918 Not tainted 6.12.0-rc1-syzkaller-00114-g3840cbe24cf0 #0 [ 1180.049507][T25602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1180.059950][T25602] Call Trace: [ 1180.063348][T25602] [ 1180.066310][T25602] dump_stack_lvl+0x16c/0x1f0 [ 1180.071245][T25602] should_fail_ex+0x497/0x5b0 [ 1180.076082][T25602] _copy_from_user+0x30/0xf0 [ 1180.080809][T25602] move_addr_to_kernel+0x68/0x160 [ 1180.085903][T25602] __sys_bind+0xc4/0x220 [ 1180.090205][T25602] ? __pfx___sys_bind+0x10/0x10 [ 1180.095109][T25602] ? __fget_files+0x244/0x3f0 [ 1180.099834][T25602] ? __pfx_ksys_write+0x10/0x10 [ 1180.104721][T25602] __x64_sys_bind+0x72/0xb0 [ 1180.109342][T25602] ? lockdep_hardirqs_on+0x7c/0x110 [ 1180.114921][T25602] do_syscall_64+0xcd/0x250 [ 1180.119461][T25602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.125387][T25602] RIP: 0033:0x7fc78277dff9 [ 1180.129830][T25602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1180.149823][T25602] RSP: 002b:00007fc7835ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1180.158790][T25602] RAX: ffffffffffffffda RBX: 00007fc782935f80 RCX: 00007fc78277dff9 [ 1180.166781][T25602] RDX: 000000000000006b RSI: 0000000020000000 RDI: 0000000000000003 [ 1180.174940][T25602] RBP: 00007fc7835ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.183537][T25602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.192047][T25602] R13: 0000000000000000 R14: 00007fc782935f80 R15: 00007ffd3c513198 [ 1180.200144][T25602] [ 1180.460127][T25606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3920'. [ 1180.779865][T25612] netlink: 408 bytes leftover after parsing attributes in process `syz.2.3922'. [ 1182.494268][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.500778][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1186.937832][T25721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3948'. [ 1187.037803][T25721] nbd: illegal input index 1342184484 [ 1188.439403][T25741] FAULT_INJECTION: forcing a failure. [ 1188.439403][T25741] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.535719][T25741] CPU: 1 UID: 0 PID: 25741 Comm: syz.0.3953 Not tainted 6.12.0-rc1-syzkaller-00114-g3840cbe24cf0 #0 [ 1188.546563][T25741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1188.556693][T25741] Call Trace: [ 1188.560014][T25741] [ 1188.562994][T25741] dump_stack_lvl+0x16c/0x1f0 [ 1188.567748][T25741] should_fail_ex+0x497/0x5b0 [ 1188.572486][T25741] ? fs_reclaim_acquire+0xae/0x160 [ 1188.577661][T25741] should_failslab+0xc2/0x120 [ 1188.582407][T25741] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1188.587840][T25741] ? vm_area_alloc+0xe0/0x1c0 [ 1188.592574][T25741] vm_area_alloc+0xe0/0x1c0 [ 1188.597134][T25741] mmap_region+0xf18/0x2a50 [ 1188.601705][T25741] ? process_measurement+0x1e8/0x2370 [ 1188.607140][T25741] ? __pfx_mmap_region+0x10/0x10 [ 1188.612237][T25741] ? hlock_class+0x4e/0x130 [ 1188.616869][T25741] ? bpf_lsm_mmap_addr+0x9/0x10 [ 1188.621787][T25741] ? security_mmap_addr+0x6c/0x1e0 [ 1188.626965][T25741] ? __get_unmapped_area+0x26b/0x3a0 [ 1188.632321][T25741] do_mmap+0xc00/0xfc0 [ 1188.636464][T25741] vm_mmap_pgoff+0x1ba/0x360 [ 1188.641128][T25741] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1188.646311][T25741] ? __fget_files+0x244/0x3f0 [ 1188.651048][T25741] ksys_mmap_pgoff+0x32c/0x5c0 [ 1188.655876][T25741] ? __pfx_ksys_write+0x10/0x10 [ 1188.660784][T25741] __x64_sys_mmap+0x125/0x190 [ 1188.665518][T25741] do_syscall_64+0xcd/0x250 [ 1188.670093][T25741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.676046][T25741] RIP: 0033:0x7f4cc217dff9 [ 1188.680600][T25741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1188.700270][T25741] RSP: 002b:00007f4cc2efe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1188.708747][T25741] RAX: ffffffffffffffda RBX: 00007f4cc2335f80 RCX: 00007f4cc217dff9 [ 1188.716770][T25741] RDX: 0000001000000004 RSI: 0000000000000008 RDI: 0000000000000000 [ 1188.724789][T25741] RBP: 00007f4cc2efe090 R08: 0000000000000003 R09: 0000000080000000 [ 1188.732804][T25741] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 1188.740818][T25741] R13: 0000000000000000 R14: 00007f4cc2335f80 R15: 00007ffe3eeee898 [ 1188.748862][T25741] [ 1191.602144][T25777] HSR: entered promiscuous mode [ 1193.391260][T25829] tmpfs: Unknown parameter 'nwZW U܃ܓ+``Sfq?P02$as-ҞmHpb@TcblY64 [ 1193.391260][T25829] NtyA+m"իj2m4Е+-Nx>%!M淐+10g+#6?ࠏr+CY EAÄþ(DQjt6Ł&tʊ PPNr7 ' [ 1193.466520][T25826] svc: failed to register nfsdv3 RPC service (errno 111). [ 1193.516125][T25826] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1194.814611][T25852] netlink: 'syz.2.3980': attribute type 2 has an invalid length. [ 1194.836469][T25852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3980'. [ 1194.955981][T25852] )zV: entered promiscuous mode [ 1196.462710][T13503] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1196.477105][T13503] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1196.488830][T13503] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1196.514492][T13503] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1196.522728][T13503] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1196.530123][T13503] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1196.879334][T16172] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.400614][T16172] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.839016][T16172] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.898523][T25872] chnl_net:caif_netlink_parms(): no params data found [ 1198.006974][T25877] HSR: entered promiscuous mode [ 1198.270271][T16172] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.465538][T25872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.488851][T25872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.524907][T25872] bridge_slave_0: entered allmulticast mode [ 1198.542558][T25872] bridge_slave_0: entered promiscuous mode [ 1198.572625][T25872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.600056][T25872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.611838][T25872] bridge_slave_1: entered allmulticast mode [ 1198.624825][T25872] bridge_slave_1: entered promiscuous mode [ 1198.646951][ T54] Bluetooth: hci3: command tx timeout [ 1198.825519][T25872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.854317][T25872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.994523][T16172] bridge_slave_1: left allmulticast mode [ 1199.004811][T16172] bridge_slave_1: left promiscuous mode [ 1199.016633][T16172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.053366][T16172] bridge_slave_0: left allmulticast mode [ 1199.072134][T16172] bridge_slave_0: left promiscuous mode [ 1199.078132][T16172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.294826][T25925] svc: failed to register nfsdv3 RPC service (errno 111). [ 1199.351504][T25925] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1199.973649][T13503] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1199.992059][T13503] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1200.006893][T13503] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1200.018445][T13503] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1200.031343][T13503] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1200.043822][T13503] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1200.276236][T16172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1200.288864][T16172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1200.312098][T16172] bond0 (unregistering): Released all slaves [ 1200.371038][T25872] team0: Port device team_slave_0 added [ 1200.434628][T25872] team0: Port device team_slave_1 added [ 1200.671760][T25872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.698754][T25872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.738735][ T54] Bluetooth: hci3: command tx timeout [ 1200.787684][T25872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.828493][T25872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.854352][T25872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.887170][T25872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1201.146989][T25872] hsr_slave_0: entered promiscuous mode [ 1201.162082][T25872] hsr_slave_1: entered promiscuous mode [ 1201.168937][T25872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1201.181628][T25872] Cannot create hsr debugfs directory [ 1201.203135][T16172] hsr_slave_0: left promiscuous mode [ 1201.215215][T16172] hsr_slave_1: left promiscuous mode [ 1201.221534][T16172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1201.246083][T16172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.301197][T16172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1201.324178][T16172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1201.390856][T16172] veth1_macvtap: left promiscuous mode [ 1201.399923][T16172] veth0_macvtap: left promiscuous mode [ 1201.406192][T16172] veth1_vlan: left promiscuous mode [ 1201.412210][T16172] veth0_vlan: left promiscuous mode [ 1201.975261][T16172] team0 (unregistering): Port device team_slave_1 removed [ 1202.023725][T16172] team0 (unregistering): Port device team_slave_0 removed [ 1202.098806][ T54] Bluetooth: hci1: command tx timeout [ 1202.806605][ T54] Bluetooth: hci3: command tx timeout [ 1203.249511][T25945] chnl_net:caif_netlink_parms(): no params data found [ 1203.611730][T16172] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.018931][T16172] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.075570][T25945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.094532][T25945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.106952][T25945] bridge_slave_0: entered allmulticast mode [ 1204.114124][T25945] bridge_slave_0: entered promiscuous mode [ 1204.166755][T13503] Bluetooth: hci1: command tx timeout [ 1204.240201][T16172] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.309536][T25945] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.344354][T25945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.365077][T25945] bridge_slave_1: entered allmulticast mode [ 1204.390646][T25945] bridge_slave_1: entered promiscuous mode [ 1204.440076][T16172] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.537618][T25872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1204.567818][T25872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1204.586221][T25945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1204.623268][T25945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1204.665638][T25872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1204.690635][T25872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1204.887040][T13503] Bluetooth: hci3: command tx timeout [ 1205.005774][T25945] team0: Port device team_slave_0 added [ 1205.034540][T25945] team0: Port device team_slave_1 added [ 1205.046771][T13503] Bluetooth: hci2: command 0x0406 tx timeout [ 1205.238470][T25945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1205.249836][T25945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1205.289856][T25945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1205.315935][T25945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1205.335052][T25945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1205.387617][T25945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1205.444803][T16172] bridge_slave_1: left allmulticast mode [ 1205.452495][T16172] bridge_slave_1: left promiscuous mode [ 1205.476833][T16172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.557794][T16172] bridge_slave_0: left allmulticast mode [ 1205.581093][T16172] bridge_slave_0: left promiscuous mode [ 1205.591975][T16172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.259212][ T54] Bluetooth: hci1: command tx timeout [ 1206.963125][T16172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1206.986644][T16172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1207.050058][T16172] bond0 (unregistering): Released all slaves [ 1207.226258][T25872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1207.239264][T16172] HSR: left promiscuous mode [ 1207.312063][T25945] hsr_slave_0: entered promiscuous mode [ 1207.318732][T25945] hsr_slave_1: entered promiscuous mode [ 1207.345748][T25945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1207.353557][T25945] Cannot create hsr debugfs directory [ 1207.366654][T26102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4028'. [ 1207.603373][T25872] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.653174][T23017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.660314][T23017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.721773][T23017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.728960][T23017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.326538][ T54] Bluetooth: hci1: command tx timeout [ 1208.457109][T16172] hsr_slave_0: left promiscuous mode [ 1208.553278][T16172] hsr_slave_1: left promiscuous mode [ 1208.563137][T16172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1208.586648][T16172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1208.611897][T16172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1208.637479][T16172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.696862][T16172] veth1_macvtap: left promiscuous mode [ 1208.702445][T16172] veth0_macvtap: left promiscuous mode [ 1208.720232][T16172] veth1_vlan: left promiscuous mode [ 1208.725586][T16172] veth0_vlan: left promiscuous mode [ 1209.667151][T16172] team0 (unregistering): Port device team_slave_1 removed [ 1209.773263][T16172] team0 (unregistering): Port device team_slave_0 removed [ 1210.724870][T25872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1211.002137][T25945] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1211.021217][T25945] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1211.036148][T25945] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1211.075678][T25945] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1211.157894][T25872] veth0_vlan: entered promiscuous mode [ 1211.207906][T25872] veth1_vlan: entered promiscuous mode [ 1211.405244][T25872] veth0_macvtap: entered promiscuous mode [ 1211.510762][T25872] veth1_macvtap: entered promiscuous mode [ 1211.590819][T25945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.641190][T25872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1211.674281][T25872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.702733][T25872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1211.721268][T25872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.749847][T25872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.806352][T25872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1211.823990][T25872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.834968][T25872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1211.852561][T25872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.866853][T25872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1211.892886][T25945] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.923619][T25872] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.933882][T25872] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.943742][T25872] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.952867][T25872] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.001157][T23019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.008361][T23019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.023635][T23019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.030921][T23019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.319906][T23021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.328144][T23021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.423877][T23017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.461250][T23017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.603503][T25945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1212.730984][T25945] veth0_vlan: entered promiscuous mode [ 1212.760803][T25945] veth1_vlan: entered promiscuous mode [ 1212.828788][T25945] veth0_macvtap: entered promiscuous mode [ 1212.855718][T25945] veth1_macvtap: entered promiscuous mode [ 1212.910006][T25945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.944140][T25945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.980228][T25945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.032930][T25945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.076488][T25945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.112485][T25945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.132899][T25945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1213.436114][T25945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.479281][T25945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.489534][T25945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.500016][T25945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.509900][T25945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.520556][T25945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.532261][T25945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1213.542568][T25945] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.551583][T25945] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.560666][T25945] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.569460][T25945] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.800491][T16172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.836450][T16172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.891498][T23017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.923040][T23017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.313200][T23017] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.552094][T23017] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.623743][T13503] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1216.633847][T13503] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1216.644737][T13503] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1216.653779][T13503] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1216.956358][T13503] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1216.965259][T13503] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1217.014554][T23017] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.112854][T23017] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.512073][T23017] bridge_slave_1: left allmulticast mode [ 1217.534473][T23017] bridge_slave_1: left promiscuous mode [ 1217.564046][T23017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.593139][T23017] bridge_slave_0: left allmulticast mode [ 1217.600396][T23017] bridge_slave_0: left promiscuous mode [ 1217.606172][T23017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.777139][T23017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1218.826963][T23017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1218.858425][T23017] bond0 (unregistering): Released all slaves [ 1218.878376][T26277] chnl_net:caif_netlink_parms(): no params data found [ 1219.047072][ T54] Bluetooth: hci1: command tx timeout [ 1219.164843][T26317] nbd: must specify a size in bytes for the device [ 1219.348920][T26319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4070'. [ 1220.147686][T26277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.154842][T26277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.162217][T26277] bridge_slave_0: entered allmulticast mode [ 1220.169366][T26277] bridge_slave_0: entered promiscuous mode [ 1220.177621][T26277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.184734][T26277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.192211][T26277] bridge_slave_1: entered allmulticast mode [ 1220.199373][T26277] bridge_slave_1: entered promiscuous mode [ 1220.386335][T26277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.430726][T23017] hsr_slave_0: left promiscuous mode [ 1220.464739][T23017] hsr_slave_1: left promiscuous mode [ 1220.486026][T23017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1220.516501][T23017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1220.567797][T23017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1220.585752][T23017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1220.695694][T23017] veth1_macvtap: left promiscuous mode [ 1220.725751][T23017] veth0_macvtap: left promiscuous mode [ 1220.736906][T23017] veth1_vlan: left promiscuous mode [ 1220.742270][T23017] veth0_vlan: left promiscuous mode [ 1221.126750][ T54] Bluetooth: hci1: command tx timeout [ 1222.044631][T26377] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4083'. [ 1222.483690][T23017] team0 (unregistering): Port device team_slave_1 removed [ 1222.586214][T23017] team0 (unregistering): Port device team_slave_0 removed [ 1223.206859][ T54] Bluetooth: hci1: command tx timeout [ 1223.484376][T26277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1223.633364][T26277] team0: Port device team_slave_0 added [ 1223.693486][T26277] team0: Port device team_slave_1 added [ 1223.795010][T26277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1223.822759][T26277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1223.910330][T26277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.952478][T26277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.975781][T26277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1224.045013][T26277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.528336][T26277] hsr_slave_0: entered promiscuous mode [ 1224.575682][T26277] hsr_slave_1: entered promiscuous mode [ 1225.286742][ T54] Bluetooth: hci1: command tx timeout [ 1226.613380][T26277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1226.662992][T26277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1226.751630][T26277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1226.842636][T26277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1227.101114][T26277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.152412][T26277] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.212908][T23020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.220106][T23020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.303582][T23020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.310800][T23020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.930467][T26277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1228.043650][T26277] veth0_vlan: entered promiscuous mode [ 1228.097546][T26277] veth1_vlan: entered promiscuous mode [ 1228.138995][T26277] veth0_macvtap: entered promiscuous mode [ 1228.579467][T26277] veth1_macvtap: entered promiscuous mode [ 1228.625812][T26277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1228.659941][T26277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.701619][T26277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1228.712691][T26277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.739085][T26277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1228.762864][T26277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.805149][T26277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1228.853004][T26277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1228.896464][T26277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.916498][T26277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1228.957772][T26277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.996561][T26277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1229.031735][T26277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.051779][T26277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1229.099859][T26277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.124292][T26277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.166461][T26277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.176529][T26277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.252990][T13503] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1230.262928][T13503] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1230.271564][T13503] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1230.280186][T13503] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1230.287929][T13503] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1230.295337][T13503] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1231.091926][ T5998] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.568724][ T5998] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.945742][T23021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.989750][T23021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.011815][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.051942][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.407001][ T54] Bluetooth: hci2: command tx timeout [ 1232.474776][ T5998] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.860147][T26580] chnl_net:caif_netlink_parms(): no params data found [ 1233.269507][ T5998] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.076562][T26580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.083719][T26580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.136651][T26580] bridge_slave_0: entered allmulticast mode [ 1234.143896][T26580] bridge_slave_0: entered promiscuous mode [ 1234.167582][T26580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.196524][T26580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.204082][T26580] bridge_slave_1: entered allmulticast mode [ 1234.231846][T26580] bridge_slave_1: entered promiscuous mode [ 1234.492855][ T54] Bluetooth: hci2: command tx timeout [ 1234.720765][T26580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1234.797631][T26580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.069088][T26643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4124'. [ 1235.152976][T26580] team0: Port device team_slave_0 added [ 1235.519214][T26580] team0: Port device team_slave_1 added [ 1235.551370][ T5998] bridge_slave_1: left allmulticast mode [ 1235.560293][ T5998] bridge_slave_1: left promiscuous mode [ 1235.566072][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.733799][ T5998] bridge_slave_0: left allmulticast mode [ 1235.763153][ T5998] bridge_slave_0: left promiscuous mode [ 1235.796632][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.566689][ T54] Bluetooth: hci2: command tx timeout [ 1238.647486][ T54] Bluetooth: hci2: command tx timeout [ 1239.997061][ T5998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1240.079644][ T5998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1240.202474][ T5998] bond0 (unregistering): Released all slaves [ 1240.682271][ T5998] HSR: left promiscuous mode [ 1241.048391][T26580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.055403][T26580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1241.104240][T26580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.121406][T26580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.128736][T26580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1241.154977][T26580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.187566][ T5998] )zV: left promiscuous mode [ 1242.135022][T26580] hsr_slave_0: entered promiscuous mode [ 1242.385408][T26580] hsr_slave_1: entered promiscuous mode [ 1242.441273][T26580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1242.466507][T26580] Cannot create hsr debugfs directory [ 1243.928586][ C1] ================================================================== [ 1243.936785][ C1] BUG: KASAN: slab-use-after-free in __rhashtable_lookup.constprop.0+0x426/0x550 [ 1243.945941][ C1] Read of size 4 at addr ffff88806906c008 by task ksoftirqd/1/24 [ 1243.953673][ C1] [ 1243.956002][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.12.0-rc1-syzkaller-00114-g3840cbe24cf0 #0 [ 1243.966601][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1243.976661][ C1] Call Trace: [ 1243.979944][ C1] [ 1243.982878][ C1] dump_stack_lvl+0x116/0x1f0 [ 1243.987579][ C1] print_report+0xc3/0x620 [ 1243.992023][ C1] ? __virt_addr_valid+0x5e/0x590 [ 1243.997067][ C1] ? __phys_addr+0xc6/0x150 [ 1244.001595][ C1] kasan_report+0xd9/0x110 [ 1244.006046][ C1] ? __rhashtable_lookup.constprop.0+0x426/0x550 [ 1244.012478][ C1] ? __rhashtable_lookup.constprop.0+0x426/0x550 [ 1244.018820][ C1] __rhashtable_lookup.constprop.0+0x426/0x550 [ 1244.024982][ C1] ? lock_acquire+0x2f/0xb0 [ 1244.029610][ C1] ? ila_nf_input+0x1bd/0x620 [ 1244.034303][ C1] ila_nf_input+0x1ee/0x620 [ 1244.038816][ C1] ? __pfx_ila_nf_input+0x10/0x10 [ 1244.043848][ C1] nf_hook_slow+0xbb/0x200 [ 1244.048368][ C1] nf_hook.constprop.0+0x42e/0x750 [ 1244.053513][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1244.058729][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1244.064812][ C1] ? sock_wfree+0x46a/0x880 [ 1244.069334][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1244.074550][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 1244.079259][ C1] ipv6_rcv+0xa4/0x680 [ 1244.083358][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 1244.088071][ C1] __netif_receive_skb_one_core+0x12e/0x1e0 [ 1244.093993][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1244.100440][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 1244.105677][ C1] ? process_backlog+0x3f1/0x15f0 [ 1244.110720][ C1] ? process_backlog+0x3f1/0x15f0 [ 1244.115770][ C1] __netif_receive_skb+0x1d/0x160 [ 1244.120837][ C1] process_backlog+0x443/0x15f0 [ 1244.125723][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 1244.131142][ C1] net_rx_action+0xa92/0x1010 [ 1244.135850][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1244.140980][ C1] ? __switch_to+0x749/0x1180 [ 1244.145696][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1244.151013][ C1] ? sched_clock+0x38/0x60 [ 1244.155550][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 1244.160429][ C1] handle_softirqs+0x213/0x8f0 [ 1244.165231][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1244.170555][ C1] ? rcu_is_watching+0x12/0xc0 [ 1244.175356][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1244.180499][ C1] ? smpboot_thread_fn+0x59d/0xa30 [ 1244.185633][ C1] run_ksoftirqd+0x3a/0x60 [ 1244.190060][ C1] smpboot_thread_fn+0x661/0xa30 [ 1244.195025][ C1] ? __kthread_parkme+0x148/0x220 [ 1244.200083][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1244.205559][ C1] kthread+0x2c1/0x3a0 [ 1244.209644][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1244.214860][ C1] ? __pfx_kthread+0x10/0x10 [ 1244.219460][ C1] ret_from_fork+0x45/0x80 [ 1244.223882][ C1] ? __pfx_kthread+0x10/0x10 [ 1244.228489][ C1] ret_from_fork_asm+0x1a/0x30 [ 1244.233299][ C1] [ 1244.236316][ C1] [ 1244.238636][ C1] Allocated by task 17327: [ 1244.243049][ C1] kasan_save_stack+0x33/0x60 [ 1244.247769][ C1] kasan_save_track+0x14/0x30 [ 1244.252461][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1244.257073][ C1] __kmalloc_node_noprof+0x211/0x440 [ 1244.262384][ C1] __kvmalloc_node_noprof+0xad/0x1a0 [ 1244.267688][ C1] bucket_table_alloc.isra.0+0x86/0x460 [ 1244.273273][ C1] rhashtable_rehash_alloc+0x68/0x120 [ 1244.278672][ C1] rht_deferred_worker+0x1882/0x1fd0 [ 1244.284004][ C1] process_one_work+0x958/0x1b30 [ 1244.288976][ C1] worker_thread+0x6c8/0xf00 [ 1244.293687][ C1] kthread+0x2c1/0x3a0 [ 1244.297789][ C1] ret_from_fork+0x45/0x80 [ 1244.302221][ C1] ret_from_fork_asm+0x1a/0x30 [ 1244.307022][ C1] [ 1244.309351][ C1] Freed by task 5998: [ 1244.313343][ C1] kasan_save_stack+0x33/0x60 [ 1244.318047][ C1] kasan_save_track+0x14/0x30 [ 1244.322750][ C1] kasan_save_free_info+0x3b/0x60 [ 1244.327794][ C1] __kasan_slab_free+0x51/0x70 [ 1244.332586][ C1] kfree+0x14f/0x4b0 [ 1244.336503][ C1] kvfree+0x47/0x50 [ 1244.340336][ C1] rhashtable_free_and_destroy+0x16c/0x990 [ 1244.346180][ C1] ila_xlat_exit_net+0x59/0xa0 [ 1244.350963][ C1] ops_exit_list+0xb0/0x180 [ 1244.355500][ C1] cleanup_net+0x5b7/0xb40 [ 1244.359935][ C1] process_one_work+0x958/0x1b30 [ 1244.364907][ C1] worker_thread+0x6c8/0xf00 [ 1244.369530][ C1] kthread+0x2c1/0x3a0 [ 1244.373619][ C1] ret_from_fork+0x45/0x80 [ 1244.378057][ C1] ret_from_fork_asm+0x1a/0x30 [ 1244.382853][ C1] [ 1244.385182][ C1] The buggy address belongs to the object at ffff88806906c000 [ 1244.385182][ C1] which belongs to the cache kmalloc-4k of size 4096 [ 1244.399258][ C1] The buggy address is located 8 bytes inside of [ 1244.399258][ C1] freed 4096-byte region [ffff88806906c000, ffff88806906d000) [ 1244.412982][ C1] [ 1244.415315][ C1] The buggy address belongs to the physical page: [ 1244.421827][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x69068 [ 1244.430603][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1244.439115][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1244.446703][ C1] page_type: f5(slab) [ 1244.450704][ C1] raw: 00fff00000000040 ffff88801ac42140 dead000000000100 dead000000000122 [ 1244.459309][ C1] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 1244.467914][ C1] head: 00fff00000000040 ffff88801ac42140 dead000000000100 dead000000000122 [ 1244.476614][ C1] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 1244.485313][ C1] head: 00fff00000000003 ffffea0001a41a01 ffffffffffffffff 0000000000000000 [ 1244.494005][ C1] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1244.502683][ C1] page dumped because: kasan: bad access detected [ 1244.509112][ C1] page_owner tracks the page as allocated [ 1244.514830][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5269, tgid 5269 (kworker/0:5), ts 1181470260988, free_ts 1162715994968 [ 1244.535869][ C1] post_alloc_hook+0x2d1/0x350 [ 1244.540661][ C1] get_page_from_freelist+0x101e/0x3070 [ 1244.546249][ C1] __alloc_pages_noprof+0x223/0x25c0 [ 1244.551555][ C1] alloc_pages_mpol_noprof+0x2c9/0x610 [ 1244.557055][ C1] new_slab+0x2ba/0x3f0 [ 1244.561227][ C1] ___slab_alloc+0xd1d/0x16f0 [ 1244.565921][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 1244.571309][ C1] __kmalloc_node_track_caller_noprof+0x365/0x440 [ 1244.577770][ C1] kmalloc_reserve+0xef/0x2c0 [ 1244.582459][ C1] __alloc_skb+0x164/0x380 [ 1244.586896][ C1] nsim_dev_trap_report_work+0x2a4/0xc80 [ 1244.592543][ C1] process_one_work+0x958/0x1b30 [ 1244.597518][ C1] worker_thread+0x6c8/0xf00 [ 1244.602124][ C1] kthread+0x2c1/0x3a0 [ 1244.606199][ C1] ret_from_fork+0x45/0x80 [ 1244.610622][ C1] ret_from_fork_asm+0x1a/0x30 [ 1244.615435][ C1] page last free pid 24958 tgid 24958 stack trace: [ 1244.621945][ C1] free_unref_page+0x5f4/0xdc0 [ 1244.626728][ C1] vfree+0x17a/0x890 [ 1244.630648][ C1] kcov_put+0x2a/0x40 [ 1244.634651][ C1] kcov_close+0xd/0x20 [ 1244.638734][ C1] __fput+0x3f6/0xb60 [ 1244.642733][ C1] task_work_run+0x14e/0x250 [ 1244.647340][ C1] do_exit+0xadd/0x2d70 [ 1244.651514][ C1] do_group_exit+0xd3/0x2a0 [ 1244.656052][ C1] get_signal+0x2658/0x26d0 [ 1244.660567][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 1244.666141][ C1] irqentry_exit_to_user_mode+0x13f/0x280 [ 1244.671874][ C1] asm_exc_page_fault+0x26/0x30 [ 1244.676769][ C1] [ 1244.679097][ C1] Memory state around the buggy address: [ 1244.684731][ C1] ffff88806906bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1244.692812][ C1] ffff88806906bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1244.700886][ C1] >ffff88806906c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1244.708957][ C1] ^ [ 1244.713296][ C1] ffff88806906c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1244.721398][ C1] ffff88806906c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1244.729485][ C1] ================================================================== [ 1244.737632][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1244.744863][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.12.0-rc1-syzkaller-00114-g3840cbe24cf0 #0 [ 1244.755505][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1244.765598][ C1] Call Trace: [ 1244.768910][ C1] [ 1244.771872][ C1] dump_stack_lvl+0x3d/0x1f0 [ 1244.776526][ C1] panic+0x71d/0x800 [ 1244.780509][ C1] ? __pfx_panic+0x10/0x10 [ 1244.784998][ C1] ? irqentry_exit+0x3b/0x90 [ 1244.789643][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1244.794896][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 1244.800066][ C1] check_panic_on_warn+0xab/0xb0 [ 1244.805066][ C1] end_report+0x117/0x180 [ 1244.809457][ C1] kasan_report+0xe9/0x110 [ 1244.813944][ C1] ? __rhashtable_lookup.constprop.0+0x426/0x550 [ 1244.820322][ C1] ? __rhashtable_lookup.constprop.0+0x426/0x550 [ 1244.826724][ C1] __rhashtable_lookup.constprop.0+0x426/0x550 [ 1244.832921][ C1] ? lock_acquire+0x2f/0xb0 [ 1244.837492][ C1] ? ila_nf_input+0x1bd/0x620 [ 1244.842224][ C1] ila_nf_input+0x1ee/0x620 [ 1244.846763][ C1] ? __pfx_ila_nf_input+0x10/0x10 [ 1244.851831][ C1] nf_hook_slow+0xbb/0x200 [ 1244.856301][ C1] nf_hook.constprop.0+0x42e/0x750 [ 1244.861474][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1244.866737][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1244.872417][ C1] ? sock_wfree+0x46a/0x880 [ 1244.876976][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1244.882239][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 1244.886980][ C1] ipv6_rcv+0xa4/0x680 [ 1244.891111][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 1244.895846][ C1] __netif_receive_skb_one_core+0x12e/0x1e0 [ 1244.901814][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1244.908370][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 1244.913620][ C1] ? process_backlog+0x3f1/0x15f0 [ 1244.918700][ C1] ? process_backlog+0x3f1/0x15f0 [ 1244.923772][ C1] __netif_receive_skb+0x1d/0x160 [ 1244.928845][ C1] process_backlog+0x443/0x15f0 [ 1244.933757][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 1244.939184][ C1] net_rx_action+0xa92/0x1010 [ 1244.943909][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1244.949092][ C1] ? __switch_to+0x749/0x1180 [ 1244.953839][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1244.959080][ C1] ? sched_clock+0x38/0x60 [ 1244.963545][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 1244.968458][ C1] handle_softirqs+0x213/0x8f0 [ 1244.973266][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1244.978591][ C1] ? rcu_is_watching+0x12/0xc0 [ 1244.983408][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1244.988567][ C1] ? smpboot_thread_fn+0x59d/0xa30 [ 1244.993732][ C1] run_ksoftirqd+0x3a/0x60 [ 1244.998195][ C1] smpboot_thread_fn+0x661/0xa30 [ 1245.003179][ C1] ? __kthread_parkme+0x148/0x220 [ 1245.008253][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1245.013764][ C1] kthread+0x2c1/0x3a0 [ 1245.017889][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1245.023132][ C1] ? __pfx_kthread+0x10/0x10 [ 1245.027763][ C1] ret_from_fork+0x45/0x80 [ 1245.032240][ C1] ? __pfx_kthread+0x10/0x10 [ 1245.036884][ C1] ret_from_fork_asm+0x1a/0x30 [ 1245.041724][ C1] [ 1245.045156][ C1] Kernel Offset: disabled [ 1245.049492][ C1] Rebooting in 86400 seconds..