last executing test programs: 15.022196769s ago: executing program 1 (id=5556): clone$auto(0xfe00000000000000, 0x0, 0x2, 0x8001, 0x2400) write$auto(0xdba, 0x1, 0x400000000000000) open(&(0x7f0000000140)='./cgroup\x00', 0xc00, 0x78ca9939acca5ee1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0xff, 0x3ff) setregid$auto(0xffffffffffffffff, 0x9) mincore$auto(0x80000000, 0x4, 0x8) inotify_rm_watch$auto(0x200, 0x7) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x3) socket(0x1d, 0x2, 0x7) socket(0x5, 0x3, 0x8) mmap$auto(0x3, 0x9, 0x3, 0x16, 0x7, 0x6) listen$auto(0x30, 0x1000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), r0) sendmsg$auto_NETDEV_CMD_NAPI_GET169(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05002cbd7000ffdbdf250b0000000800020010008000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x84800) 12.842013823s ago: executing program 1 (id=5565): syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000080), 0xffffffffffffffff) socket(0xa, 0x2, 0x0) accept4$auto(0x1, 0x7, 0xfffffffffffffffb, 0x0) socket(0x2c, 0x80003, 0x0) setsockopt$auto(0xa, 0x11b, 0x41, 0xfffffffffffffffa, 0x0) mmap$auto(0x300, 0x1000000, 0x3ff, 0x49b70, 0x2, 0x8000) exit$auto(0x2) exit$auto(0x8000) exit$auto(0x8001) clock_nanosleep$auto(0x7e2e2eb7, 0x35fc0b7f, 0x0, 0x6) exit$auto(0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000003c0), r0) sendmsg$auto_NL802154_CMD_SET_CHANNEL343(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000500), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000002fc0), r0) sendmsg$auto_TCP_METRICS_CMD_GET427(r2, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000003000)={0x14, r3, 0x7ada0e01d137badb, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x80) read$auto(0x3, 0xc215, 0xc218) io_setup$auto(0x10, 0x20000001) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_GET36(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET26(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x20008800) clone$auto(0x4, 0x400, 0x9, 0x2, 0xd1) mprotect$auto(0x1ffff000, 0x1003, 0x8) fork$auto() fork$auto() mprotect$auto(0x1ffff000, 0x8007, 0x6) 8.777863978s ago: executing program 0 (id=5574): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0xff, 0x7f) 8.239616108s ago: executing program 0 (id=5575): mmap$auto(0x80000000, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x9, 0x80, 0x8, 0x10, 0x0, 0x1) prlimit64$auto(0x9, 0x1, 0x7fffffff, 0x8000000000000000) madvise$auto(0x0, 0xbbf8, 0x7f) munmap$auto(0x0, 0x100000000) 7.529084569s ago: executing program 0 (id=5577): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x58, 0x5, 0xfffffffffffdfff8, 0x7, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone$auto(0x82, 0x7ffffeffffffffff, 0xa8c, 0x6, 0x4) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x4, 0x9, 0xff) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) 6.949392008s ago: executing program 1 (id=5579): madvise$auto(0x0, 0x2000040080000004, 0xe) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x4) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89b0, &(0x7f0000000140)={'bridge0\x00'}) mlockall$auto(0x8000000000000001) munmap$auto(0x20001000, 0xffff) 5.154850588s ago: executing program 2 (id=5582): fcntl$auto(0x2, 0x400, 0x80010001) syz_genetlink_get_family_id$auto_SEG6(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_TXSA149(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_SA_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x1, 0x0) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) pselect6$auto(0x2, 0x5, 0x5, 0x7, 0xb6, 0x0) sendmsg$auto_SEG6_CMD_SETHMAC401(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x801) msync$auto(0x1ffff000, 0x100000000005, 0x400000004) 4.021158752s ago: executing program 2 (id=5584): socket(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xfff, 0xffffffffffffffff, 0x40, 0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0x23, 0x2, 0x0) ioctl$auto(0x8000000000000001, 0x89e0, 0x9) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89b0, &(0x7f0000000140)={'bridge0\x00'}) ustat$auto(0x6, 0x3) r1 = socket(0x10, 0x3, 0x2) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS103(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40008c1}, 0x20040000) socket(0xa, 0x6, 0x21) getsockopt$auto(0x6, 0x10d, 0x7, 0x401, 0xa) 3.826893126s ago: executing program 3 (id=5585): sendmsg$auto_OVS_FLOW_CMD_GET387(0xffffffffffffffff, 0x0, 0x8b0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x8000000, 0x2000040080000004, 0xc) madvise$auto(0x0, 0x2000040080000004, 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000000080), r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) bpf$auto(0x8, 0x6, 0x504) ioperm$auto(0x7, 0x6, 0x2) kcmp$auto(0x1, 0x1, 0x3, 0x85, 0x2) sendmsg$auto_SMC_PNETID_ADD421(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x7, 0x2, '*+\x00'}, @SMC_PNETID_NAME={0xd, 0x1, 'nl802154\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x10) poll$auto(0x4, 0x7, 0xffffffffffffffff) ioctl$auto(0x83, 0x800, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000000080), r2) socket(0x15, 0x5, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3c, 0xe33, 0x300) sendmsg$auto_SMC_PNETID_GET424(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r3, 0x709, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040080) sendmsg$auto_SMC_PNETID_ADD421(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0xf}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x7}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x90}, @SMC_PNETID_ETHNAME={0xd, 0x2, 'nl802154\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 3.571969632s ago: executing program 1 (id=5586): socket(0x23, 0x80805, 0x0) (async) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) (async) uname$auto(0x10) pselect6$auto(0x2, 0x5, 0x5, 0x7, 0xb6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), r0) (async) close_range$auto(0x2, 0x8000, 0x0) socket(0x29, 0x5, 0x0) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NBD_CMD_DISCONNECT159(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="81fee9e0a144fce09a2502"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8040) (async) socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8004) (async) getsockopt$auto(0x5, 0x8, 0xffffffffffffff03, 0x8000000000000001, 0x6) (async) madvise$auto(0x0, 0x2000040080000000, 0x11) (async) waitid$auto(0x1, 0x5067, 0x3, 0x4, 0x0) (async) setsockopt$auto(0x3, 0x0, 0x4, 0xe33, 0x3) 3.465837337s ago: executing program 0 (id=5587): close_range$auto(0x2, 0xfffffffffffff000, 0x2) prctl$auto(0x2800010000000025, 0x80000000000008, 0x7, 0xbe, 0x3485) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x5f88, 0x1, 0x9) socket(0x25, 0x1, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) move_pages$auto(0x1, 0x2000000000003, 0xff, 0x0, 0x1, 0x8000000000000000) memfd_secret$auto(0x0) socket(0xa, 0x3, 0x6) r0 = socket(0x10, 0x3, 0x6) mmap$auto(0x8001, 0x800000020009, 0x3, 0x15, 0x3ba5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000022ff6)='./control\x00', 0x2640, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime$auto(0x8, 0x6) getsockopt$auto(0x6, 0x1, 0x4d, 0x9, 0x6) mmap$auto(0x2, 0x0, 0xdf, 0x1d, 0xfffffffffffffffe, 0x8000) setsockopt$auto(0x3, 0x29, 0x24, 0x8, 0x7) socket(0x18, 0x4, 0x1ff) socket(0x1f, 0x2, 0x106) socket(0x2b, 0x1, 0x1) mmap$auto(0x14000, 0x20009, 0x7b, 0x80800000000eb2, 0x87, 0x9000) socket(0xa, 0x80805, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO79(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="010025bd7000ffdbdf25040000001300110070414338303231315f485753494d00005937f8ec66e618ffa50b7ed710495a85dc"], 0x28}, 0x1, 0x0, 0x0, 0xf9bcc74208cd18f9}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x6, 0x1, 0x1a, 0x480c, 0x4) setsockopt$auto(0x6, 0x100000001, 0x42, 0x4808, 0x7ffffc) 2.984972317s ago: executing program 2 (id=5588): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) settimeofday$auto(0x5ff7, 0x8000000000000000) settimeofday$auto(0x5, 0x10000000001) 2.347952603s ago: executing program 3 (id=5589): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD291(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x15, 0x0, 0x0, 0xd4}, 0x24008874) r1 = socket(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE218(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)={0x14, r2, 0xa7e32a3d198c847b, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4) sendmsg$auto_NL80211_CMD_GET_MPATH238(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x6}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x25, 0xe8, "d75df1876e3d13af0e3594feb06a76af7126c26157baa303ec19439d8bcd9fded7"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8804}, 0x4000040) socket(0x1d, 0x2, 0x2) close_range$auto(0x2, 0x8000, 0x0) 2.261771305s ago: executing program 2 (id=5590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000200), r0) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) sendmsg$auto_OVS_FLOW_CMD_NEW388(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x54, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_ACTIONS={0x4}, @OVS_FLOW_ATTR_KEY={0x37, 0x1, "33009703470276439b36cb6515b36bc1ca60f1220f2a6c3eba0713604d0b304d7d75a9a4490af560bf4af015280c2c37c1a2cb"}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0xc4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000200), r0) (async) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) (async) sendmsg$auto_OVS_FLOW_CMD_NEW388(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x54, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_ACTIONS={0x4}, @OVS_FLOW_ATTR_KEY={0x37, 0x1, "33009703470276439b36cb6515b36bc1ca60f1220f2a6c3eba0713604d0b304d7d75a9a4490af560bf4af015280c2c37c1a2cb"}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0xc4) (async) 2.139084255s ago: executing program 1 (id=5591): socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x2b, 0x1, 0x1) getsockopt$auto(0x4, 0x6, 0x23, 0x83bf, 0x6) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK262(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x520fd230d785bda3, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000890}, 0x840) setpriority$auto(0x2, 0x8, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x6, 0x10) close_range$auto(0x2, 0x1000000000000009, 0x5) socket(0x2, 0x6, 0x0) ppoll$auto(0x7fff, 0x9, 0x0, 0x0, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) epoll_create$auto(0x4) clock_adjtime$auto(0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) read$auto(0x3, 0x0, 0x80) getsockname$auto(0x3, 0x6, 0xe) read$auto(0x3, 0x0, 0x80) 1.870391006s ago: executing program 3 (id=5592): sendmsg$auto_NETDEV_CMD_NAPI_GET169(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4084010) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) syslog$auto(0x4, 0x0, 0x42) clone$auto(0x1002, 0x9, 0x10000200001, 0x3, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xf, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x4000000000, 0xbd, 0x100) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setresuid$auto(0x0, 0x8, 0x8000) delete_module$auto(0x1, 0x0) msgctl$auto(0x81, 0x3, 0x3) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000001dc0), 0xffffffffffffffff) 1.506524909s ago: executing program 2 (id=5593): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0xff, 0x7f) 1.406566522s ago: executing program 0 (id=5594): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x2) semctl$auto(0x1ff, 0x2, 0x13, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$auto(0x6, 0xf, 0x5) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x2a) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) memfd_create$auto(0x5, 0xf) fchown$auto(0x5, 0x8, 0x40004) ftruncate$auto(0x6, 0x6) 981.017864ms ago: executing program 2 (id=5595): socket(0x2b, 0x1, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x103c40, 0x50) socket(0x2a, 0x2, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) socket$nl_generic(0x10, 0x3, 0x10) readlink$auto(0x20000000, 0x5, 0x1000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x400, 0x4, 0x2, 0x6779, 0x3, 0x9) getsockopt$auto(0x5, 0x10e, 0x4, 0x3, 0xe) 958.028169ms ago: executing program 3 (id=5596): ioctl$auto(0x3, 0x4020940d, 0x5c8d) 659.286099ms ago: executing program 3 (id=5597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0xa, 0x801, 0x106) sendmsg$auto_TIPC_NL_MEDIA_GET444(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x20000180) sendmsg$auto_IPVS_CMD_SET_CONFIG128(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x154, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xbb, 0x1, "6700b1d2fcdf2c87d0bac819acc022194bc49c1faf168f56ca2cfbceff77cf9067d9198e99299d22fee583a97fce0ae9d03f18a8fba3d308f0305b4242cd020bdc5ae26c4e09d18707dbfb582447c57dbebfa5c47593a2593081d3507cca0761a4f600e95099579b896b5f03bf1f34a468713a5da23bad404ad57b95fe742195b02487f2493812fdd012062ad3802376a2d4b99394622e596dbd312f6fea8f9fecdd81a6d97d1d2218a2e0be8596ab023293214ffe505d"}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x74, 0x1, "5798aec43d592a53f950f9f6db69ffa25abb0cfa125cd4470262596caf732b4e928537977a167c4b5df1bd34744d5f9373bce222d00f0257d02f243a5af72922b20dc05d5f131909831c34e8aff5cd53bb9706171abb06aee1100e703e8f6ff6d774236d7e2d2e7256aaaa5ae97b4f15"}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) io_setup$auto(0x400000000000fffd, 0x20000001) 611.203356ms ago: executing program 0 (id=5598): r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL18(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_VERSION={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40012}, 0x4c010) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_SEG6(&(0x7f0000000140), r1) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT339(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x4}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, 0x8}, @NL802154_ATTR_SUPPORTED_COMMANDS={0xab, 0x19, "cbaa4fe11b403aa953941c402bc78a101f9d3365cca60f298a9aca1c3768fc0470ea5537f004e9b315ff3f0017d5460ea990b22a0cace2204bde6ca4b47533368d25de0de466b47cc1dcc98b634c629721061f6db5ab7743c914fabf8aac62d367cd86703187d6fdb505a457ac4a2692ed5b13487aebef727aacf7e6f8bd5d10e88fd4257d074b7e41cb292ea93d90a09c6993994cc49c11ce44a3c8c7e67553a27a2dd446fcd5"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000340), r1) read$auto(0x4, 0xe8, 0x3) r2 = syz_genetlink_get_family_id$auto_SEG6(&(0x7f00000003c0), r1) sendmsg$auto_SEG6_CMD_GET_TUNSRC400(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6044044}, 0x20000810) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000500), r1) sendmsg$auto_NL80211_CMD_SET_FILS_AAD276(r1, &(0x7f0000000c80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000540)={0x6d4, r3, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x49af}, @NL80211_ATTR_IE_RIC={0x6b7, 0xb2, "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"}]}, 0x6d4}, 0x1, 0x0, 0x0, 0x804}, 0x4) r4 = socket(0x2, 0x1, 0x10) r5 = syz_genetlink_get_family_id$auto_NLBL_CALIPSO(&(0x7f0000000d00), r1) sendmsg$auto_NLBL_CALIPSO_C_REMOVE358(r4, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x5c, r5, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xb3c2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x79c8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x6}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xfffffff8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x101}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x4}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x4}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xfffffffd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x6df420bf92884cb3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_NLBL_UNLBL(&(0x7f0000000e80), r1) sendmsg$auto_NLBL_UNLABEL_C_ACCEPT371(r6, &(0x7f0000000f40)={&(0x7f0000000e40), 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r7, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40040) r8 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000fc0), r6) sendmsg$auto_IPVS_CMD_NEW_DAEMON125(r4, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x54, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, "309484660849fdd2d936d89f370c7ac0694fba667dac4e89d70931ca5b1e670c36c0fcd7"}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10044094) r9 = syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000001140), r6) sendmsg$auto_SMC_PNETID_FLUSH423(r1, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x3c, r9, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0xb, 0x2, 'batadv\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'IPVS\x00'}, @SMC_PNETID_ETHNAME={0xf, 0x2, 'NLBL_UNLBL\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE306(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x26f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c810}, 0x0) landlock_restrict_self$auto(0x6, 0x9) io_uring_setup$auto(0xffffffffffffffff, 0xad02) sendmsg$auto_IPVS_CMD_GET_SERVICE124(r1, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x202a60c8}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf399ad355661f5ab}, 0x20001000) r10 = socket(0x27, 0x800, 0x9) ustat$auto(0x3d5, 0x100000001) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000001440), r4) sendmsg$auto_NL80211_CMD_CONNECT214(r10, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x802000}, 0xc, &(0x7f00000015c0)={&(0x7f00000014c0)={0xd0, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x65c5}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_REG_RULES={0x95, 0x22, "23f3a59a2db2f43778ffe49c9404e13f43e5ee6de62e95c70445f9fbb8c49ac80cde0b1b13714323632062cd36b85a0558bdd4b44597b86649df64f3db0e823f1dac241d6dfea130d41009220c31429d6175bc596f015b96fe611df85437017a57d0ab282bacfae3ca3527087b9603b0e5f8c860e6e3b8104cc6281f0a926d9be65714cab28f748bdef3956275b944b23f"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x8001}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}]}, 0xd0}}, 0x40080) fanotify_init$auto(0x3, 0x1) 548.78731ms ago: executing program 1 (id=5599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) uname$auto(0x7fffffff) sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x711}, @NFSD_A_SERVER_SCOPE={0xa, 0x4, 'veth0\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x10001}]}, 0x30}}, 0x4) 0s ago: executing program 3 (id=5600): mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_setup$auto(0x1, 0x3) r0 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000080), 0xffffffffffffffff) mlockall$auto(0x2) mbind$auto(0x8000000000000001, 0x8, 0xbd, 0x98d9, 0x8, 0x100000001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) dup2$auto(0x0, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xffff, 0x6, 0xfffffffffffffff7, 0x8) select$auto(0x46, 0xfff, 0x7, 0x9, 0x2) io_uring_setup$auto(0x3ff, 0x3) getcpu$auto(0x7, 0x1000000000006, 0x80000000) r1 = socket(0xf, 0x3, 0x2) sendmsg$auto_OVS_METER_CMD_SET393(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004015}, 0x20040001) sendmsg$auto_TIPC_NL_BEARER_GET437(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e959d521", @ANYRES16=r0, @ANYBLOB="000829bd7000fbdbdf250400000041000500561e43643cca5baacf982f6130b6cae042f67ce1288144c28854b308ddc82ed891540f28cb6af720a14548da5edc124e45e7ae4d07b0791c3619af473f000000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) pwritev2$auto(0x3, 0x0, 0x9, 0xffffffffffffffff, 0x2, 0xc) mbind$auto(0xf000, 0x2, 0x4, 0xe8a5, 0x6, 0x2) fork$auto() kernel console output (not intermixed with test programs): ][T19391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.410784][T19391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.470896][T19391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.737806][T19585] netlink: zone id is out of range [ 813.758590][T19585] netlink: get zone limit has 4 unknown bytes [ 813.848449][T19391] hsr_slave_0: entered promiscuous mode [ 813.931809][T19391] hsr_slave_1: entered promiscuous mode [ 813.980825][T19391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 813.988476][T19391] Cannot create hsr debugfs directory [ 814.381719][T19593] delete_channel: no stack [ 814.502910][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.509305][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.756143][T19391] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 816.855919][T19391] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 816.925549][T19391] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 817.027964][T19391] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 817.584812][T19391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.659126][T19391] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.718673][ T9770] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.725961][ T9770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.826814][ T9770] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.834124][ T9770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.937710][T19391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.258663][T19391] veth0_vlan: entered promiscuous mode [ 819.308197][T19391] veth1_vlan: entered promiscuous mode [ 819.459468][T19391] veth0_macvtap: entered promiscuous mode [ 819.485689][T19391] veth1_macvtap: entered promiscuous mode [ 819.589094][T19391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.641817][T19391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.659345][T19391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.672123][T19391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.692067][T19391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.730923][T19391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.754979][T19391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.786643][T19391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.816722][T19391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.891479][T19391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.923499][T19391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.946430][T19391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.997550][T19391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.016953][T19391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.039972][T19391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.080834][T19391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.100687][T19391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.136961][T19391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.195266][T19391] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.225975][T19391] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.248041][T19391] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.273279][T19391] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.981020][ T9760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.988901][ T9760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.093344][ T9760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.110687][ T9760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.923370][T19719] nbd: couldn't find device at index 29 [ 822.912195][T19745] FAULT_INJECTION: forcing a failure. [ 822.912195][T19745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.947212][T19745] CPU: 0 UID: 0 PID: 19745 Comm: syz.2.4071 Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 822.958055][T19745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 822.968161][T19745] Call Trace: [ 822.971481][T19745] [ 822.974461][T19745] dump_stack_lvl+0x16c/0x1f0 [ 822.979202][T19745] should_fail_ex+0x497/0x5b0 [ 822.983945][T19745] _copy_to_user+0x30/0xc0 [ 822.988425][T19745] simple_read_from_buffer+0xd0/0x160 [ 822.993902][T19745] proc_fail_nth_read+0x19e/0x280 [ 822.998997][T19745] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 823.004617][T19745] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 823.010222][T19745] vfs_read+0x1d4/0xbd0 [ 823.014438][T19745] ? find_held_lock+0x2d/0x110 [ 823.019246][T19745] ? __fdget_pos+0xeb/0x180 [ 823.023807][T19745] ? __pfx_vfs_read+0x10/0x10 [ 823.028542][T19745] ? __pfx___mutex_lock+0x10/0x10 [ 823.033652][T19745] ? __fget_files+0x256/0x400 [ 823.038405][T19745] ksys_read+0x12f/0x260 [ 823.042728][T19745] ? __pfx_ksys_read+0x10/0x10 [ 823.047568][T19745] do_syscall_64+0xcd/0x250 [ 823.052146][T19745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.058112][T19745] RIP: 0033:0x7fb011d7c93c [ 823.063093][T19745] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 823.082752][T19745] RSP: 002b:00007fb012b90030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 823.091218][T19745] RAX: ffffffffffffffda RBX: 00007fb011f35f80 RCX: 00007fb011d7c93c [ 823.099236][T19745] RDX: 000000000000000f RSI: 00007fb012b900a0 RDI: 0000000000000004 [ 823.107260][T19745] RBP: 00007fb012b90090 R08: 0000000000000000 R09: 0000000000000000 [ 823.115278][T19745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.123300][T19745] R13: 0000000000000000 R14: 00007fb011f35f80 R15: 00007ffcdac55308 [ 823.131335][T19745] [ 823.574071][T19754] netlink: 396 bytes leftover after parsing attributes in process `syz.2.4072'. [ 823.852970][T19757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4073'. [ 826.650697][T19810] can: request_module (can-proto-0) failed. [ 831.579899][T19883] nbd: must specify an index to disconnect [ 831.622953][T19885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4110'. [ 835.043712][T19927] netlink: del zone limit has 4 unknown bytes [ 846.457161][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4160'. [ 846.625240][T20074] openvswitch: netlink: Flow key attr not present in new flow. [ 856.442549][T20188] delete_channel: no stack [ 856.680760][T20194] can: request_module (can-proto-0) failed. [ 862.642971][T18835] Bluetooth: hci0: command 0x0406 tx timeout [ 863.195192][T20226] netlink: 'syz.3.4206': attribute type 11 has an invalid length. [ 863.213694][T20226] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4206'. [ 863.245140][T20226] netlink: 'syz.3.4206': attribute type 11 has an invalid length. [ 864.386487][T20244] tc_dump_action: action bad kind [ 867.074066][T20292] netlink: 556 bytes leftover after parsing attributes in process `syz.2.4221'. [ 867.120794][T20292] openvswitch: netlink: Key 0 has unexpected len 152 expected 0 [ 867.966051][T20318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4229'. [ 868.125871][T20318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4229'. [ 868.192686][T20322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4229'. [ 870.726114][T20383] nbd: couldn't find a device at index 8304 [ 872.881585][T18835] Bluetooth: hci1: command 0x0406 tx timeout [ 873.551206][T20444] nbd: must specify at least one socket [ 874.862441][T20484] Invalid ELF header magic: != ELF [ 874.892809][T20479] Invalid ELF header magic: != ELF [ 875.157555][T20493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4279'. [ 875.926287][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.939439][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.133370][T20515] openvswitch: netlink: Flow key attr not present in new flow. [ 877.161302][T20534] Invalid ELF header magic: != ELF [ 877.880950][T20540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4294'. [ 882.011281][T20596] nbd: couldn't find device at index 26974 [ 889.317663][T20663] netlink: 'syz.2.4333': attribute type 1 has an invalid length. [ 890.829749][T20661] delete_channel: no stack [ 900.786655][T20791] netlink: 'syz.2.4364': attribute type 11 has an invalid length. [ 917.112734][T20930] delete_channel: no stack [ 917.131839][T20934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4402'. [ 918.980423][T18835] Bluetooth: hci3: command 0x0406 tx timeout [ 927.510439][T21009] delete_channel: no stack [ 928.195265][T21023] nbd: illegal input index -1 [ 929.550946][T21039] netlink: 'syz.2.4428': attribute type 1 has an invalid length. [ 930.839302][ T29] audit: type=1800 audit(811888467.616:2): pid=21045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4430" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 933.979546][T21084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4445'. [ 937.366849][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.373363][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.992243][T21146] delete_channel: no stack [ 940.344426][T21171] delete_channel: no stack [ 940.722816][T21164] netlink: zone id is out of range [ 940.728001][T21164] netlink: zone id is out of range [ 940.900915][T21164] netlink: zone id is out of range [ 940.906091][T21164] netlink: zone id is out of range [ 941.011044][T21164] netlink: zone id is out of range [ 941.016220][T21164] netlink: zone id is out of range [ 941.242294][T21164] netlink: zone id is out of range [ 941.247474][T21164] netlink: zone id is out of range [ 941.415883][T21164] netlink: zone id is out of range [ 941.497366][T21164] netlink: get zone limit has 4 unknown bytes [ 944.811886][T21224] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4484'. [ 946.910816][T21253] Invalid ELF header magic: != ELF [ 949.789176][ T5996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.495415][ T5996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.177631][ T5996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.493253][ T5996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.982582][T18835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 951.994419][T18835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 952.003735][T18835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 952.023961][T18835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 952.045852][T18835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 952.053641][T18835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 952.256404][ T5996] bridge_slave_1: left allmulticast mode [ 952.280724][ T5996] bridge_slave_1: left promiscuous mode [ 952.286748][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.453638][ T5996] bridge_slave_0: left allmulticast mode [ 952.459348][ T5996] bridge_slave_0: left promiscuous mode [ 952.513503][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.168295][ T5242] Bluetooth: hci1: command tx timeout [ 955.588089][ T5996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.611787][ T5996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.632468][ T5996] bond0 (unregistering): Released all slaves [ 956.241810][ T5242] Bluetooth: hci1: command tx timeout [ 957.008867][T21296] chnl_net:caif_netlink_parms(): no params data found [ 958.323789][ T5242] Bluetooth: hci1: command tx timeout [ 958.770361][ T5996] hsr_slave_0: left promiscuous mode [ 958.969805][ T5996] hsr_slave_1: left promiscuous mode [ 959.021577][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.043904][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.074981][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 959.101437][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.215951][ T5996] veth1_macvtap: left promiscuous mode [ 959.226063][ T5996] veth0_macvtap: left promiscuous mode [ 959.244807][ T5996] veth1_vlan: left promiscuous mode [ 959.250304][ T5996] veth0_vlan: left promiscuous mode [ 960.410775][ T5242] Bluetooth: hci1: command tx timeout [ 961.191432][T18835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 961.201954][T18835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 961.211052][T18835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 961.221603][T18835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 961.229643][T18835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 961.237290][T18835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 963.280959][T18835] Bluetooth: hci4: command tx timeout [ 965.363400][T18835] Bluetooth: hci4: command tx timeout [ 966.122436][ T5996] team0 (unregistering): Port device team_slave_1 removed [ 966.462711][ T5996] team0 (unregistering): Port device team_slave_0 removed [ 967.269208][ T5242] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 967.281265][ T5242] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 967.289714][ T5242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 967.300268][ T5242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 967.319103][ T5242] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 967.351024][ T5242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 967.440718][ T5242] Bluetooth: hci4: command tx timeout [ 969.145768][T21296] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.159947][T21296] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.177789][T21296] bridge_slave_0: entered allmulticast mode [ 969.204101][T21296] bridge_slave_0: entered promiscuous mode [ 969.268258][T21296] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.322616][T21296] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.329935][T21296] bridge_slave_1: entered allmulticast mode [ 969.385072][T21296] bridge_slave_1: entered promiscuous mode [ 969.440956][ T5242] Bluetooth: hci5: command tx timeout [ 969.520770][ T5242] Bluetooth: hci4: command tx timeout [ 969.614438][T21296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.648674][T21459] netlink: 89 bytes leftover after parsing attributes in process `syz.2.4530'. [ 969.709037][T21296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.000440][T21296] team0: Port device team_slave_0 added [ 970.215300][T21296] team0: Port device team_slave_1 added [ 970.534321][T21296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.551028][T21296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.580176][T21296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.722933][T21296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.729955][T21296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.799118][T21296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.161503][T21296] hsr_slave_0: entered promiscuous mode [ 971.191255][T21296] hsr_slave_1: entered promiscuous mode [ 971.259826][T21296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 971.269771][T21296] Cannot create hsr debugfs directory [ 971.489583][ T5996] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.521185][ T5242] Bluetooth: hci5: command tx timeout [ 971.823712][ T5996] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.195300][ T5996] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.429912][ T5996] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.477687][T21445] chnl_net:caif_netlink_parms(): no params data found [ 972.876453][T21417] chnl_net:caif_netlink_parms(): no params data found [ 973.146278][T21445] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.153703][T21445] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.162601][T21445] bridge_slave_0: entered allmulticast mode [ 973.182072][T21445] bridge_slave_0: entered promiscuous mode [ 973.314124][T21445] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.335056][T21445] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.353406][T21445] bridge_slave_1: entered allmulticast mode [ 973.362529][T21445] bridge_slave_1: entered promiscuous mode [ 973.601470][ T5242] Bluetooth: hci5: command tx timeout [ 973.953813][ T5996] bridge_slave_1: left allmulticast mode [ 973.959527][ T5996] bridge_slave_1: left promiscuous mode [ 973.994673][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.049069][ T5996] bridge_slave_0: left allmulticast mode [ 974.077236][ T5996] bridge_slave_0: left promiscuous mode [ 974.101210][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.131386][ T5996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.150106][ T5996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.186699][ T5996] bond0 (unregistering): Released all slaves [ 975.426478][T21445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.689698][ T5242] Bluetooth: hci5: command tx timeout [ 975.821234][T21445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.966524][T21546] netlink: 'syz.2.4547': attribute type 1 has an invalid length. [ 976.034905][T21417] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.044390][T21417] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.051813][T21417] bridge_slave_0: entered allmulticast mode [ 976.060000][T21417] bridge_slave_0: entered promiscuous mode [ 976.076896][T21417] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.085028][T21417] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.092611][T21417] bridge_slave_1: entered allmulticast mode [ 976.101460][T21417] bridge_slave_1: entered promiscuous mode [ 976.167833][T21445] team0: Port device team_slave_0 added [ 976.215524][T21445] team0: Port device team_slave_1 added [ 976.346984][T21445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.354739][T21445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.381584][T21445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.403410][T21417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.421238][T21417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.445948][T21445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.453611][T21445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.481011][T21445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.733332][T21417] team0: Port device team_slave_0 added [ 976.756187][T21296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 976.812960][T21445] hsr_slave_0: entered promiscuous mode [ 976.841291][T21445] hsr_slave_1: entered promiscuous mode [ 976.848780][T21445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 976.856880][T21445] Cannot create hsr debugfs directory [ 976.869199][T21417] team0: Port device team_slave_1 added [ 976.901760][T21550] FAULT_INJECTION: forcing a failure. [ 976.901760][T21550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.915032][T21550] CPU: 0 UID: 0 PID: 21550 Comm: syz.2.4548 Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 976.925837][T21550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 976.935912][T21550] Call Trace: [ 976.939208][T21550] [ 976.942154][T21550] dump_stack_lvl+0x16c/0x1f0 [ 976.946862][T21550] should_fail_ex+0x497/0x5b0 [ 976.951577][T21550] _copy_from_user+0x30/0xf0 [ 976.956196][T21550] do_sock_getsockopt+0x319/0x870 [ 976.961271][T21550] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 976.966949][T21550] ? __fget_files+0x256/0x400 [ 976.971679][T21550] ? __fget_light+0x173/0x210 [ 976.976392][T21550] __sys_getsockopt+0x1a1/0x270 [ 976.981386][T21550] ? __pfx___sys_getsockopt+0x10/0x10 [ 976.986801][T21550] ? fput+0x32/0x390 [ 976.990760][T21550] ? ksys_write+0x1ab/0x260 [ 976.995309][T21550] ? __pfx_ksys_write+0x10/0x10 [ 977.000199][T21550] __x64_sys_getsockopt+0xbd/0x160 [ 977.005349][T21550] ? do_syscall_64+0x91/0x250 [ 977.010066][T21550] ? lockdep_hardirqs_on+0x7c/0x110 [ 977.015296][T21550] do_syscall_64+0xcd/0x250 [ 977.019835][T21550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.025775][T21550] RIP: 0033:0x7fb011d7def9 [ 977.030209][T21550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.050015][T21550] RSP: 002b:00007fb012b90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 977.058474][T21550] RAX: ffffffffffffffda RBX: 00007fb011f35f80 RCX: 00007fb011d7def9 [ 977.066471][T21550] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000004 [ 977.074462][T21550] RBP: 00007fb012b90090 R08: 0000000000000006 R09: 0000000000000000 [ 977.082449][T21550] R10: 0000000000000832 R11: 0000000000000246 R12: 0000000000000001 [ 977.090456][T21550] R13: 0000000000000000 R14: 00007fb011f35f80 R15: 00007ffcdac55308 [ 977.098651][T21550] [ 977.128674][T21296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 977.313578][T21417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.321094][T21417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.348187][T21417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.367701][T21296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 977.512773][T21417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.519775][T21417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.563893][T21417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.576855][T21296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 977.669165][ T5996] hsr_slave_0: left promiscuous mode [ 977.676677][ T5996] hsr_slave_1: left promiscuous mode [ 977.683979][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 977.692057][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 977.700879][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 977.720727][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.750552][ T5996] veth1_macvtap: left promiscuous mode [ 977.756370][ T5996] veth0_macvtap: left promiscuous mode [ 977.762782][ T5996] veth1_vlan: left promiscuous mode [ 977.768193][ T5996] veth0_vlan: left promiscuous mode [ 978.492012][ T5996] team0 (unregistering): Port device team_slave_1 removed [ 978.545402][ T5996] team0 (unregistering): Port device team_slave_0 removed [ 979.283953][T21417] hsr_slave_0: entered promiscuous mode [ 979.311569][T21417] hsr_slave_1: entered promiscuous mode [ 979.320158][T21417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 979.338079][T21417] Cannot create hsr debugfs directory [ 979.768359][T21445] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.951518][T21445] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.095842][T21445] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.234803][T21445] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.366055][T21296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.406960][ T5996] bridge_slave_1: left allmulticast mode [ 980.425738][ T5996] bridge_slave_1: left promiscuous mode [ 980.435118][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.446758][ T5996] bridge_slave_0: left allmulticast mode [ 980.453139][ T5996] bridge_slave_0: left promiscuous mode [ 980.459131][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.535001][ T5996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.549006][ T5996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 981.573048][ T5996] bond0 (unregistering): Released all slaves [ 981.874518][T21296] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.959168][ T9771] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.966491][ T9771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.229292][T21445] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 982.277738][T21445] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 982.304316][ T9771] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.311617][ T9771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.434320][T21445] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 982.714721][T21445] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 983.620704][ T5996] hsr_slave_0: left promiscuous mode [ 983.645966][ T5996] hsr_slave_1: left promiscuous mode [ 983.670915][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 983.698549][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 983.722018][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 983.738297][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 983.779183][ T5996] veth1_macvtap: left promiscuous mode [ 983.791706][ T5996] veth0_macvtap: left promiscuous mode [ 983.801582][ T5996] veth1_vlan: left promiscuous mode [ 983.807051][ T5996] veth0_vlan: left promiscuous mode [ 985.116623][ T5996] team0 (unregistering): Port device team_slave_1 removed [ 985.204969][ T5996] team0 (unregistering): Port device team_slave_0 removed [ 986.763374][T21417] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 986.852654][T21417] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 986.902430][T21417] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 987.011626][T21417] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 987.297348][T21445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.466248][T21445] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.556688][ T9767] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.563997][ T9767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.713467][ T9767] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.720802][ T9767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.769701][T21296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.112484][T21417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.225721][T21417] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.260000][T21296] veth0_vlan: entered promiscuous mode [ 988.336833][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.344164][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.408470][T21296] veth1_vlan: entered promiscuous mode [ 988.494733][ T6002] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.502130][ T6002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.810909][T21417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 988.898731][T21296] veth0_macvtap: entered promiscuous mode [ 989.027631][T21296] veth1_macvtap: entered promiscuous mode [ 989.156265][T21296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.190866][T21296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.207533][T21296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.230831][T21296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.243945][T21296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 989.312214][T21296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.340730][T21296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.374910][T21296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.400671][T21296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.423593][T21296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.495346][T21296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.513828][T21296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.547036][T21296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.568289][T21296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.738033][T21445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.852644][T21417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.215310][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.245415][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.323332][T21417] veth0_vlan: entered promiscuous mode [ 990.458198][T21445] veth0_vlan: entered promiscuous mode [ 990.483492][ T9766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.508231][T21417] veth1_vlan: entered promiscuous mode [ 990.515723][ T9766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.581423][T21445] veth1_vlan: entered promiscuous mode [ 990.805016][T21417] veth0_macvtap: entered promiscuous mode [ 990.826477][T21445] veth0_macvtap: entered promiscuous mode [ 990.867035][T21417] veth1_macvtap: entered promiscuous mode [ 990.907391][T21445] veth1_macvtap: entered promiscuous mode [ 990.990243][T21417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.004377][T21417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.020695][T21417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.040626][T21417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.061108][T21417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.081008][T21417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.094181][T21417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.119252][T21417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.165611][T21417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.180368][T21417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.197622][T21417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.230622][T21417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.251589][T21417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.283150][T21417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.298207][T21445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.312781][T21445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.323570][T21445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.335943][T21445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.347196][T21445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.362409][T21445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.390662][T21445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.412231][T21445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.443321][T21445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.515625][T21417] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.532796][T21417] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.544071][T21417] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.560671][T21417] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.584961][T21445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.610627][T21445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.620479][T21445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.658251][T21445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.681608][T21445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.703331][T21445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.734825][T21445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.788444][T21445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.822344][T21445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.855965][T21445] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.890743][T21445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.899549][T21445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.951071][T21445] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.532407][ T9771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.540286][ T9771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.691412][ T9771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.701456][ T9771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.843946][ T5996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.883217][ T5996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.124522][ T5996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.170764][ T5996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.356818][T21796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4581'. [ 995.869501][T21811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4584'. [ 997.144763][T21832] delete_channel: no stack [ 998.811403][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.820682][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.457364][T21907] tc_dump_action: action bad kind [ 1000.017792][T21923] netlink: 'syz.2.4608': attribute type 1 has an invalid length. [ 1002.454779][T21980] netlink: 'syz.1.4622': attribute type 11 has an invalid length. [ 1007.125004][T22062] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4642'. [ 1008.510615][T22075] delete_channel: no stack [ 1008.740875][T22078] netlink: 'syz.3.4647': attribute type 1 has an invalid length. [ 1008.816584][T22079] netlink: 280 bytes leftover after parsing attributes in process `syz.3.4647'. [ 1009.565544][T22083] openvswitch: netlink: Flow actions attr not present in new flow. [ 1009.775805][T22090] netlink: zone id is out of range [ 1009.840753][T22090] netlink: zone id is out of range [ 1009.846020][T22090] netlink: zone id is out of range [ 1009.955182][T22090] netlink: zone id is out of range [ 1010.040818][T22090] netlink: zone id is out of range [ 1010.107047][T22090] netlink: zone id is out of range [ 1010.231990][T22090] netlink: zone id is out of range [ 1010.237179][T22090] netlink: zone id is out of range [ 1010.387088][T22090] netlink: zone id is out of range [ 1011.264871][T22114] FAULT_INJECTION: forcing a failure. [ 1011.264871][T22114] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.396838][T22114] CPU: 1 UID: 0 PID: 22114 Comm: syz.1.4657 Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 1011.407686][T22114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1011.417790][T22114] Call Trace: [ 1011.421109][T22114] [ 1011.424074][T22114] dump_stack_lvl+0x16c/0x1f0 [ 1011.428814][T22114] should_fail_ex+0x497/0x5b0 [ 1011.433543][T22114] ? fs_reclaim_acquire+0xae/0x160 [ 1011.438747][T22114] should_failslab+0xc2/0x120 [ 1011.443486][T22114] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1011.448910][T22114] ? ptlock_alloc+0x1f/0x70 [ 1011.453491][T22114] ptlock_alloc+0x1f/0x70 [ 1011.457967][T22114] pte_alloc_one+0x74/0x370 [ 1011.462525][T22114] __handle_mm_fault+0x3999/0x5480 [ 1011.467711][T22114] ? __pfx_mt_find+0x10/0x10 [ 1011.472355][T22114] ? __pfx___handle_mm_fault+0x10/0x10 [ 1011.477893][T22114] ? find_vma+0xc0/0x140 [ 1011.482180][T22114] ? __pfx_find_vma+0x10/0x10 [ 1011.486911][T22114] handle_mm_fault+0x498/0xa60 [ 1011.491823][T22114] ? spurious_kernel_fault+0x361/0x3c0 [ 1011.497347][T22114] do_user_addr_fault+0x7a3/0x13f0 [ 1011.502552][T22114] exc_page_fault+0x5c/0xc0 [ 1011.507124][T22114] asm_exc_page_fault+0x26/0x30 [ 1011.512019][T22114] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 1011.517885][T22114] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 1011.537550][T22114] RSP: 0018:ffffc900044d7ce0 EFLAGS: 00050202 [ 1011.543667][T22114] RAX: 0000000000000001 RBX: 0000000000000006 RCX: 0000000000000004 [ 1011.551677][T22114] RDX: fffff5200089afad RSI: 0000000000000006 RDI: ffffc900044d7d68 [ 1011.559687][T22114] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff5200089afad [ 1011.567700][T22114] R10: 0000000000000003 R11: 0000000000000000 R12: 000000000000000a [ 1011.575720][T22114] R13: ffffc900044d7d68 R14: 0000000000000000 R15: 0000000000000006 [ 1011.583765][T22114] _copy_from_user+0xc6/0xf0 [ 1011.588421][T22114] do_sock_getsockopt+0x319/0x870 [ 1011.593499][T22114] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1011.599096][T22114] ? __fget_files+0x256/0x400 [ 1011.603839][T22114] ? __fget_light+0x173/0x210 [ 1011.608576][T22114] __sys_getsockopt+0x1a1/0x270 [ 1011.613515][T22114] ? __pfx___sys_getsockopt+0x10/0x10 [ 1011.618944][T22114] ? fput+0x32/0x390 [ 1011.622909][T22114] ? ksys_write+0x1ab/0x260 [ 1011.627469][T22114] ? __pfx_ksys_write+0x10/0x10 [ 1011.632383][T22114] __x64_sys_getsockopt+0xbd/0x160 [ 1011.637568][T22114] ? do_syscall_64+0x91/0x250 [ 1011.642310][T22114] ? lockdep_hardirqs_on+0x7c/0x110 [ 1011.647560][T22114] do_syscall_64+0xcd/0x250 [ 1011.652137][T22114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.658099][T22114] RIP: 0033:0x7f3cffd7def9 [ 1011.662555][T22114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.682212][T22114] RSP: 002b:00007f3d00a97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1011.690692][T22114] RAX: ffffffffffffffda RBX: 00007f3cfff35f80 RCX: 00007f3cffd7def9 [ 1011.698709][T22114] RDX: 0000000000000017 RSI: 0000000000000006 RDI: 0000000000000004 [ 1011.706727][T22114] RBP: 00007f3d00a97090 R08: 0000000000000006 R09: 0000000000000000 [ 1011.714748][T22114] R10: 00000000000083bf R11: 0000000000000246 R12: 0000000000000001 [ 1011.722773][T22114] R13: 0000000000000000 R14: 00007f3cfff35f80 R15: 00007fff1302f428 [ 1011.730820][T22114] [ 1014.615463][T22138] svc: failed to register nfsdv3 RPC service (errno 111). [ 1014.860890][T22138] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1020.352503][T22212] delete_channel: no stack [ 1020.794254][T22218] delete_channel: no stack [ 1024.242087][T22287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4709'. [ 1025.652207][T22314] delete_channel: no stack [ 1028.254523][T22347] delete_channel: no stack [ 1035.384834][T22439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4751'. [ 1037.000866][T22456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4756'. [ 1037.069538][T22452] netlink: 'syz.1.4756': attribute type 11 has an invalid length. [ 1037.220283][T22452] debugfs: Directory 'ns!pid_for_children' with parent 'ieee80211' already present! [ 1040.115649][T22508] FAULT_INJECTION: forcing a failure. [ 1040.115649][T22508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.161129][T22508] CPU: 1 UID: 0 PID: 22508 Comm: syz.1.4769 Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 1040.172057][T22508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1040.182155][T22508] Call Trace: [ 1040.185470][T22508] [ 1040.188440][T22508] dump_stack_lvl+0x16c/0x1f0 [ 1040.193180][T22508] should_fail_ex+0x497/0x5b0 [ 1040.197926][T22508] _copy_from_user+0x30/0xf0 [ 1040.202574][T22508] do_sock_getsockopt+0x319/0x870 [ 1040.207654][T22508] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1040.213255][T22508] ? __fget_files+0x256/0x400 [ 1040.217999][T22508] ? __fget_light+0x173/0x210 [ 1040.222740][T22508] __sys_getsockopt+0x1a1/0x270 [ 1040.227659][T22508] ? __pfx___sys_getsockopt+0x10/0x10 [ 1040.233095][T22508] ? fput+0x32/0x390 [ 1040.237058][T22508] ? ksys_write+0x1ab/0x260 [ 1040.241620][T22508] ? __pfx_ksys_write+0x10/0x10 [ 1040.246531][T22508] __x64_sys_getsockopt+0xbd/0x160 [ 1040.251702][T22508] ? do_syscall_64+0x91/0x250 [ 1040.256435][T22508] ? lockdep_hardirqs_on+0x7c/0x110 [ 1040.261689][T22508] do_syscall_64+0xcd/0x250 [ 1040.266294][T22508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.272265][T22508] RIP: 0033:0x7f3cffd7def9 [ 1040.276722][T22508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.296470][T22508] RSP: 002b:00007f3d00a97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1040.304942][T22508] RAX: ffffffffffffffda RBX: 00007f3cfff35f80 RCX: 00007f3cffd7def9 [ 1040.312961][T22508] RDX: 000000000000001d RSI: 0000000000000006 RDI: 0000000000000004 [ 1040.320974][T22508] RBP: 00007f3d00a97090 R08: 0000000000000006 R09: 0000000000000000 [ 1040.328991][T22508] R10: 0000000000000832 R11: 0000000000000246 R12: 0000000000000001 [ 1040.337011][T22508] R13: 0000000000000000 R14: 00007f3cfff35f80 R15: 00007fff1302f428 [ 1040.345047][T22508] [ 1044.481323][T22554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4784'. [ 1048.402205][T22593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4796'. [ 1056.358639][T22671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4818'. [ 1060.250758][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.262873][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1072.728854][T22789] netlink: 217 bytes leftover after parsing attributes in process `syz.3.4850'. [ 1074.981048][T22839] delete_channel: no stack [ 1076.516188][T22853] delete_channel: no stack [ 1076.812231][T22881] delete_channel: no stack [ 1077.681048][T18835] Bluetooth: hci1: command 0x0406 tx timeout [ 1077.709055][T22897] netlink: 'syz.0.4881': attribute type 11 has an invalid length. [ 1077.874824][T22897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4881'. [ 1077.933229][T22896] delete_channel: no stack [ 1078.417766][T22923] tc_dump_action: action bad kind [ 1078.452882][T22925] tc_dump_action: action bad kind [ 1078.698339][T22931] netlink: 217 bytes leftover after parsing attributes in process `syz.3.4888'. [ 1085.787247][T23026] delete_channel: no stack [ 1087.924445][T18835] Bluetooth: hci4: command 0x0406 tx timeout [ 1093.043388][ T5242] Bluetooth: hci5: command 0x0406 tx timeout [ 1100.072515][T23078] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1100.089257][T23078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1100.110711][T23078] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1100.131391][T23078] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1100.171160][T23078] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1100.181373][T23078] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1100.431874][T23078] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1100.451084][T23078] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1100.460957][T23078] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1100.517428][T23078] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1100.570902][ T5242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1100.581401][ T5242] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1100.591784][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1100.601563][T23085] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1100.612095][ T5242] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1100.649166][T18835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1100.657587][T18835] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1100.671165][T18835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1101.060869][T18835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1101.072887][T18835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1101.091154][T18835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1101.101382][T18835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1101.112850][T18835] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1101.120981][T18835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1102.241024][T18835] Bluetooth: hci0: command tx timeout [ 1102.730667][T18835] Bluetooth: hci2: command tx timeout [ 1102.812522][T18835] Bluetooth: hci6: command tx timeout [ 1102.849336][ T9766] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.156843][ T9766] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.208894][T23077] chnl_net:caif_netlink_parms(): no params data found [ 1103.359918][ T9766] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.548151][ T9766] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.841045][T18835] Bluetooth: hci7: command tx timeout [ 1104.157371][T23084] chnl_net:caif_netlink_parms(): no params data found [ 1104.234609][T23077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.244533][T23077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.251916][T23077] bridge_slave_0: entered allmulticast mode [ 1104.262183][T23077] bridge_slave_0: entered promiscuous mode [ 1104.298397][T23082] chnl_net:caif_netlink_parms(): no params data found [ 1104.321167][T18835] Bluetooth: hci0: command tx timeout [ 1104.336677][T23077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.344269][T23077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.354169][T23077] bridge_slave_1: entered allmulticast mode [ 1104.363185][T23077] bridge_slave_1: entered promiscuous mode [ 1104.519230][ T9766] bridge_slave_1: left allmulticast mode [ 1104.526890][ T9766] bridge_slave_1: left promiscuous mode [ 1104.533171][ T9766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.545518][ T9766] bridge_slave_0: left allmulticast mode [ 1104.552389][ T9766] bridge_slave_0: left promiscuous mode [ 1104.558183][ T9766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.816880][T18835] Bluetooth: hci2: command tx timeout [ 1104.881602][T18835] Bluetooth: hci6: command tx timeout [ 1105.073506][ T9766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.085918][ T9766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.098773][ T9766] bond0 (unregistering): Released all slaves [ 1105.240315][T23077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.365956][T23077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.393727][T23084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.405462][T23084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.413437][T23084] bridge_slave_0: entered allmulticast mode [ 1105.422034][T23084] bridge_slave_0: entered promiscuous mode [ 1105.504982][T23077] team0: Port device team_slave_0 added [ 1105.515512][T23089] chnl_net:caif_netlink_parms(): no params data found [ 1105.536620][T23084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.544620][T23084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.552079][T23084] bridge_slave_1: entered allmulticast mode [ 1105.560554][T23084] bridge_slave_1: entered promiscuous mode [ 1105.614087][T23077] team0: Port device team_slave_1 added [ 1105.667728][T23084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.684426][T23084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.835568][T23082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.844932][T23082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.852790][T23082] bridge_slave_0: entered allmulticast mode [ 1105.860465][T23082] bridge_slave_0: entered promiscuous mode [ 1105.920704][T18835] Bluetooth: hci7: command tx timeout [ 1105.976973][T23084] team0: Port device team_slave_0 added [ 1105.999307][T23082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.007033][T23082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.016575][T23082] bridge_slave_1: entered allmulticast mode [ 1106.025899][T23082] bridge_slave_1: entered promiscuous mode [ 1106.057943][T23077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.065231][T23077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.094983][T23077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.108841][T23077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.119193][T23077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.145447][T23077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.238029][T23084] team0: Port device team_slave_1 added [ 1106.307040][T23082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.401475][T18835] Bluetooth: hci0: command tx timeout [ 1106.580141][T23082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.712814][T23084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.719897][T23084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.747689][T23084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.880658][T18835] Bluetooth: hci2: command tx timeout [ 1106.919303][T23077] hsr_slave_0: entered promiscuous mode [ 1106.931817][T23077] hsr_slave_1: entered promiscuous mode [ 1106.941759][T23077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1106.949437][T23077] Cannot create hsr debugfs directory [ 1106.957730][T23089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.970182][T23089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.971329][T18835] Bluetooth: hci6: command tx timeout [ 1107.008268][T23089] bridge_slave_0: entered allmulticast mode [ 1107.028947][T23089] bridge_slave_0: entered promiscuous mode [ 1107.055404][T23089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.070743][T23089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.078124][T23089] bridge_slave_1: entered allmulticast mode [ 1107.100421][T23089] bridge_slave_1: entered promiscuous mode [ 1107.129051][ T9766] hsr_slave_0: left promiscuous mode [ 1107.136304][ T9766] hsr_slave_1: left promiscuous mode [ 1107.145892][ T9766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1107.153984][ T9766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1107.163422][ T9766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1107.173336][ T9766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1107.205287][ T9766] veth1_macvtap: left promiscuous mode [ 1107.211170][ T9766] veth0_macvtap: left promiscuous mode [ 1107.217017][ T9766] veth1_vlan: left promiscuous mode [ 1107.223651][ T9766] veth0_vlan: left promiscuous mode [ 1107.977581][ T9766] team0 (unregistering): Port device team_slave_1 removed [ 1108.004997][T18835] Bluetooth: hci7: command tx timeout [ 1108.047748][ T9766] team0 (unregistering): Port device team_slave_0 removed [ 1108.483888][T18835] Bluetooth: hci0: command tx timeout [ 1108.680314][T23084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.687679][T23084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.718242][T23084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.771381][T23082] team0: Port device team_slave_0 added [ 1108.785685][T23082] team0: Port device team_slave_1 added [ 1108.967241][T18835] Bluetooth: hci2: command tx timeout [ 1108.993691][T23089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.043307][T18835] Bluetooth: hci6: command tx timeout [ 1109.097988][T23082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.107894][T23082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.140580][T23082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.163868][T23089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.236591][T23084] hsr_slave_0: entered promiscuous mode [ 1109.254125][T23084] hsr_slave_1: entered promiscuous mode [ 1109.261624][T23084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1109.269238][T23084] Cannot create hsr debugfs directory [ 1109.296506][T23082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.305003][T23082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.344412][T23082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.374254][T23089] team0: Port device team_slave_0 added [ 1109.386177][T23089] team0: Port device team_slave_1 added [ 1109.706660][T23089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.714992][T23089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.746550][T23089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.761191][T23089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.768310][T23089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.798521][T23089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.836660][T23082] hsr_slave_0: entered promiscuous mode [ 1109.852597][T23082] hsr_slave_1: entered promiscuous mode [ 1109.871315][T23082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1109.878927][T23082] Cannot create hsr debugfs directory [ 1110.090620][T18835] Bluetooth: hci7: command tx timeout [ 1110.237880][T23077] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.436324][T23077] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.464246][T23089] hsr_slave_0: entered promiscuous mode [ 1110.471499][T23089] hsr_slave_1: entered promiscuous mode [ 1110.478251][T23089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1110.487102][T23089] Cannot create hsr debugfs directory [ 1110.536369][T23077] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.700069][T23077] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.903629][ T9766] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.049032][ T9766] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.162877][ T9766] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.313800][ T9766] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.634227][ T9766] bridge_slave_1: left allmulticast mode [ 1111.642151][ T9766] bridge_slave_1: left promiscuous mode [ 1111.648703][ T9766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.671381][ T9766] bridge_slave_0: left allmulticast mode [ 1111.678245][ T9766] bridge_slave_0: left promiscuous mode [ 1111.700574][ T9766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.724156][ T9766] bridge_slave_1: left allmulticast mode [ 1111.729862][ T9766] bridge_slave_1: left promiscuous mode [ 1111.747377][ T9766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.775215][ T9766] bridge_slave_0: left allmulticast mode [ 1111.790641][ T9766] bridge_slave_0: left promiscuous mode [ 1111.796542][ T9766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.693305][ T9766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.708349][ T9766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.722085][ T9766] bond0 (unregistering): Released all slaves [ 1112.862527][ T9766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.877950][ T9766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.891815][ T9766] bond0 (unregistering): Released all slaves [ 1113.785088][T23084] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1113.814618][T23084] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1113.932284][T23084] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1114.035891][T23084] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1114.780946][T23084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.825804][ T9766] hsr_slave_0: left promiscuous mode [ 1114.833161][ T9766] hsr_slave_1: left promiscuous mode [ 1114.839474][ T9766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1114.848620][ T9766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1114.858640][ T9766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1114.866823][ T9766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1114.886350][ T9766] hsr_slave_0: left promiscuous mode [ 1114.893538][ T9766] hsr_slave_1: left promiscuous mode [ 1114.899872][ T9766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1114.908194][ T9766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1114.917008][ T9766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1114.926205][ T9766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1114.970201][ T9766] veth1_macvtap: left promiscuous mode [ 1114.976179][ T9766] veth0_macvtap: left promiscuous mode [ 1114.982212][ T9766] veth1_vlan: left promiscuous mode [ 1114.987659][ T9766] veth0_vlan: left promiscuous mode [ 1114.995544][ T9766] veth1_macvtap: left promiscuous mode [ 1115.001338][ T9766] veth0_macvtap: left promiscuous mode [ 1115.007044][ T9766] veth1_vlan: left promiscuous mode [ 1115.012693][ T9766] veth0_vlan: left promiscuous mode [ 1115.836604][ T9766] team0 (unregistering): Port device team_slave_1 removed [ 1115.894430][ T9766] team0 (unregistering): Port device team_slave_0 removed [ 1116.992204][ T9766] team0 (unregistering): Port device team_slave_1 removed [ 1117.049779][ T9766] team0 (unregistering): Port device team_slave_0 removed [ 1117.697025][T23084] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.810176][T23089] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.835402][T23077] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1117.852058][T23077] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1117.910829][T23077] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1117.926127][T23077] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1117.981212][T23089] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.004229][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.011464][ T5979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.060340][ T9767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.067611][ T9767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.149683][T23089] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.314612][T23089] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.904772][T23077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.998384][T23089] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1119.030390][T23089] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1119.086395][T23077] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.118876][T23089] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1119.201301][T23089] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1119.223538][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.230853][ T5979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.265921][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.273236][ T5979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.451117][T23084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.504757][T23082] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1119.587306][T23082] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1119.618801][T23082] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1119.688511][T23082] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1120.018039][T23084] veth0_vlan: entered promiscuous mode [ 1120.147583][T23084] veth1_vlan: entered promiscuous mode [ 1120.340422][T23089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.403339][T23084] veth0_macvtap: entered promiscuous mode [ 1120.487847][T23084] veth1_macvtap: entered promiscuous mode [ 1120.529028][T23082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.593817][T23089] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.666621][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.673886][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.700030][T23084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1120.728126][T23084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.746982][T23084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1120.758489][T23084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.782381][T23084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1120.795144][T23082] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.875415][T23077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.886464][T23084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.899997][T23084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.910371][T23084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.922626][T23084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.938604][T23084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.952178][ T9767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.959450][ T9767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.989957][ T9767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.997287][ T9767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.065988][T23084] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.086650][T23084] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.097584][T23084] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.116311][T23084] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.195363][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.202636][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.585672][T23077] veth0_vlan: entered promiscuous mode [ 1121.690324][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.697866][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.718400][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.762341][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.842887][T23077] veth1_vlan: entered promiscuous mode [ 1121.988810][ T5979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.010611][ T5979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.131750][T23077] veth0_macvtap: entered promiscuous mode [ 1122.209876][T23077] veth1_macvtap: entered promiscuous mode [ 1122.364249][T23077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.401831][T23077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.438987][T23077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.464303][T23077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.479340][T23077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.518628][T23077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.542067][T23077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1122.565843][T23077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.599257][T23077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.620586][T23077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.641178][T23077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.660722][T23077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.674857][T23077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.701743][T23077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1122.793332][T23077] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.821230][T23077] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.830001][T23077] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.851193][T23077] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.990133][T23089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1123.187845][T23082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1123.294066][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.329457][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.534534][ T6002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.582318][ T6002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.716242][T23089] veth0_vlan: entered promiscuous mode [ 1123.752821][T23082] veth0_vlan: entered promiscuous mode [ 1123.823992][T23082] veth1_vlan: entered promiscuous mode [ 1123.887666][T23089] veth1_vlan: entered promiscuous mode [ 1124.128358][T23089] veth0_macvtap: entered promiscuous mode [ 1124.185182][T23082] veth0_macvtap: entered promiscuous mode [ 1124.226815][T23089] veth1_macvtap: entered promiscuous mode [ 1124.251884][T23082] veth1_macvtap: entered promiscuous mode [ 1124.406791][T23082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.447502][T23082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.474934][T23082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.490228][T23082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.501237][T23082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.524656][T23082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.543125][T23082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.568768][T23082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.597981][T23082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1124.620449][T23089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.659771][T23089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.702175][T23089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.741090][T23089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.769054][T23089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.810596][T23089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.836435][T23089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.856810][T23089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.907327][T23089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.950617][T23089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.983732][T23089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1125.068559][T23082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.089421][T23082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.114031][T23082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.159141][T23082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.181117][T23082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.203182][T23082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.228545][T23082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.250728][T23082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.286950][T23082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.343213][T23082] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.354835][T23082] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.364614][T23082] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.375533][T23082] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.445923][T23089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.457383][T23089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.472588][T23089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.484691][T23089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.495804][T23089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.507449][T23089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.517410][T23089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.528818][T23089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.538740][T23089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.549576][T23089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.564934][T23089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.614757][T23089] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.651469][T23089] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.660332][T23089] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.712263][T23089] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.227191][ T9767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.260259][ T9767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.409185][ T5979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.434711][ T5979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.532963][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.572387][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.658613][ T9767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.683126][ T9767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.531828][T23359] raw_sendmsg: syz.2.4948 forgot to set AF_INET. Fix it! [ 1130.757517][T23375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4953'. [ 1132.890906][T23400] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4960'. [ 1133.075237][T23400] netlink: 'syz.1.4960': attribute type 2 has an invalid length. [ 1135.783125][T23438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4972'. [ 1137.562307][T23464] block nbd9: not configured, cannot reconfigure [ 1139.523848][T23479] nbd: must specify a size in bytes for the device [ 1149.661569][T23596] ptrace attach of "./syz-executor exec"[23089] was attempted by "./syz-executor exec"[23596] [ 1150.670826][T23610] netlink: 556 bytes leftover after parsing attributes in process `syz.1.5019'. [ 1150.679931][T23610] net_ratelimit: 1 callbacks suppressed [ 1150.679950][T23610] openvswitch: netlink: Key 0 has unexpected len 152 expected 0 [ 1151.378915][T23623] nbd: must specify a device to reconfigure [ 1152.839498][T23634] openvswitch: netlink: Message has 136 unknown bytes. [ 1158.861301][T23694] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5043'. [ 1163.060927][T23732] nbd: must specify a device to reconfigure [ 1175.088560][T23815] can: request_module (can-proto-0) failed. [ 1176.184551][T23822] debugfs: Directory 'ns!pid_for_children' with parent 'ieee80211' already present! [ 1179.173729][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5091'. [ 1181.567130][T23873] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5096'. [ 1183.132033][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.138429][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.881889][T23914] FAULT_INJECTION: forcing a failure. [ 1184.881889][T23914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.020717][T23914] CPU: 0 UID: 0 PID: 23914 Comm: syz.2.5109 Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 1185.031655][T23914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1185.041749][T23914] Call Trace: [ 1185.045071][T23914] [ 1185.048038][T23914] dump_stack_lvl+0x16c/0x1f0 [ 1185.052774][T23914] should_fail_ex+0x497/0x5b0 [ 1185.057544][T23914] _copy_from_user+0x30/0xf0 [ 1185.062188][T23914] copy_msghdr_from_user+0x99/0x160 [ 1185.067449][T23914] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1185.073345][T23914] ? find_held_lock+0x2d/0x110 [ 1185.078156][T23914] ? __pfx___lock_acquire+0x10/0x10 [ 1185.083439][T23914] ___sys_sendmsg+0xff/0x1e0 [ 1185.088103][T23914] ? __pfx____sys_sendmsg+0x10/0x10 [ 1185.093369][T23914] ? ksys_write+0x21c/0x260 [ 1185.097927][T23914] ? __fget_light+0x173/0x210 [ 1185.102652][T23914] __sys_sendmsg+0x117/0x1f0 [ 1185.107281][T23914] ? __pfx___sys_sendmsg+0x10/0x10 [ 1185.112462][T23914] do_syscall_64+0xcd/0x250 [ 1185.117004][T23914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.122952][T23914] RIP: 0033:0x7f444417def9 [ 1185.127391][T23914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1185.147033][T23914] RSP: 002b:00007f4444ec3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1185.155484][T23914] RAX: ffffffffffffffda RBX: 00007f4444335f80 RCX: 00007f444417def9 [ 1185.163479][T23914] RDX: 0000000000000014 RSI: 0000000020000100 RDI: 0000000000000003 [ 1185.171475][T23914] RBP: 00007f4444ec3090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.179488][T23914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.187479][T23914] R13: 0000000000000000 R14: 00007f4444335f80 R15: 00007ffc8821c3d8 [ 1185.195486][T23914] [ 1185.982333][T23922] delete_channel: no stack [ 1192.188384][T23989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5130'. [ 1192.246617][T23989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5130'. [ 1196.136894][T23078] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1196.146820][T23078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1196.158826][T23078] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1196.170789][T23078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1196.183442][T23078] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1196.191133][T23078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1196.681477][T24059] kmem_cache_create_usercopy(nfsd_file) failed with error -22 [ 1196.689680][T24059] CPU: 0 UID: 0 PID: 24059 Comm: syz.0.5149 Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 1196.700499][T24059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1196.710598][T24059] Call Trace: [ 1196.713910][T24059] [ 1196.716900][T24059] dump_stack_lvl+0x16c/0x1f0 [ 1196.721633][T24059] kmem_cache_create_usercopy+0x12b/0x3b0 [ 1196.727431][T24059] kmem_cache_create+0x11/0x20 [ 1196.732255][T24059] nfsd_file_cache_init+0xd5/0x450 [ 1196.737423][T24059] nfsd_svc+0x542/0x970 [ 1196.741669][T24059] nfsd_nl_threads_set_doit+0x52c/0xbc0 [ 1196.747272][T24059] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1196.752878][T24059] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1196.759007][T24059] ? security_capable+0x98/0xd0 [ 1196.763928][T24059] genl_rcv_msg+0x565/0x800 [ 1196.768487][T24059] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1196.773571][T24059] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1196.779707][T24059] netlink_rcv_skb+0x165/0x410 [ 1196.784542][T24059] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1196.789619][T24059] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1196.795003][T24059] ? down_read+0xc9/0x330 [ 1196.799405][T24059] ? __pfx_down_read+0x10/0x10 [ 1196.804242][T24059] ? netlink_deliver_tap+0x1ae/0xcf0 [ 1196.809614][T24059] genl_rcv+0x28/0x40 [ 1196.813645][T24059] netlink_unicast+0x53c/0x7f0 [ 1196.818485][T24059] ? __pfx_netlink_unicast+0x10/0x10 [ 1196.823846][T24059] ? __phys_addr_symbol+0x30/0x80 [ 1196.828930][T24059] ? __check_object_size+0x497/0x720 [ 1196.834421][T24059] netlink_sendmsg+0x8b8/0xd70 [ 1196.839262][T24059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1196.844622][T24059] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1196.849979][T24059] ____sys_sendmsg+0x9b4/0xb50 [ 1196.854795][T24059] ? copy_msghdr_from_user+0x10b/0x160 [ 1196.860318][T24059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1196.865661][T24059] ? __pfx___futex_wait+0x10/0x10 [ 1196.870746][T24059] ? __pfx___lock_acquire+0x10/0x10 [ 1196.876024][T24059] ___sys_sendmsg+0x135/0x1e0 [ 1196.880770][T24059] ? __pfx____sys_sendmsg+0x10/0x10 [ 1196.886088][T24059] ? __fget_light+0x173/0x210 [ 1196.890839][T24059] __sys_sendmsg+0x117/0x1f0 [ 1196.895490][T24059] ? __pfx___sys_sendmsg+0x10/0x10 [ 1196.900669][T24059] ? __x64_sys_futex+0x1e1/0x4c0 [ 1196.905683][T24059] do_syscall_64+0xcd/0x250 [ 1196.910250][T24059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.916208][T24059] RIP: 0033:0x7f292cf7def9 [ 1196.920661][T24059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1196.940327][T24059] RSP: 002b:00007f292dd43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1196.948822][T24059] RAX: ffffffffffffffda RBX: 00007f292d135f80 RCX: 00007f292cf7def9 [ 1196.956933][T24059] RDX: 0000000000000004 RSI: 0000000020000280 RDI: 0000000000000003 [ 1196.964997][T24059] RBP: 00007f292cff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1196.973013][T24059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1196.981031][T24059] R13: 0000000000000000 R14: 00007f292d135f80 R15: 00007fffff97e748 [ 1196.989078][T24059] [ 1197.062544][T24059] nfsd: unable to create nfsd_file_slab [ 1197.522089][T24049] chnl_net:caif_netlink_parms(): no params data found [ 1198.240850][T18835] Bluetooth: hci1: command tx timeout [ 1198.788987][T24049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.823906][T24049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.844919][T24049] bridge_slave_0: entered allmulticast mode [ 1198.865748][T24049] bridge_slave_0: entered promiscuous mode [ 1198.899705][T24049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.931359][T24049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.952628][T24049] bridge_slave_1: entered allmulticast mode [ 1198.983127][T24049] bridge_slave_1: entered promiscuous mode [ 1199.695714][T24049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.815885][T24049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.323436][T18835] Bluetooth: hci1: command tx timeout [ 1200.963343][T24049] team0: Port device team_slave_0 added [ 1200.995521][T24049] team0: Port device team_slave_1 added [ 1201.834524][T24049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1201.868284][T24049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1201.980561][T24049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.051618][T24049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1202.058627][T24049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.184429][T24049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1202.401181][T18835] Bluetooth: hci1: command tx timeout [ 1202.835247][T24049] hsr_slave_0: entered promiscuous mode [ 1202.901165][T24049] hsr_slave_1: entered promiscuous mode [ 1202.971207][T24049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1203.009371][T24049] Cannot create hsr debugfs directory [ 1204.480730][T18835] Bluetooth: hci1: command tx timeout [ 1205.400990][T24049] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.145889][T24211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5194'. [ 1207.265414][T24049] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.564568][T24049] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.562700][T24049] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.122010][T24238] delete_channel: no stack [ 1210.413893][ T6002] bridge_slave_1: left allmulticast mode [ 1210.440137][ T6002] bridge_slave_1: left promiscuous mode [ 1210.451201][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.532866][ T6002] bridge_slave_0: left allmulticast mode [ 1210.538586][ T6002] bridge_slave_0: left promiscuous mode [ 1210.553596][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.103952][T24267] Invalid ELF header magic: != ELF [ 1212.121807][T24267] Invalid ELF header magic: != ELF [ 1212.139905][T24252] kexec: Could not allocate control_code_buffer [ 1213.475164][ T6002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1213.528124][ T6002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1213.600258][ T6002] bond0 (unregistering): Released all slaves [ 1214.065978][T24049] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1214.444065][T24049] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1214.471987][T24049] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1214.630670][T24049] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1214.647793][T24296] Invalid ELF header magic: != ELF [ 1214.686077][T24295] Invalid ELF header magic: != ELF [ 1215.188918][ T29] audit: type=1800 audit(811888751.997:3): pid=24303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5222" name="SYSV00000002" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1215.481567][ T6002] hsr_slave_0: left promiscuous mode [ 1215.514025][ T6002] hsr_slave_1: left promiscuous mode [ 1215.543176][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1215.590148][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1215.707123][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1215.727050][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1215.872693][ T6002] veth1_macvtap: left promiscuous mode [ 1215.878343][ T6002] veth0_macvtap: left promiscuous mode [ 1215.884769][ T6002] veth1_vlan: left promiscuous mode [ 1215.900842][ T6002] veth0_vlan: left promiscuous mode [ 1218.122902][T24344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5235'. [ 1219.025737][ T6002] team0 (unregistering): Port device team_slave_1 removed [ 1219.191874][ T6002] team0 (unregistering): Port device team_slave_0 removed [ 1219.347591][T24361] delete_channel: no stack [ 1222.052904][T24049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.193051][T24049] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.228276][ T9760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.235578][ T9760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.284321][ T9757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.291627][ T9757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.332918][T24049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.576668][T24049] veth0_vlan: entered promiscuous mode [ 1223.608607][T24049] veth1_vlan: entered promiscuous mode [ 1223.786340][T24049] veth0_macvtap: entered promiscuous mode [ 1223.838524][T24049] veth1_macvtap: entered promiscuous mode [ 1223.989598][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.037051][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.060587][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.110709][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.173159][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.237507][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.270568][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.290572][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.300441][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.359998][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.393536][T24049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1224.439595][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1224.461526][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.483304][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1224.517054][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.550660][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1224.581423][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.620555][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1224.646160][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.690682][T24049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1224.710546][T24049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.737516][T24049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1224.876054][T24049] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.906705][T24049] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.940988][T24049] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.949780][T24049] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.772427][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.780308][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.935648][ T9767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.962434][ T9767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.165823][T23087] Bluetooth: hci2: command 0x0406 tx timeout [ 1226.172439][T23087] Bluetooth: hci6: command 0x0406 tx timeout [ 1226.178505][T23087] Bluetooth: hci0: command 0x0406 tx timeout [ 1227.143269][T24476] delete_channel: no stack [ 1227.333307][T24480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5271'. [ 1229.671675][T24523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5287'. [ 1231.623958][ T9760] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.967111][ T9760] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.355065][ T9760] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.653447][ T9760] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.012223][T24569] FAULT_INJECTION: forcing a failure. [ 1233.012223][T24569] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.061590][T24569] CPU: 0 UID: 0 PID: 24569 Comm: syz.2.5301 Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 1233.072453][T24569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1233.082549][T24569] Call Trace: [ 1233.085864][T24569] [ 1233.088833][T24569] dump_stack_lvl+0x16c/0x1f0 [ 1233.093568][T24569] should_fail_ex+0x497/0x5b0 [ 1233.098297][T24569] ? fs_reclaim_acquire+0xae/0x160 [ 1233.103477][T24569] should_failslab+0xc2/0x120 [ 1233.108203][T24569] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1233.113628][T24569] ? vm_area_dup+0x21/0x300 [ 1233.118195][T24569] vm_area_dup+0x21/0x300 [ 1233.122582][T24569] __split_vma+0x181/0x11a0 [ 1233.127160][T24569] ? __pfx___split_vma+0x10/0x10 [ 1233.132179][T24569] do_vmi_align_munmap+0x362/0x19c0 [ 1233.137448][T24569] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1233.143193][T24569] do_vmi_munmap+0x231/0x410 [ 1233.147852][T24569] __vm_munmap+0x142/0x330 [ 1233.152332][T24569] ? __pfx___vm_munmap+0x10/0x10 [ 1233.157335][T24569] ? __pfx_ksys_write+0x10/0x10 [ 1233.162263][T24569] __x64_sys_munmap+0x61/0x90 [ 1233.166998][T24569] do_syscall_64+0xcd/0x250 [ 1233.171560][T24569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.177500][T24569] RIP: 0033:0x7f444417def9 [ 1233.181940][T24569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1233.201577][T24569] RSP: 002b:00007f4444ec3038 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 1233.210016][T24569] RAX: ffffffffffffffda RBX: 00007f4444335f80 RCX: 00007f444417def9 [ 1233.218009][T24569] RDX: 0000000000000000 RSI: 000000002000000c RDI: 0000000000000000 [ 1233.226007][T24569] RBP: 00007f4444ec3090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.234009][T24569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.241999][T24569] R13: 0000000000000000 R14: 00007f4444335f80 R15: 00007ffc8821c3d8 [ 1233.250031][T24569] [ 1233.330124][ T9760] bridge_slave_1: left allmulticast mode [ 1233.340238][ T9760] bridge_slave_1: left promiscuous mode [ 1233.377981][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.471165][ T9760] bridge_slave_0: left allmulticast mode [ 1233.476884][ T9760] bridge_slave_0: left promiscuous mode [ 1233.521525][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.735039][T23078] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1233.748519][T23078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1233.757403][T23078] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1233.767291][T23078] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1233.776161][T23078] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1233.784389][T23078] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1235.862988][ T9760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1235.907711][ T9760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1235.920938][T23085] Bluetooth: hci0: command tx timeout [ 1236.064177][ T9760] bond0 (unregistering): Released all slaves [ 1236.325209][T24590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5306'. [ 1238.000763][T23085] Bluetooth: hci0: command tx timeout [ 1238.836772][T23078] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1238.851223][T23078] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1238.862160][T23078] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1238.872111][T23078] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1238.882050][T23078] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1238.891692][T23078] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1238.920371][T24579] chnl_net:caif_netlink_parms(): no params data found [ 1240.084387][T23085] Bluetooth: hci0: command tx timeout [ 1240.350665][T24682] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1240.364880][T24579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.395887][T24579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.420863][T24579] bridge_slave_0: entered allmulticast mode [ 1240.441207][T24579] bridge_slave_0: entered promiscuous mode [ 1240.599675][ T9760] hsr_slave_0: left promiscuous mode [ 1240.624993][ T9760] hsr_slave_1: left promiscuous mode [ 1240.640053][ T9760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1240.668800][ T9760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1240.732049][ T9760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1240.739568][ T9760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1240.841583][ T9760] veth1_macvtap: left promiscuous mode [ 1240.847244][ T9760] veth0_macvtap: left promiscuous mode [ 1240.871192][ T9760] veth1_vlan: left promiscuous mode [ 1240.877234][ T9760] veth0_vlan: left promiscuous mode [ 1240.960839][T23085] Bluetooth: hci3: command tx timeout [ 1242.170696][T23085] Bluetooth: hci0: command tx timeout [ 1243.041668][T23085] Bluetooth: hci3: command tx timeout [ 1243.852552][ T9760] team0 (unregistering): Port device team_slave_1 removed [ 1244.005435][ T9760] team0 (unregistering): Port device team_slave_0 removed [ 1244.579874][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.590380][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.121473][T23085] Bluetooth: hci3: command tx timeout [ 1245.573577][T24579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.584139][T24579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.592738][T24579] bridge_slave_1: entered allmulticast mode [ 1245.619111][T24579] bridge_slave_1: entered promiscuous mode [ 1245.889502][T24579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.995896][T24579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.313446][T24579] team0: Port device team_slave_0 added [ 1246.366525][T24579] team0: Port device team_slave_1 added [ 1246.773922][T24579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1246.790670][T24579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1246.854569][T24579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.201166][T23085] Bluetooth: hci3: command tx timeout [ 1247.417125][T24579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.437365][T24579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.514406][T24579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1248.049615][T24579] hsr_slave_0: entered promiscuous mode [ 1248.089311][T24579] hsr_slave_1: entered promiscuous mode [ 1248.105174][T24579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1248.115210][T24579] Cannot create hsr debugfs directory [ 1248.137176][T24652] chnl_net:caif_netlink_parms(): no params data found [ 1248.395281][T24783] FAULT_INJECTION: forcing a failure. [ 1248.395281][T24783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1248.421010][T24783] CPU: 0 UID: 0 PID: 24783 Comm: syz.1.5345 Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 1248.431836][T24783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1248.441921][T24783] Call Trace: [ 1248.445219][T24783] [ 1248.448192][T24783] dump_stack_lvl+0x16c/0x1f0 [ 1248.452909][T24783] should_fail_ex+0x497/0x5b0 [ 1248.457634][T24783] _copy_to_user+0x30/0xc0 [ 1248.462105][T24783] simple_read_from_buffer+0xd0/0x160 [ 1248.467580][T24783] proc_fail_nth_read+0x19e/0x280 [ 1248.472662][T24783] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1248.478270][T24783] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1248.483944][T24783] vfs_read+0x1d4/0xbd0 [ 1248.488131][T24783] ? __fdget_pos+0xeb/0x180 [ 1248.492670][T24783] ? __pfx_vfs_read+0x10/0x10 [ 1248.497376][T24783] ? __pfx___mutex_lock+0x10/0x10 [ 1248.502451][T24783] ? __fget_files+0x256/0x400 [ 1248.507173][T24783] ksys_read+0x12f/0x260 [ 1248.511445][T24783] ? __pfx_ksys_read+0x10/0x10 [ 1248.516247][T24783] do_syscall_64+0xcd/0x250 [ 1248.520785][T24783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.526714][T24783] RIP: 0033:0x7f2fe717c93c [ 1248.531148][T24783] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1248.550776][T24783] RSP: 002b:00007f2fe7fdc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1248.559216][T24783] RAX: ffffffffffffffda RBX: 00007f2fe7335f80 RCX: 00007f2fe717c93c [ 1248.567207][T24783] RDX: 000000000000000f RSI: 00007f2fe7fdc0a0 RDI: 0000000000000004 [ 1248.575196][T24783] RBP: 00007f2fe7fdc090 R08: 0000000000000000 R09: 0000000000000000 [ 1248.583222][T24783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1248.591215][T24783] R13: 0000000000000000 R14: 00007f2fe7335f80 R15: 00007ffd44d06b38 [ 1248.599227][T24783] [ 1249.222423][T24801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5348'. [ 1250.616595][ T9760] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.862732][T24652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.870049][T24652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.886789][T24652] bridge_slave_0: entered allmulticast mode [ 1250.911883][T24652] bridge_slave_0: entered promiscuous mode [ 1250.933136][T24652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.950731][T24652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.958067][T24652] bridge_slave_1: entered allmulticast mode [ 1251.003125][T24652] bridge_slave_1: entered promiscuous mode [ 1251.538885][ T9760] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.076701][ T9760] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.366761][T24652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.698905][ T9760] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.803251][T24652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1255.482781][T24652] team0: Port device team_slave_0 added [ 1255.535064][T24652] team0: Port device team_slave_1 added [ 1255.974224][T24652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.990500][T24652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1256.045044][T24652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1256.073530][T24652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1256.120844][T24652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1256.157322][T24652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.300143][T24652] hsr_slave_0: entered promiscuous mode [ 1261.708339][T24652] hsr_slave_1: entered promiscuous mode [ 1262.046598][T24652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1262.060315][T24652] Cannot create hsr debugfs directory [ 1262.792207][ T9760] bridge_slave_1: left allmulticast mode [ 1262.797899][ T9760] bridge_slave_1: left promiscuous mode [ 1262.815380][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.115289][ T9760] bridge_slave_0: left allmulticast mode [ 1263.122434][ T9760] bridge_slave_0: left promiscuous mode [ 1263.140910][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.539552][ T9760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1265.700641][ T9760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1265.846889][ T9760] bond0 (unregistering): Released all slaves [ 1266.953984][T24579] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1267.175539][T24579] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1267.239819][ T9760] hsr_slave_0: left promiscuous mode [ 1267.248632][ T9760] hsr_slave_1: left promiscuous mode [ 1267.255978][ T9760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1267.263899][ T9760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1267.274021][ T9760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1267.285249][ T9760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1267.321603][ T9760] veth1_macvtap: left promiscuous mode [ 1267.328383][ T9760] veth0_macvtap: left promiscuous mode [ 1267.335468][ T9760] veth1_vlan: left promiscuous mode [ 1267.342088][ T9760] veth0_vlan: left promiscuous mode [ 1268.242763][T23078] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1268.287861][T23078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1268.311120][T23078] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1268.341006][T23078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1268.362000][T23078] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1268.369615][T23078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1269.045776][ T9760] team0 (unregistering): Port device team_slave_1 removed [ 1269.258109][ T9760] team0 (unregistering): Port device team_slave_0 removed [ 1270.494100][T23085] Bluetooth: hci1: command tx timeout [ 1271.653973][T24579] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1271.721760][T24579] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1272.560871][T23085] Bluetooth: hci1: command tx timeout [ 1273.312058][T24579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.347340][T24982] chnl_net:caif_netlink_parms(): no params data found [ 1273.557576][T24579] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.855715][T24652] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1273.925614][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.933010][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.979290][T24652] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1274.158982][ T9766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.166314][ T9766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1274.230534][T24652] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1274.467531][T24652] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1274.615051][T24982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.630656][T24982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.638585][T24982] bridge_slave_0: entered allmulticast mode [ 1274.640741][T23085] Bluetooth: hci1: command tx timeout [ 1274.663219][T24982] bridge_slave_0: entered promiscuous mode [ 1274.796009][T24982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.813404][T24982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.823203][T24982] bridge_slave_1: entered allmulticast mode [ 1274.841866][T24982] bridge_slave_1: entered promiscuous mode [ 1275.539075][ T9760] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.077196][ T9760] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.159849][T24982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1276.187108][T24982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.466257][T24982] team0: Port device team_slave_0 added [ 1276.543459][ T9760] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.622516][T24982] team0: Port device team_slave_1 added [ 1276.720638][T23085] Bluetooth: hci1: command tx timeout [ 1276.956826][T24982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1276.965371][T24982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1277.001334][T24982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1277.224155][ T9760] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.304216][T24982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1277.321615][T24982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1277.374688][T24982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1277.949896][T24982] hsr_slave_0: entered promiscuous mode [ 1278.060366][T24982] hsr_slave_1: entered promiscuous mode [ 1278.170952][T24982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1278.190573][T24982] Cannot create hsr debugfs directory [ 1278.209133][T24579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.939219][T24652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1279.045079][T24579] veth0_vlan: entered promiscuous mode [ 1279.064235][ T9760] bridge_slave_1: left allmulticast mode [ 1279.081540][ T9760] bridge_slave_1: left promiscuous mode [ 1279.087439][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.134951][ T9760] bridge_slave_0: left allmulticast mode [ 1279.142688][ T9760] bridge_slave_0: left promiscuous mode [ 1279.158869][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.835786][T25117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5390'. [ 1281.732224][ T9760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1281.902126][ T9760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1282.063670][ T9760] bond0 (unregistering): Released all slaves [ 1282.867066][T24579] veth1_vlan: entered promiscuous mode [ 1282.896232][T24652] 8021q: adding VLAN 0 to HW filter on device team0 [ 1283.088640][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.095945][ T5979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.204015][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.211308][ T5979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.813407][ T9760] hsr_slave_0: left promiscuous mode [ 1284.970685][ T9760] hsr_slave_1: left promiscuous mode [ 1285.101209][ T9760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1285.108702][ T9760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.192264][ T9760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.199728][ T9760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.352937][ T9760] veth1_macvtap: left promiscuous mode [ 1285.358580][ T9760] veth0_macvtap: left promiscuous mode [ 1285.381011][ T9760] veth1_vlan: left promiscuous mode [ 1285.386476][ T9760] veth0_vlan: left promiscuous mode [ 1287.262994][ T9760] team0 (unregistering): Port device team_slave_1 removed [ 1287.377759][ T9760] team0 (unregistering): Port device team_slave_0 removed [ 1288.760706][T24579] veth0_macvtap: entered promiscuous mode [ 1289.057246][T24579] veth1_macvtap: entered promiscuous mode [ 1289.223612][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.262554][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.280742][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.300608][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.321304][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.339756][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.399118][T24579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1289.451909][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.475682][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.514612][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.541810][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.560506][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.590510][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.615939][T24579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1289.693804][T24579] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.707460][T24579] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.718950][T24579] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.728206][T24579] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.878997][T25199] Invalid ELF header magic: != ELF [ 1289.976477][T24652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1290.027090][T25200] Invalid ELF header magic: != ELF [ 1290.141089][T24982] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1290.185233][T24982] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1290.241434][T24982] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1290.285251][T24982] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1290.359934][ T9767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.397757][ T9767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.532650][ T5979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.572983][ T5979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.666843][T24652] veth0_vlan: entered promiscuous mode [ 1290.748439][T24652] veth1_vlan: entered promiscuous mode [ 1290.993302][T24982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1291.093224][T24652] veth0_macvtap: entered promiscuous mode [ 1291.147721][T24982] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.176377][T24652] veth1_macvtap: entered promiscuous mode [ 1291.220910][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.228188][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.299208][ T9771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.306527][ T9771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.357262][T24652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.393107][T24652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.432649][T24652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.475047][T24652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.491925][T24652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.512399][T24652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.530663][T24652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.542886][T24652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.557058][T24652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1291.635722][T24652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1291.656536][T24652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.670509][T24652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1291.692121][T24652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.710619][T24652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1291.733472][T24652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.760599][T24652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1291.790504][T24652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.813491][T24652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1291.876228][T24652] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.909438][T24652] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.930510][T24652] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.939273][T24652] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.535741][ T9771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.563142][ T9771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.673858][ T9760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.700617][ T9760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.938944][T24982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.177243][T24982] veth0_vlan: entered promiscuous mode [ 1293.245917][T24982] veth1_vlan: entered promiscuous mode [ 1293.389753][T24982] veth0_macvtap: entered promiscuous mode [ 1293.418850][T24982] veth1_macvtap: entered promiscuous mode [ 1293.513213][T24982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.575273][T24982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.600919][T24982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.632051][T24982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.655490][T24982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.670628][T24982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.697193][T24982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.710546][T24982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.728175][T24982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.742648][T24982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.775563][T24982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1293.839095][T24982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1293.871872][T24982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.890373][T24982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1293.910628][T24982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.940839][T24982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1293.970680][T24982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.988843][T24982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.010294][T24982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.041560][T24982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.071191][T24982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.093458][T24982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1294.125416][T24982] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.144026][T24982] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.190939][T24982] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.199720][T24982] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.604227][T25232] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5411'. [ 1294.758809][ T9757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.790665][ T9757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.877494][ T9767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.924303][ T9767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1303.064401][T25341] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5436'. [ 1306.021377][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.027755][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1311.403594][T25430] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5460'. [ 1317.426630][T25504] nbd: illegal input index -1 [ 1319.700953][T25519] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5486'. [ 1319.919633][T25529] openvswitch: netlink: Flow actions attr not present in new flow. [ 1329.710772][T25616] netlink: 556 bytes leftover after parsing attributes in process `syz.3.5514'. [ 1329.719892][T25616] openvswitch: netlink: Message has 4096 unknown bytes. [ 1334.557959][T25667] kexec: Could not allocate control_code_buffer [ 1335.249240][T25693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5535'. [ 1342.854281][T25795] debugfs: Directory 'ns!pid_for_children' with parent 'ieee80211' already present! [ 1348.170673][T25843] delete_channel: no stack [ 1353.231269][T25887] openvswitch: netlink: Key type 919 is out of range max 32 [ 1353.334689][T25887] openvswitch: netlink: Key type 919 is out of range max 32 [ 1355.262841][T25910] svc: failed to register nfsdv3 RPC service (errno 111). [ 1355.383018][T25910] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1355.530867][T25910] ================================================================== [ 1355.539003][T25910] BUG: KASAN: slab-out-of-bounds in rhashtable_walk_enter+0x333/0x370 [ 1355.547239][T25910] Read of size 8 at addr ffff8880699ce010 by task syz.1.5599/25910 [ 1355.555182][T25910] [ 1355.557537][T25910] CPU: 0 UID: 0 PID: 25910 Comm: syz.1.5599 Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 1355.568350][T25910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1355.578454][T25910] Call Trace: [ 1355.581771][T25910] [ 1355.584734][T25910] dump_stack_lvl+0x116/0x1f0 [ 1355.589485][T25910] print_report+0xc3/0x620 [ 1355.593956][T25910] ? __virt_addr_valid+0x5e/0x590 [ 1355.599108][T25910] ? __phys_addr+0xc6/0x150 [ 1355.603640][T25910] kasan_report+0xd9/0x110 [ 1355.608087][T25910] ? rhashtable_walk_enter+0x333/0x370 [ 1355.613594][T25910] ? rhashtable_walk_enter+0x333/0x370 [ 1355.619103][T25910] rhashtable_walk_enter+0x333/0x370 [ 1355.624434][T25910] __nfsd_file_cache_purge+0xad/0x490 [ 1355.629842][T25910] ? __pfx___nfsd_file_cache_purge+0x10/0x10 [ 1355.635849][T25910] ? lockdep_hardirqs_on+0x7c/0x110 [ 1355.641106][T25910] ? enable_work+0x246/0x340 [ 1355.645734][T25910] ? __pfx_enable_work+0x10/0x10 [ 1355.650714][T25910] nfsd_file_cache_shutdown+0xcf/0x480 [ 1355.656203][T25910] nfsd_svc+0x6d4/0x970 [ 1355.660398][T25910] nfsd_nl_threads_set_doit+0x52c/0xbc0 [ 1355.665981][T25910] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1355.671557][T25910] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1355.677658][T25910] ? security_capable+0x98/0xd0 [ 1355.682548][T25910] genl_rcv_msg+0x565/0x800 [ 1355.687077][T25910] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1355.692122][T25910] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1355.698219][T25910] netlink_rcv_skb+0x165/0x410 [ 1355.703025][T25910] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1355.708074][T25910] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1355.713404][T25910] ? down_read+0xc9/0x330 [ 1355.717770][T25910] ? __pfx_down_read+0x10/0x10 [ 1355.722571][T25910] ? netlink_deliver_tap+0x1ae/0xcf0 [ 1355.727893][T25910] genl_rcv+0x28/0x40 [ 1355.731892][T25910] netlink_unicast+0x53c/0x7f0 [ 1355.736692][T25910] ? __pfx_netlink_unicast+0x10/0x10 [ 1355.742012][T25910] ? __phys_addr_symbol+0x30/0x80 [ 1355.747057][T25910] ? __check_object_size+0x497/0x720 [ 1355.752404][T25910] netlink_sendmsg+0x8b8/0xd70 [ 1355.757216][T25910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1355.762629][T25910] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1355.767957][T25910] ____sys_sendmsg+0x9b4/0xb50 [ 1355.772767][T25910] ? copy_msghdr_from_user+0x10b/0x160 [ 1355.778258][T25910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1355.783570][T25910] ? __pfx___futex_wait+0x10/0x10 [ 1355.788644][T25910] ? __pfx___lock_acquire+0x10/0x10 [ 1355.793889][T25910] ? try_to_wake_up+0x14b/0x13e0 [ 1355.798959][T25910] ___sys_sendmsg+0x135/0x1e0 [ 1355.803688][T25910] ? __pfx____sys_sendmsg+0x10/0x10 [ 1355.808934][T25910] ? __fget_light+0x173/0x210 [ 1355.813637][T25910] __sys_sendmsg+0x117/0x1f0 [ 1355.818262][T25910] ? __pfx___sys_sendmsg+0x10/0x10 [ 1355.823411][T25910] ? __x64_sys_futex+0x1e1/0x4c0 [ 1355.828385][T25910] do_syscall_64+0xcd/0x250 [ 1355.832926][T25910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.838855][T25910] RIP: 0033:0x7f2fe717def9 [ 1355.843298][T25910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1355.862935][T25910] RSP: 002b:00007f2fe7fdc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1355.871389][T25910] RAX: ffffffffffffffda RBX: 00007f2fe7335f80 RCX: 00007f2fe717def9 [ 1355.879382][T25910] RDX: 0000000000000004 RSI: 0000000020000280 RDI: 0000000000000003 [ 1355.887381][T25910] RBP: 00007f2fe71f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1355.895461][T25910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1355.903456][T25910] R13: 0000000000000000 R14: 00007f2fe7335f80 R15: 00007ffd44d06b38 [ 1355.911481][T25910] [ 1355.914518][T25910] [ 1355.916862][T25910] Allocated by task 24982: [ 1355.921281][T25910] kasan_save_stack+0x33/0x60 [ 1355.925987][T25910] kasan_save_track+0x14/0x30 [ 1355.930692][T25910] __kasan_kmalloc+0xaa/0xb0 [ 1355.935301][T25910] __kmalloc_node_noprof+0x211/0x440 [ 1355.940615][T25910] __kvmalloc_node_noprof+0x6f/0x1a0 [ 1355.945940][T25910] pfifo_fast_init+0x125/0x3b0 [ 1355.950736][T25910] qdisc_create_dflt+0x101/0x440 [ 1355.955717][T25910] dev_activate+0x63c/0x12c0 [ 1355.960337][T25910] __dev_open+0x396/0x4e0 [ 1355.964688][T25910] __dev_change_flags+0x561/0x720 [ 1355.969736][T25910] dev_change_flags+0x8f/0x160 [ 1355.974524][T25910] do_setlink+0x19dd/0x3ec0 [ 1355.979049][T25910] __rtnl_newlink+0xc3a/0x1920 [ 1355.983841][T25910] rtnl_newlink+0x67/0xa0 [ 1355.988195][T25910] rtnetlink_rcv_msg+0x3c7/0xea0 [ 1355.993166][T25910] netlink_rcv_skb+0x165/0x410 [ 1355.997966][T25910] netlink_unicast+0x53c/0x7f0 [ 1356.002854][T25910] netlink_sendmsg+0x8b8/0xd70 [ 1356.007665][T25910] __sys_sendto+0x47f/0x4e0 [ 1356.012195][T25910] __x64_sys_sendto+0xe0/0x1c0 [ 1356.016983][T25910] do_syscall_64+0xcd/0x250 [ 1356.021517][T25910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.027450][T25910] [ 1356.029781][T25910] The buggy address belongs to the object at ffff8880699cc000 [ 1356.029781][T25910] which belongs to the cache kmalloc-8k of size 8192 [ 1356.043969][T25910] The buggy address is located 208 bytes to the right of [ 1356.043969][T25910] allocated 8000-byte region [ffff8880699cc000, ffff8880699cdf40) [ 1356.058746][T25910] [ 1356.061081][T25910] The buggy address belongs to the physical page: [ 1356.067507][T25910] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x699c8 [ 1356.076291][T25910] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1356.084818][T25910] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1356.092394][T25910] page_type: 0xfdffffff(slab) [ 1356.097104][T25910] raw: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 1356.105723][T25910] raw: 0000000000000000 0000000000020002 00000001fdffffff 0000000000000000 [ 1356.114369][T25910] head: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 1356.123063][T25910] head: 0000000000000000 0000000000020002 00000001fdffffff 0000000000000000 [ 1356.131751][T25910] head: 00fff00000000003 ffffea0001a67201 ffffffffffffffff 0000000000000000 [ 1356.140454][T25910] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1356.149171][T25910] page dumped because: kasan: bad access detected [ 1356.155599][T25910] page_owner tracks the page as allocated [ 1356.161318][T25910] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 24982, tgid 24982 (syz-executor), ts 1290728417826, free_ts 1290676527995 [ 1356.184617][T25910] post_alloc_hook+0x2d1/0x350 [ 1356.189407][T25910] get_page_from_freelist+0x1351/0x2e50 [ 1356.194985][T25910] __alloc_pages_noprof+0x22b/0x2460 [ 1356.200291][T25910] alloc_slab_page+0x4e/0xf0 [ 1356.204909][T25910] new_slab+0x84/0x260 [ 1356.209012][T25910] ___slab_alloc+0xdac/0x1870 [ 1356.213707][T25910] __slab_alloc.constprop.0+0x56/0xb0 [ 1356.219098][T25910] __kmalloc_node_noprof+0x367/0x440 [ 1356.224424][T25910] __kvmalloc_node_noprof+0x6f/0x1a0 [ 1356.229729][T25910] pfifo_fast_init+0x125/0x3b0 [ 1356.234515][T25910] qdisc_create_dflt+0x101/0x440 [ 1356.239480][T25910] dev_activate+0x63c/0x12c0 [ 1356.244096][T25910] __dev_open+0x396/0x4e0 [ 1356.248452][T25910] __dev_change_flags+0x561/0x720 [ 1356.253503][T25910] dev_change_flags+0x8f/0x160 [ 1356.258291][T25910] do_setlink+0x19dd/0x3ec0 [ 1356.262827][T25910] page last free pid 5278 tgid 5278 stack trace: [ 1356.269194][T25910] free_unref_page+0x64a/0xe40 [ 1356.273979][T25910] qlist_free_all+0x4e/0x140 [ 1356.278586][T25910] kasan_quarantine_reduce+0x192/0x1e0 [ 1356.284063][T25910] __kasan_slab_alloc+0x69/0x90 [ 1356.288942][T25910] __kmalloc_cache_noprof+0x11e/0x310 [ 1356.294339][T25910] nsim_fib_event_work+0x1ac3/0x3190 [ 1356.299666][T25910] process_one_work+0x958/0x1ad0 [ 1356.304721][T25910] worker_thread+0x6c8/0xf00 [ 1356.309339][T25910] kthread+0x2c1/0x3a0 [ 1356.313426][T25910] ret_from_fork+0x45/0x80 [ 1356.317875][T25910] ret_from_fork_asm+0x1a/0x30 [ 1356.322672][T25910] [ 1356.325000][T25910] Memory state around the buggy address: [ 1356.330636][T25910] ffff8880699cdf00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1356.338713][T25910] ffff8880699cdf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1356.346785][T25910] >ffff8880699ce000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1356.354863][T25910] ^ [ 1356.359466][T25910] ffff8880699ce080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1356.367559][T25910] ffff8880699ce100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1356.375650][T25910] ================================================================== [ 1356.389081][T25910] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1356.396352][T25910] CPU: 0 UID: 0 PID: 25910 Comm: syz.1.5599 Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 1356.407158][T25910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1356.417252][T25910] Call Trace: [ 1356.420563][T25910] [ 1356.423521][T25910] dump_stack_lvl+0x3d/0x1f0 [ 1356.428161][T25910] panic+0x6dc/0x7c0 [ 1356.432118][T25910] ? mark_held_locks+0x9f/0xe0 [ 1356.436936][T25910] ? __pfx_panic+0x10/0x10 [ 1356.441405][T25910] ? irqentry_exit+0x3b/0x90 [ 1356.446049][T25910] ? lockdep_hardirqs_on+0x7c/0x110 [ 1356.451317][T25910] check_panic_on_warn+0xab/0xb0 [ 1356.456308][T25910] end_report+0x117/0x180 [ 1356.460686][T25910] kasan_report+0xe9/0x110 [ 1356.465157][T25910] ? rhashtable_walk_enter+0x333/0x370 [ 1356.470691][T25910] ? rhashtable_walk_enter+0x333/0x370 [ 1356.476222][T25910] rhashtable_walk_enter+0x333/0x370 [ 1356.481580][T25910] __nfsd_file_cache_purge+0xad/0x490 [ 1356.487007][T25910] ? __pfx___nfsd_file_cache_purge+0x10/0x10 [ 1356.493043][T25910] ? lockdep_hardirqs_on+0x7c/0x110 [ 1356.498326][T25910] ? enable_work+0x246/0x340 [ 1356.502982][T25910] ? __pfx_enable_work+0x10/0x10 [ 1356.507985][T25910] nfsd_file_cache_shutdown+0xcf/0x480 [ 1356.513504][T25910] nfsd_svc+0x6d4/0x970 [ 1356.517717][T25910] nfsd_nl_threads_set_doit+0x52c/0xbc0 [ 1356.523392][T25910] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1356.528966][T25910] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1356.535078][T25910] ? security_capable+0x98/0xd0 [ 1356.539964][T25910] genl_rcv_msg+0x565/0x800 [ 1356.544492][T25910] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1356.549554][T25910] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1356.555647][T25910] netlink_rcv_skb+0x165/0x410 [ 1356.560451][T25910] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1356.565500][T25910] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1356.570829][T25910] ? down_read+0xc9/0x330 [ 1356.575203][T25910] ? __pfx_down_read+0x10/0x10 [ 1356.580002][T25910] ? netlink_deliver_tap+0x1ae/0xcf0 [ 1356.585325][T25910] genl_rcv+0x28/0x40 [ 1356.589326][T25910] netlink_unicast+0x53c/0x7f0 [ 1356.594138][T25910] ? __pfx_netlink_unicast+0x10/0x10 [ 1356.599469][T25910] ? __phys_addr_symbol+0x30/0x80 [ 1356.604522][T25910] ? __check_object_size+0x497/0x720 [ 1356.609862][T25910] netlink_sendmsg+0x8b8/0xd70 [ 1356.614668][T25910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1356.619996][T25910] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1356.625326][T25910] ____sys_sendmsg+0x9b4/0xb50 [ 1356.630117][T25910] ? copy_msghdr_from_user+0x10b/0x160 [ 1356.635630][T25910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1356.640945][T25910] ? __pfx___futex_wait+0x10/0x10 [ 1356.645998][T25910] ? __pfx___lock_acquire+0x10/0x10 [ 1356.651223][T25910] ? try_to_wake_up+0x14b/0x13e0 [ 1356.656194][T25910] ___sys_sendmsg+0x135/0x1e0 [ 1356.660907][T25910] ? __pfx____sys_sendmsg+0x10/0x10 [ 1356.666162][T25910] ? __fget_light+0x173/0x210 [ 1356.670868][T25910] __sys_sendmsg+0x117/0x1f0 [ 1356.675493][T25910] ? __pfx___sys_sendmsg+0x10/0x10 [ 1356.680638][T25910] ? __x64_sys_futex+0x1e1/0x4c0 [ 1356.685608][T25910] do_syscall_64+0xcd/0x250 [ 1356.690155][T25910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.696092][T25910] RIP: 0033:0x7f2fe717def9 [ 1356.700527][T25910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1356.720174][T25910] RSP: 002b:00007f2fe7fdc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1356.728619][T25910] RAX: ffffffffffffffda RBX: 00007f2fe7335f80 RCX: 00007f2fe717def9 [ 1356.736632][T25910] RDX: 0000000000000004 RSI: 0000000020000280 RDI: 0000000000000003 [ 1356.744619][T25910] RBP: 00007f2fe71f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1356.752605][T25910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1356.760590][T25910] R13: 0000000000000000 R14: 00007f2fe7335f80 R15: 00007ffd44d06b38 [ 1356.768593][T25910] [ 1356.771751][T25910] Kernel Offset: disabled [ 1356.776080][T25910] Rebooting in 86400 seconds..