last executing test programs: 3.645867003s ago: executing program 0 (id=1339): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) mmap$auto(0x7, 0xa12, 0x7ff, 0x11d, 0x6, 0x2) mmap$auto(0x0, 0x1, 0x9a6, 0x10, 0x3, 0x7fffffff) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1, 0x2, 0x0) poll$auto(&(0x7f0000004400)={0x5, 0x4, 0x2}, 0xb7, 0x0) getsockopt$auto(0x4, 0x6, 0xa, 0xfffffffffffffffc, 0x0) 3.460591815s ago: executing program 2 (id=1340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf2502000000110004"], 0x28}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x18, r3, 0x1d7366850c91a5b5, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET0(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="5cb04505669709e465251500000adb"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r6 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0xff}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048042}, 0x40004) 3.42567607s ago: executing program 1 (id=1341): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x8, 0x3, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mlockall$auto(0x6) madvise$auto(0x0, 0x10001, 0x100000003) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fchown$auto(0x5, 0x8, 0x3) setns$auto(0x100000000, 0x0) clone$auto(0x64e787eb, 0x8000000000000001, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0xa, 0x73) 3.341857816s ago: executing program 0 (id=1342): madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000580), r0) sendmsg$auto_NL80211_CMD_GET_STATION(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r1, 0x3e14975154ca0b21, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_WME={0x6, 0x81, 0x68b1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80044}, 0x40080) quotactl_fd$auto(0x8000, 0x4e00000, 0x9, &(0x7f0000000140)="3a000cea6cd7de171dfe3aa9bc534a928c2712a599d53ddc3393bc80833f23c62a3b24209403fbac3819c12329bd3af69abf252fe80bbf8b1c4ff676518222de851cfa0135930a405199651af8a279c91f60901ebea3616c8693c44503cff77adfbf3d0d45aaffdf810bdddf73d0184692dfd50ccaad955dc59bea7a5f3f33eca9453e04eed4f888c3075195d15add09a38eafed4e80df6bbdd4") socket(0xa, 0x3, 0x6) setsockopt$auto(0x3, 0x3a, 0x7, 0xffffffffffffffff, 0x3) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x37782, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) dup2$auto(0x0, 0x3) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048000}, 0x4000000) writev$auto(0x5, &(0x7f0000000100)={&(0x7f0000000040), 0xfdef}, 0x1) vmsplice$auto(0x3, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x103, 0x7) r2 = socket(0xa, 0x1, 0x0) fallocate$auto(0x8, 0x3, 0x100000000, 0x3) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmsg$auto_BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x1040) setreuid$auto(0x3, 0x7) bpf$auto(0x800000000000001f, 0xfffffffffffffffe, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 3.341632218s ago: executing program 3 (id=1343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_SMC_GEN_NETLINK(&(0x7f0000000340), 0xffffffffffffffff) socket(0xa, 0x2, 0x88) socket(0x29, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) bind$auto(0x7, &(0x7f0000000000)={0x11, @sockaddr_1_1}, 0x3e) sendmsg$auto_SMC_NETLINK_ADD_UEID(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8000) 3.119261466s ago: executing program 2 (id=1344): mmap$auto(0x800000, 0x9, 0x2d, 0xeb5, 0x401, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) (async) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/mnt\x00') (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/mnt\x00') mprotect$auto(0x800, 0x8d, 0x401) (async) mprotect$auto(0x800, 0x8d, 0x401) mknod$auto(&(0x7f0000000240)='\x00', 0x7, 0x1) getdents64$auto(0x0, 0xfffffffffffffffc, 0x131) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r1) mprotect$auto(0x6, 0x4, 0x6) (async) mprotect$auto(0x6, 0x4, 0x6) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) sendmsg$auto_NL80211_CMD_STOP_AP(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000327bd7000fddbdf25018dd66a7bda0000000400470108006be5922a4188f32403b7a8d311c9"], 0x34}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24f20000", @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf2502000000080003005e000000080001008d6f0000"], 0x24}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) 3.053545693s ago: executing program 3 (id=1345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf2502000000110004"], 0x28}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x100000000000000, 0x24048042}, 0x40004) 2.75780082s ago: executing program 2 (id=1346): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) ioctl$NS_GET_PARENT(r1, 0xff08, 0x0) socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="41002dbd700203000000000000000c000000009e000000ff"], 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x80000001, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x24, 0x0, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa3f, 0x400, 0x8000) getcpu$auto(0xfffffffffffffffe, 0xfffffffffffffffe, 0xfffffffffffffffe) setreuid$auto(0x3, 0x7) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) fspick$auto(0x6a, &(0x7f0000000000)='\'-q\\)^+!)/-:{\x00', 0xe) io_setup$auto(0x10, 0xfffffffffffffffd) madvise$auto(0x0, 0x3, 0x15) 2.757348225s ago: executing program 3 (id=1347): socket(0x2, 0x1, 0x0) setreuid$auto(0x3, 0x7) clock_gettime$auto(0x1, 0x0) setresuid$auto(0x0, 0x8, 0x8000) setfsuid$auto(0x8000000000000000) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) prlimit64$auto(0x0, 0x8, &(0x7f0000002740)={0xe2, 0xfffffffffffffffd}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x2, 0x697b}, 0xed7138c}, 0x9a6, 0x0) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) setsockopt$auto(0x400005, 0x1, 0x5, &(0x7f0000000080)='\x10\x81\x90\xcb\x91\x1b[?\fF\xf6\x15\x83i\xe5\xd2\xd3\x14\x96md\x9f4\xbaD\xfe\x8e^\xc0O\xd0\xc5\xe2\xa2\x88\"\t\xf1\x8c\xee\xf6\xcc\x8dFW\x91\xce\xf7nW\'Q\x9e\xde)\x8b\xe9\xe2\x89\x03\xc3\xf4\x12\xde\x1a\xbaQ\xaf\xd7\vA]\xb9\x84T\xbd\x1d\xb0\xbb\r\x7f\xce\xd4[H\xce\xb0|\xe8\xf4e\xa2\x9c\x91\xb8\x84\xbb\xd5\xfe\x18 \xd6\x12\xd0\xb7*\xd6\x12!\xbb}r\x93|\'\x81\xa0QM\x01\xfa|[\xd8\xa2\\\xd9n\xaf', 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) socket(0x1d, 0x2, 0x7) getsockname$auto(0x6, &(0x7f0000000100)={0x3, @sockaddr_1_1}, &(0x7f0000000180)=0x3) symlink$auto(&(0x7f0000000080)='\xe6\'\xd4\v{T+\xac', &(0x7f0000000000)='\'--[[\x14+\\\x00') mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) socket(0x2, 0x5, 0x0) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) open(&(0x7f0000000000)='./file1\x00', 0x10677d, 0x37e5c9853cd1b999) 2.59882664s ago: executing program 0 (id=1348): bpf$auto(0xb, 0x0, 0x504) (async) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x800) (async) sendmsg$auto_NL802154_CMD_STOP_BEACONS(0xffffffffffffffff, 0x0, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) syz_open_procfs$namespace(0x0, 0x0) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (rerun: 64) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x1, 0x8000000000008000) (async) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) r0 = socket(0x26, 0x5, 0xfffffffd) (rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pimreg1\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) (rerun: 32) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="03000000", @ANYRES16=r2, @ANYBLOB="00082abd7000fbdbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="ca0003002c9f9c793ef8e3cd67004fc24c6f1f8ee742af7c4266ca751704f6e96f18deb16140e9f69f7cf4bce052cd96b3a99835e280ec2a5c96d518bb187a4710d3d16e3a8a0708c48aca28e645c8555319b6c1646529451483573e366491dad8135c7033e51d24f5a9dcfb0b0c20a5c98b4399d9fa475a33d83d812d8a485193902995544ea37b8e61f886e0d85814f1d4d4b3f35d6253aac3743da39e8fdd37e56711bfae1d7a105a7038c08ca687723541fb93d0aa3b90d1c0a972fe8556b03839ca3b92f1f48a0500008e000300a96a307725052ec13fdaeeab46276033b01bd3709534ff86638df72ebf3fe3dada3067222a039a66a5d177dacd30a97edc6f0674e51c9c222742192f32d6f27a5dc01e25ba3221ada72860d18f4bec3ff740d809d7d1bff2f28b3f9115687aaa86db72497c7287e21098bcdcd63e43016b24603c4c9c1da9f69bef8949b3f32310d36ce875159e59f4de000008000100", @ANYRES32=r4, @ANYBLOB], 0x180}, 0x1, 0x0, 0x0, 0xc001}, 0x8010) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) clone3$auto(&(0x7f0000000000)={0x3ffffffff, 0x4, 0x63, 0x3, 0x6, 0x0, 0x7, 0x8, 0x8fa1, 0x1, 0x3}, 0x294) (async) mmap$auto(0x0, 0x2030009, 0x3, 0x100000000eb1, 0xfffffff7fffffff7, 0x8000) (async) sendmmsg$auto(0xc0, &(0x7f0000000000)={{0x0, 0x22, 0x0, 0xa, 0x0, 0x989, 0x8}, 0x3}, 0x9a6, 0xfffffffe) close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 64) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) (async, rerun: 64) close_range$auto(0x2, 0x8000, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0xc, 0x0, 0x0) (async, rerun: 64) io_uring_setup$auto(0x3ff, 0x0) (rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x58, 0x5, 0x0, 0xfffffffffffffffc, 0x6) (async) mmap$auto(0x2000, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) clone$auto(0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x0, 0x3) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) 2.508517969s ago: executing program 0 (id=1349): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x200009, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x20200, 0x15) memfd_create$auto(0xfffffffffffffffe, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) fcntl$auto(0x1, 0x2, 0x1) mlockall$auto(0x8000000000000001) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mprotect$auto(0x1ffff000, 0x810002, 0x5) mmap$auto(0xab, 0x7ff, 0x5, 0x19, 0x2, 0x5) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x21, 0x0, 0x28) 2.109913622s ago: executing program 3 (id=1350): socket(0xa, 0x5, 0x0) iopl$auto(0x3) shutdown$auto(0x200000003, 0x2) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0x0, 0x9, 0xfffffffffffffffc, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000000, 0xc, 0x3, 0x200000201, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) 1.697600396s ago: executing program 3 (id=1351): mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x10, 0x2, 0xc) stat$auto(&(0x7f0000000280)='\x00', &(0x7f0000000400)={0x38d, 0x0, 0x5, 0x2, 0x1ff, 0xfe723fa, 0x0, 0x1, 0x3, 0x3, 0x6, 0x2, 0x6, 0x2, 0xff, 0x3, 0x4, [0x0, 0x4, 0xd]}) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001340)={0x18, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000006e47055b5371137", @ANYRES16=r1, @ANYBLOB="000128bd7000fbdbdf250a000007"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) exit$auto(0x9c) mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) socket(0xa, 0x801, 0x106) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) recvfrom$auto(0x4, &(0x7f0000000300)="cdd727a7860dc379dc4b391812a8fe62206ad7bb20781c842e4dc8328f9c8599ee35b9f13b85ce63e5aff3bfbf4da29f547fbf0897dcff6c1a2db24d66d9414c0fddf9094cd8282d87fe0999a467f01953585bcb9479c48f3ec56d07533aa2d11459bf5438dd69e22403a2873d6a06fb24051286d3d8e8f07f94e9dad83a6bc68f5aa978f6ed8a860503e91a93ac45aaab01bf06cb197e27ba939c9f4484208324b32e781cc78e75906773fdd9922ab7bdde1b54672dafe50be5e696832feebd3d8f97a3c01ba42406c517241586", 0x101, 0x7fffffff, &(0x7f0000000040)={0x9, @sockaddr_1_1={"dbdac97207187fde33a3efa452087c32904cd38b8e399ddc3518fda2cd0460dfe37c2166d2b87ffa54dfcb9ff3d6625311bb7d680ac33580e828d98b3a72f06a"}}, &(0x7f0000000240)=0xfffffffa) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x8) close_range$auto(0x2, 0x8000, 0x0) io_uring_register$auto(0x2, 0xc, 0x0, 0x0) 1.484951407s ago: executing program 1 (id=1352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf2502000000110004"], 0x28}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) r3 = syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x18, r4, 0x1d7366850c91a5b5, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET0(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080) r5 = syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="5cb04505669709e465251500000adb"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r7 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0xff}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048042}, 0x40004) 1.299944697s ago: executing program 1 (id=1353): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2b, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x894b, &(0x7f00000002c0)={'bond0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r3, 0x0, 0x0) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r4, 0xf01, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c180) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d80), r3) syz_genetlink_get_family_id$auto_nl802154(0x0, r3) r5 = syz_genetlink_get_family_id$auto_NET_DM(&(0x7f00000020c0), r3) sendmsg$auto_NET_DM_CMD_START(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002100)={0x14, r5, 0x994a518a447e21f5, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x20048000) sendmsg$auto_NET_DM_CMD_STOP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NET_DM_ATTR_ALERT_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc000) (async) sendmsg$auto_NET_DM_CMD_STOP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NET_DM_ATTR_ALERT_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc000) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01032bbd70002526000009"], 0x14}, 0x1, 0x0, 0x0, 0x7}, 0x4010) signalfd$auto(0xc1, &(0x7f0000000000)={0x3}, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) (async) socket(0xa, 0x3, 0x6) getsockopt$auto(0x9, 0x3a, 0x80000007, 0xfffffffffffffffe, 0x0) 1.201707983s ago: executing program 3 (id=1354): close_range$auto(0x0, 0xe903, 0x2) (async, rerun: 64) open(0x0, 0x103c40, 0x50) (rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x29d, 0x7, @old_map_fd=0x3ff}, 0xa3) r0 = syz_genetlink_get_family_id$auto_ila(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="0c0003000300000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x10) (async) socket(0x2b, 0x1, 0x1) (async) getsockopt$auto(0x4, 0x6, 0x15, 0xfffffffffffffffe, 0x0) socket(0xf, 0x5, 0x0) (async) munmap$auto(0x7fffffff, 0x5) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') (async, rerun: 32) socket(0x11, 0x80003, 0x300) (async, rerun: 32) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) ioctl$auto(0x1, 0x541b, 0x8) (async, rerun: 64) mount_setattr$auto(0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x20) (async) socket(0x1d, 0x2, 0x2) (async, rerun: 64) keyctl$auto(0x40, 0x8, 0x4, 0xfff, 0x7fffffffffffffff) (async, rerun: 64) setitimer$auto(0x3, &(0x7f00000001c0)={{0x6, 0x7}, {0x6}}, &(0x7f0000000280)={{0xfffffffffffffffd, 0xfffffffffffffff9}, {0xb, 0xfe77}}) get_mempolicy$auto(&(0x7f0000000100)=0xfffff48a, &(0x7f0000000140)=0x5, 0x200, 0x100, 0x9) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xb, 0xffffffffffffffff, 0x0) 1.172093639s ago: executing program 2 (id=1355): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x2800010000000028, 0x80000000000005, 0x5, 0xbb, 0x80000000) fallocate$auto(0x400, 0x800, 0x800000001, 0x1ff) socket(0x10, 0x2, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000ac0), r0) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) writev$auto(0x5, &(0x7f0000000100)={&(0x7f0000000040), 0x4}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) setpgid$auto(0x100000000, 0x1) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x3800000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') pidfd_send_signal$auto(0x1, 0xfffff495, 0x0, 0x4) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) 1.126635476s ago: executing program 1 (id=1356): mmap$auto(0xfffffffffffffffd, 0x8000e983, 0xe, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 32) mprotect$auto(0x0, 0x4, 0x4) (async, rerun: 32) read$auto(0x4, 0x0, 0xfdef) (async, rerun: 64) write$auto(0x3, 0x0, 0x10001) (rerun: 64) 665.647215ms ago: executing program 2 (id=1357): ioperm$auto(0x7, 0x6, 0x2) mq_timedreceive$auto(0x2, 0xfffffffffffffffc, 0xffffffffffff0001, 0xfffffffffffffffc, 0xfffffffffffffffc) r0 = socket(0xa, 0x3, 0x73) fanotify_init$auto(0x5, 0x2000000000002) open(0x0, 0x4242, 0xe1d2b27bdc14aa16) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) socket(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x5, 0x0, 0x9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf25030000000a000500a9085797e76b0000060006000300000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) kcmp$auto(0x1, 0x0, 0x1000, 0x0, 0x1) socket(0x26, 0x4, 0x3a) mmap$auto(0x7fffffffffffffff, 0xfffffffffffff28c, 0x2000000000003, 0xeb1, 0xb000000000000, 0xfffffffffffffffe) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x1000, &(0x7f0000000180)={[0x5, 0x400, 0x7f, 0x9, 0x8, 0x5, 0x6, 0xac9b, 0x101, 0x5, 0x7, 0x2, 0x0, 0x101, 0x6, 0xca0]}, &(0x7f0000000200)={[0x8, 0x0, 0x401, 0x8, 0xfff, 0x7fffffffffffffff, 0x2, 0x49, 0x0, 0x1, 0x4, 0x40000008, 0xfffffffffffff11b, 0xffffffffffffffff, 0x7fff, 0x7]}, &(0x7f0000000280)={[0x7, 0x38, 0xffffffffffffffff, 0xa, 0x4, 0x8, 0x18000000, 0x2, 0x2, 0x100, 0x100000000000000e, 0x1, 0x1, 0x7, 0x101, 0x2]}, &(0x7f0000000300)={0x4, 0xe}) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x8) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="5474c3cf", @ANYRES16=r2, @ANYBLOB="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"], 0x18c}}, 0x4001) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000e5f75792be45a61af09a342acdc9d934d373e88eb069", @ANYRES16=r4, @ANYBLOB="01032bbd7000ffdbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x40003}, 0x4010) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 500.763796ms ago: executing program 0 (id=1358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x80000000}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40800) r2 = syz_genetlink_get_family_id$auto_MAC802154_HWSIM(&(0x7f0000000180), r0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x184, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x87, 0x3, "687f335d1e3b7ecca6d3b3f86241e25c935d97450a3b70c9ce938da59eef95d8a8c2bfbad440112b3614e31e959bdd3916462ebe99f95ae9615852531184854b56ad58ea0cfbba7c0730e867a3d1438bdbf6a306789458f2e18e353341a95d2ccfa3fb12fb1ac4d0e1f7be12b53a5bb111531bc16898f7c623dccd42ad4c5323d1c46a"}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x4}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0xdc, 0x3, "5305ce645d84654d2eb631a8d59ac327a2beba3e6b386c7df4b74df33aa11502a840c92793d5ba5ae98dfc39b1eae1f21dc78510ffa82f51a9bb0f8527fcc9bdf211d3f7089b6a439323f7dab5efa696c7d18ebb108bdbdb4001a5a0aa0f03ceb317d1a4659b95ad145ecc4ac3f8507b59d90e431b2d0d8e58ab0f0d6f2e9056005a4dec1eaf590ee6d885c45892ddde0ed8ab6ed07b77fabfd81307f50ceed7ae1ed84c88c3a2742e1f7cdaef0686fb7da11ad7fe0d51422ef3e0e2c6071669ad2ad52fcee66a461e31817ad2bb76b87e7517a0fe2aaa66"}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x8}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000080}, 0x8055) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000400), r3) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000ac0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000480)={0x5f0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_MBSSID_ELEMS={0x8b, 0x133, "bfb0bb0c763884b3441ce9a4d46ca4c1fde0818e11068147d389afdc604af8142551fbf3a8c69bf71dc1e49d67086b3d6433b1f773b59ed88f4ad3247b8a46a740a9c8f0e5aead77ccb378ad1472a4d30cb361804b690f6eea4a5a8b9da40b8ed099a69761d603d5707bf93670ada068f9abf1da67eb56b83a99d22c5d324d0a6536edf1e579dc"}, @NL80211_ATTR_IE={0x540, 0x2a, "aa3a9a74354f678fed7e3b2b358b649f27307f496c1e6d3de5b0ec7696ca3471213c6f829309a0da18855faea19b83599b052c0ea92995774f73ac78862e610d7b9d0d355eaf1e7bfdb36b91ba57774d5c0708c8c8254c1fce2a2d752611ae0dc50ee0c21ea7d68f147d6bd40e32ba538f6a20c8f6813e70edc8ca494d13b95e9219d5ee67ecb44cd348dbe7dba4e340a4113ff297cf824ba796497cca7904f41fb26f0fdef72d5ab17cea3b896aad66b09b8f0eefc07d9ab16795825ba71b8325b1ebd4ccbfcb9a9d530e9385076925fe80af4cb50721f578133d9d612c300340a13be4f772e125ce5351c954087a8bdbaef7515700e7d619e70f3af41f197ce1a6184b0f73b63d0cbaf3acabf84addd82235594c48565c9bdb55ea4a0dd7ec62caa5ae69e9f95c446cac6918b1a1327f737f9e7674ec67e12eef0cd876ca523f064c4b402aa36833c62c2bee9ece60382604c90f48feae21503f34359faa67bb7a3c1352e875612f0baab27ad899f2225e409111a5aed76977c859007dc2c4c5210c1975062ee1d9da7302075416c214d597f6d7aea9bf5a37338e631604cf859cf86d80a4e8721e6bab070e15d67add1bad3b182b5e5e7261ba588bd59b894379bab4cd3a803f8ba7afdad75cb4cf0be561a6e043f84f4de270f8385a730de6fb6031dac70da23c4b9cec7ac276281865f237d8a0397d1dec153567bb10e6c93fe2a849cab686afa832e25f6faa5f23224fe13cf42163b5d96d6b59c06aefb0e4d697da97b166cb8626b075e8b2e37a33634b45cbbffc32b4e7a5a0885e429b781f7079dd5f43201bc8c13936a8185ca53c393c25a4807cd19a7908fafb799ad29a391977d7ec2c5d7c74c0993ed2983ac4a932c0265b121b81417cae4abb2f92e0d49bb17fc75dc92569f583d75dc9f22fb5420b7d7e558653fa3068629160220af6a6f629a672c5c8ede5da6361d68e65c093cdc3b79c4be0d119bd229b88bddecce3efbb72dcdd36c88b45282af36442b0360caa6e0755f1fcee91bb46e9e1d3c992958fcb9828c94c9c1b9a181f26eef7005c13b53986c767667fb796db8875d12f05fbebfa07279f9f1422c081584dd169c66568ed442a8d897bf3cf110ff61ba0078fbfb7c46df272c3e5696f60318c9efc8d2a79082487dca5ebf285b6175bbe27f08d50837e3bad1b1439f192ca767161b4782b2f56bce152b28abe75f14cadf363b03a6f7d457153d7d39cd02ce6816fd473c88247c6829885a09c3de82d922c1d6ac7be8599f31ee0c92eaf315648871960f54cd6fee0bfd61763153d6fe0e673b04481b24198ffc89ab764eb1a3ea5a44bf7b2fafe8c90421edb13a1b8a9092ff3c347fd5baab2b045fac84fef7292c725eaa53636464d09ee4bff7db8b664ed84497b58f8500453cf1c80d8ab773b54ea03cbb72d62a1eb1fb517936f9be9cf3120e58ed67c3cf994b188c38efd8d646d4db460b3743a9d663a3c0c1b0cea05f1109c1f02ea3e4affb473b5d75f9857dca227bda54ce6d0cb64d0910c53ac9fc97616f59e4a53ce035877edf0fbf8a40e7a65b9e5f7be01dd79d43b134128e764215d11b62c8bb2d6ad0d562d40cf57198aa8dad705dc4288b87267077e33d69ff9ee32bdaf357b00d300882df85129501fae63262252617c424e20aa34a8ca397cbe0d103489d732bca04f7a948467ef81defbba3c9479636c529d04911691d1a97327ba97cb63da599fbcd478cf64410e44897a09f46de0d8da9deaa1f15924ee0f0e2bba1daad3e07ab5c0c334e2420b9c758861b296b3f126777fa2a1e2c7afcbb89d07c503c2ad1ad8263c5fa06b7d01b7a7949fd881529055a67db800414b837debf99d6591ca7cec4227b7580d4701990d"}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}]}, 0x5f0}}, 0x24044884) r5 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000b40), r0) sendmsg$auto_TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000e00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x204, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x59, 0x9, "e9df79d49dea1141368c530e0cc4920be920f669d37bef63e71396a7adecfc6ef835a25eff246d0d1367153399381f74668a5953f13aaa521d6b001742cd4f0096392cff94de7c99eabd9c8f0931e571ba524f70c4"}, @TIPC_NLA_NODE={0x12, 0x6, "e81ee996a737e527c4bede0e882a"}, @TIPC_NLA_PUBL={0xba, 0x3, "2447edda7aa9ca452d49e4ded54fd381306b5263b37b5c615945e5d24aa280c83945deebe682b9c438038cb1914834a3a7153ca1889ffae912e674a1b4b933b484c1d966bbbd99d6fcac06b30785c1637b389781bdde14fa9716969b324f5c45aa5a643054765579939881b9bf42e3b28fe098a172c84dd5d97b200f379b7b898f8dac30369b9de8336bb6aa827af552b1a2d5d4669dbcc061319e8178a5dc573ffaf75adf8d83e2d0431405274a2006baf24d41537b"}, @TIPC_NLA_MON={0xc4, 0x9, "a4fddb2dcbc511bf4a39d72a49509c20879ba0b7524a05834785aee9dfce1e3f00a070c6a129e658db63ba01cefb66ffeab0b3668d3cf4cf0d7ed44278c3c2f1af37987e1b0e276706bf791aa2018db9a0b6e2d3ccb618964ea264611090243d7e92234b5094ad61a83cf56656c725bdade78c21b99269cdfaf5ae73e1e3d66c2b4608f8d88a57473efe285b9ca89a66c82b38d55567898932745aa19cff6eb3cedfacfec21ba415837485a9997098e92b88f6dafeab9bafb3d2624e17f8294b"}]}, 0x204}, 0x1, 0x0, 0x0, 0x4014}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000e80), r0) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000001040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000001000)={&(0x7f0000000ec0)={0x11c, r7, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xf3, 0x2b, "b7e68672158f03850986a0a3c2b09aada1be94128408cfd52b5ce7c5b080a3baf6c575fc385b4f750caf42bf4fae325da2896d372a8b596a9e9b34067750b085662b2c862e0a16c152d9d55639570f6b87894cb67e7c903c7f4ce124e28ac1adf687b98f501364b5c6dfccfedc0ce1da9109e4990416f2bf8a15dcaf2fbdb11c051d0cb085e9f6b34309e25d1c43410333fdb987ea80dd4402a160dc6a157f5790e0d6dfee7f42e28bab502f1fdc9682316d979b51a3a9ba936b4f2c20a689767e9df5e8c7ef0064bacb2768a9515a386f3680f10ad6e5622dbfad88975094390326dd90f158e50d79ac066c2db253"}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x10000}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x1}]}, 0x11c}}, 0x20044010) pselect6$auto(0x3, &(0x7f0000001080)={[0x3, 0x9, 0xfffffffffffffffd, 0x4, 0x4, 0x3, 0xd, 0xb3b2, 0x80, 0xf0, 0x100000000, 0xfffffffffffffffd, 0x3, 0x2708, 0xb30, 0x2]}, &(0x7f0000001100)={[0xfffffffffffffff9, 0xfffffffffffffc71, 0x0, 0x2e, 0x0, 0x8001, 0x536a, 0x4, 0x7fffffffffffffff, 0x9, 0x7, 0x2, 0xea21, 0x10001, 0x3, 0x9]}, &(0x7f0000001180)={[0x4, 0x7f, 0xfffffffffffffffa, 0x1000, 0x4, 0x0, 0x1, 0x4, 0xfffffffffffffff8, 0x2, 0x401, 0x0, 0x4f, 0x0, 0x1, 0x8]}, &(0x7f0000001200)={0x1}, &(0x7f0000001240)="3841401e4cd8083dd9014958b5d7662df7a59406962e44ae2763497a937ec4efe6fabe288cb0cb5d8ac659a178c8e246b06a06da503324fe9753d93bec7b158548f7") sendmsg$auto_TIPC_NL_PEER_REMOVE(r6, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, r5, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x40811) setuid$auto(0x101) sched_rr_get_interval$auto(0x0, &(0x7f00000013c0)={0x4}) r8 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000001440), r6) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r3, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x5c, r8, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x1}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x100}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0xa}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x6}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x800}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x7}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x2e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)={0xd4, r7, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_SEC_KEY={0xae, 0x30, "afec5e34b59920062af694596a9cc9387fdd31e36732e901671d54e07b92988c1fd27a033b282ebb3b98981ecfd61e39d6a04e545a2f7d14f1507bf092bda2e6b7d7ac9713ddbe7fd609ea092070731d3109921e1f7fbfaf2163f29aa1dca5e8306ad15c2a94b341532740fd4c277c3eb10ed2333236e48aef602f8c40c27456d1001a28effcfa0daaf4537fb8b54a28cd0ee7d319da97e82b5ca2fc5fff9535536137ff85dd7bb5ed38"}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x68f}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x51) r10 = syz_genetlink_get_family_id$auto_NLBL_UNLBL(&(0x7f0000001780), r9) sendmsg$auto_NLBL_UNLABEL_C_LIST(r9, &(0x7f0000001840)={&(0x7f0000001740), 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x3c, r10, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0xa, 0x6, 'IOAM6\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, {0x6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, {@u6_addr8="214ce37aa386b881178c308055405940"}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) open(&(0x7f0000001880)='./file0\x00', 0xc000, 0x108) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001900), r3) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)={0xc0, r11, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_EHT_CAPABILITY={0xab, 0x136, "4896fd6cec4ce8a6ec6ed90aea66e7f7f12ef58cda7f32dd735cc43f0a2eb04a30151fa9f5a7d5b1f7701baa1760a2ba5232494b8541727641820d71f736649ae37f4e71676c7cc8132c98976a99f48dc5be624b6fadf18773b09a69b1e14b3b70e3d72d1bb4d4d056cf145ade9fa059d3fe7fc8525bc678c1251b19d190d6ae88114eb576a4d8d43d6843113efde408d9c718d14b8a815e409e95773625936e9e11c1dbdbc9d7"}]}, 0xc0}}, 0xd1) sendmsg$auto_NL80211_CMD_REMOVE_LINK(r6, &(0x7f0000001cc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001ac0)={0x188, r11, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_SAE_PASSWORD={0x4}, @NL80211_ATTR_PREV_BSSID={0xb5, 0x4f, "4f8b987d57e6bc69ab3a66b57d2b9c6d4c988610b5afd39651c84e588a3f1cd35a1e70a9ecbb49dfbf1c6448568e809735e083b0dd1f6e31a3d47b21464593eb67cac03ac3bc1f037281b69828095097d86b0f8b982d9fed55c5c4443fc7249a2ab9bcc243b23d1b1eef4c1b996326c997a06c721d7ba6d9b7a8c0da3efded0b59458fed1600e7f605b256310da5cd9532180875a6950e4ed1cf833f482edd1a37fdea92b5f048fc501905a76606a46b0a"}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x9e, 0x2c, "2e47d9df7f0e37e6c5cc7ee666b35b64933d76cb41eb2e677731ad0cc720c5a55b39563007aca0bbcda36cc1ba095964a1d5ac1d7554c736d6e869e5d0c7532e80d05f40547da27b453b676294d32c83cb85a2990f65e5e92bd73d2d62b424dba5624d1fd1d9b89c4b2388b49c39734b8bfb0daa9215d63ffc218b347ac4b234d8fb5ec74b097e238475f1f68346441975fe1596de84ba501ebf"}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}]}, 0x188}, 0x1, 0x0, 0x0, 0x4091}, 0x40000) setpgid$auto(0x8, 0x8) sendmsg$auto_IPVS_CMD_GET_CONFIG(r0, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x3c, r4, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, "bd3efb7e57e4b3915a306948de6220b93fd92c2be1b8462608314f4ddc270448d29bb9d1"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x100}, 0x40000) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1000}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x5}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040004}, 0xc000) 466.946176ms ago: executing program 1 (id=1359): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) ioctl$NS_GET_PARENT(r0, 0xff07, 0x0) socket(0x2, 0x5, 0x0) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000140)={0x2, @sockaddr_1_1={"e3b2de"}}, 0x7f) (fail_nth: 12) 241.831566ms ago: executing program 1 (id=1360): mmap$auto(0x6, 0x20007, 0x80000000000000e3, 0x10004000eb1, 0x8, 0x8000) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) remap_file_pages$auto(0xfffffffffffffff7, 0x2, 0x0, 0x58, 0x5) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8, 0x7) close_range$auto(0x7, 0xfffffffffffffff8, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x4081000009, 0x3, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) utimes$auto(0xfffffffffffffffc, 0x0) timer_create$auto(0xfffffff9, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) readlink$auto(&(0x7f0000000c80)='\x00', 0x0, 0x7) timer_settime$auto(0x5, 0xffff8000, &(0x7f0000000040)={{0xf, 0x7}, {0x9}}, 0x0) close_range$auto(0x2, 0x8, 0x0) 616.41µs ago: executing program 0 (id=1361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf2502000000110004"], 0x28}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) r3 = syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x18, r4, 0x1d7366850c91a5b5, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET0(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080) r5 = syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="5cb04505669709e465251500000adb"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r7 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0xff}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048042}, 0x40004) 0s ago: executing program 2 (id=1362): pwrite64$auto(0x8000000000000000, 0xfffffffffffffffd, 0x0, 0x2e2) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mmap$auto(0x0, 0x400000, 0x401, 0x1c, 0x2, 0x8000) clone$auto(0x7fff, 0x0, &(0x7f0000000580)=0x3, 0x0, 0x9) exit$auto(0x3) mmap$auto(0x4, 0xdf, 0xf, 0x14, 0xefd, 0x1d3) ioperm$auto(0x800, 0x5, 0xd) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x5, 0x2, 0x2000000000000, 0x3b, 0x6, 0xa) semop$auto(0x8001, 0x0, 0x3) kernel console output (not intermixed with test programs): 78.540868][ T5809] svc: failed to register nfsdv3 RPC service (errno 111). [ 78.543183][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.549632][ T5809] svc: failed to register nfsaclv3 RPC service (errno 111). [ 78.638694][ T54] bridge_slave_0: left allmulticast mode [ 78.657136][ T54] bridge_slave_0: left promiscuous mode [ 78.674535][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.503045][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.523814][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.538851][ T54] bond0 (unregistering): Released all slaves [ 80.376161][ T5238] Bluetooth: hci3: command tx timeout [ 80.508663][ T54] hsr_slave_0: left promiscuous mode [ 80.540730][ T54] hsr_slave_1: left promiscuous mode [ 80.559943][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.579060][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.615643][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.642282][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.785807][ T54] veth1_macvtap: left promiscuous mode [ 80.810345][ T54] veth0_macvtap: left promiscuous mode [ 80.822483][ T54] veth1_vlan: left promiscuous mode [ 80.836377][ T54] veth0_vlan: left promiscuous mode [ 81.718888][ T54] team0 (unregistering): Port device team_slave_1 removed [ 81.773900][ T54] team0 (unregistering): Port device team_slave_0 removed [ 82.454106][ T5238] Bluetooth: hci3: command tx timeout [ 82.466992][ T5888] syz.3.140 (5888): attempted to duplicate a private mapping with mremap. This is not supported. [ 82.742776][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 83.442524][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.453568][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.473632][ T5803] bridge_slave_0: entered allmulticast mode [ 83.480859][ T5803] bridge_slave_0: entered promiscuous mode [ 83.505139][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.512253][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.559552][ T5803] bridge_slave_1: entered allmulticast mode [ 83.574547][ T5803] bridge_slave_1: entered promiscuous mode [ 83.762072][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.826445][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.997591][ T5803] team0: Port device team_slave_0 added [ 84.042291][ T5803] team0: Port device team_slave_1 added [ 84.244418][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.251404][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.315827][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.354797][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.362175][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.433521][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.535108][ T5238] Bluetooth: hci3: command tx timeout [ 85.016713][ T5803] hsr_slave_0: entered promiscuous mode [ 85.078503][ T5803] hsr_slave_1: entered promiscuous mode [ 86.614885][ T5238] Bluetooth: hci3: command tx timeout [ 88.038976][ T6002] kernel read not supported for file /)-\&[} (pid: 6002 comm: syz.3.161) [ 88.086219][ T29] audit: type=1800 audit(8277292049.430:2): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.161" name=FF292D5C265B7D dev="mqueue" ino=9831 res=0 errno=0 [ 88.453365][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.559430][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.601500][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.694018][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.908886][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.932808][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.973266][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.980433][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.990789][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.997935][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.071450][ T5803] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.103418][ T5803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.527308][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.662618][ T5803] veth0_vlan: entered promiscuous mode [ 89.702980][ T5803] veth1_vlan: entered promiscuous mode [ 89.817287][ T5803] veth0_macvtap: entered promiscuous mode [ 89.848688][ T5803] veth1_macvtap: entered promiscuous mode [ 89.907787][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.943508][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.983494][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.026171][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.049459][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.071069][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.104374][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.184042][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.249096][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.288068][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.315602][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.351254][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.383664][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.415275][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.475109][ T5803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.513648][ T5803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.563616][ T5803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.572363][ T5803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.947282][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.984679][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.123111][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.220963][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.706806][ T54] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.958911][ T54] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.218889][ T54] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.446036][ T54] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.226433][ T54] bridge_slave_1: left allmulticast mode [ 94.232142][ T54] bridge_slave_1: left promiscuous mode [ 94.265640][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.355097][ T54] bridge_slave_0: left allmulticast mode [ 94.360792][ T54] bridge_slave_0: left promiscuous mode [ 94.397433][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.993286][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.006748][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.015392][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.025001][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.033617][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.041148][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.294344][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.424567][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.504332][ T54] bond0 (unregistering): Released all slaves [ 98.273417][ T54] hsr_slave_0: left promiscuous mode [ 98.304705][ T5236] Bluetooth: hci2: command tx timeout [ 98.346667][ T54] hsr_slave_1: left promiscuous mode [ 98.358818][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.367748][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.458492][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.472149][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.558952][ T54] veth1_macvtap: left promiscuous mode [ 98.583612][ T54] veth0_macvtap: left promiscuous mode [ 98.602806][ T54] veth1_vlan: left promiscuous mode [ 98.633593][ T54] veth0_vlan: left promiscuous mode [ 98.754732][ T6330] netlink: 5 bytes leftover after parsing attributes in process `syz.2.205'. [ 98.951280][ T5236] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 99.582923][ T54] team0 (unregistering): Port device team_slave_1 removed [ 99.717929][ T54] team0 (unregistering): Port device team_slave_0 removed [ 100.377610][ T5236] Bluetooth: hci2: command tx timeout [ 100.712536][ T6217] chnl_net:caif_netlink_parms(): no params data found [ 101.186131][ T6217] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.193260][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.240372][ T6217] bridge_slave_0: entered allmulticast mode [ 101.259532][ T6217] bridge_slave_0: entered promiscuous mode [ 101.288501][ T6217] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.343776][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.358597][ T6217] bridge_slave_1: entered allmulticast mode [ 101.388219][ T6217] bridge_slave_1: entered promiscuous mode [ 101.591830][ T6217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.624756][ T6217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.754335][ T6217] team0: Port device team_slave_0 added [ 101.812761][ T6217] team0: Port device team_slave_1 added [ 102.054966][ T6217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.061951][ T6217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.104062][ T6217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.117951][ T6217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.125119][ T6217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.167189][ T6217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.423668][ T6217] hsr_slave_0: entered promiscuous mode [ 102.453864][ T5236] Bluetooth: hci2: command tx timeout [ 102.462131][ T6217] hsr_slave_1: entered promiscuous mode [ 102.477020][ T6217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.510588][ T6217] Cannot create hsr debugfs directory [ 102.896271][ T6442] ptrace attach of "./syz-executor exec"[5226] was attempted by "./syz-executor exec"[6442] [ 104.533818][ T5236] Bluetooth: hci2: command tx timeout [ 105.711818][ T6217] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.783034][ T6217] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.860986][ T6217] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.936593][ T6217] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.211509][ T6217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.277133][ T6217] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.335006][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.342137][ T6522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.394904][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.402044][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.523406][ T6217] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.555719][ T6217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.977005][ T6217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.102527][ T6217] veth0_vlan: entered promiscuous mode [ 107.153637][ T6217] veth1_vlan: entered promiscuous mode [ 107.221522][ T6217] veth0_macvtap: entered promiscuous mode [ 107.269838][ T6217] veth1_macvtap: entered promiscuous mode [ 107.321482][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.352541][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.383593][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.425877][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.453499][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.473796][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.515190][ T6217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.559543][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.600456][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.628845][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.669555][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.706055][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.743489][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.775137][ T6217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.825905][ T6217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.849312][ T6217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.872674][ T6217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.892932][ T6217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.220444][ T6522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.246260][ T6522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.326643][ T6524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.361613][ T6524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.307928][ T6609] svc: failed to register nfsdv3 RPC service (errno 111). [ 109.626500][ T6609] svc: failed to register nfsaclv3 RPC service (errno 111). [ 111.942506][ T29] audit: type=1326 audit(8277292073.270:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.1.262" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f285cd7dff9 code=0x0 [ 125.173415][ T6909] syz.0.307 (6909) used greatest stack depth: 20352 bytes left [ 128.595632][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 131.384251][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'. [ 133.114037][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.120372][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.101141][ T6521] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.464593][ T6521] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.561718][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.571362][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.580038][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.589084][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.597169][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 138.604858][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.995104][ T6521] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.227876][ T6521] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.825598][ T6521] bridge_slave_1: left allmulticast mode [ 139.831295][ T6521] bridge_slave_1: left promiscuous mode [ 139.899647][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.005969][ T6521] bridge_slave_0: left allmulticast mode [ 140.011660][ T6521] bridge_slave_0: left promiscuous mode [ 140.064439][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.695827][ T5238] Bluetooth: hci0: command tx timeout [ 142.074761][ T6521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.111198][ T6521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.135318][ T6521] bond0 (unregistering): Released all slaves [ 142.160503][ T7023] chnl_net:caif_netlink_parms(): no params data found [ 142.238128][ T6521] HSR: left promiscuous mode [ 142.773768][ T5238] Bluetooth: hci0: command tx timeout [ 143.381161][ T7023] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.388461][ T7023] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.433669][ T7023] bridge_slave_0: entered allmulticast mode [ 143.440719][ T7023] bridge_slave_0: entered promiscuous mode [ 143.828305][ T7023] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.843616][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.851008][ T7023] bridge_slave_1: entered allmulticast mode [ 143.904889][ T7023] bridge_slave_1: entered promiscuous mode [ 144.387519][ T7023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.630025][ T7023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.853947][ T5238] Bluetooth: hci0: command tx timeout [ 145.670815][ T7113] Invalid ELF header magic: != ELF [ 145.701199][ T7023] team0: Port device team_slave_0 added [ 145.735799][ T7023] team0: Port device team_slave_1 added [ 146.821835][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.863685][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.933616][ T5238] Bluetooth: hci0: command tx timeout [ 146.963665][ T7023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.397110][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.404269][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.803782][ T7023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.293778][ T6521] hsr_slave_0: left promiscuous mode [ 148.351743][ T6521] hsr_slave_1: left promiscuous mode [ 148.483723][ T7149] ptrace attach of "./syz-executor exec"[5226] was attempted by "./syz-executor exec"[7149] [ 148.553684][ T6521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.561382][ T6521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.643204][ T6521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.662518][ T6521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.777499][ T6521] veth1_macvtap: left promiscuous mode [ 148.803547][ T6521] veth0_macvtap: left promiscuous mode [ 148.814079][ T6521] veth1_vlan: left promiscuous mode [ 148.832257][ T6521] veth0_vlan: left promiscuous mode [ 151.164554][ T6867] syz.2.297 (6867) used greatest stack depth: 20240 bytes left [ 151.299864][ T6868] syz.2.297 (6868) used greatest stack depth: 20144 bytes left [ 151.359938][ T6861] syz.2.297 (6861) used greatest stack depth: 16720 bytes left [ 152.270452][ T6521] team0 (unregistering): Port device team_slave_1 removed [ 152.785751][ T6521] team0 (unregistering): Port device team_slave_0 removed [ 159.059325][ T7023] hsr_slave_0: entered promiscuous mode [ 159.158214][ T7023] hsr_slave_1: entered promiscuous mode [ 159.221724][ T7023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.245996][ T7023] Cannot create hsr debugfs directory [ 162.051450][ T7023] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 162.111512][ T7023] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 162.157813][ T7023] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 162.203993][ T7023] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 162.579347][ T7023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.676128][ T7023] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.747136][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.754328][ T6503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.827168][ T6524] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.834363][ T6524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.487672][ T7023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.635588][ T7023] veth0_vlan: entered promiscuous mode [ 163.661430][ T7023] veth1_vlan: entered promiscuous mode [ 163.766066][ T7023] veth0_macvtap: entered promiscuous mode [ 163.805279][ T7023] veth1_macvtap: entered promiscuous mode [ 163.886367][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.948958][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.973509][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.995582][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.008609][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.039263][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.107881][ T7023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.144382][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.168787][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.194045][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.226428][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.291183][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.318497][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.335186][ T7023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.357239][ T7023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.373903][ T7023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.395460][ T7023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.413769][ T7023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.634471][ T6522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.668225][ T6522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.734363][ T6522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.758935][ T6522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.429080][ T7408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.404'. [ 166.440330][ T7432] netlink: zone id is out of range [ 166.467766][ T7432] netlink: zone id is out of range [ 166.472915][ T7432] netlink: zone id is out of range [ 166.483640][ T7432] netlink: zone id is out of range [ 166.504387][ T7432] netlink: zone id is out of range [ 166.526624][ T7432] netlink: zone id is out of range [ 166.566932][ T7432] netlink: zone id is out of range [ 166.590130][ T7432] netlink: zone id is out of range [ 166.605644][ T7432] netlink: zone id is out of range [ 166.629619][ T7432] netlink: zone id is out of range [ 173.289651][ T7630] ======================================================= [ 173.289651][ T7630] WARNING: The mand mount option has been deprecated and [ 173.289651][ T7630] and is ignored by this kernel. Remove the mand [ 173.289651][ T7630] option from the mount to silence this warning. [ 173.289651][ T7630] ======================================================= [ 173.753660][ T7648] net_ratelimit: 2 callbacks suppressed [ 173.753683][ T7648] netlink: zone id is out of range [ 173.793530][ T7648] netlink: zone id is out of range [ 173.798701][ T7648] netlink: zone id is out of range [ 173.823639][ T7648] netlink: zone id is out of range [ 173.831980][ T7648] netlink: del zone limit has 4 unknown bytes [ 176.413352][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.426026][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.440779][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.449806][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.472072][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 176.485607][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.656851][ T6524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.744857][ T7726] raw_sendmsg: syz.2.476 forgot to set AF_INET. Fix it! [ 176.826021][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.478'. [ 176.865769][ T6524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.010337][ T6524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.120371][ T7744] tmpfs: Unknown parameter 'nwZW U܃ܓ+``Sfq?P02$as-ҞmHpb@TcblY64 [ 177.120371][ T7744] NtyA+m"իj2m4Е+-Nx>%!M淐+10g+#6?ࠏr+CY EAÄþ(DQjt6Ł&tʊ PPNr7 ' [ 177.297482][ T6524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.389561][ T7714] chnl_net:caif_netlink_parms(): no params data found [ 177.721465][ T7714] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.728966][ T7714] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.743718][ T7714] bridge_slave_0: entered allmulticast mode [ 177.750774][ T7714] bridge_slave_0: entered promiscuous mode [ 177.798721][ T7714] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.836051][ T7714] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.843301][ T7714] bridge_slave_1: entered allmulticast mode [ 177.876498][ T7714] bridge_slave_1: entered promiscuous mode [ 178.147156][ T7714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.188636][ T6524] bridge_slave_1: left allmulticast mode [ 178.218012][ T6524] bridge_slave_1: left promiscuous mode [ 178.237911][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.262791][ T6524] bridge_slave_0: left allmulticast mode [ 178.270824][ T6524] bridge_slave_0: left promiscuous mode [ 178.283697][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.537503][ T5236] Bluetooth: hci1: command tx timeout [ 179.320789][ T6524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.332998][ T6524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.347991][ T6524] bond0 (unregistering): Released all slaves [ 179.359766][ T7714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.483133][ T7714] team0: Port device team_slave_0 added [ 179.508428][ T7714] team0: Port device team_slave_1 added [ 179.582809][ T7714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.593645][ T7714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.643090][ T7714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.677598][ T7714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.704002][ T7714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.752206][ T7714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.002338][ T6524] hsr_slave_0: left promiscuous mode [ 180.016015][ T6524] hsr_slave_1: left promiscuous mode [ 180.035416][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.042877][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.064694][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.072310][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.112510][ T6524] veth1_macvtap: left promiscuous mode [ 180.134390][ T6524] veth0_macvtap: left promiscuous mode [ 180.140040][ T6524] veth1_vlan: left promiscuous mode [ 180.154896][ T6524] veth0_vlan: left promiscuous mode [ 180.208624][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.217904][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.227629][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.237249][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.248698][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 180.259920][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.583287][ T6524] team0 (unregistering): Port device team_slave_1 removed [ 180.615512][ T5238] Bluetooth: hci1: command tx timeout [ 180.630684][ T6524] team0 (unregistering): Port device team_slave_0 removed [ 180.930877][ T7714] hsr_slave_0: entered promiscuous mode [ 180.937933][ T7714] hsr_slave_1: entered promiscuous mode [ 180.947279][ T7714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.957545][ T7714] Cannot create hsr debugfs directory [ 181.467230][ T7855] chnl_net:caif_netlink_parms(): no params data found [ 181.996604][ T6524] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.082809][ T7855] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.097063][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.108598][ T7855] bridge_slave_0: entered allmulticast mode [ 182.119274][ T7855] bridge_slave_0: entered promiscuous mode [ 182.191083][ T6524] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.227406][ T7855] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.239996][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.253786][ T7855] bridge_slave_1: entered allmulticast mode [ 182.279296][ T7855] bridge_slave_1: entered promiscuous mode [ 182.293706][ T5238] Bluetooth: hci2: command tx timeout [ 182.396646][ T6524] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.460682][ T7855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.531641][ T6524] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.563414][ T7855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.700032][ T5238] Bluetooth: hci1: command tx timeout [ 182.727028][ T7855] team0: Port device team_slave_0 added [ 182.759286][ T7714] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.795503][ T7714] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.826787][ T7855] team0: Port device team_slave_1 added [ 182.871481][ T7714] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.900247][ T7714] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 183.023148][ T7855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.030709][ T7855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.083076][ T7855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.125910][ T7855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.132889][ T7855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.194853][ T7855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.341333][ T7714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.357505][ T7714] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.463468][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.470610][ T6522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.482131][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.489284][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.645728][ T7855] hsr_slave_0: entered promiscuous mode [ 183.700516][ T7855] hsr_slave_1: entered promiscuous mode [ 183.727053][ T7855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.753788][ T7855] Cannot create hsr debugfs directory [ 183.788161][ T6524] bridge_slave_1: left allmulticast mode [ 183.813691][ T6524] bridge_slave_1: left promiscuous mode [ 183.819437][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.895140][ T6524] bridge_slave_0: left allmulticast mode [ 183.900843][ T6524] bridge_slave_0: left promiscuous mode [ 183.915275][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.379657][ T5238] Bluetooth: hci2: command tx timeout [ 184.773524][ T5238] Bluetooth: hci1: command tx timeout [ 185.230383][ T6524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.277033][ T6524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.311283][ T6524] bond0 (unregistering): Released all slaves [ 186.051041][ T7714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.242647][ T6524] hsr_slave_0: left promiscuous mode [ 186.293642][ T6524] hsr_slave_1: left promiscuous mode [ 186.311012][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.334026][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.351288][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.374801][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.429505][ T6524] veth1_macvtap: left promiscuous mode [ 186.453872][ T5238] Bluetooth: hci2: command tx timeout [ 186.463586][ T6524] veth0_macvtap: left promiscuous mode [ 186.469216][ T6524] veth1_vlan: left promiscuous mode [ 186.478726][ T6524] veth0_vlan: left promiscuous mode [ 187.529315][ T6524] team0 (unregistering): Port device team_slave_1 removed [ 187.593776][ T6524] team0 (unregistering): Port device team_slave_0 removed [ 188.138727][ T7714] veth0_vlan: entered promiscuous mode [ 188.151289][ T7714] veth1_vlan: entered promiscuous mode [ 188.325567][ T7714] veth0_macvtap: entered promiscuous mode [ 188.367290][ T7714] veth1_macvtap: entered promiscuous mode [ 188.421276][ T7714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.460742][ T7714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.490411][ T7714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.523617][ T7714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.539480][ T5238] Bluetooth: hci2: command tx timeout [ 188.553290][ T7714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.751979][ T7714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.763257][ T7714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.773377][ T7714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.784049][ T7714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.795100][ T7714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.919522][ T7855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.001395][ T7714] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.010566][ T7714] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.019822][ T7714] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.029008][ T7714] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.103563][ T7855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.122779][ T7855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.166139][ T7855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.400952][ T7855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.410599][ T6521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.417105][ T7855] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.447286][ T6521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.548389][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.555569][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.663181][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.670388][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.711231][ T1067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.780055][ T1067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.819630][ T7855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.274624][ T7855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.399244][ T7855] veth0_vlan: entered promiscuous mode [ 190.436087][ T7855] veth1_vlan: entered promiscuous mode [ 190.535675][ T7855] veth0_macvtap: entered promiscuous mode [ 190.568972][ T7855] veth1_macvtap: entered promiscuous mode [ 190.615711][ T7855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.651291][ T7855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.683632][ T7855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.710987][ T7855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.724001][ T7855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.735606][ T7855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.755326][ T7855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.796745][ T7855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.833492][ T7855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.888227][ T7855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.914144][ T7855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.930128][ T7855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.942740][ T7855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.954797][ T7855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.990916][ T7855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.016600][ T7855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.032092][ T7855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.043331][ T7855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.342412][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.377655][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.505924][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.526123][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.600265][ T8177] netlink: 'syz.1.548': attribute type 3 has an invalid length. [ 193.646497][ T8179] netlink: 'syz.1.548': attribute type 3 has an invalid length. [ 194.536592][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.544320][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.513064][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'. [ 197.400187][ T8287] sctp: [Deprecated]: syz.1.578 (pid 8287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.400187][ T8287] Use struct sctp_sack_info instead [ 199.971895][ T8340] FAULT_INJECTION: forcing a failure. [ 199.971895][ T8340] name failslab, interval 1, probability 0, space 0, times 1 [ 200.013570][ T8340] CPU: 0 UID: 0 PID: 8340 Comm: syz.1.593 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 200.024221][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 200.034308][ T8340] Call Trace: [ 200.037605][ T8340] [ 200.040551][ T8340] dump_stack_lvl+0x16c/0x1f0 [ 200.045279][ T8340] should_fail_ex+0x497/0x5b0 [ 200.049989][ T8340] ? fs_reclaim_acquire+0xae/0x160 [ 200.055138][ T8340] should_failslab+0xc2/0x120 [ 200.059847][ T8340] __kmalloc_cache_noprof+0x6b/0x310 [ 200.065178][ T8340] ? io_rsrc_data_alloc+0x5f/0x460 [ 200.070323][ T8340] io_rsrc_data_alloc+0x5f/0x460 [ 200.075296][ T8340] io_sqe_buffers_register+0x129/0xa60 [ 200.080785][ T8340] ? __mutex_trylock_common+0xea/0x250 [ 200.086275][ T8340] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 200.092291][ T8340] ? rcu_is_watching+0x12/0xc0 [ 200.097086][ T8340] ? __mutex_lock+0x1a6/0x9c0 [ 200.101807][ T8340] __io_uring_register+0x1e7c/0x1f00 [ 200.107133][ T8340] ? __pfx___io_uring_register+0x10/0x10 [ 200.112801][ T8340] ? __fget_files+0x244/0x3f0 [ 200.117514][ T8340] __x64_sys_io_uring_register+0x153/0x270 [ 200.123353][ T8340] do_syscall_64+0xcd/0x250 [ 200.127888][ T8340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.133810][ T8340] RIP: 0033:0x7f489d57dff9 [ 200.138255][ T8340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.157984][ T8340] RSP: 002b:00007f489e2d0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 200.166437][ T8340] RAX: ffffffffffffffda RBX: 00007f489d735f80 RCX: 00007f489d57dff9 [ 200.174433][ T8340] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 200.182429][ T8340] RBP: 00007f489e2d0090 R08: 0000000000000000 R09: 0000000000000000 [ 200.190423][ T8340] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 200.198416][ T8340] R13: 0000000000000000 R14: 00007f489d735f80 R15: 00007ffce05b3df8 [ 200.206427][ T8340] [ 201.743714][ T5236] Bluetooth: hci3: command 0x0406 tx timeout [ 203.307098][ T8396] FAULT_INJECTION: forcing a failure. [ 203.307098][ T8396] name failslab, interval 1, probability 0, space 0, times 0 [ 203.369609][ T8396] CPU: 0 UID: 0 PID: 8396 Comm: syz.0.605 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 203.380262][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 203.390347][ T8396] Call Trace: [ 203.393649][ T8396] [ 203.396633][ T8396] dump_stack_lvl+0x16c/0x1f0 [ 203.401360][ T8396] should_fail_ex+0x497/0x5b0 [ 203.406075][ T8396] ? fs_reclaim_acquire+0xae/0x160 [ 203.411233][ T8396] should_failslab+0xc2/0x120 [ 203.415965][ T8396] __kmalloc_noprof+0xcb/0x410 [ 203.420766][ T8396] ? kasan_save_track+0x14/0x30 [ 203.425858][ T8396] io_rsrc_data_alloc+0x99/0x460 [ 203.430863][ T8396] io_sqe_buffers_register+0x129/0xa60 [ 203.436370][ T8396] ? __mutex_trylock_common+0xea/0x250 [ 203.441874][ T8396] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 203.447899][ T8396] ? rcu_is_watching+0x12/0xc0 [ 203.452695][ T8396] ? __mutex_lock+0x1a6/0x9c0 [ 203.457414][ T8396] __io_uring_register+0x1e7c/0x1f00 [ 203.462737][ T8396] ? __pfx___io_uring_register+0x10/0x10 [ 203.468413][ T8396] ? __fget_files+0x244/0x3f0 [ 203.473163][ T8396] __x64_sys_io_uring_register+0x153/0x270 [ 203.479006][ T8396] do_syscall_64+0xcd/0x250 [ 203.483543][ T8396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.489463][ T8396] RIP: 0033:0x7f78e497dff9 [ 203.493913][ T8396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.513810][ T8396] RSP: 002b:00007f78e57b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 203.522247][ T8396] RAX: ffffffffffffffda RBX: 00007f78e4b36130 RCX: 00007f78e497dff9 [ 203.530253][ T8396] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 203.538248][ T8396] RBP: 00007f78e57b7090 R08: 0000000000000000 R09: 0000000000000000 [ 203.546329][ T8396] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 203.554317][ T8396] R13: 0000000000000001 R14: 00007f78e4b36130 R15: 00007ffd335a2768 [ 203.562325][ T8396] [ 204.208506][ T6518] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.418504][ T6518] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.645653][ T8422] nbd: must specify at least one socket [ 204.671808][ T6518] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.057967][ T6518] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.174123][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.183353][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.317974][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.328237][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.340538][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 205.349268][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.173587][ T6518] bridge_slave_1: left allmulticast mode [ 206.179287][ T6518] bridge_slave_1: left promiscuous mode [ 206.224249][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.261638][ T6518] bridge_slave_0: left allmulticast mode [ 206.272070][ T6518] bridge_slave_0: left promiscuous mode [ 206.287612][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.390462][ T6518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.413941][ T6518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.451614][ T6518] bond0 (unregistering): Released all slaves [ 207.495056][ T5236] Bluetooth: hci0: command tx timeout [ 207.969637][ T6518] hsr_slave_0: left promiscuous mode [ 207.982004][ T6518] hsr_slave_1: left promiscuous mode [ 208.010384][ T6518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.018238][ T6518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.034319][ T6518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.041754][ T6518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.097807][ T6518] veth1_macvtap: left promiscuous mode [ 208.117448][ T6518] veth0_macvtap: left promiscuous mode [ 208.132297][ T6518] veth1_vlan: left promiscuous mode [ 208.146988][ T6518] veth0_vlan: left promiscuous mode [ 208.839975][ T6518] team0 (unregistering): Port device team_slave_1 removed [ 208.885319][ T6518] team0 (unregistering): Port device team_slave_0 removed [ 209.527011][ T8431] chnl_net:caif_netlink_parms(): no params data found [ 209.573931][ T5236] Bluetooth: hci0: command tx timeout [ 209.808316][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.823728][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.831198][ T8431] bridge_slave_0: entered allmulticast mode [ 209.838263][ T8431] bridge_slave_0: entered promiscuous mode [ 209.847472][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.854788][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.861977][ T8431] bridge_slave_1: entered allmulticast mode [ 209.871091][ T8431] bridge_slave_1: entered promiscuous mode [ 209.967667][ T8431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.981758][ T8431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.112062][ T8431] team0: Port device team_slave_0 added [ 210.129879][ T8431] team0: Port device team_slave_1 added [ 210.271794][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.303474][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.366633][ T8431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.599873][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.612530][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.660496][ T8431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.274281][ T8431] hsr_slave_0: entered promiscuous mode [ 211.335201][ T8431] hsr_slave_1: entered promiscuous mode [ 211.376159][ T8431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.391107][ T8431] Cannot create hsr debugfs directory [ 211.661888][ T5236] Bluetooth: hci0: command tx timeout [ 213.743578][ T5236] Bluetooth: hci0: command tx timeout [ 215.421477][ T8431] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.471069][ T8431] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.663406][ T8431] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.715734][ T8431] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.955259][ T8431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.971461][ T8431] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.003191][ T8431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.013676][ T8431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.038354][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.045527][ T6522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.057500][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.064679][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.539188][ T8431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.610671][ T8431] veth0_vlan: entered promiscuous mode [ 216.632411][ T8431] veth1_vlan: entered promiscuous mode [ 216.673196][ T8431] veth0_macvtap: entered promiscuous mode [ 216.709846][ T8431] veth1_macvtap: entered promiscuous mode [ 216.756122][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.783800][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.833649][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.868310][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.893599][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.918542][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.959405][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.997329][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.022178][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.041130][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.068736][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.080411][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.127207][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.158469][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.220128][ T8431] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.243525][ T8431] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.265127][ T8431] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.286866][ T8431] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.543140][ T6522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.566607][ T6522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.591871][ T1067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.620648][ T1067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.782143][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.684'. [ 222.953741][ T8901] svc: failed to register nfsdv3 RPC service (errno 111). [ 222.996316][ T8901] svc: failed to register nfsaclv3 RPC service (errno 111). [ 223.414312][ T8904] svc: failed to register nfsdv3 RPC service (errno 111). [ 223.422452][ T8904] svc: failed to register nfsaclv3 RPC service (errno 111). [ 227.302593][ T8985] Process accounting resumed [ 235.038979][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.051419][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.062964][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.077726][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.085472][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 235.095112][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.753235][ T9104] chnl_net:caif_netlink_parms(): no params data found [ 236.118879][ T9104] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.148983][ T9104] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.167247][ T9104] bridge_slave_0: entered allmulticast mode [ 236.184498][ T9104] bridge_slave_0: entered promiscuous mode [ 236.215676][ T9104] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.232388][ T9104] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.247844][ T9104] bridge_slave_1: entered allmulticast mode [ 236.268324][ T9104] bridge_slave_1: entered promiscuous mode [ 236.619980][ T9104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.658612][ T9104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.140184][ T9104] team0: Port device team_slave_0 added [ 237.179925][ T9104] team0: Port device team_slave_1 added [ 237.183517][ T5236] Bluetooth: hci4: command tx timeout [ 237.551142][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.573984][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.623927][ T9104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.642541][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.659414][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.727403][ T9104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.060388][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.753'. [ 238.121956][ T9104] hsr_slave_0: entered promiscuous mode [ 238.195083][ T9104] hsr_slave_1: entered promiscuous mode [ 238.258513][ T9104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.267256][ T9104] Cannot create hsr debugfs directory [ 238.833128][ T9148] can: request_module (can-proto-5) failed. [ 238.977151][ T9104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.253628][ T5236] Bluetooth: hci4: command tx timeout [ 239.651186][ T9104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.078896][ T9162] Dead loop on virtual device ip6_vti0, fix it urgently! [ 240.103905][ T9162] Dead loop on virtual device ip6_vti0, fix it urgently! [ 240.111548][ T9162] Dead loop on virtual device ip6_vti0, fix it urgently! [ 240.122944][ T9162] Dead loop on virtual device ip6_vti0, fix it urgently! [ 240.147674][ T9162] Dead loop on virtual device ip6_vti0, fix it urgently! [ 240.173333][ T9162] Dead loop on virtual device ip6_vti0, fix it urgently! [ 240.420721][ T9104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.160554][ T9104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.333562][ T5236] Bluetooth: hci4: command tx timeout [ 241.702678][ T9104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 241.771078][ T9104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 241.793873][ T9104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 241.816221][ T9104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 242.026920][ T9104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.094742][ T9104] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.136257][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.143384][ T6503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.195011][ T6503] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.202145][ T6503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.709915][ T9104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.806088][ T9104] veth0_vlan: entered promiscuous mode [ 242.827430][ T9104] veth1_vlan: entered promiscuous mode [ 242.885220][ T9104] veth0_macvtap: entered promiscuous mode [ 242.905297][ T9104] veth1_macvtap: entered promiscuous mode [ 242.931711][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.963513][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.973366][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.003519][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.013368][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.043521][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.053372][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.083503][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.105589][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.265878][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.283500][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.293335][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.347724][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.378181][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.413113][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.427307][ T5236] Bluetooth: hci4: command tx timeout [ 243.493660][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.534244][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.564912][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.637735][ T9104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.663852][ T9104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.672687][ T9104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.723510][ T9104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.060072][ T6503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.084982][ T6503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.168269][ T6503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.187342][ T6503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.945309][ T9289] netlink: 'syz.2.790': attribute type 3 has an invalid length. [ 255.350569][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 255.984218][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.991500][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.610395][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.622199][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.649189][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.683542][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.703562][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 257.712356][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.139755][ T6503] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.524946][ T6503] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.898589][ T6503] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.733823][ T6503] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.823607][ T5236] Bluetooth: hci1: command tx timeout [ 259.991456][ T6503] bridge_slave_1: left allmulticast mode [ 260.035757][ T6503] bridge_slave_1: left promiscuous mode [ 260.041518][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.184599][ T6503] bridge_slave_0: left allmulticast mode [ 260.191109][ T6503] bridge_slave_0: left promiscuous mode [ 260.199594][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.989782][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.034589][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 261.070124][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 261.148239][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.193796][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 261.215986][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.900916][ T5238] Bluetooth: hci1: command tx timeout [ 262.119244][ T6503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.158685][ T6503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.183231][ T6503] bond0 (unregistering): Released all slaves [ 262.206840][ T9473] chnl_net:caif_netlink_parms(): no params data found [ 263.314654][ T6503] hsr_slave_0: left promiscuous mode [ 263.333667][ T5238] Bluetooth: hci2: command tx timeout [ 263.383723][ T6503] hsr_slave_1: left promiscuous mode [ 263.443629][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.451111][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.506403][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.528868][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.568016][ T6503] veth1_macvtap: left promiscuous mode [ 263.582691][ T6503] veth0_macvtap: left promiscuous mode [ 263.589589][ T6503] veth1_vlan: left promiscuous mode [ 263.614268][ T6503] veth0_vlan: left promiscuous mode [ 263.974764][ T5238] Bluetooth: hci1: command tx timeout [ 265.085788][ T6503] team0 (unregistering): Port device team_slave_1 removed [ 265.270569][ T6503] team0 (unregistering): Port device team_slave_0 removed [ 265.418759][ T5238] Bluetooth: hci2: command tx timeout [ 266.057041][ T5238] Bluetooth: hci1: command tx timeout [ 266.243317][ T9473] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.271303][ T9473] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.278603][ T9473] bridge_slave_0: entered allmulticast mode [ 266.285668][ T9473] bridge_slave_0: entered promiscuous mode [ 266.293845][ T9473] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.300958][ T9473] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.308308][ T9473] bridge_slave_1: entered allmulticast mode [ 266.315336][ T9473] bridge_slave_1: entered promiscuous mode [ 266.545055][ T9473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.558247][ T9473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.680716][ T9473] team0: Port device team_slave_0 added [ 266.699123][ T9473] team0: Port device team_slave_1 added [ 266.790178][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.799724][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.852396][ T9473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.878263][ T9525] chnl_net:caif_netlink_parms(): no params data found [ 267.141487][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.150003][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.188642][ T9473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.404905][ T9473] hsr_slave_0: entered promiscuous mode [ 267.494456][ T5238] Bluetooth: hci2: command tx timeout [ 267.523823][ T9473] hsr_slave_1: entered promiscuous mode [ 267.554208][ T9473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.561812][ T9473] Cannot create hsr debugfs directory [ 267.833338][ T6503] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.858363][ T9525] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.876402][ T9525] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.889565][ T9525] bridge_slave_0: entered allmulticast mode [ 267.900431][ T9525] bridge_slave_0: entered promiscuous mode [ 268.103752][ T6503] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.229169][ T9525] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.248702][ T9525] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.259719][ T9525] bridge_slave_1: entered allmulticast mode [ 268.281243][ T9525] bridge_slave_1: entered promiscuous mode [ 268.555953][ T6503] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.659583][ T9525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.681147][ T9525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.111749][ T6503] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.427059][ T9525] team0: Port device team_slave_0 added [ 269.453108][ T9525] team0: Port device team_slave_1 added [ 269.674642][ T5238] Bluetooth: hci2: command tx timeout [ 270.077433][ T9525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.100480][ T9525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.179393][ T9525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.242107][ T9525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.251911][ T9525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.315227][ T9525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.455991][ T6503] bridge_slave_1: left allmulticast mode [ 270.461697][ T6503] bridge_slave_1: left promiscuous mode [ 270.473368][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.545777][ T6503] bridge_slave_0: left allmulticast mode [ 270.551471][ T6503] bridge_slave_0: left promiscuous mode [ 270.579109][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.153400][ T6503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.180962][ T6503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.193164][ T6503] bond0 (unregistering): Released all slaves [ 272.263565][ T9525] hsr_slave_0: entered promiscuous mode [ 272.290668][ T9525] hsr_slave_1: entered promiscuous mode [ 272.298253][ T9525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.309143][ T9525] Cannot create hsr debugfs directory [ 272.446108][ T9473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 272.665616][ T9473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.054054][ T9473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.186263][ T9473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.903374][ T6503] hsr_slave_0: left promiscuous mode [ 273.915937][ T6503] hsr_slave_1: left promiscuous mode [ 273.960038][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.967728][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.976933][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.003338][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.049600][ T6503] veth1_macvtap: left promiscuous mode [ 274.064130][ T6503] veth0_macvtap: left promiscuous mode [ 274.073151][ T6503] veth1_vlan: left promiscuous mode [ 274.087472][ T6503] veth0_vlan: left promiscuous mode [ 275.793347][ T6503] team0 (unregistering): Port device team_slave_1 removed [ 275.891167][ T6503] team0 (unregistering): Port device team_slave_0 removed [ 277.503710][ T9473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.633831][ T9473] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.669860][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.677132][ T6521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.764919][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.772049][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.968099][ T9473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.181707][ T9525] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 278.248250][ T9525] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 278.322591][ T9525] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 278.338833][ T9525] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 278.375818][ T9820] delete_channel: no stack [ 278.637748][ T9473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.692371][ T9525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.815231][ T9525] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.878226][ T9473] veth0_vlan: entered promiscuous mode [ 278.942687][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.949871][ T6503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.972242][ T6503] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.979443][ T6503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.056833][ T9473] veth1_vlan: entered promiscuous mode [ 279.214640][ T9473] veth0_macvtap: entered promiscuous mode [ 279.246158][ T9473] veth1_macvtap: entered promiscuous mode [ 279.338348][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.355047][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.389511][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.427339][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.447685][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.473496][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.496563][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.517629][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.547037][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.583537][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.619174][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.643093][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.673546][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.707100][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.753073][ T9473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.805715][ T9473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.838071][ T9473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.872052][ T9473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.939298][ T9525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.068937][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.089636][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.159777][ T9525] veth0_vlan: entered promiscuous mode [ 280.189348][ T6518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.207514][ T9525] veth1_vlan: entered promiscuous mode [ 280.216032][ T6518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.289113][ T9860] HSR: entered promiscuous mode [ 280.327677][ T9525] veth0_macvtap: entered promiscuous mode [ 280.411642][ T9525] veth1_macvtap: entered promiscuous mode [ 280.507559][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.539164][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.560264][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.592489][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.623492][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.661225][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.713324][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.760252][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.805091][ T9525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.847789][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.875524][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.911717][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.935555][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.950872][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.966764][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.996587][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.029737][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.058523][ T9525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.109136][ T9525] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.134906][ T9525] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.158519][ T9525] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.187115][ T9525] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.521599][ T1067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.545887][ T1067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.644587][ T6518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.671492][ T6518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.767136][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'. [ 285.704057][ T9960] block nbd0: not configured, cannot reconfigure [ 285.728702][ T9959] FAULT_INJECTION: forcing a failure. [ 285.728702][ T9959] name failslab, interval 1, probability 0, space 0, times 0 [ 285.838245][ T9959] CPU: 1 UID: 0 PID: 9959 Comm: syz.2.917 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 285.848895][ T9959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 285.858976][ T9959] Call Trace: [ 285.862275][ T9959] [ 285.865230][ T9959] dump_stack_lvl+0x16c/0x1f0 [ 285.869946][ T9959] should_fail_ex+0x497/0x5b0 [ 285.874663][ T9959] should_failslab+0xc2/0x120 [ 285.879376][ T9959] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 285.884810][ T9959] ? skb_clone+0x190/0x3f0 [ 285.889273][ T9959] skb_clone+0x190/0x3f0 [ 285.893563][ T9959] netlink_deliver_tap+0xb26/0xcf0 [ 285.898714][ T9959] netlink_unicast+0x5e1/0x7f0 [ 285.903517][ T9959] ? __pfx_netlink_unicast+0x10/0x10 [ 285.908837][ T9959] ? __phys_addr_symbol+0x30/0x80 [ 285.913898][ T9959] ? __check_object_size+0x488/0x710 [ 285.919229][ T9959] netlink_sendmsg+0x8b8/0xd70 [ 285.924031][ T9959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.929448][ T9959] ____sys_sendmsg+0x9ae/0xb40 [ 285.934335][ T9959] ? copy_msghdr_from_user+0x10b/0x160 [ 285.939827][ T9959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.945157][ T9959] ? __pfx___lock_acquire+0x10/0x10 [ 285.950397][ T9959] ___sys_sendmsg+0x135/0x1e0 [ 285.955112][ T9959] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.960365][ T9959] ? lock_acquire+0x2f/0xb0 [ 285.964995][ T9959] ? __fget_files+0x40/0x3f0 [ 285.969626][ T9959] ? fdget+0x176/0x210 [ 285.973726][ T9959] __sys_sendmsg+0x117/0x1f0 [ 285.978358][ T9959] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.983504][ T9959] ? __fget_files+0x244/0x3f0 [ 285.988235][ T9959] do_syscall_64+0xcd/0x250 [ 285.992777][ T9959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.998715][ T9959] RIP: 0033:0x7f44de57dff9 [ 286.003169][ T9959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.022808][ T9959] RSP: 002b:00007f44df3ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.031261][ T9959] RAX: ffffffffffffffda RBX: 00007f44de735f80 RCX: 00007f44de57dff9 [ 286.039267][ T9959] RDX: 0000000000040004 RSI: 0000000020000140 RDI: 0000000000000003 [ 286.047269][ T9959] RBP: 00007f44df3ee090 R08: 0000000000000000 R09: 0000000000000000 [ 286.055273][ T9959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.063277][ T9959] R13: 0000000000000000 R14: 00007f44de735f80 R15: 00007fff4ca5a2c8 [ 286.071298][ T9959] [ 287.472721][ T9999] FAULT_INJECTION: forcing a failure. [ 287.472721][ T9999] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 287.531739][ T9999] CPU: 0 UID: 0 PID: 9999 Comm: syz.3.929 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 287.542393][ T9999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.552476][ T9999] Call Trace: [ 287.555781][ T9999] [ 287.558739][ T9999] dump_stack_lvl+0x16c/0x1f0 [ 287.563464][ T9999] should_fail_ex+0x497/0x5b0 [ 287.568183][ T9999] _copy_to_user+0x30/0xc0 [ 287.572630][ T9999] simple_read_from_buffer+0xd0/0x160 [ 287.578046][ T9999] proc_fail_nth_read+0x198/0x270 [ 287.583120][ T9999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.588706][ T9999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.594288][ T9999] vfs_read+0x1ce/0xbd0 [ 287.598473][ T9999] ? __fget_files+0x23a/0x3f0 [ 287.603180][ T9999] ? fdget_pos+0x24c/0x360 [ 287.607624][ T9999] ? __pfx_lock_release+0x10/0x10 [ 287.612682][ T9999] ? trace_lock_acquire+0x14a/0x1d0 [ 287.617907][ T9999] ? __pfx_vfs_read+0x10/0x10 [ 287.622774][ T9999] ? __pfx___mutex_lock+0x10/0x10 [ 287.627845][ T9999] ? __fget_files+0x244/0x3f0 [ 287.632560][ T9999] ksys_read+0x12f/0x260 [ 287.636841][ T9999] ? __pfx_ksys_read+0x10/0x10 [ 287.641639][ T9999] do_syscall_64+0xcd/0x250 [ 287.646182][ T9999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.652110][ T9999] RIP: 0033:0x7fa62717ca3c [ 287.656547][ T9999] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 287.676189][ T9999] RSP: 002b:00007fa62805b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 287.684642][ T9999] RAX: ffffffffffffffda RBX: 00007fa627335f80 RCX: 00007fa62717ca3c [ 287.692648][ T9999] RDX: 000000000000000f RSI: 00007fa62805b0a0 RDI: 0000000000000004 [ 287.700646][ T9999] RBP: 00007fa62805b090 R08: 0000000000000000 R09: 0000000000000000 [ 287.708651][ T9999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.716649][ T9999] R13: 0000000000000000 R14: 00007fa627335f80 R15: 00007ffef4d3ff58 [ 287.724667][ T9999] [ 288.236972][T10008] nfsd: Unknown parameter '' [ 289.128864][ T29] audit: type=1326 audit(8277292250.467:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.938" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae1bf7dff9 code=0x0 [ 289.220735][ T29] audit: type=1326 audit(8277292250.557:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.938" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae1bf7dff9 code=0x0 [ 291.225716][T10081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.947'. [ 291.256206][T10075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.947'. [ 298.502104][T10225] Invalid ELF header magic: != ELF [ 298.540206][T10219] Invalid ELF header magic: != ELF [ 304.231770][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1008'. [ 304.873697][T10339] nbd: socks must be embedded in a SOCK_ITEM attr [ 305.697362][T10360] svc: failed to register nfsdv3 RPC service (errno 111). [ 305.740937][T10360] svc: failed to register nfsaclv3 RPC service (errno 111). [ 308.785358][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 310.000334][ T1067] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.335702][ T1067] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.414138][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.430292][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.450620][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.459992][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.469789][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 310.477130][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.625739][ T1067] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.810301][ T1067] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.115994][T10496] chnl_net:caif_netlink_parms(): no params data found [ 311.800639][ T1067] bridge_slave_1: left allmulticast mode [ 311.807685][ T1067] bridge_slave_1: left promiscuous mode [ 311.813479][ T1067] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.891018][ T1067] bridge_slave_0: left allmulticast mode [ 311.896928][ T1067] bridge_slave_0: left promiscuous mode [ 311.918383][ T1067] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.533742][ T5238] Bluetooth: hci1: command tx timeout [ 313.133887][ T1067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.194037][ T1067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.228083][ T1067] bond0 (unregistering): Released all slaves [ 313.287956][T10496] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.317072][T10496] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.347819][T10496] bridge_slave_0: entered allmulticast mode [ 313.364886][T10496] bridge_slave_0: entered promiscuous mode [ 313.477473][T10496] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.495002][T10496] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.506844][T10496] bridge_slave_1: entered allmulticast mode [ 313.530648][T10496] bridge_slave_1: entered promiscuous mode [ 313.760194][T10496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.796124][T10496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.192861][ T1067] hsr_slave_0: left promiscuous mode [ 314.207309][ T1067] hsr_slave_1: left promiscuous mode [ 314.226871][ T1067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.244609][ T1067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.295398][ T1067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.306247][ T1067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.348241][ T1067] veth1_macvtap: left promiscuous mode [ 314.354929][ T1067] veth0_macvtap: left promiscuous mode [ 314.361646][ T1067] veth1_vlan: left promiscuous mode [ 314.367541][ T1067] veth0_vlan: left promiscuous mode [ 314.614463][ T5238] Bluetooth: hci1: command tx timeout [ 315.182780][ T1067] team0 (unregistering): Port device team_slave_1 removed [ 315.227429][ T1067] team0 (unregistering): Port device team_slave_0 removed [ 315.649111][T10496] team0: Port device team_slave_0 added [ 315.703681][T10496] team0: Port device team_slave_1 added [ 315.860789][T10496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.875219][T10496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.929281][T10496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.968820][T10496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.003895][T10496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.063687][T10496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.196913][T10496] hsr_slave_0: entered promiscuous mode [ 316.231833][T10496] hsr_slave_1: entered promiscuous mode [ 316.258689][T10496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.278635][T10496] Cannot create hsr debugfs directory [ 316.694289][ T5238] Bluetooth: hci1: command tx timeout [ 316.740008][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.754559][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.762989][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.771995][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.789745][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 316.795165][ T1067] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.814124][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.972322][ T1067] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.163953][ T1067] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.423851][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.430219][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.444957][ T1067] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.600757][T10496] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 317.615999][T10496] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 318.030243][T10496] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 318.078907][T10496] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 318.239581][ T1067] bridge_slave_1: left allmulticast mode [ 318.246057][ T1067] bridge_slave_1: left promiscuous mode [ 318.253776][ T1067] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.286494][ T1067] bridge_slave_0: left allmulticast mode [ 318.292550][ T1067] bridge_slave_0: left promiscuous mode [ 318.300343][ T1067] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.773638][ T5238] Bluetooth: hci1: command tx timeout [ 318.855319][ T5238] Bluetooth: hci2: command tx timeout [ 319.134942][ T1067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.162291][ T1067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.185012][ T1067] bond0 (unregistering): Released all slaves [ 319.206825][T10613] chnl_net:caif_netlink_parms(): no params data found [ 319.687566][T10613] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.723971][T10613] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.731210][T10613] bridge_slave_0: entered allmulticast mode [ 319.744615][T10613] bridge_slave_0: entered promiscuous mode [ 319.812220][T10613] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.852387][T10613] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.860677][T10613] bridge_slave_1: entered allmulticast mode [ 319.874992][T10613] bridge_slave_1: entered promiscuous mode [ 320.076902][T10613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.175600][ T1067] hsr_slave_0: left promiscuous mode [ 320.197408][ T1067] hsr_slave_1: left promiscuous mode [ 320.233652][ T1067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.241098][ T1067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.281165][ T1067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.293702][ T1067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.322865][ T1067] veth1_macvtap: left promiscuous mode [ 320.347175][ T1067] veth0_macvtap: left promiscuous mode [ 320.352811][ T1067] veth1_vlan: left promiscuous mode [ 320.365033][ T1067] veth0_vlan: left promiscuous mode [ 320.934221][ T5238] Bluetooth: hci2: command tx timeout [ 321.341244][ T1067] team0 (unregistering): Port device team_slave_1 removed [ 321.404205][ T1067] team0 (unregistering): Port device team_slave_0 removed [ 322.048784][T10496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.065762][T10613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.192521][T10613] team0: Port device team_slave_0 added [ 322.210434][T10613] team0: Port device team_slave_1 added [ 322.300463][T10496] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.327811][T10613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.343918][T10613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.387263][T10613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.424459][T10613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.431431][T10613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.469818][T10613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.484832][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.491948][ T6522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.504948][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.512060][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.553122][T10496] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 322.563662][T10496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.686230][T10613] hsr_slave_0: entered promiscuous mode [ 322.702806][T10613] hsr_slave_1: entered promiscuous mode [ 322.723808][T10613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.731395][T10613] Cannot create hsr debugfs directory [ 323.013784][ T5238] Bluetooth: hci2: command tx timeout [ 323.056033][T10496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.319141][T10496] veth0_vlan: entered promiscuous mode [ 323.393091][T10496] veth1_vlan: entered promiscuous mode [ 323.490403][T10496] veth0_macvtap: entered promiscuous mode [ 323.520992][T10496] veth1_macvtap: entered promiscuous mode [ 323.572099][T10496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.604090][T10496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.619890][T10496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.639406][T10496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.659869][T10496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.680650][T10496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.705198][T10496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.731066][T10496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.760301][T10496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.776952][T10496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.838009][T10496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.859939][T10496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.883471][T10496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.898778][T10496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.941629][T10496] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.952678][T10496] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.969532][T10496] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.980043][T10496] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.119213][T10613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 324.145211][T10613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 324.179287][T10613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 324.226246][T10613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 324.499191][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.529717][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.693999][ T6524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.702104][ T6524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.968414][T10613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.094024][ T5238] Bluetooth: hci2: command tx timeout [ 325.228028][T10613] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.271005][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.278204][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.436923][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.444097][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.616060][T10613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.007848][T10613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.107109][T10613] veth0_vlan: entered promiscuous mode [ 326.139356][T10613] veth1_vlan: entered promiscuous mode [ 326.207751][T10613] veth0_macvtap: entered promiscuous mode [ 326.248361][T10613] veth1_macvtap: entered promiscuous mode [ 326.418269][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.442872][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.457894][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.468467][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.479068][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.489664][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.499795][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.510497][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.521903][T10613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.546200][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.557488][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.568751][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.584925][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.599656][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.620311][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.634286][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.645217][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.659217][T10613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.672824][T10613] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.696530][T10613] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.707662][T10613] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.729727][T10613] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.065609][ T6503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.113925][ T6503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.174052][ T6521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.182206][ T6521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.935593][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1148'. [ 329.749109][ T5238] Bluetooth: hci0: command 0x0406 tx timeout [ 340.942715][T11159] )zV: entered promiscuous mode [ 340.962769][T11159] openvswitch: )zV: Dropping previously announced user features [ 345.315578][ T6524] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.535315][ T6524] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.006019][ T6524] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.208615][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 346.234331][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 346.247806][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 346.321422][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 346.341359][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 346.359490][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 346.375813][T11273] futex_wake_op: syz.2.1229 tries to shift op by -256; fix this program [ 346.999584][ T6524] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.921614][ T6524] bridge_slave_1: left allmulticast mode [ 347.973990][ T6524] bridge_slave_1: left promiscuous mode [ 347.979758][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.196425][ T6524] bridge_slave_0: left allmulticast mode [ 348.202128][ T6524] bridge_slave_0: left promiscuous mode [ 348.207994][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.535436][ T5233] Bluetooth: hci2: command tx timeout [ 349.554325][ T6524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.634636][ T6524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.665764][ T6524] bond0 (unregistering): Released all slaves [ 349.770110][T11270] chnl_net:caif_netlink_parms(): no params data found [ 350.474705][T11270] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.481836][T11270] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.494177][T11270] bridge_slave_0: entered allmulticast mode [ 350.522608][T11270] bridge_slave_0: entered promiscuous mode [ 350.560752][T11270] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.600262][T11270] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.617785][ T5233] Bluetooth: hci2: command tx timeout [ 350.634453][T11270] bridge_slave_1: entered allmulticast mode [ 350.673583][T11270] bridge_slave_1: entered promiscuous mode [ 351.582940][T11270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.602793][T11270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.139643][T11270] team0: Port device team_slave_0 added [ 352.195667][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 352.232091][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 352.272993][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 352.331435][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 352.351686][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 352.411950][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 352.549728][ T6524] hsr_slave_0: left promiscuous mode [ 352.560717][ T6524] hsr_slave_1: left promiscuous mode [ 352.571233][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.686159][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.693708][ T5233] Bluetooth: hci2: command tx timeout [ 352.738708][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.750527][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.846355][ T6524] veth1_macvtap: left promiscuous mode [ 352.880896][ T6524] veth0_macvtap: left promiscuous mode [ 352.899355][ T6524] veth1_vlan: left promiscuous mode [ 352.917224][ T6524] veth0_vlan: left promiscuous mode [ 354.469754][ T6524] team0 (unregistering): Port device team_slave_1 removed [ 354.535305][ T5233] Bluetooth: hci1: command tx timeout [ 354.712402][ T6524] team0 (unregistering): Port device team_slave_0 removed [ 354.773649][ T5233] Bluetooth: hci2: command tx timeout [ 355.843970][T11270] team0: Port device team_slave_1 added [ 356.096840][T11270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.134626][T11270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.183027][T11270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.200243][T11270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.207434][T11270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.233951][T11270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.391646][T11270] hsr_slave_0: entered promiscuous mode [ 356.404631][T11270] hsr_slave_1: entered promiscuous mode [ 356.411020][T11270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.436405][T11270] Cannot create hsr debugfs directory [ 356.660917][ T5233] Bluetooth: hci1: command tx timeout [ 357.771218][T11380] chnl_net:caif_netlink_parms(): no params data found [ 358.587510][ T6524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.697479][ T5238] Bluetooth: hci1: command tx timeout [ 358.716785][T11380] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.730964][T11380] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.738276][T11380] bridge_slave_0: entered allmulticast mode [ 358.752829][T11380] bridge_slave_0: entered promiscuous mode [ 358.782165][T11380] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.798437][T11380] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.810018][T11380] bridge_slave_1: entered allmulticast mode [ 358.843698][T11380] bridge_slave_1: entered promiscuous mode [ 358.924464][ T6524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.041074][T11380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.120737][T11380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.394156][ T6524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.625129][T11380] team0: Port device team_slave_0 added [ 359.712519][ T6524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.762500][T11380] team0: Port device team_slave_1 added [ 359.803630][T11270] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 359.836532][T11270] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 359.900742][T11270] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 359.918814][T11380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.949071][T11380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.013555][T11380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.025329][T11270] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 360.077603][T11380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.090058][T11380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.140244][T11380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.229671][T11380] hsr_slave_0: entered promiscuous mode [ 360.262262][T11380] hsr_slave_1: entered promiscuous mode [ 360.273869][T11380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.299448][T11380] Cannot create hsr debugfs directory [ 360.457696][ T5233] Bluetooth: hci4: command 0x0406 tx timeout [ 360.687223][T11270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.754886][T11509] ptrace attach of "./syz-executor exec"[8431] was attempted by "./syz-executor exec"[11509] [ 360.776917][ T5233] Bluetooth: hci1: command tx timeout [ 360.786018][T11270] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.944138][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.951282][ T1067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.960585][ T1067] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.967729][ T1067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.050116][T11270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 361.060783][T11270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.231102][ T6524] bridge_slave_1: left allmulticast mode [ 361.240392][ T6524] bridge_slave_1: left promiscuous mode [ 361.256049][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.326701][ T6524] bridge_slave_0: left allmulticast mode [ 361.345115][ T6524] bridge_slave_0: left promiscuous mode [ 361.350857][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.722214][T11537] FAULT_INJECTION: forcing a failure. [ 361.722214][T11537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.767375][T11537] CPU: 1 UID: 0 PID: 11537 Comm: syz.1.1273 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 361.778201][T11537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 361.788301][T11537] Call Trace: [ 361.791602][T11537] [ 361.794558][T11537] dump_stack_lvl+0x16c/0x1f0 [ 361.799281][T11537] should_fail_ex+0x497/0x5b0 [ 361.804005][T11537] _copy_from_user+0x30/0xf0 [ 361.808625][T11537] move_addr_to_kernel+0x68/0x160 [ 361.813688][T11537] __sys_sendto+0x169/0x4d0 [ 361.818228][T11537] ? __pfx___sys_sendto+0x10/0x10 [ 361.823321][T11537] ? ksys_write+0x1ad/0x260 [ 361.827853][T11537] ? __pfx_ksys_write+0x10/0x10 [ 361.832737][T11537] __x64_sys_sendto+0xe0/0x1c0 [ 361.837538][T11537] ? do_syscall_64+0x91/0x250 [ 361.842251][T11537] ? lockdep_hardirqs_on+0x7c/0x110 [ 361.847479][T11537] do_syscall_64+0xcd/0x250 [ 361.852018][T11537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.857947][T11537] RIP: 0033:0x7f4ffd37dff9 [ 361.862387][T11537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.882327][T11537] RSP: 002b:00007f4ffe256038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 361.890750][T11537] RAX: ffffffffffffffda RBX: 00007f4ffd535f80 RCX: 00007f4ffd37dff9 [ 361.898727][T11537] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000003 [ 361.906702][T11537] RBP: 00007f4ffe256090 R08: 0000000020000140 R09: 000000000000007f [ 361.914675][T11537] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 361.922647][T11537] R13: 0000000000000000 R14: 00007f4ffd535f80 R15: 00007ffccb1c69e8 [ 361.930629][T11537] [ 362.599723][ T6524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.630481][ T6524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.652458][ T6524] bond0 (unregistering): Released all slaves [ 362.879636][ T6524] )zV: left promiscuous mode [ 363.046688][T11270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.252161][T11567] FAULT_INJECTION: forcing a failure. [ 363.252161][T11567] name failslab, interval 1, probability 0, space 0, times 0 [ 363.265177][T11567] CPU: 1 UID: 0 PID: 11567 Comm: syz.2.1283 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 363.275971][T11567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 363.286046][T11567] Call Trace: [ 363.289344][T11567] [ 363.292294][T11567] dump_stack_lvl+0x16c/0x1f0 [ 363.297011][T11567] should_fail_ex+0x497/0x5b0 [ 363.301729][T11567] should_failslab+0xc2/0x120 [ 363.306441][T11567] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 363.311838][T11567] ? sctp_get_port_local+0xba4/0x1650 [ 363.317232][T11567] sctp_get_port_local+0xba4/0x1650 [ 363.322446][T11567] ? __pfx_sctp_get_port_local+0x10/0x10 [ 363.328086][T11567] ? lock_acquire+0x2f/0xb0 [ 363.332597][T11567] ? sctp_bind_addr_match+0x43/0x300 [ 363.337892][T11567] ? sctp_bind_addr_match+0x19d/0x300 [ 363.343275][T11567] sctp_do_bind+0x223/0x700 [ 363.347786][T11567] sctp_connect_new_asoc+0x5ff/0x790 [ 363.353082][T11567] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 363.358980][T11567] ? mark_held_locks+0x9f/0xe0 [ 363.363753][T11567] ? sctp_sendmsg+0x112f/0x1f10 [ 363.368609][T11567] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 363.374166][T11567] sctp_sendmsg+0x162a/0x1f10 [ 363.378843][T11567] ? __pfx___lock_acquire+0x10/0x10 [ 363.384056][T11567] ? __pfx_sctp_sendmsg+0x10/0x10 [ 363.389111][T11567] ? lock_acquire+0x2f/0xb0 [ 363.393635][T11567] ? __pfx_aa_sk_perm+0x10/0x10 [ 363.398504][T11567] ? __pfx_sctp_sendmsg+0x10/0x10 [ 363.403547][T11567] inet_sendmsg+0x119/0x140 [ 363.408059][T11567] __sys_sendto+0x426/0x4d0 [ 363.412592][T11567] ? __pfx___sys_sendto+0x10/0x10 [ 363.417666][T11567] ? ksys_write+0x1ad/0x260 [ 363.422186][T11567] ? __pfx_ksys_write+0x10/0x10 [ 363.427052][T11567] __x64_sys_sendto+0xe0/0x1c0 [ 363.431841][T11567] ? do_syscall_64+0x91/0x250 [ 363.436536][T11567] ? lockdep_hardirqs_on+0x7c/0x110 [ 363.441751][T11567] do_syscall_64+0xcd/0x250 [ 363.446273][T11567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.452181][T11567] RIP: 0033:0x7f44de57dff9 [ 363.456598][T11567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.476222][T11567] RSP: 002b:00007f44df3ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 363.484643][T11567] RAX: ffffffffffffffda RBX: 00007f44de735f80 RCX: 00007f44de57dff9 [ 363.492614][T11567] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000003 [ 363.500595][T11567] RBP: 00007f44df3ee090 R08: 0000000020000140 R09: 000000000000007f [ 363.508579][T11567] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 363.516566][T11567] R13: 0000000000000000 R14: 00007f44de735f80 R15: 00007fff4ca5a2c8 [ 363.524558][T11567] [ 363.661890][T11270] veth0_vlan: entered promiscuous mode [ 363.897953][T11270] veth1_vlan: entered promiscuous mode [ 363.932185][T11270] veth0_macvtap: entered promiscuous mode [ 364.017062][T11270] veth1_macvtap: entered promiscuous mode [ 364.067409][T11270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.132403][T11270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.157423][T11270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.211466][T11270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.251498][T11270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.294314][T11270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.324868][T11270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.391779][T11270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.437219][T11270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.471700][T11270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.483530][T11270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.493641][T11270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.504169][T11270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.514058][T11270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.524539][T11270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.536278][T11270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.546946][T11270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.558043][T11270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.568075][T11270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.576875][T11270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.585869][T11270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.594784][T11270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.094387][ T6524] hsr_slave_0: left promiscuous mode [ 365.100374][ T6524] hsr_slave_1: left promiscuous mode [ 365.129406][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.144145][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.171753][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.180498][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.236575][ T6524] veth1_macvtap: left promiscuous mode [ 365.242130][ T6524] veth0_macvtap: left promiscuous mode [ 365.270114][ T6524] veth1_vlan: left promiscuous mode [ 365.280205][ T6524] veth0_vlan: left promiscuous mode [ 366.422454][ T6524] team0 (unregistering): Port device team_slave_1 removed [ 366.549140][ T6524] team0 (unregistering): Port device team_slave_0 removed [ 367.211778][T11380] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 367.275947][ T6509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.283977][ T6509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.285816][T11380] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 367.366320][T11380] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 367.387807][T11380] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 367.486128][ T6509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.560136][ T6509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.632835][T11380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.651359][T11380] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.683650][T11380] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 367.694208][T11380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.742477][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.749738][ T6518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.835085][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.842198][ T6518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.327109][T11380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.500389][T11380] veth0_vlan: entered promiscuous mode [ 368.553341][T11380] veth1_vlan: entered promiscuous mode [ 368.654007][T11380] veth0_macvtap: entered promiscuous mode [ 368.672388][T11380] veth1_macvtap: entered promiscuous mode [ 368.721645][T11380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.763604][T11380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.793675][T11380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.813580][T11380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.843553][T11380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.866018][T11380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.900248][T11380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.953693][T11380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.984941][T11380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.027598][T11380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.047506][T11380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.076906][T11380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.101428][T11380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.122865][T11380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.144486][T11380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.158508][T11380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.181779][T11380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.226369][T11380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.261980][T11380] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.281812][T11380] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.313797][T11380] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.322553][T11380] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.486609][ T6518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.528523][ T6518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.584001][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.591890][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.857701][T11747] netlink: zone id is out of range [ 370.862859][T11747] netlink: zone id is out of range [ 370.922608][T11747] netlink: zone id is out of range [ 370.930322][T11747] netlink: zone id is out of range [ 370.938582][T11747] netlink: zone id is out of range [ 370.945350][T11747] netlink: set zone limit has 4 unknown bytes [ 375.523165][T11846] svc: failed to register nfsdv3 RPC service (errno 111). [ 375.561084][T11846] svc: failed to register nfsaclv3 RPC service (errno 111). [ 378.867502][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.878738][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.142568][ T30] INFO: task syz.2.706:8945 blocked for more than 143 seconds. [ 380.162440][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 380.170124][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.232416][ T30] task:syz.2.706 state:D stack:28592 pid:8945 tgid:8942 ppid:5803 flags:0x00004004 [ 380.272421][ T30] Call Trace: [ 380.286156][ T30] [ 380.289139][ T30] __schedule+0xef5/0x5750 [ 380.311887][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 380.332723][ T30] ? find_held_lock+0x2d/0x110 [ 380.350731][ T30] ? __pfx___schedule+0x10/0x10 [ 380.372507][ T30] ? schedule+0x298/0x350 [ 380.379760][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.402454][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 380.408662][ T30] ? lock_acquire+0x2f/0xb0 [ 380.442457][ T30] ? schedule+0x1fd/0x350 [ 380.446863][ T30] schedule+0xe7/0x350 [ 380.450972][ T30] schedule_timeout+0x258/0x2a0 [ 380.492394][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 380.502675][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.507945][ T30] __wait_for_common+0x3e1/0x600 [ 380.552387][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 380.557887][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 380.582764][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 380.588250][ T30] wait_for_completion_state+0x1c/0x40 [ 380.622403][ T30] do_coredump+0x82f/0x4160 [ 380.627692][ T30] ? hlock_class+0x4e/0x130 [ 380.632249][ T30] ? stack_depot_save_flags+0x28/0x900 [ 380.658358][ T30] ? __pfx_do_coredump+0x10/0x10 [ 380.692716][ T30] ? kmem_cache_free+0x152/0x4b0 [ 380.697737][ T30] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 380.717140][ T30] ? do_syscall_64+0xda/0x250 [ 380.721894][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.742437][ T30] get_signal+0x237c/0x26d0 [ 380.759418][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 380.769287][ T30] ? __pfx_get_signal+0x10/0x10 [ 380.794486][ T30] ? force_sig_info_to_task+0x3a0/0x660 [ 380.812365][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 380.818959][ T30] ? __pfx_force_exit_sig+0x10/0x10 [ 380.844852][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 380.851194][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 380.887602][ T30] do_syscall_64+0xda/0x250 [ 380.892194][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.922367][ T30] RIP: 0033:0x7fd28f37dff9 [ 380.926842][ T30] RSP: 002b:00007fd2901e80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 380.972352][ T30] RAX: ffffffffffffffda RBX: 00007fd28f536060 RCX: 00007fd28f37dff9 [ 381.002416][ T30] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd28f536064 [ 381.021421][ T30] RBP: 00007fd28f536058 R08: 00007fd29020a080 R09: 0000000000000000 [ 381.067343][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd28f536064 [ 381.082422][ T30] R13: 0000000000000000 R14: 00007ffd9ab63630 R15: 00007ffd9ab63718 [ 381.102362][ T30] [ 381.105485][ T30] [ 381.105485][ T30] Showing all locks held in the system: [ 381.122455][ T30] 1 lock held by khungtaskd/30: [ 381.128254][ T30] #0: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 381.162324][ T30] 2 locks held by getty/4986: [ 381.167059][ T30] #0: ffff88814bf870a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 381.192305][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 381.212360][ T30] 2 locks held by kworker/u8:21/6521: [ 381.217782][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 381.242381][ T30] #1: ffffc900047dfd80 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 381.272324][ T30] 2 locks held by syz.2.706/8943: [ 381.277441][ T30] 3 locks held by syz.0.1349/11915: [ 381.292304][ T30] 2 locks held by syz.3.1354/11922: [ 381.297558][ T30] #0: ffff88807c9a8e08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x270 [ 381.312488][ T30] #1: ffffffff8ddc3178 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 381.322830][ T30] 2 locks held by syz.2.1362/11962: [ 381.328363][ T30] 4 locks held by syz.1.1360/11966: [ 381.345050][ T30] [ 381.383549][ T30] ============================================= [ 381.383549][ T30] [ 381.411488][ T30] NMI backtrace for cpu 1 [ 381.415875][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 381.426415][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.436506][ T30] Call Trace: [ 381.439808][ T30] [ 381.442762][ T30] dump_stack_lvl+0x116/0x1f0 [ 381.447484][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 381.452462][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 381.458484][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 381.464500][ T30] watchdog+0xf0c/0x1240 [ 381.468791][ T30] ? __pfx_watchdog+0x10/0x10 [ 381.473566][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.478800][ T30] ? __kthread_parkme+0x148/0x220 [ 381.483862][ T30] ? __pfx_watchdog+0x10/0x10 [ 381.488578][ T30] kthread+0x2c1/0x3a0 [ 381.492700][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.497932][ T30] ? __pfx_kthread+0x10/0x10 [ 381.502556][ T30] ret_from_fork+0x45/0x80 [ 381.507002][ T30] ? __pfx_kthread+0x10/0x10 [ 381.511624][ T30] ret_from_fork_asm+0x1a/0x30 [ 381.516443][ T30] [ 381.521579][ T30] Sending NMI from CPU 1 to CPUs 0: [ 381.528182][ C0] NMI backtrace for cpu 0 [ 381.528195][ C0] CPU: 0 UID: 0 PID: 11966 Comm: syz.1.1360 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 381.528220][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.528231][ C0] RIP: 0010:lock_release+0x3c7/0x6f0 [ 381.528264][ C0] Code: 0f 84 86 01 00 00 48 c7 c7 e0 cb 4c 8b e8 51 d6 a8 09 b8 ff ff ff ff 65 0f c1 05 ec 61 98 7e 83 f8 01 0f 85 fd 01 00 00 9c 58 c4 02 0f 85 e8 01 00 00 48 f7 04 24 00 02 00 00 74 01 fb 48 b8 [ 381.528284][ C0] RSP: 0018:ffffc9000251ed60 EFLAGS: 00000046 [ 381.528301][ C0] RAX: 0000000000000046 RBX: 1ffff920004a3dae RCX: ffffc9000251edb0 [ 381.528315][ C0] RDX: 1ffff1100db4f15a RSI: ffffffff8b4ccbe0 RDI: ffffffff8bb12060 [ 381.528330][ C0] RBP: 66aa2c548f5fde72 R08: 0000000000000000 R09: fffffbfff20398c1 [ 381.528344][ C0] R10: ffffffff901cc60f R11: 0000000000000000 R12: 0000000000000006 [ 381.528356][ C0] R13: 0000000000000007 R14: ffff88806da78ad8 R15: ffff88806da78000 [ 381.528371][ C0] FS: 00007f4ffe2356c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 381.528392][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.528406][ C0] CR2: 00007f4ffe2149a0 CR3: 000000005648e000 CR4: 00000000003526f0 [ 381.528419][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 381.528432][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 381.528444][ C0] Call Trace: [ 381.528451][ C0] [ 381.528458][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 381.528487][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 381.528520][ C0] ? nmi_handle+0x1a9/0x5c0 [ 381.528541][ C0] ? lock_release+0x3c7/0x6f0 [ 381.528567][ C0] ? default_do_nmi+0x6a/0x160 [ 381.528587][ C0] ? exc_nmi+0x170/0x1e0 [ 381.528605][ C0] ? end_repeat_nmi+0xf/0x53 [ 381.528633][ C0] ? lock_release+0x3c7/0x6f0 [ 381.528660][ C0] ? lock_release+0x3c7/0x6f0 [ 381.528686][ C0] ? lock_release+0x3c7/0x6f0 [ 381.528712][ C0] [ 381.528718][ C0] [ 381.528725][ C0] ? page_ref_add_unless.constprop.0+0xe7/0x390 [ 381.528751][ C0] ? __pfx_lock_release+0x10/0x10 [ 381.528776][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 381.528800][ C0] ? lock_acquire+0x2f/0xb0 [ 381.528825][ C0] ? page_ref_add_unless.constprop.0+0x30/0x390 [ 381.528852][ C0] page_ref_add_unless.constprop.0+0xec/0x390 [ 381.528878][ C0] next_uptodate_folio+0xf6/0x4b0 [ 381.528904][ C0] filemap_map_pages+0x648/0x16a0 [ 381.528936][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 381.528965][ C0] ? lock_acquire+0x2f/0xb0 [ 381.528989][ C0] ? do_pte_missing+0xcd2/0x3e50 [ 381.529017][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 381.529042][ C0] do_pte_missing+0xd91/0x3e50 [ 381.529068][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 381.529096][ C0] ? rcu_is_watching+0x12/0xc0 [ 381.529119][ C0] __handle_mm_fault+0x100a/0x2a10 [ 381.529149][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 381.529175][ C0] ? __pfx_lock_release+0x10/0x10 [ 381.529206][ C0] ? follow_page_pte+0x50d/0x1eb0 [ 381.529234][ C0] handle_mm_fault+0x3fa/0xaa0 [ 381.529263][ C0] __get_user_pages+0x90f/0x3b90 [ 381.529293][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 381.529317][ C0] ? down_read_killable+0xcc/0x380 [ 381.529343][ C0] ? __pfx_down_read_killable+0x10/0x10 [ 381.529369][ C0] ? shmem_file_write_iter+0xcf/0x140 [ 381.529397][ C0] ? __kernel_write_iter+0x59f/0xa80 [ 381.529420][ C0] get_dump_page+0xfb/0x220 [ 381.529445][ C0] ? __pfx_get_dump_page+0x10/0x10 [ 381.529472][ C0] ? dump_user_range+0x2a7/0x8a0 [ 381.529499][ C0] ? __kasan_check_read+0x4/0x20 [ 381.529523][ C0] dump_user_range+0x135/0x8a0 [ 381.529548][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 381.529572][ C0] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 381.529596][ C0] ? __pfx_writenote+0x10/0x10 [ 381.529624][ C0] elf_core_dump+0x2766/0x3840 [ 381.529655][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 381.529680][ C0] ? kasan_save_stack+0x42/0x60 [ 381.529702][ C0] ? kasan_save_stack+0x33/0x60 [ 381.529725][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 381.529747][ C0] ? __kmalloc_node_noprof+0x211/0x440 [ 381.529773][ C0] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 381.529799][ C0] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 381.529823][ C0] ? asm_exc_page_fault+0x26/0x30 [ 381.529862][ C0] ? rcu_is_watching+0x12/0xc0 [ 381.529883][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 381.529904][ C0] ? get_signal+0x237c/0x26d0 [ 381.529929][ C0] ? do_coredump+0x2c42/0x4160 [ 381.529950][ C0] do_coredump+0x2c42/0x4160 [ 381.529977][ C0] ? __pfx_do_coredump+0x10/0x10 [ 381.529999][ C0] ? kmem_cache_free+0x152/0x4b0 [ 381.530023][ C0] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 381.530047][ C0] ? asm_exc_page_fault+0x26/0x30 [ 381.530092][ C0] get_signal+0x237c/0x26d0 [ 381.530115][ C0] ? force_sig_fault+0xad/0xf0 [ 381.530136][ C0] ? __pfx_get_signal+0x10/0x10 [ 381.530159][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 381.530185][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 381.530211][ C0] ? __bad_area_nosemaphore+0x334/0x6a0 [ 381.530242][ C0] ? do_user_addr_fault+0x920/0x13f0 [ 381.530272][ C0] irqentry_exit_to_user_mode+0x13f/0x280 [ 381.530297][ C0] asm_exc_page_fault+0x26/0x30 [ 381.530319][ C0] RIP: 0033:0x401000 [ 381.530339][ C0] Code: Unable to access opcode bytes at 0x400fd6. [ 381.530347][ C0] RSP: 002b:000000000000000b EFLAGS: 00010246 [ 381.530362][ C0] RAX: 0000000000000000 RBX: 00007f4ffd536058 RCX: 00007f4ffd37dff9 [ 381.530375][ C0] RDX: ffffffff81000000 RSI: 0000000000000003 RDI: 0000004081000009 [ 381.530388][ C0] RBP: 00007f4ffd3f0296 R08: 0000000080000001 R09: 0000000000000000 [ 381.530402][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 381.530415][ C0] R13: 0000000000000000 R14: 00007f4ffd536058 R15: 00007ffccb1c69e8 [ 381.530432][ C0] ? 0xffffffff81000000 [ 381.530447][ C0] [ 382.312265][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 382.319217][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 382.329752][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 382.339828][ T30] Call Trace: [ 382.343123][ T30] [ 382.346072][ T30] dump_stack_lvl+0x3d/0x1f0 [ 382.350698][ T30] panic+0x71d/0x800 [ 382.354630][ T30] ? __pfx_panic+0x10/0x10 [ 382.359079][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 382.364484][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 382.370500][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 382.375907][ T30] ? watchdog+0xd76/0x1240 [ 382.380361][ T30] ? watchdog+0xd69/0x1240 [ 382.384825][ T30] watchdog+0xd87/0x1240 [ 382.389111][ T30] ? __pfx_watchdog+0x10/0x10 [ 382.393821][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 382.399065][ T30] ? __kthread_parkme+0x148/0x220 [ 382.404125][ T30] ? __pfx_watchdog+0x10/0x10 [ 382.408840][ T30] kthread+0x2c1/0x3a0 [ 382.412938][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 382.418166][ T30] ? __pfx_kthread+0x10/0x10 [ 382.422876][ T30] ret_from_fork+0x45/0x80 [ 382.427322][ T30] ? __pfx_kthread+0x10/0x10 [ 382.431944][ T30] ret_from_fork_asm+0x1a/0x30 [ 382.436760][ T30] [ 382.440025][ T30] Kernel Offset: disabled [ 382.444344][ T30] Rebooting in 86400 seconds..