last executing test programs: 36.986725894s ago: executing program 1 (id=7035): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) arch_prctl$auto(0x2002, 0x2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r1, 0x611, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioperm$auto(0x3, 0x6, 0x5) unlinkat$auto(0xa6f0, 0x0, 0x0) io_setup$auto(0x57fa, &(0x7f0000000040)=0x4) bind$auto(r0, &(0x7f0000000080)={0x2b, @sockaddr_1_1={"f482356042be923844e95f24c60939c6a75695817b2096213dc7aa935cf60a6637"}}, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x8) 36.64682482s ago: executing program 2 (id=7037): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) keyctl$auto(0x3, 0x9, 0x9, 0x9, 0x9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f00000001c0)='\xc4--:\xdd:,.\xa1K\'\a6\xeb\x9a\xcb\xd5:J\xf2\x1e\x8fj\xa5\xd7l(\x10b\xc3\x95tl\xca\n\"{l\b\xaa+w \x7f\x042\xbe\x95`\xb0o\xe7\x84\xcd\xf7\xb4\xc1\x89\xabR\x16\xca\xa86\xbf\x9e\xff\xc0r\xa7\xa7[\xd2\xc0\xcf \xefZ\x9b\x01\x82$5_\x14z1\x1b:um\xcc*(cB\x05\xcd\x018\x80\x86\x87\xd2\x84`0\xda\xc8Y\x83>*\x9e\xf7!v\xf0\xeb\x1e\xd3\xd1&H<\x7f\xf7\x9f\xc28\xc9ViL7c?\xd75\x8f\xff\"\xf8\x93#\xa49\'\xd5\xbeH\x82\n\xe3\x19\xd4\t\xd5Eu\x05\xf4b\xc8\x99\x17\xee*D\x86\xa2\x9f\xa0\x9f\xca$\xcf\x19\xb34o\xbc\xd8h\x97\xcdB\x8b\x03\xaa#\xff\xd1l\xbc\v\f-k\x9d\xf5\xde\xb3\xb3pf\x02\x8b:\x13\x00\xdf\xb4\xd4f0\xffZ\x84\xd8\xce\xa8{@\x90\xd0\xb00\xb2\xd0(\x9fy\xb7\x02\xbcn\x03\xceF\xbc\xf1rK\x8e\x17+\xa2\x8aG\xed\x12\xfds\x1d\x13;\x16\xbcdZ\x90\x8e\xe8\x88\x17r\x1fJ\xb5\r\x93\xbb\xe8Z\xae%\x1a\x9b<\a\t\\,<\x04a\x84\xe7\xea\xefq8\xb3\x93GF&\xda\x9dn\xdf:\xe9nf;\x85\x1a\xe5\x03\xaf\xd5\xdb\xdeDSE\xae\xae\x1e\x0e\xab\xbc\x8az\x959J\a\x83\xf0\x1d\xc5\xca\xb38\xe2\x1d \xd4\x00'/356, 0x4) mmap$auto(0x8000000, 0xf0ffff, 0x1000000016, 0x13, 0x3, 0x180000000) 36.068822917s ago: executing program 1 (id=7040): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket(0x11, 0xa, 0x300) clock_gettime$auto(0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) close_range$auto(0x2, 0x8000, 0x0) 35.904761866s ago: executing program 2 (id=7042): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r0 = open(&(0x7f0000000080)='./file0\x00', 0x22000, 0x50) mq_open$auto(0xffffffffffffffff, 0x200, 0x663c5371, 0x0) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) msgrcv$auto(0x0, 0xfffffffffffffffd, 0x0, 0x10, 0xdf66) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setns(0xffffffffffffffff, 0x0) unshare$auto(0x40000080) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, 0x0, 0x107f) vmsplice$auto(0x3, &(0x7f0000000080)={0x0, 0x6}, 0x9, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ustat$auto(0x6, 0xfffffffffffffffd) madvise$auto(0x0, 0x20200, 0x15) syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f00000000c0), 0xffffffffffffffff) socket(0x2, 0x5, 0x0) fcntl$auto(0x0, 0x407, 0x100000) syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000040), r0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 34.27765004s ago: executing program 1 (id=7047): socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x1c, r1, 0x1301, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20008800) connect$auto(r0, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) r2 = socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setrlimit$auto(0x1000000007, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') clock_nanosleep$auto(0x0, 0x0, &(0x7f0000000200)={0x7f, 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r3) sendmsg$auto_GTP_CMD_GETPDP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x38, r4, 0x401, 0x70bd26, 0x25df9bfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x38f}, @GTPA_LINK={0x8, 0x1, 0x7}, @GTPA_PEER_ADDR6={0x14, 0xb, {@u6_addr16=[0x100, 0x3, 0x8, 0x8, 0x4, 0xc3, 0x7, 0x2]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8014) connect$auto(0x3, &(0x7f00000018c0)={0x2, @sa_data_min="915ba9fec23ea3df94bb303b2f9d"}, 0x55) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) 32.972134575s ago: executing program 1 (id=7048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) clone$auto(0x521deeae, 0x7, 0xfffffffffffffffe, 0x0, 0x9) r2 = socket(0x2, 0x1, 0x3ff) mmap$auto(0x0, 0x1004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) futex$auto(0x0, 0x85, 0x2, 0x0, 0x0, 0x40000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getxattr$auto(0x0, 0x0, 0x0, 0xffffffffffffffba) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xc, 0x8000) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x936355e497c8b7e3, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x7, 0x1, "ceb0a8"}, @ETHTOOL_A_LINKMODES_HEADER={0x7, 0x1, "1bd482"}, @ETHTOOL_A_LINKMODES_HEADER={0x7, 0x1, "00c00a"}, @ETHTOOL_A_LINKMODES_HEADER={0x7, 0x1, "a5f8c5"}, @ETHTOOL_A_LINKMODES_HEADER={0x7, 0x1, "ba5d0c"}, @ETHTOOL_A_LINKMODES_HEADER={0x7, 0x1, "d757b7"}]}, 0x44}, 0x1, 0x0, 0x0, 0x8084}, 0x4000000) setitimer$auto(0x1, &(0x7f0000000000)={{0x2, 0x7f}, {0x800000004, 0x2}}, 0x0) bpf$auto(0x8, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x29c, 0xa, @old_map_fd=0x5}, 0xa3) r6 = fcntl$getown(r5, 0x9) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r1, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HSR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r6}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0xc0) 32.17554326s ago: executing program 1 (id=7049): connect$auto(0x3, &(0x7f0000000040)={0x1, @sockaddr_1_1}, 0x54) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0xc8, 0x2, 0x9, 0xffffffffffff8001, 0xbef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) swapoff$auto(&(0x7f0000000640)='+#$\x00') get_robust_list$auto(0x1, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000040)={0x1, @sockaddr_1_1}, 0x54) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0xc8, 0x2, 0x9, 0xffffffffffff8001, 0xbef) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) swapoff$auto(&(0x7f0000000640)='+#$\x00') (async) get_robust_list$auto(0x1, 0x0, 0x0) (async) 27.446420689s ago: executing program 1 (id=7050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000000c0)={0x20, r3, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x9, 0x2, 'nfsd\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000100), r2) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x6000, 0x20000000}, 0x94) 27.07944025s ago: executing program 2 (id=7053): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x5}, @NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_LEASETIME={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x894}, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_ADD_LINK(r0, &(0x7f0000001340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001300)={&(0x7f00000001c0)={0x1114, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_EHT_CAPABILITY={0x1004, 0x136, "c5f99cfb5f4571b636350cd228830ce5820ecd399db4d8a25dffeab44a4ee773ac6ee176d419897231b33c0a93deb1ccbd22280186aaf197271ad4b83abcb25fb8198fe4af6d73eef70cb11491d35d69c126391d1e4d6ce0fa6557b6f60fde42dd9101c612808a0fd80e911c771d93ef51134573aed252f831daa454977f8a5c8f70f493cf22e0c9efff883b420b39f5e1873c7e642070b2f1c8f86182928db4e73836e3481fb8d47233aa2db1c7fe6bfbc3f00236802ccb9ef1a0903d21f7b2408c61f54bfd78a3ded0dcf394af2fa6b8cb78f4f0d90161627ba8af82d648245b6156d8d368694aabcfdc4c8a6b25bbee21e5041ed9ee5a3ade238fa731fd685ed6c472182c73db8453642a7df68ebbf03400116e369aa02a25fc64a09f3f41d9436f94ae23ab0bf9179a65eaaa50981feac5d6b935051ef5caa6977b9cf9aa3917438ccc4b8911d1a5cc076feb99dcdf9ffa230466232e5f1ac07dce9297e89aa632395c3d958c40605728dccdf55d60b9e272b16867b3192cdfc0659a8a53f87d2674a7637664527689e520a1d3f4d7297afdd8434fc4138eb2df8b57ee5d22e90b47a5f49ba37a51684e932632b8f6e47432b7c24d30cd005215e223f4d9f241032c88d16855c50e481838fdacc93d8a65baa12aa7fd56de958f0aed7e221ac0d4b757292e277edfb16fd2daa152a1c3db38a447f6b986ebd49060686d0e72391966eeb0cf5cdf44cc6d8ca3d5443a2014f1450e8653be5f4b0154b3254322b7b5cf2cef1691ebf463753ad7247fd6de0422df89bb00034a6291c41c13e4bcc6051a80b8111ed44f42e62d7b319f04faeb19b39178c4cd28965a203e935ed57c9a5968751c59636bece901db7719f667e0d0ee35e0f38b2a15a177c341a1cc4230b68b3bdb98675537739f17664776207eac1e98fb9e7e262fc3a2d3018b0d660d2a6a4b3146d0c5a244b3e9c1af835b072a9512d59609d1085f5e71690f4af8aa87b242d2253e5f1cc932761245ed38b5b1fedac99a2f6963df97c3593c3a321e35dc81f396fdde1ad89b43e25faa563e38d7c7db1ff077413402608f898ad7a624585d1b69ec301986575ed369d2633c4fe71b7b6d4e80d50a8f835616d19c1560eebeb164239a52dfb18459dd0f9aaba6a92e50780c94a3e54c82fc80e12cb7d88a48d367cfdf96edfde9d80106a1cb23f36f124bfcf8dfea172ae38f76c96d0445266cfc1832531351affa8493d58d088f0315467f60cf8c89411c505c65fc8ef39940d90b2590ff4cc75b608b9118e9ec905ad1630decb20f98c1a05fb9ad4bf7a8aacd434b2e9eae3bafe12a078a12908d799161904371d64ad15b56b69564672b9e16f760f9e42d53cfc9c92c6a5cf01af5eb511e208164bdca0bc313ac5c15753f1c10b84f84816bb73065b42ff6782b460725afbda53089a00549b69ee42d736a567159c5d45a3418866dff095ee7a58de9693e46fcaa4c38c6abd58fc4205071417c96980d083c4c93a13656b78a95bc0742b92a5ccd2fa6749ee35202cfd755cf57be0376c0edd59d43bd655b1f81015952a470f6566bf84b3a1f08bad3c3ccf290c9656b8ded6f1eb08abab312cc792b5b6333a8c777f21c3b48a5baf8a694013be3d60a64aec1f22f6187db17af9944246eb7551c5fab182790ab98a1fdaf2f21a5f4192d4038c59b4bd361dd6f6d77f6daa64edd429a855dc560f288ace7ddfc4d79454d4e63c8c236868499471e29410c0270a86ef59b0bf9e3f697cbb35c418891bf99ca05412c42bfcaf51014bd433f7cf15782f7c49772de9a42aa7216cdc7f3708ff139246151e033f60309732779b82445c444637e1887bca1bacacc4886087973bd9125ff60878e9feaeaa0aadf7630d1617887c6bf6b33387e2cb9e65c91c5a0b08f51cbdd1c2ac9abf7464798f206d74f766074eae1bdb93bebee8a6c2bc75529d4caae776ff0d54f301a7266d3f5efe30441bac5eba871c4319dc5ad43e42c205502b7e7ee4ee8481ea196dfc8228c602ea31fe63a1224eb166924bb5bb43ff560b2baf2b49f08b449ab27008f0b4411d0ae8f084f1887496c85a949edf7fdd7c72d5bebcef0f59df3673eccda0387699fc02ebfc57a1dda21294fd10c4e3704ce802c24e3cf87f29d166a2d3ba0585a6b64fbda8eb7739fde580971de2b2d066322cc21856f28bb3bd3a71139caba604c8fdbf6b5485e941900d4215ee577148d0d8fe97477d796a61cea68076c363ec95539abbc9d04de07fb59fa63f79c8892dd3bf6b6e45f7f865168a302c24e41b5d80769c14a9d3401689f0d6d4d3befd6e45f7e48c9624624542dd068d6148df07fa03e3b90404690adb10b74db323c77a578107c763e2dcb7456f00a1114d395f3e50ae9be253e18765f9a55891062fd716084425a942644690e94b1b11f37419bd1c2ac8762d4a7da748d6c1df9b42f803949bb61e40174c7e9ddf1b46ef0f4037600a5c6968a9f2e4a14d63eb1495cce22b69add29b71e4597062728aee31cf511d7bd84cd3621bebb5e4768e1902006afce3b6b27e017d432afc0bc6dc88cc1e72c130d1b10983821215686191e290fc6617a4e907cbe5a0dd79206536cb0990772df0c438af3e7a57c28a0373b7ff597f976b2ae189c4a3bd6ebba7a934d29501a91f88fd29653195c1491b38866162ae79db74da7a828e15731b3117f5254fce73ae9832d136cda3549dc93a6b3efe028cdda7a2be73b8c273c453daac33e65e444b5f46be6b2d0e8b5aac1a32460d00234b3691c845f0f52a02cd987c2725b4141fb957f14cfd53a5c07dbf302f01240b382d793ee194148825b01fdf5e94624f22d25169f3a752cc21dd5c3f2acea654f8e0fb42b350e1337639fdfec7cb55cc9bfc840214200f2bb661e0e95d7e8c577c53916e248bf4b6a8b7ab23eaf0efee6c3b49366c11d20a7be9435f6e7acb61d09ab0f77d705fb24deefb8df57ce8cdc9828b1a60e2c1926ca0b22eddcbeea4266fee0a05d15e01c80fba2a07ad025b0e9518c71a5bc1a0119c1deb5194ad689b9b4caa53e645227cff20018410ddf2ffc4c66a87d4a3f3ca8c79f8de23d705e11802a4afdd5e2a2801a5dfbec9a9dc5d1b981264135f01fd8ced088ff341bc8a3357abd4f56d3aa04eb777c2bca924cd2e76a85236c7c9fdb1caf6b22f0a40ba442b9d441a03d107094cb73a32e4dd0f3c867409f25b524b49879a26dfac39a315af18af62a7f3ed6f16bb7d8b6d32374cc272b8acf639c47c69c504c01f8b75de50da92fd7b2a4da9e5fa96799944dd999e0f157d52b68633fa93377f9ca60cbc4295b4f9e0fd515ae88386ce7527cb4944a3ec1ebdc3ad5274c87020e696a065047f63d155341d4ad2818ffb47b6f0f9d1f9f5cbc5c49fe111ba84f490b90d8ca6860a4557cd66fe14d9f9d465ee3a5c94d03c75fbbd840ee1c0fdfa3882ebf780bc1b554dc468f15773994551d7da19c7411ef79fd83dabb995392e5114f73ea56cc621721ab996b1bf9d919c5135775cbced6ab6a655e8c528ea613674a99799093667a9d2fb05a6f0467092b8d8ed15525af77e91aa41648bb53cbfc284b1eb0a2cdc761fb625f5bb707513e798f9c41a35bdfe02a007915cb88dbeb878d9151863adc709075ce880fac8e42f34cddfadc7e6933b97fcea150bca74c16256c88fa329f578769613593799cebf785e16464d07c602dabd9a13422d137e08b69bf804cd52340d9b514c83c5fd7283346718af730d0b960e343ff00c52b41a8267f675ea726e8c3b04fcab74e30ce456c30297ec5fc3a6aa4d7344c5363688eb4412408c2849ac8f9ce74de6b7f2156711e19edce7ba651b10254f77f97847c823cd227cf967d7e7d5b1423b796faa0005bfc887c183a6c78213444afa27fc8221b093229d33a585ea4939c8543639700210ddda6b746f750e85242d8683d0eb91b53fa921a6a3401123455f090cde2cc45f1d8bde639c932e85aec231ae2ae0a5990f92e89e41678f541951a27bd6ef71775f3b67c4bad253aab005099e73505b23b7cbc7aa44e4b41447e097840df8cad281fe8c40c1fe203a38d3d371d51776b5a8e50ba371e16917aebf6f5abadb2944950b0716a06760560ca3416350e41efa061aad4aa58c08cab99951305da8917d63d8a0f8a286de4c7c481affb936fc87fc88d9a12e9f3dc441c9fcf17fcd9f30310e5fd5ac11580d08247d685719d685c2e41104f5479ca020873efa6219b22988e8319958f9a25ab5d2e486ec4096000510452871cba18be7ba39247491526e269ee011328746e833624b302dca2c2d762baec475b6f897da75f5509d982ca0bccf816f425ce55a419673f04b83898a708f96880a4e42cc173b23772587ad8303c6494e87068069b55fd65c036ff8b7df090e62da61d29a1b42bde28b88b2b62b266d61eba960695107a32c35f8f2f7aef81e4266c7b9a0bf5ccb6c7b9931bc7396e7abab134e21955d67d823dff39ce26c041e6398f85b2ef0c286213091d6e0a94635478f9104952e5ab387263834a76941279eb5d005d64af7935ddf7d399fb29bb46eb8a28fe15537f5b80bb5940d83325d60fd6debd2f5a7009cce2285f8cfefb70339878cac734b497cca1038140b46cdd46df65ddfa8dfd8edbf533dfc54e3fbc2cf4ef6412de0c21fc8b392ea5ed88ca0df6e84cefb5460a74fbbcb0a5dd613df95ec380fc3ee3d18c1554f2db6376947181e2785cb061e004143521232134d5f8c61970711631ff9573840b590f9eec4715fba2219861fcc1580c6924a7d7dd7d8e6f6b791c68ece1d4de26f4cdd00a20cdca5c85a1481490a4800738d6baad5854d5862f0fae65d2132314f5c3539032a77678347c94ec7954742c85a30bee0b743a850389f35e67c5449a2b8438b29fba3e8f52cb268bc51f8ba3333aa1325bef018e9b9ccdcbac495262e9b660d95d7d0513f50aff2d0e1505aaf0499e2b4c1537a8f2458f7f4abc83890960a95331c043115fda398f21e478400b4f3f944a2aa6295fa98990fda374fb6d5f6028b008380c03e2f608faf08e4914a2484ae08dc76b93c63bb7a8dc57eaf1b52db5b7c360ccf4ebe5056dafaee276f4f8052f972d40a6a51e26e96514872576a9509010859414045e7b14bb56edfa5b23c761b59932c7d49b3d9e832f6e2410ee324d070c17cbcf26426facdfab1e0ac1f6d97572e4c3c5a5004d294c8901a1575f9284164938668207dfab4360798aacc4f83943cb76993dcaeb05d264bd6bd0b20c3515efb1e1b1ace99327f70101a3f348a54f4e0a858e851af49a7b2417610dadf5faf65b5163865ec7108cd16470110e3f965aea728c3d2c47e32c6a3230d8bbd2c726b51ba8a288682a8e1e6db5224c410996f70b12abf2a42eefd51ec82af24b870bd9d8de6788d13c702428a64cb3d8074e5f833d77c45430677c39795720be4bf6c504cf079ad03be4e9ec26604e2f8e2800a883b2a77130ee97e2d13ee4947528cda433fa1b1c44d9d56533d5457f75977320255a064eeafcdb822630be4a0289e80ddf0f395a34d54b854ee89110880856afa1b358c39eba0e949f3378bbeecf9524a5aa14834a6faa35774f25abf587606a65177a63b69d6f1877f3d9f4dc6463d795ff23f76ef60c94494e417ba08f0c1ace9381c8b91cc4d20cc4c11301d5ef529a1f2a9bfcd252dfc5b961837c29060ab7359a81dc065024f4a3b884b8cad77e5e0692a07469cf76203c4cf558caafa9791068cc035513571f54dc8ad05c61"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x2}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_STA_FLAGS2={0xdf, 0x43, "332526850203c9b8ebfc595fb04b8ccafe20b01b65c66c57673d3c55831ac31e594545934057209141ed023a37a49620b13c3ed6771c688bbdd4d25734319d9018b139368de3dd7e8b79796929204b9497fe9e23cd06be85b6954f23c587eb9145258a783b05abf2dd7cf43bb40e6306a614af0699cecaa6fb9574b44b8f10280a70e653860760aa400a8bbee57ad3d151b1f893dfd8a87326a339fe15348352669207fbc796554d926b5f335c3d406073d72786c9e63a33f8c59a9553e8497725fd73a93f573e78ccb490881196e0dee25690fce8eddcfb4f2e64"}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5b9}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x7}]}, 0x1114}, 0x1, 0x0, 0x0, 0x4024080}, 0x0) mmap$auto(0x87be, 0x10, 0x1, 0x16, 0x4, 0x7) mmap$auto(0xfffffffffffffffb, 0x7, 0x10000000, 0x18, 0x3, 0xfffffffffffffff7) fanotify_init$auto(0xffffffff, 0x4) fanotify_init$auto(0x4, 0xf) munlock$auto(0x8000000000000000, 0x79d7) fanotify_init$auto(0x7, 0x1c4a) fanotify_init$auto(0xf8c, 0x0) fanotify_init$auto(0xffffffff, 0x0) r3 = open(&(0x7f0000001380)='./file0\x00', 0x121000, 0x10) dup3$auto(r3, r0, 0x0) capget$auto(&(0x7f00000013c0)={0x6, 0xffffffffffffffff}, &(0x7f0000001400)={0x5, 0x4, 0xfffffffc}) pidfd_open$auto(r4, 0x6) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001480), r3) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x38, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7f}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4004048) sendmsg$auto(r0, &(0x7f00000016c0)={&(0x7f0000001580)=[0x1, 0x6, 0x7], 0x2ca, &(0x7f0000001640)={&(0x7f00000015c0)=[0x886e, 0x2000, 0x6, 0x7, 0x0, 0x8, 0x0, 0x3f, 0x6], 0x380000}, 0x4, &(0x7f0000001680)=[0x10, 0x5, 0x429, 0x2, 0xead, 0x7], 0x2, 0x8}, 0x10001) setpgid$auto(r4, 0xc283) fanotify_init$auto(0x7ebc, 0x0) fanotify_init$auto(0x65, 0x1c000) mmap$auto(0x1, 0x9, 0x4000000, 0x12, 0x2, 0xfff) ppoll$auto(&(0x7f0000001700)={r0, 0x8, 0x7}, 0x7, &(0x7f0000001740)={0x4caa, 0x63654e90}, &(0x7f0000001780)={0xffffffffffffffdf}, 0x2) close_range$auto(r6, r0, 0x205) fanotify_init$auto(0xf, 0x5) mknod$auto(&(0x7f00000017c0)='nl80211\x00', 0xffff, 0xfbfa) io_uring_setup$auto(0x0, &(0x7f0000001800)={0x3, 0x1, 0x2, 0x9, 0xc, 0x5cbd4b65, r3, [0x6cf, 0x5, 0x1], {0x8, 0x400, 0x2, 0xef12f12, 0x80000000, 0x9, 0xc, 0x6, 0x300000000}, {0x8, 0x6, 0x40, 0x6, 0x8, 0xffffe649, 0x7, 0xcf1c, 0x6}}) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r7, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x50, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY={0x22, 0x14, "fb16099fb775bc62ab63d36819f10f739128014222eaf8f10409f70ba9ce"}, @THERMAL_GENL_ATTR_TZ_ID={0x8, 0x2, 0x2}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x2}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_ID={0x8, 0x15, 0xc5}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4c080) 26.648488754s ago: executing program 2 (id=7054): madvise$auto(0x80000000, 0x10, 0x16) getcwd$auto(0x0, 0xffffffffffffffff) rename$auto(0x0, &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)') 26.413014031s ago: executing program 2 (id=7055): socket(0xa, 0x2, 0x0) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x9, 0x6, 0x1, 0x2800000000000002, 0x9, 0x5e582971, 0xff, 0x2c, 0x4, 0xffff, 0x80000074, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r0, &(0x7f0000000a80)={{0x0, 0x7, &(0x7f0000000a00)={0x0, 0x4}, 0x5, &(0x7f0000000a40)=[0x8e, 0x100000001], 0x8000, 0x40}, 0x8}, 0x1, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000040)='}[,&*}\x00', 0x1, 0x4) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000080)='p\x1d\xdd\xfc\xc7\x86g\x93pN\xa6F\x9c`-\xb4\xee\xaa2\xbb\xc1\x9d\xce\xdf\xd9\x8e\x90_LA_^\xae\x0e\xefe\xb0\xd4\x84\xe1\x14\xbb\xe4\xe7\xb3\xf1\x1f\xa7dA\x13\x9bd\x90,\x13\xd8\\\x9a\xd5\x1c\x1fOd\x7f\xf3\xe1$\x1d\xb7\xce\xa2\xe5\x86<\x91\x83\xd2_7\xf5\xf7\xfa\x8a\'\b\x00\x00\x00\x00\x00\x00\x00\x98\xb7\x7f#\xea\xad\xac', 0x8, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x8, 0xffffffff, 0x18c, 0x6a, 0x0, 0x8, 0x3, 0x9, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", 0x0, 0x541, 0x4, 0xa, 0x3, 0x1009, 0x10001, 0x0, 0xe, 0x5, @attach_btf_obj_fd=0x20003, 0x166, 0x7ff, 0x6, 0x26, 0x48000000, 0xa7c2}, 0x7) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"d9ef7f"}}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x106, 0x0, 0x1, 0xa20b}, 0xed7138c}, 0x9a6, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r1) sendmsg$auto_NL802154_CMD_DISASSOCIATE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="100025bd7000fedbdf2529000000050008000000000008000c000600000008000e00010100000c000600800000000000000005002400040000000500080009000000050029000000000005000f0004000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x44004) 24.743460049s ago: executing program 2 (id=7057): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x87) fstatfs$auto(0x3, 0x0) getsockopt$auto(0x6, 0x84, 0x1b, 0x0, 0x0) sendmsg$auto_TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f40)={0x14, 0x0, 0x301, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000880) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_PNETID_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x304, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0xb, 0x2, 'netdev\x00'}, @SMC_PNETID_IBNAME={0x6, 0x3, ',\x00'}, @SMC_PNETID_NAME={0x8, 0x1, 'o\'*\x00'}, @SMC_PNETID_IBNAME={0x5, 0x3, '\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r4}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) 11.669820429s ago: executing program 0 (id=7063): munmap$auto(0x1ffff000, 0x2000000c) setgroups$auto(0x10, 0xfffffffffffffffc) memfd_secret$auto(0x101) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socket(0x10, 0x2, 0xc) bind$auto(0x3, &(0x7f0000000140)={0x10, @sa_data_min="d43ba96429e475b6a1a6da35a24c"}, 0x4000000f) bind$auto(0x3, 0x0, 0xf) ftruncate$auto(0x3, 0x700) socketpair$auto(0xfff, 0x5, 0x61, 0x0) select$auto(0x6, &(0x7f0000000200)={[0x2, 0x1, 0x8, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x400000006, 0x0, 0xdaf, 0x3, 0x4, 0x5, 0xfe6, 0xfffffffffffffffe, 0xe7, 0x76c, 0x80000000000004]}, &(0x7f0000000280)={[0x4, 0x4, 0x8, 0x7, 0xfffffffffffffff8, 0x4, 0x1, 0x8, 0x0, 0x8e6f, 0x9, 0x5, 0x4000000000000c, 0x100000001, 0x2, 0x4]}, &(0x7f00000000c0)={[0x2, 0x5, 0x5, 0x7, 0x2, 0x4001725, 0x5, 0x6, 0x0, 0x2, 0xe8, 0x5, 0x9, 0x71, 0x9, 0x7]}, &(0x7f00000001c0)={0x6, 0x7}) mmap$auto(0x3, 0x20009, 0x3ff, 0xebe, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x4000000000) memfd_secret$auto(0x1) socketpair$auto(0x6, 0x5, 0x35b265a0, &(0x7f0000000000)) mmap$auto(0x2, 0xfffffffffffffffd, 0x9, 0x9b72, 0x2, 0x3) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') ioctl$NS_GET_PARENT(r0, 0xff06, 0x0) close_range$auto(0x0, r0, 0x6) fanotify_init$auto(0x6, 0x10005) open(&(0x7f0000000040)='./file0\x00', 0x62240, 0x154) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000340), r1) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x100c0004}, 0x4000000) close_range$auto(0x0, 0xfffffefffffff004, 0x80000000000002) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') socket$nl_generic(0x10, 0x3, 0x10) writev$auto(0xca, &(0x7f00000019c0)={0x0, 0x586e}, 0x1) socket(0x2, 0x3, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x36f640, 0xc0) socket$nl_generic(0x10, 0x3, 0x10) 11.331049126s ago: executing program 0 (id=7064): mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x44840) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2e, 0xd82, 0x16, 0x5, 0xea21) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_setup$auto(0x900000001000, 0xfffffffffffffffd) mmap$auto(0x1b6667bd, 0x8, 0x3, 0x14, 0x2674, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) personality$auto(0xffffffffffffffff) fanotify_init$auto(0x200, 0x2) fanotify_mark$auto(0x0, 0x2, 0x5, 0x4, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000040), 0x3) 11.043509326s ago: executing program 0 (id=7065): syz_open_procfs$namespace(0x0, &(0x7f0000001100)='ns/uts\x00') mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) shmctl$auto(0x4, 0xffffffffffffffff, 0xffffffffffffffff) socket(0xa, 0x2, 0x0) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0xd, 0x800000000000008, 0xc, 0x9, 0x3, 0x6, 0x1, 0x40009, 0x5e582972, 0x4000000000800000, 0x14, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x8, &(0x7f0000000080)={0x0, 0x8}, 0x400, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x2, 0x697b}, 0xed7138c}, 0x9a6, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_PMK(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="070000000000000091d2a6ba", @ANYRES16=r1, @ANYBLOB="200026bd7000fbdbdf257b00000004008c00a9007d00afa633cc0eab92df727dce4f89606e61d5183072219ae32bebcfb0eb24970b3bccf637ad7b3d86dcf12f9074783915b0719e095e8388b8e5312ce521fcae086171ad4e0a8335c0fd483a97e6f5601e986c7e2f3450de4df8998ac0b5c09fb1f1a5a6ecdfe42e9c2ac58e65326c10d47e3d4e9f4b7cac935264bfbc3df79a4eb9b170ec5fccb96d2d21e1074f4fe72742c113fbe7f6d0260dfdeb2e978b76b596ef0f57f9ab000000"], 0xc4}}, 0x8004050) prctl$auto(0x8, 0x1, 0x6, 0x1, 0xfff) settimeofday$auto(&(0x7f00000000c0)={0x3, 0x8}, &(0x7f0000000180)={0x2, 0x5}) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 10.051776702s ago: executing program 3 (id=7066): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sysinfo$auto(0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) close_range$auto(0x2, 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), r0) 6.686956008s ago: executing program 3 (id=7067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01032bbd7000ffdbdf2724"], 0x14}, 0x1, 0x0, 0x0, 0x7}, 0x4010) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_STATS_SRC={0x8, 0x6, 0x5}, @ETHTOOL_A_PAUSE_HEADER={0x7, 0x1, 'R)|'}, @ETHTOOL_A_PAUSE_STATS_SRC={0x8, 0x6, 0x6cdf}]}, 0x2c}}, 0x60044004) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x101, 0x1, 0x0, 0x17, 0x8000000000000001, 0x3) r3 = socket(0xa, 0x3, 0x2f) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x7, 0x207, 0x7, 0xc, 0x1, 0x0, 0x8000000000000001, 0x2800000000000002, 0x9, 0xde582971, 0xff, 0x9, 0x4, 0xffff, 0x8, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14e1"], 0x14}, 0x1, 0x0, 0x0, 0x200408d5}, 0x8800) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4045880) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x3}, 0x7, 0xe, 0x0) shutdown$auto(0x200000003, 0x2) 5.506265701s ago: executing program 0 (id=7068): io_cancel$auto(0xf, &(0x7f0000000000)={0x8, 0x7, 0x1, 0x1, 0x8, 0x5, 0xffffffffffffffff, 0xfffffffffffffff8, 0xac, 0x0, 0xfff, 0xffffffffffffffff}, &(0x7f0000000040)={0x7, 0x9, 0xa2, 0x4}) quotactl_fd$auto(r0, 0x1, 0xfffff24e, &(0x7f0000000080)=[0x1, 0x7, 0x6, 0x7ff, 0x1, 0x5, 0xf9, 0x6, 0x4, 0x8]) close_range$auto(r0, r0, 0x9) fallocate$auto(r0, 0x315, 0x800, 0x8000000000000000) memfd_secret$auto(0x5) mbind$auto(0x5, 0x5, 0xa495, &(0x7f0000000100)=0x2122, 0x6, 0x6) rseq$auto(&(0x7f0000000140)={0x9a, 0x6, 0xffffffff7fffffff, 0x800000, 0x5, 0x5, "ceca32435f374fc4c04fb2177c9783c6cb0abfefb4e295544a842c71148115612d19dd5efe8a40888b64b5963c21fc064c6a7a138857367aaf5e89901822651c031a6c119187e2"}, 0x34, 0xeca, 0x0) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'rose0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0xf4}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x44804) kill$auto(0xffffffffffffffff, 0x3) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000003c0), 0xffffffffffffffff) shmget$auto(0x3, 0xc000000000000, 0x3) r4 = open(&(0x7f0000000400)='./file0\x00', 0x30000, 0x4) prctl$auto(0x3, 0x5, 0x4, 0x32, 0xf) r5 = socket(0x5, 0xa, 0x8) sendfile$auto(r5, r0, &(0x7f0000000440)=0x182d5fc6, 0x4) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000004c0), r0) sendmsg$auto_NL80211_CMD_ADD_LINK(r5, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xf8, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_FRAME={0xd7, 0x33, "7194f096670d84dbd4f144b66b4e3ac186ce82e930bd7936ea5cbe525116b298cef752dea9a4f3bef091d1a216612651e0a6d080927ff276435658c5bbbaaeff4ac7c464f4b269946ae1a55399c9e097776c2679b64a9c7d66ef3ebbfc2ed8656200047362e3e50b906178bc1cd758ba3420e6a630e80609460c37ba44e725eedf2e0d88e1daa126dd0971f6ee3f6c17c9fd60ca9c8e23aa3c4a61908b9d88607f96abffe5e4341e8f7058e0ea3eb5d59ab20bad6323cde7a084661fc389169ec79a1c887dc90a68515bf3ef7473ec07b7ebc9"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0xc054) shmget$auto(0x7, 0x1, 0xb565) connect$auto(r4, &(0x7f0000000680)={0x559, @sockaddr_1_1={"d7e3c0f2262749f2c5d432dd98e388ebd4d879772cb14d60a3aa324b"}}, 0x7) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000700), r4) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_TSINFO_HEADER={0x7, 0x1, "4399f4"}, @ETHTOOL_A_TSINFO_HEADER={0x7, 0x1, "a7cc65"}, @ETHTOOL_A_TSINFO_HEADER={0x7, 0x1, "5dd83f"}, @ETHTOOL_A_TSINFO_HEADER={0x7, 0x1, '}V\f'}, @ETHTOOL_A_TSINFO_HEADER={0x7, 0x1, "41d236"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c011) socket$nl_generic(0x10, 0x3, 0x10) mbind$auto(0x2, 0x1, 0x10000, &(0x7f0000000800)=0x92, 0x1, 0xb4) r8 = socket(0xf, 0x6, 0x5) splice$auto(r8, &(0x7f0000000840)=0x6, r4, &(0x7f0000000880)=0x1, 0x2, 0xe6) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000001440)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001400)={&(0x7f0000000900)={0xaf8, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_S1G_CAPABILITY_MASK={0x4e, 0x129, "fdc795de244e61e85271945eca2acc5fe7baefce5fe79b5d23ede09482a4e7faea5f330ca76bc69bcf1ddba3f8a68fb08e85693dfd48f4b89f3ed65f775c3b3646deafa7cb7a27e0cafe"}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x81}, @NL80211_ATTR_MLO_LINKS={0x150, 0x138, "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"}, @NL80211_ATTR_REKEY_DATA={0xcd, 0x7a, "d08ca5f3245ac42e8044ef07945199ee6fa36d406ab4135a111f7b29ee18823392893b7ad57d371dcfbb76fdbf7b0e5d2361b632e44082ffe4c7dedd4efefadf557db901468a5921d6810c389466ab849a46d154c9b0fe4bfcbdaeee0b89637ed2f7a4e447b57e033314e6213c8403d21f4fbc6de75b6e525e0bfc5f87ed939b9657427c23a076622407f7da1f1f785c8cd354e9b7432f54cfb9da998b219bb4f14a37dabc65191a6ee777765545f29979376685ab98d812aa1451881f56d6934605efaf13680155f1"}, @NL80211_ATTR_MBSSID_ELEMS={0xc0, 0x133, "c81129fa2e4ac4e210810eed804e51301600674f5a3af62fa940e3879651381c599fca34036034709b0c0971f5a0bc94f06b894232256b8a0cda5891e450bd836e0b564e99546b11b84497e0aec3ec9a21979bda5c07c07023391b8d5a32abdf0a1fe707df012a3d813c7766f28fb85b051d9222f7c7f3866b32c1e4fbc1e2d92609a578342918272337c8edfb4fe3ef253ace9eb07c3397dff4a4d1d98a79a37888bc65a23e5da68b5d69780f5d8476eea84daf548f15e2afc058ab"}, @NL80211_ATTR_IE_ASSOC_RESP={0x723, 0x80, "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"}, @NL80211_ATTR_MAC_MASK={0x85, 0xd7, "0a3043f8456dff3cbf2ad52affa0865eb38f514a82e8471d1d456880f684c46d47eb9db99911ef2f64422306bce4fabf668ebf97021f6196a98cde63ad15c2149f07eb29989730e66db53c5c032723c49000c6ca4e5cb651e6f54fc14e9c2385deabf26f702cb011b0eb95bd87cc3e514893062121bad0e530566c89b15dafe385"}]}, 0xaf8}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) sendmsg$auto_NL80211_CMD_TDLS_OPER(r0, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x30, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x97}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x100}, 0x4) 5.224525015s ago: executing program 3 (id=7069): socket(0x2, 0x2, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) mprotect$auto(0xac, 0x63, 0x5) (async) rt_sigtimedwait$auto(&(0x7f0000000040)={0x8001}, 0x0, &(0x7f0000000100)={0x9, 0xffffffff80000000}, 0x8) (async) mmap$auto(0x0, 0x8, 0x7, 0x9b72, 0x6, 0x40000000008000) (async) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x2, 0x0) (async) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) creat$auto(&(0x7f0000000040)='X))\x00', 0x5) (async) stat$auto(0x0, 0x0) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0xc0481273, 0x38) (async) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) 4.038808978s ago: executing program 0 (id=7070): close_range$auto(0x2, 0xfffffffffffff000, 0x2) (async) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) bpf$auto(0x10020, 0xffffffffffffffff, 0x6) (async) creat$auto(&(0x7f0000000000)='\a\x00\x00\x00_\xd3\x95q\xd6\xea/\xb8O0\xcd\x95\xe2\xd1\xae', 0x6) (async) execve$auto(0x0, 0x0, 0x0) (async) socket(0xa, 0x801, 0x100) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$auto(0x4, 0x1, 0x2, &(0x7f0000000140)='\x10\x81\x90\xcb\x91\x1b[?\fF\xf6\x15\x83i\xe5\xd2\xd3\x14\x96md\x9f4\xbaD\xfe\x8e^\xc0O\xd0\xc5\xe2\xa2\x88\"\t\xf1\x8c\xee\xf6\xcc\x8dFW\x91\xce\xf7nW\'Q\x9e\xde)\x8b\xe9\xe2\x89\x03\xc3\xf4\x12\xde\x1a\xbaQ\xaf\xd7\t\x00\x00\x00\x84T\xbd\x1d\xb0\xbb\r\x7f\xce\xd4[H\xce\xb0|\xe8\xf4e\xa2\x9c\x91\xb8\x84\xbb\xd5\xfe\x18 \xd6\x12\xd0\xb7*\xd6\x12!\xbb}r\x93|\'\x81\xa0QM\x01\xfa|[\xd8\xa2\\\xd9n=', &(0x7f0000000000)=0x3) (async) fsync$auto(0x3) 3.863726612s ago: executing program 3 (id=7071): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async, rerun: 32) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) fanotify_init$auto(0x5, 0x2000000000002) (async) socket(0x26, 0x80805, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') (async) socket(0xf, 0x3, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) (async, rerun: 64) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) (async) socket(0xa, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x2e, 0x0, 0x40020000) (async) tkill$auto(0x1, 0x7) 3.776023188s ago: executing program 0 (id=7072): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) set_mempolicy$auto(0x3, 0x0, 0x388) r0 = socket(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8932, 0x0) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r1 = gettid() process_vm_readv$auto(r1, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MEDIA_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000040}, 0x44004880) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_TX_TS(r3, 0x0, 0x1c) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) lsm_list_modules$auto(0x0, 0x0, 0x0) mount_setattr$auto(0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x20) 2.546691816s ago: executing program 3 (id=7073): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r1) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r2, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'ethtool\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) r3 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 0s ago: executing program 3 (id=7074): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) socket(0x11, 0xa, 0x300) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x1, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x8844) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe80000000000100"}, 0x55) mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) io_uring_setup$auto(0x6, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) close_range$auto(0x2, 0x8000, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c000) socket(0x11, 0x80003, 0xf) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x1, 0x3, 0x0, 0x6) kernel console output (not intermixed with test programs): 2252.663375][T32006] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2252.676182][T32006] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2252.779159][T32006] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2253.954201][ T7237] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2255.118943][ T7237] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2255.205214][T10685] FAULT_INJECTION: forcing a failure. [ 2255.205214][T10685] name failslab, interval 1, probability 0, space 0, times 0 [ 2255.232505][T10685] CPU: 1 UID: 0 PID: 10685 Comm: syz.1.6452 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 2255.236336][ T5156] Bluetooth: hci1: command tx timeout [ 2255.243392][T10685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2255.259146][T10685] Call Trace: [ 2255.262561][T10685] [ 2255.265728][T10685] dump_stack_lvl+0x16c/0x1f0 [ 2255.270854][T10685] should_fail_ex+0x497/0x5b0 [ 2255.275634][T10685] should_failslab+0xc2/0x120 [ 2255.280551][T10685] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 2255.286008][T10685] ? skb_clone+0x190/0x3f0 [ 2255.290655][T10685] skb_clone+0x190/0x3f0 [ 2255.294975][T10685] netlink_deliver_tap+0xb26/0xcf0 [ 2255.300531][T10685] netlink_unicast+0x5e1/0x7f0 [ 2255.305470][T10685] ? __pfx_netlink_unicast+0x10/0x10 [ 2255.311110][T10685] ? __phys_addr_symbol+0x30/0x80 [ 2255.316225][T10685] ? __check_object_size+0x488/0x710 [ 2255.321662][T10685] netlink_sendmsg+0x8b8/0xd70 [ 2255.326663][T10685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2255.332185][T10685] ____sys_sendmsg+0x9ae/0xb40 [ 2255.336996][T10685] ? copy_msghdr_from_user+0x10b/0x160 [ 2255.342616][T10685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2255.348307][T10685] ? __pfx___lock_acquire+0x10/0x10 [ 2255.353562][T10685] ___sys_sendmsg+0x135/0x1e0 [ 2255.358301][T10685] ? __pfx____sys_sendmsg+0x10/0x10 [ 2255.363615][T10685] ? lock_acquire+0x2f/0xb0 [ 2255.368177][T10685] ? __fget_files+0x40/0x3f0 [ 2255.373167][T10685] ? fdget+0x176/0x210 [ 2255.377280][T10685] __sys_sendmsg+0x117/0x1f0 [ 2255.381926][T10685] ? __pfx___sys_sendmsg+0x10/0x10 [ 2255.387102][T10685] ? __fget_files+0x244/0x3f0 [ 2255.391875][T10685] do_syscall_64+0xcd/0x250 [ 2255.396552][T10685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2255.403320][T10685] RIP: 0033:0x7f1294b7dff9 [ 2255.407819][T10685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2255.428028][T10685] RSP: 002b:00007f12959f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2255.439459][T10685] RAX: ffffffffffffffda RBX: 00007f1294d35f80 RCX: 00007f1294b7dff9 [ 2255.449850][T10685] RDX: 0000000030000098 RSI: 0000000020000100 RDI: 0000000000000004 [ 2255.459720][T10685] RBP: 00007f12959f8090 R08: 0000000000000000 R09: 0000000000000000 [ 2255.467931][T10685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2255.476216][T10685] R13: 0000000000000000 R14: 00007f1294d35f80 R15: 00007ffcfe869538 [ 2255.484262][T10685] [ 2255.772651][ T7237] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.003437][ T7237] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.161857][T10672] chnl_net:caif_netlink_parms(): no params data found [ 2256.458930][T10699] delete_channel: no stack [ 2256.711713][T10672] bridge0: port 1(bridge_slave_0) entered blocking state [ 2256.729899][T10672] bridge0: port 1(bridge_slave_0) entered disabled state [ 2256.768381][T10672] bridge_slave_0: entered allmulticast mode [ 2256.807938][T32006] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2256.830777][T32006] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2256.841180][T10672] bridge_slave_0: entered promiscuous mode [ 2256.849235][T32006] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2256.883290][T32006] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2256.891662][T10672] bridge0: port 2(bridge_slave_1) entered blocking state [ 2256.904054][T32006] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2256.914319][T32006] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2256.960540][T10672] bridge0: port 2(bridge_slave_1) entered disabled state [ 2256.967986][T10672] bridge_slave_1: entered allmulticast mode [ 2257.018186][T10672] bridge_slave_1: entered promiscuous mode [ 2257.142752][ T7237] bridge_slave_1: left allmulticast mode [ 2257.162549][ T7237] bridge_slave_1: left promiscuous mode [ 2257.197848][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 2257.222111][ T7237] bridge_slave_0: left allmulticast mode [ 2257.228173][ T7237] bridge_slave_0: left promiscuous mode [ 2257.234648][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 2257.502618][T32006] Bluetooth: hci1: command tx timeout [ 2259.185336][T32006] Bluetooth: hci3: command tx timeout [ 2259.763727][T32006] Bluetooth: hci1: command tx timeout [ 2260.714609][ T7237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2260.922245][ T7237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2261.045581][ T7237] bond0 (unregistering): Released all slaves [ 2261.425656][T32006] Bluetooth: hci3: command tx timeout [ 2261.434352][T10672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2261.660027][T10672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2262.033711][T32006] Bluetooth: hci1: command tx timeout [ 2262.083516][T10672] team0: Port device team_slave_0 added [ 2262.114074][T10672] team0: Port device team_slave_1 added [ 2262.870664][T10672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2262.888255][T10672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2262.971988][T10672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2263.007452][T10672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2263.015336][T10672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2263.089469][T10672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2263.363659][ T7237] hsr_slave_0: left promiscuous mode [ 2263.370447][ T7237] hsr_slave_1: left promiscuous mode [ 2263.409964][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2263.417551][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2263.444129][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2263.482171][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2263.541566][ T7237] veth1_macvtap: left promiscuous mode [ 2263.563816][ T7237] veth0_macvtap: left promiscuous mode [ 2263.569760][ T7237] veth1_vlan: left promiscuous mode [ 2263.596133][ T7237] veth0_vlan: left promiscuous mode [ 2263.694663][T32006] Bluetooth: hci3: command tx timeout [ 2264.874442][ T7237] team0 (unregistering): Port device team_slave_1 removed [ 2265.101821][ T7237] team0 (unregistering): Port device team_slave_0 removed [ 2265.238491][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2265.248457][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2265.268160][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2265.310876][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2265.323269][ T5156] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2265.332916][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2265.962617][T32006] Bluetooth: hci3: command tx timeout [ 2267.456546][T10672] hsr_slave_0: entered promiscuous mode [ 2267.508270][T10672] hsr_slave_1: entered promiscuous mode [ 2267.626583][T32006] Bluetooth: hci2: command tx timeout [ 2267.659487][T10705] chnl_net:caif_netlink_parms(): no params data found [ 2268.404127][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2268.414639][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2268.423420][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2268.472941][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2268.483960][ T5156] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2268.495172][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2268.676365][T10705] bridge0: port 1(bridge_slave_0) entered blocking state [ 2268.715536][T10705] bridge0: port 1(bridge_slave_0) entered disabled state [ 2268.722890][T10705] bridge_slave_0: entered allmulticast mode [ 2268.760661][T10705] bridge_slave_0: entered promiscuous mode [ 2269.258705][T10705] bridge0: port 2(bridge_slave_1) entered blocking state [ 2269.265977][T10705] bridge0: port 2(bridge_slave_1) entered disabled state [ 2269.281112][T10705] bridge_slave_1: entered allmulticast mode [ 2269.288468][T10705] bridge_slave_1: entered promiscuous mode [ 2269.534539][T10705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2269.809932][ T7237] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2269.849332][T10705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2269.891598][T32006] Bluetooth: hci2: command tx timeout [ 2269.933038][ T7237] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2270.166719][ T7237] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2270.243026][T10705] team0: Port device team_slave_0 added [ 2270.254994][T10705] team0: Port device team_slave_1 added [ 2270.371780][ T7237] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2270.438309][T10705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2270.445342][T10705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2270.505436][T10705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2270.546865][T10760] chnl_net:caif_netlink_parms(): no params data found [ 2270.562592][T10705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2270.570445][T10705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2270.616068][T10705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2270.764602][T32006] Bluetooth: hci5: command tx timeout [ 2270.825822][T10705] hsr_slave_0: entered promiscuous mode [ 2270.853186][T10705] hsr_slave_1: entered promiscuous mode [ 2270.911470][T10705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2270.919473][T10705] Cannot create hsr debugfs directory [ 2271.069653][T10672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2271.240748][T10672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2271.265129][T10672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2271.342371][ T7237] bridge_slave_1: left allmulticast mode [ 2271.348284][ T7237] bridge_slave_1: left promiscuous mode [ 2271.354643][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 2271.364056][ T7237] bridge_slave_0: left allmulticast mode [ 2271.375827][ T7237] bridge_slave_0: left promiscuous mode [ 2271.381683][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 2271.978522][ T7237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2271.991254][ T7237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2272.006049][ T7237] bond0 (unregistering): Released all slaves [ 2272.070294][T10672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2272.080117][T10760] bridge0: port 1(bridge_slave_0) entered blocking state [ 2272.089098][T10760] bridge0: port 1(bridge_slave_0) entered disabled state [ 2272.114063][T10760] bridge_slave_0: entered allmulticast mode [ 2272.136102][T10760] bridge_slave_0: entered promiscuous mode [ 2272.161540][T32006] Bluetooth: hci2: command tx timeout [ 2272.163028][T10760] bridge0: port 2(bridge_slave_1) entered blocking state [ 2272.177406][T10760] bridge0: port 2(bridge_slave_1) entered disabled state [ 2272.185398][T10760] bridge_slave_1: entered allmulticast mode [ 2272.192636][T10760] bridge_slave_1: entered promiscuous mode [ 2272.232893][T10777] chnl_net:caif_netlink_parms(): no params data found [ 2272.399737][T10760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2272.430001][T10760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2272.697720][ T7237] hsr_slave_0: left promiscuous mode [ 2272.703926][ T7237] hsr_slave_1: left promiscuous mode [ 2272.714943][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2272.726774][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2272.736948][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2272.745049][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2272.768323][ T7237] veth1_macvtap: left promiscuous mode [ 2272.774152][ T7237] veth0_macvtap: left promiscuous mode [ 2272.779794][ T7237] veth1_vlan: left promiscuous mode [ 2272.785924][ T7237] veth0_vlan: left promiscuous mode [ 2273.040266][ T5156] Bluetooth: hci5: command tx timeout [ 2273.807556][ T7237] team0 (unregistering): Port device team_slave_1 removed [ 2273.892704][ T7237] team0 (unregistering): Port device team_slave_0 removed [ 2274.442819][ T5156] Bluetooth: hci2: command tx timeout [ 2274.827979][T10760] team0: Port device team_slave_0 added [ 2274.934382][T10672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2274.952172][T10672] 8021q: adding VLAN 0 to HW filter on device team0 [ 2274.982459][ T7240] bridge0: port 1(bridge_slave_0) entered blocking state [ 2274.989667][ T7240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2275.000620][ T7240] bridge0: port 2(bridge_slave_1) entered blocking state [ 2275.007817][ T7240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2275.074781][T10760] team0: Port device team_slave_1 added [ 2275.134362][T10777] bridge0: port 1(bridge_slave_0) entered blocking state [ 2275.141886][T10777] bridge0: port 1(bridge_slave_0) entered disabled state [ 2275.149310][T10777] bridge_slave_0: entered allmulticast mode [ 2275.158490][T10777] bridge_slave_0: entered promiscuous mode [ 2275.216378][T10777] bridge0: port 2(bridge_slave_1) entered blocking state [ 2275.224168][T10777] bridge0: port 2(bridge_slave_1) entered disabled state [ 2275.244054][T10777] bridge_slave_1: entered allmulticast mode [ 2275.252366][T10777] bridge_slave_1: entered promiscuous mode [ 2275.305561][ T5156] Bluetooth: hci5: command tx timeout [ 2275.313596][T10760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2275.332243][T10760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2275.360910][T10760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2275.401514][T10777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2275.427746][T10777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2275.467494][T10760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2275.501074][T10760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2275.542769][T10760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2275.668492][T10777] team0: Port device team_slave_0 added [ 2275.743213][T10777] team0: Port device team_slave_1 added [ 2275.822302][T10760] hsr_slave_0: entered promiscuous mode [ 2275.840666][T10760] hsr_slave_1: entered promiscuous mode [ 2275.847142][T10760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2275.871671][T10760] Cannot create hsr debugfs directory [ 2275.946569][T10777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2275.954932][T10777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2275.981396][T10777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2275.994760][T10777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2276.002025][T10777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2276.028181][T10777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2276.086715][T10705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2276.225913][T10777] hsr_slave_0: entered promiscuous mode [ 2276.255449][T10777] hsr_slave_1: entered promiscuous mode [ 2276.283340][T10777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2276.308599][T10777] Cannot create hsr debugfs directory [ 2276.314596][T10705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2276.332024][T10705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2276.492070][T10705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2276.599960][T10705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2276.695129][ T7237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.736243][T10705] 8021q: adding VLAN 0 to HW filter on device team0 [ 2276.807713][T10672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2276.895036][ T7237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.931637][T17199] bridge0: port 1(bridge_slave_0) entered blocking state [ 2276.938983][T17199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2276.993880][T18833] bridge0: port 2(bridge_slave_1) entered blocking state [ 2277.001175][T18833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2277.089907][ T7237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2277.232423][T10672] veth0_vlan: entered promiscuous mode [ 2277.316646][ T7237] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2277.426560][T10672] veth1_vlan: entered promiscuous mode [ 2277.453515][T10672] veth0_macvtap: entered promiscuous mode [ 2277.464188][T10672] veth1_macvtap: entered promiscuous mode [ 2277.483497][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2277.494234][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2277.504386][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2277.515556][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2277.525985][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2277.536571][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2277.546648][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2277.557321][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2277.568906][T10672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2277.579398][ T5156] Bluetooth: hci5: command tx timeout [ 2277.666190][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2277.694444][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2277.704362][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2277.738696][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2277.750218][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2277.761942][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2277.773071][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2277.785251][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2277.797439][T10672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2277.833106][T10672] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2277.847402][T10672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2277.856345][T10672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2277.867897][T10672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.167926][ T7237] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.409027][ T7237] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.506891][T10705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2278.613335][ T7237] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.720084][T18833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2278.762564][T18833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2278.784193][ T7237] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.884598][T18833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2278.892501][T18833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2279.052963][T10705] veth0_vlan: entered promiscuous mode [ 2279.172546][T10705] veth1_vlan: entered promiscuous mode [ 2279.182555][ T7237] bridge_slave_1: left allmulticast mode [ 2279.201336][ T7237] bridge_slave_1: left promiscuous mode [ 2279.207365][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 2279.252615][ T7237] bridge_slave_0: left allmulticast mode [ 2279.275348][ T7237] bridge_slave_0: left promiscuous mode [ 2279.282001][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 2279.306627][ T7237] bridge_slave_1: left allmulticast mode [ 2279.315662][ T7237] bridge_slave_1: left promiscuous mode [ 2279.332146][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 2279.355360][ T7237] bridge_slave_0: left allmulticast mode [ 2279.361090][ T7237] bridge_slave_0: left promiscuous mode [ 2279.367679][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 2281.082096][ T7237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2281.110916][ T7237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2281.124088][ T7237] bond0 (unregistering): Released all slaves [ 2281.355348][ T7237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2281.377412][ T7237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2281.398308][ T7237] bond0 (unregistering): Released all slaves [ 2281.919832][T10705] veth0_macvtap: entered promiscuous mode [ 2282.065780][T10923] FAULT_INJECTION: forcing a failure. [ 2282.065780][T10923] name failslab, interval 1, probability 0, space 0, times 0 [ 2282.088990][T10923] CPU: 0 UID: 0 PID: 10923 Comm: syz.0.6462 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 2282.099950][T10923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2282.110139][T10923] Call Trace: [ 2282.113452][T10923] [ 2282.116422][T10923] dump_stack_lvl+0x16c/0x1f0 [ 2282.121167][T10923] should_fail_ex+0x497/0x5b0 [ 2282.125908][T10923] ? fs_reclaim_acquire+0xae/0x150 [ 2282.131161][T10923] should_failslab+0xc2/0x120 [ 2282.135896][T10923] __kmalloc_noprof+0xcb/0x410 [ 2282.140746][T10923] ? lockdep_hardirqs_on+0x7c/0x110 [ 2282.146007][T10923] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 2282.153212][T10923] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 2282.158736][T10923] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2282.164893][T10923] ? __radix_tree_lookup+0x21f/0x2c0 [ 2282.170262][T10923] genl_rcv_msg+0x565/0x800 [ 2282.174846][T10923] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2282.179933][T10923] ? __pfx_handshake_nl_done_doit+0x10/0x10 [ 2282.185926][T10923] netlink_rcv_skb+0x165/0x410 [ 2282.190755][T10923] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2282.195847][T10923] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2282.201203][T10923] ? down_read+0xc9/0x330 [ 2282.205616][T10923] ? __pfx_down_read+0x10/0x10 [ 2282.210453][T10923] ? netlink_deliver_tap+0x1ae/0xcf0 [ 2282.215886][T10923] genl_rcv+0x28/0x40 [ 2282.219922][T10923] netlink_unicast+0x53c/0x7f0 [ 2282.224752][T10923] ? __pfx_netlink_unicast+0x10/0x10 [ 2282.230092][T10923] ? __phys_addr_symbol+0x30/0x80 [ 2282.235168][T10923] ? __check_object_size+0x488/0x710 [ 2282.240604][T10923] netlink_sendmsg+0x8b8/0xd70 [ 2282.245436][T10923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2282.250815][T10923] ____sys_sendmsg+0x9ae/0xb40 [ 2282.255659][T10923] ? copy_msghdr_from_user+0x10b/0x160 [ 2282.261202][T10923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2282.266598][T10923] ? __pfx___lock_acquire+0x10/0x10 [ 2282.271876][T10923] ___sys_sendmsg+0x135/0x1e0 [ 2282.276629][T10923] ? __pfx____sys_sendmsg+0x10/0x10 [ 2282.281913][T10923] ? lock_acquire+0x2f/0xb0 [ 2282.286479][T10923] ? __fget_files+0x40/0x3f0 [ 2282.291132][T10923] ? fdget+0x176/0x210 [ 2282.295253][T10923] __sys_sendmsg+0x117/0x1f0 [ 2282.299915][T10923] ? __pfx___sys_sendmsg+0x10/0x10 [ 2282.305090][T10923] ? __fget_files+0x244/0x3f0 [ 2282.309841][T10923] do_syscall_64+0xcd/0x250 [ 2282.314423][T10923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2282.320401][T10923] RIP: 0033:0x7f5bf0f7dff9 [ 2282.324867][T10923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2282.344525][T10923] RSP: 002b:00007f5bf1e01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2282.352994][T10923] RAX: ffffffffffffffda RBX: 00007f5bf1135f80 RCX: 00007f5bf0f7dff9 [ 2282.361007][T10923] RDX: 0000000030000098 RSI: 0000000020000100 RDI: 0000000000000004 [ 2282.369025][T10923] RBP: 00007f5bf1e01090 R08: 0000000000000000 R09: 0000000000000000 [ 2282.377050][T10923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2282.385090][T10923] R13: 0000000000000000 R14: 00007f5bf1135f80 R15: 00007ffd9074b178 [ 2282.393153][T10923] [ 2282.424253][T10705] veth1_macvtap: entered promiscuous mode [ 2282.460774][T10705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2282.471482][T10705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.481589][T10705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2282.492689][T10705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.502667][T10705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2282.513230][T10705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.523220][T10705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2282.533828][T10705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.544139][T10705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2282.555137][T10705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.567740][T10705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2282.579066][T10705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.589668][T10705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.599848][T10705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.610629][T10705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.620570][T10705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.631233][T10705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.641339][T10705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.652275][T10705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.662686][T10705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2282.673324][T10705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2282.684714][T10705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2282.695315][T10705] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2282.704398][T10705] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2282.713362][T10705] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2282.722414][T10705] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.351029][T18465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2283.522324][T18465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2284.066213][T18833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2284.077734][T10760] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2284.099140][T18833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2284.234178][T10777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2284.506017][T10760] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2284.538743][T10760] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2284.579725][T10777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2284.616878][T10945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6456'. [ 2284.704861][T10777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2284.757052][T10777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2284.941092][ T7237] hsr_slave_0: left promiscuous mode [ 2284.994544][ T7237] hsr_slave_1: left promiscuous mode [ 2285.026629][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2285.053878][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2285.106242][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2285.159329][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2285.270847][ T7237] hsr_slave_0: left promiscuous mode [ 2285.364020][ T7237] hsr_slave_1: left promiscuous mode [ 2285.398875][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2285.421336][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2285.452010][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2285.486778][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2285.667565][ T7237] veth1_macvtap: left promiscuous mode [ 2285.689112][ T7237] veth0_macvtap: left promiscuous mode [ 2285.716155][ T7237] veth1_vlan: left promiscuous mode [ 2285.744511][ T7237] veth0_vlan: left promiscuous mode [ 2285.769194][ T7237] veth1_macvtap: left promiscuous mode [ 2285.789016][ T7237] veth0_macvtap: left promiscuous mode [ 2285.814300][ T7237] veth1_vlan: left promiscuous mode [ 2285.833528][ T7237] veth0_vlan: left promiscuous mode [ 2288.300638][ T7237] team0 (unregistering): Port device team_slave_1 removed [ 2288.445626][ T7237] team0 (unregistering): Port device team_slave_0 removed [ 2290.193066][ T7237] team0 (unregistering): Port device team_slave_1 removed [ 2290.254737][ T7237] team0 (unregistering): Port device team_slave_0 removed [ 2290.967633][T10760] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2291.261106][T10777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2291.499773][T10760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2291.523414][T10760] 8021q: adding VLAN 0 to HW filter on device team0 [ 2291.538138][T18465] bridge0: port 1(bridge_slave_0) entered blocking state [ 2291.545382][T18465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2291.568146][T10777] 8021q: adding VLAN 0 to HW filter on device team0 [ 2291.657131][T18465] bridge0: port 1(bridge_slave_0) entered blocking state [ 2291.664368][T18465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2291.734068][T18465] bridge0: port 2(bridge_slave_1) entered blocking state [ 2291.741311][T18465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2291.757045][T18465] bridge0: port 2(bridge_slave_1) entered blocking state [ 2291.764336][T18465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2291.857964][T10777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2291.868614][T10777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2292.329095][T10760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2292.503744][T10777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2292.691010][T10760] veth0_vlan: entered promiscuous mode [ 2292.730295][T10760] veth1_vlan: entered promiscuous mode [ 2292.780069][T10777] veth0_vlan: entered promiscuous mode [ 2292.805361][T10777] veth1_vlan: entered promiscuous mode [ 2292.901450][T10760] veth0_macvtap: entered promiscuous mode [ 2292.933198][T10760] veth1_macvtap: entered promiscuous mode [ 2293.003519][T10760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2293.049862][T10760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2293.084787][T10760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2293.127762][T10760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2293.169733][T10760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2293.203221][T10760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2293.246246][T10760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2293.256758][T10760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2293.297540][T10760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2293.319852][T10760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2293.339155][T10760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2293.352288][T10760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2293.370903][T10760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2293.385149][T10760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2293.407176][T10760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2293.428898][T10760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2293.448573][T10760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2293.461893][T10760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2293.530248][T10760] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2293.539871][T10760] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2293.563755][T10760] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2293.572685][T10760] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2293.603622][T10777] veth0_macvtap: entered promiscuous mode [ 2293.633581][T10777] veth1_macvtap: entered promiscuous mode [ 2293.983542][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2294.030948][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2294.053718][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2294.064247][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2294.097415][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2294.119331][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2294.129263][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2294.163125][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2294.173130][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2294.196199][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2294.209617][T10777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2294.302681][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2294.305188][ T7237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2294.342319][ T7237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2294.359394][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2294.403076][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2294.433136][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2294.463318][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2294.482408][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2294.510721][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2294.544662][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2294.563560][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2294.585086][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2294.619228][T10777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2294.649663][T10777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2294.663281][T10777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2294.672890][T10777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2294.682237][T10777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2294.787638][ T7249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2294.820217][ T7249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2295.026540][ T7237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2295.055231][ T7237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2295.122260][ T7237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2295.143604][ T7237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2295.803504][T11016] svc: failed to register nfsdv3 RPC service (errno 111). [ 2295.888881][T11016] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2296.771525][T11035] svc: failed to register nfsdv3 RPC service (errno 111). [ 2296.819351][T11035] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2298.171785][T11059] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6485'. [ 2298.230042][T11059] HSR: entered promiscuous mode [ 2300.056579][T11086] svc: failed to register nfsdv3 RPC service (errno 111). [ 2300.101893][T11086] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2301.815519][T11104] Invalid logical block size (56) [ 2302.997615][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2303.005422][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2303.699488][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6508'. [ 2306.243907][T11204] svc: failed to register nfsdv3 RPC service (errno 111). [ 2306.279119][T11204] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2310.111010][T11276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6537'. [ 2312.117749][T11337] gre0: entered allmulticast mode [ 2324.764064][T11533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6600'. [ 2327.974815][ T29] audit: type=1326 audit(8277292106.086:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.0.6612" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bf0f7dff9 code=0x0 [ 2328.706562][T11617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6616'. [ 2328.752045][T11619] Invalid ELF header magic: != ELF [ 2330.554631][T11659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6628'. [ 2334.224243][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6638'. [ 2334.654738][T11706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6639'. [ 2337.764714][T11750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6648'. [ 2339.247315][T11782] Unable to find swap-space signature [ 2339.254923][T11782] Unable to find swap-space signature [ 2340.684802][T17198] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2341.211385][T32006] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2341.222663][T32006] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2341.233806][T32006] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2341.250658][T32006] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2341.259772][T32006] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2341.277053][T32006] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2341.351534][T17198] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2341.744472][T17198] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2341.983763][T17198] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2342.137607][T11815] FAULT_INJECTION: forcing a failure. [ 2342.137607][T11815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2342.244363][T11811] svc: failed to register nfsdv3 RPC service (errno 111). [ 2342.328652][T11815] CPU: 1 UID: 0 PID: 11815 Comm: syz.2.6663 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 2342.339520][T11815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2342.347653][T11811] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2342.349611][T11815] Call Trace: [ 2342.349626][T11815] [ 2342.363247][T11815] dump_stack_lvl+0x16c/0x1f0 [ 2342.368052][T11815] should_fail_ex+0x497/0x5b0 [ 2342.372829][T11815] _copy_from_user+0x30/0xf0 [ 2342.377493][T11815] copy_msghdr_from_user+0x99/0x160 [ 2342.382789][T11815] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2342.388699][T11815] ? __pfx___lock_acquire+0x10/0x10 [ 2342.393993][T11815] ___sys_sendmsg+0xff/0x1e0 [ 2342.398678][T11815] ? __pfx____sys_sendmsg+0x10/0x10 [ 2342.403969][T11815] ? lock_acquire+0x2f/0xb0 [ 2342.408524][T11815] ? __fget_files+0x40/0x3f0 [ 2342.413175][T11815] ? fdget+0x176/0x210 [ 2342.417292][T11815] __sys_sendmsg+0x117/0x1f0 [ 2342.421934][T11815] ? __pfx___sys_sendmsg+0x10/0x10 [ 2342.427121][T11815] ? __fget_files+0x244/0x3f0 [ 2342.431846][T11815] do_syscall_64+0xcd/0x250 [ 2342.436482][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2342.442427][T11815] RIP: 0033:0x7fc50bf7dff9 [ 2342.446881][T11815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2342.466754][T11815] RSP: 002b:00007fc50b9de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2342.475278][T11815] RAX: ffffffffffffffda RBX: 00007fc50c136058 RCX: 00007fc50bf7dff9 [ 2342.483307][T11815] RDX: 0000000000000094 RSI: 0000000020000180 RDI: 0000000000000005 [ 2342.491363][T11815] RBP: 00007fc50b9de090 R08: 0000000000000000 R09: 0000000000000000 [ 2342.499383][T11815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2342.507385][T11815] R13: 0000000000000000 R14: 00007fc50c136058 R15: 00007fff957de078 [ 2342.515408][T11815] [ 2342.524146][T11796] chnl_net:caif_netlink_parms(): no params data found [ 2342.808347][T11796] bridge0: port 1(bridge_slave_0) entered blocking state [ 2342.824257][T11796] bridge0: port 1(bridge_slave_0) entered disabled state [ 2342.852663][T11796] bridge_slave_0: entered allmulticast mode [ 2342.882714][T11796] bridge_slave_0: entered promiscuous mode [ 2342.911679][T11814] svc: failed to register nfsdv3 RPC service (errno 111). [ 2342.928524][T11796] bridge0: port 2(bridge_slave_1) entered blocking state [ 2342.957569][T11796] bridge0: port 2(bridge_slave_1) entered disabled state [ 2342.965099][T11796] bridge_slave_1: entered allmulticast mode [ 2342.980491][T11796] bridge_slave_1: entered promiscuous mode [ 2342.985234][T11814] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2343.033693][T17198] bridge_slave_1: left allmulticast mode [ 2343.039428][T17198] bridge_slave_1: left promiscuous mode [ 2343.045972][T17198] bridge0: port 2(bridge_slave_1) entered disabled state [ 2343.067796][T17198] bridge_slave_0: left allmulticast mode [ 2343.073697][T17198] bridge_slave_0: left promiscuous mode [ 2343.082672][T17198] bridge0: port 1(bridge_slave_0) entered disabled state [ 2343.105649][T11827] nbd: must specify an index to disconnect [ 2343.156275][ T29] audit: type=1804 audit(8277292037.318:35): pid=11827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6666" name="#)-\&[}" dev="mqueue" ino=209595 res=1 errno=0 [ 2343.156275][T11827] kernel read not supported for file /#)-\&[} (pid: 11827 comm: syz.2.6666) [ 2343.278150][ T29] audit: type=1800 audit(8277292037.428:36): pid=11827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6666" name="#)-\&[}" dev="mqueue" ino=209595 res=0 errno=0 [ 2343.451191][T11821] svc: failed to register nfsdv3 RPC service (errno 111). [ 2343.477069][T11821] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2343.588890][T32006] Bluetooth: hci0: command tx timeout [ 2344.951020][T11854] svc: failed to register nfsdv3 RPC service (errno 111). [ 2344.954685][T11855] FAULT_INJECTION: forcing a failure. [ 2344.954685][T11855] name failslab, interval 1, probability 0, space 0, times 0 [ 2345.009671][T11854] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2345.038236][T11855] CPU: 1 UID: 0 PID: 11855 Comm: syz.1.6674 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 2345.049118][T11855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2345.059232][T11855] Call Trace: [ 2345.062558][T11855] [ 2345.065544][T11855] dump_stack_lvl+0x16c/0x1f0 [ 2345.070303][T11855] should_fail_ex+0x497/0x5b0 [ 2345.075057][T11855] ? fs_reclaim_acquire+0xae/0x150 [ 2345.080225][T11855] should_failslab+0xc2/0x120 [ 2345.084975][T11855] kmem_cache_alloc_node_noprof+0x71/0x310 [ 2345.090843][T11855] ? __alloc_skb+0x2b3/0x380 [ 2345.095518][T11855] __alloc_skb+0x2b3/0x380 [ 2345.100181][T11855] ? __pfx___alloc_skb+0x10/0x10 [ 2345.105207][T11855] ? lock_acquire+0x2f/0xb0 [ 2345.109808][T11855] netlink_alloc_large_skb+0x69/0x130 [ 2345.115255][T11855] netlink_sendmsg+0x689/0xd70 [ 2345.120074][T11855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2345.125498][T11855] ____sys_sendmsg+0x9ae/0xb40 [ 2345.130306][T11855] ? copy_msghdr_from_user+0x10b/0x160 [ 2345.135811][T11855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2345.141140][T11855] ? __pfx___lock_acquire+0x10/0x10 [ 2345.146569][T11855] ___sys_sendmsg+0x135/0x1e0 [ 2345.151300][T11855] ? __pfx____sys_sendmsg+0x10/0x10 [ 2345.156557][T11855] ? lock_acquire+0x2f/0xb0 [ 2345.161188][T11855] ? __fget_files+0x40/0x3f0 [ 2345.165821][T11855] ? fdget+0x176/0x210 [ 2345.169920][T11855] __sys_sendmsg+0x117/0x1f0 [ 2345.174556][T11855] ? __pfx___sys_sendmsg+0x10/0x10 [ 2345.179713][T11855] ? __fget_files+0x244/0x3f0 [ 2345.184442][T11855] do_syscall_64+0xcd/0x250 [ 2345.188996][T11855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2345.194929][T11855] RIP: 0033:0x7ff45137dff9 [ 2345.199376][T11855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2345.219534][T11855] RSP: 002b:00007ff452093038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2345.227980][T11855] RAX: ffffffffffffffda RBX: 00007ff451536058 RCX: 00007ff45137dff9 [ 2345.235998][T11855] RDX: 0000000000000094 RSI: 0000000020000180 RDI: 0000000000000005 [ 2345.243996][T11855] RBP: 00007ff452093090 R08: 0000000000000000 R09: 0000000000000000 [ 2345.252170][T11855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2345.260189][T11855] R13: 0000000000000000 R14: 00007ff451536058 R15: 00007ffd3cc3d098 [ 2345.268217][T11855] [ 2345.653040][T17198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2345.788955][T17198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2345.849811][T32006] Bluetooth: hci0: command tx timeout [ 2345.906465][T17198] bond0 (unregistering): Released all slaves [ 2345.922287][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6678'. [ 2345.975819][T11862] svc: failed to register nfsdv3 RPC service (errno 111). [ 2346.048176][T11862] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2346.141861][T11796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2346.446588][T11796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2346.480816][T17198] HSR: left promiscuous mode [ 2346.728209][T11796] team0: Port device team_slave_0 added [ 2346.790084][T11796] team0: Port device team_slave_1 added [ 2346.869019][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6680'. [ 2347.257096][T11796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2347.264178][T11796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2347.344096][T11796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2347.379655][T11796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2347.386954][T11796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2347.486411][T11796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2348.119276][T32006] Bluetooth: hci0: command tx timeout [ 2348.312291][T11796] hsr_slave_0: entered promiscuous mode [ 2348.424141][T11796] hsr_slave_1: entered promiscuous mode [ 2348.481839][T11796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2348.500947][T11796] Cannot create hsr debugfs directory [ 2348.665808][T11910] svc: failed to register nfsdv3 RPC service (errno 111). [ 2348.694411][T11910] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2348.967438][T17198] hsr_slave_0: left promiscuous mode [ 2349.008982][T17198] hsr_slave_1: left promiscuous mode [ 2349.148419][T17198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2349.169967][T17198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2349.228230][T17198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2349.235903][T17198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2349.364747][T17198] veth1_macvtap: left promiscuous mode [ 2349.393233][T17198] veth0_macvtap: left promiscuous mode [ 2349.415296][T17198] veth1_vlan: left promiscuous mode [ 2349.428144][T17198] veth0_vlan: left promiscuous mode [ 2350.429317][T32006] Bluetooth: hci0: command tx timeout [ 2351.013142][T17198] team0 (unregistering): Port device team_slave_1 removed [ 2351.144338][T17198] team0 (unregistering): Port device team_slave_0 removed [ 2352.592909][T11926] netlink: 330 bytes leftover after parsing attributes in process `syz.2.6688'. [ 2353.475146][T11948] svc: failed to register nfsdv3 RPC service (errno 111). [ 2353.502983][T11948] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2354.088278][T11796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2354.125633][T11796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2354.179289][T11796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2354.232655][T11796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2354.257276][T11967] svc: failed to register nfsdv3 RPC service (errno 111). [ 2354.322342][T11796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2354.341230][T11796] 8021q: adding VLAN 0 to HW filter on device team0 [ 2354.383456][T11967] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2354.411900][T17198] bridge0: port 1(bridge_slave_0) entered blocking state [ 2354.419173][T17198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2354.475646][T17198] bridge0: port 2(bridge_slave_1) entered blocking state [ 2354.482875][T17198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2354.897618][T11982] svc: failed to register nfsdv3 RPC service (errno 111). [ 2354.949382][T11982] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2355.049330][T11983] FAULT_INJECTION: forcing a failure. [ 2355.049330][T11983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2355.094801][T11983] CPU: 0 UID: 0 PID: 11983 Comm: syz.0.6696 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 2355.105680][T11983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2355.115879][T11983] Call Trace: [ 2355.119858][T11983] [ 2355.122835][T11983] dump_stack_lvl+0x16c/0x1f0 [ 2355.127606][T11983] should_fail_ex+0x497/0x5b0 [ 2355.132386][T11983] _copy_from_iter+0x29b/0x13e0 [ 2355.137325][T11983] ? __pfx__copy_from_iter+0x10/0x10 [ 2355.142786][T11983] ? __virt_addr_valid+0x1a4/0x590 [ 2355.148105][T11983] ? __virt_addr_valid+0x5e/0x590 [ 2355.153338][T11983] ? __phys_addr_symbol+0x30/0x80 [ 2355.158442][T11983] ? __check_object_size+0x488/0x710 [ 2355.163836][T11983] netlink_sendmsg+0x813/0xd70 [ 2355.168700][T11983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2355.174075][T11983] ____sys_sendmsg+0x9ae/0xb40 [ 2355.178918][T11983] ? copy_msghdr_from_user+0x10b/0x160 [ 2355.184476][T11983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2355.189850][T11983] ? __pfx___lock_acquire+0x10/0x10 [ 2355.195193][T11983] ___sys_sendmsg+0x135/0x1e0 [ 2355.199961][T11983] ? __pfx____sys_sendmsg+0x10/0x10 [ 2355.205266][T11983] ? lock_acquire+0x2f/0xb0 [ 2355.209850][T11983] ? __fget_files+0x40/0x3f0 [ 2355.214523][T11983] ? fdget+0x176/0x210 [ 2355.218655][T11983] __sys_sendmsg+0x117/0x1f0 [ 2355.223322][T11983] ? __pfx___sys_sendmsg+0x10/0x10 [ 2355.228504][T11983] ? __fget_files+0x244/0x3f0 [ 2355.233252][T11983] do_syscall_64+0xcd/0x250 [ 2355.237822][T11983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2355.243780][T11983] RIP: 0033:0x7f5bf0f7dff9 [ 2355.248241][T11983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2355.267895][T11983] RSP: 002b:00007f5bf1de0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2355.276358][T11983] RAX: ffffffffffffffda RBX: 00007f5bf1136058 RCX: 00007f5bf0f7dff9 [ 2355.284367][T11983] RDX: 0000000000000094 RSI: 0000000020000180 RDI: 0000000000000005 [ 2355.292387][T11983] RBP: 00007f5bf1de0090 R08: 0000000000000000 R09: 0000000000000000 [ 2355.300492][T11983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2355.308505][T11983] R13: 0000000000000000 R14: 00007f5bf1136058 R15: 00007ffd9074b178 [ 2355.316538][T11983] [ 2355.864080][T11796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2356.059047][T11796] veth0_vlan: entered promiscuous mode [ 2356.077113][T11796] veth1_vlan: entered promiscuous mode [ 2356.245558][T11796] veth0_macvtap: entered promiscuous mode [ 2356.256498][T11796] veth1_macvtap: entered promiscuous mode [ 2356.273408][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2356.283955][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2356.293966][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2356.304883][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2356.315260][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2356.325952][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2356.336065][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2356.346626][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2356.356718][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2356.367695][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2356.381952][T11796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2356.403110][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2356.435015][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2356.445253][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2356.460739][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2356.471579][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2356.482323][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2356.492315][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2356.503237][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2356.516249][T11796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2356.527222][T11796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2356.539081][T11796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2356.552316][T11796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2356.561363][T11796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2356.570249][T11796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2356.579264][T11796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2356.992998][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2357.001208][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2357.109381][T17198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2357.155429][T17198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2357.320310][T12048] svc: failed to register nfsdv3 RPC service (errno 111). [ 2357.363932][T12048] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2357.409512][T12055] FAULT_INJECTION: forcing a failure. [ 2357.409512][T12055] name failslab, interval 1, probability 0, space 0, times 0 [ 2357.471446][T12055] CPU: 0 UID: 0 PID: 12055 Comm: syz.1.6707 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 2357.482319][T12055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2357.492431][T12055] Call Trace: [ 2357.495772][T12055] [ 2357.498755][T12055] dump_stack_lvl+0x16c/0x1f0 [ 2357.503524][T12055] should_fail_ex+0x497/0x5b0 [ 2357.508295][T12055] should_failslab+0xc2/0x120 [ 2357.513062][T12055] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 2357.518521][T12055] ? skb_clone+0x190/0x3f0 [ 2357.523011][T12055] skb_clone+0x190/0x3f0 [ 2357.527336][T12055] netlink_deliver_tap+0xb26/0xcf0 [ 2357.532530][T12055] netlink_unicast+0x5e1/0x7f0 [ 2357.537376][T12055] ? __pfx_netlink_unicast+0x10/0x10 [ 2357.542743][T12055] ? __phys_addr_symbol+0x30/0x80 [ 2357.547848][T12055] ? __check_object_size+0x488/0x710 [ 2357.553220][T12055] netlink_sendmsg+0x8b8/0xd70 [ 2357.558065][T12055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2357.563428][T12055] ____sys_sendmsg+0x9ae/0xb40 [ 2357.568254][T12055] ? copy_msghdr_from_user+0x10b/0x160 [ 2357.573816][T12055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2357.579284][T12055] ? __pfx___lock_acquire+0x10/0x10 [ 2357.584594][T12055] ___sys_sendmsg+0x135/0x1e0 [ 2357.589380][T12055] ? __pfx____sys_sendmsg+0x10/0x10 [ 2357.594690][T12055] ? lock_acquire+0x2f/0xb0 [ 2357.599274][T12055] ? __fget_files+0x40/0x3f0 [ 2357.603953][T12055] ? fdget+0x176/0x210 [ 2357.608099][T12055] __sys_sendmsg+0x117/0x1f0 [ 2357.612785][T12055] ? __pfx___sys_sendmsg+0x10/0x10 [ 2357.617971][T12055] ? __fget_files+0x244/0x3f0 [ 2357.622744][T12055] do_syscall_64+0xcd/0x250 [ 2357.627344][T12055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2357.633334][T12055] RIP: 0033:0x7ff45137dff9 [ 2357.637818][T12055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2357.646201][T12059] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6659'. [ 2357.657505][T12055] RSP: 002b:00007ff452093038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2357.657547][T12055] RAX: ffffffffffffffda RBX: 00007ff451536058 RCX: 00007ff45137dff9 [ 2357.657570][T12055] RDX: 0000000000000094 RSI: 0000000020000180 RDI: 0000000000000005 [ 2357.657593][T12055] RBP: 00007ff452093090 R08: 0000000000000000 R09: 0000000000000000 [ 2357.657615][T12055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2357.707042][T12055] R13: 0000000000000000 R14: 00007ff451536058 R15: 00007ffd3cc3d098 [ 2357.715099][T12055] [ 2358.446018][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6713'. [ 2359.447277][T12110] could not allocate digest TFM handle [ 2359.728081][T12135] FAULT_INJECTION: forcing a failure. [ 2359.728081][T12135] name failslab, interval 1, probability 0, space 0, times 0 [ 2359.755720][T12127] svc: failed to register nfsdv3 RPC service (errno 111). [ 2359.793391][T12127] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2359.794109][T12135] CPU: 1 UID: 0 PID: 12135 Comm: syz.0.6721 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 2359.811544][T12135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2359.821830][T12135] Call Trace: [ 2359.825180][T12135] [ 2359.828155][T12135] dump_stack_lvl+0x16c/0x1f0 [ 2359.829364][T12136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6719'. [ 2359.832973][T12135] should_fail_ex+0x497/0x5b0 [ 2359.846684][T12135] ? fs_reclaim_acquire+0xae/0x150 [ 2359.851880][T12135] should_failslab+0xc2/0x120 [ 2359.856625][T12135] kmem_cache_alloc_node_noprof+0x71/0x310 [ 2359.862478][T12135] ? __alloc_skb+0x2b3/0x380 [ 2359.867116][T12135] __alloc_skb+0x2b3/0x380 [ 2359.871579][T12135] ? __pfx___alloc_skb+0x10/0x10 [ 2359.876697][T12135] ? sunrpc_get_pool_mode+0x29/0x120 [ 2359.882031][T12135] nfsd_nl_pool_mode_get_doit+0xef/0x4d0 [ 2359.888322][T12135] ? kasan_quarantine_put+0x10a/0x240 [ 2359.893817][T12135] ? __pfx_nfsd_nl_pool_mode_get_doit+0x10/0x10 [ 2359.900107][T12135] ? hlock_class+0x4e/0x130 [ 2359.904651][T12135] ? kmem_cache_free+0x152/0x4b0 [ 2359.909633][T12135] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2359.917084][T12135] genl_family_rcv_msg_doit+0x202/0x2f0 [ 2359.922764][T12135] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2359.928889][T12135] ? __radix_tree_lookup+0x21f/0x2c0 [ 2359.934223][T12135] genl_rcv_msg+0x565/0x800 [ 2359.938769][T12135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2359.943867][T12135] ? __pfx_nfsd_nl_pool_mode_get_doit+0x10/0x10 [ 2359.950178][T12135] netlink_rcv_skb+0x165/0x410 [ 2359.954992][T12135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2359.960069][T12135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2359.965407][T12135] ? down_read+0xc9/0x330 [ 2359.969819][T12135] ? __pfx_down_read+0x10/0x10 [ 2359.974668][T12135] ? netlink_deliver_tap+0x1ae/0xcf0 [ 2359.980017][T12135] genl_rcv+0x28/0x40 [ 2359.984037][T12135] netlink_unicast+0x53c/0x7f0 [ 2359.988863][T12135] ? __pfx_netlink_unicast+0x10/0x10 [ 2359.994187][T12135] ? __phys_addr_symbol+0x30/0x80 [ 2359.999252][T12135] ? __check_object_size+0x488/0x710 [ 2360.004586][T12135] netlink_sendmsg+0x8b8/0xd70 [ 2360.009391][T12135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2360.014726][T12135] ____sys_sendmsg+0x9ae/0xb40 [ 2360.019530][T12135] ? copy_msghdr_from_user+0x10b/0x160 [ 2360.025037][T12135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2360.030367][T12135] ? __pfx___lock_acquire+0x10/0x10 [ 2360.035616][T12135] ___sys_sendmsg+0x135/0x1e0 [ 2360.040342][T12135] ? __pfx____sys_sendmsg+0x10/0x10 [ 2360.045602][T12135] ? lock_acquire+0x2f/0xb0 [ 2360.050173][T12135] ? __fget_files+0x40/0x3f0 [ 2360.054808][T12135] ? fdget+0x176/0x210 [ 2360.058914][T12135] __sys_sendmsg+0x117/0x1f0 [ 2360.063548][T12135] ? __pfx___sys_sendmsg+0x10/0x10 [ 2360.068701][T12135] ? __fget_files+0x244/0x3f0 [ 2360.073455][T12135] do_syscall_64+0xcd/0x250 [ 2360.078019][T12135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2360.083974][T12135] RIP: 0033:0x7f5bf0f7dff9 [ 2360.088516][T12135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2360.108169][T12135] RSP: 002b:00007f5bf1de0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2360.116738][T12135] RAX: ffffffffffffffda RBX: 00007f5bf1136058 RCX: 00007f5bf0f7dff9 [ 2360.124744][T12135] RDX: 0000000000000094 RSI: 0000000020000180 RDI: 0000000000000005 [ 2360.132921][T12135] RBP: 00007f5bf1de0090 R08: 0000000000000000 R09: 0000000000000000 [ 2360.141190][T12135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2360.149204][T12135] R13: 0000000000000000 R14: 00007f5bf1136058 R15: 00007ffd9074b178 [ 2360.157234][T12135] [ 2361.268946][T12159] kernel read not supported for file /#)-\&[} (pid: 12159 comm: syz.0.6726) [ 2361.325114][ T29] audit: type=1800 audit(8277292053.967:37): pid=12159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6726" name="#)-\&[}" dev="mqueue" ino=205482 res=0 errno=0 [ 2363.338998][T12193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6731'. [ 2364.457566][T12205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6735'. [ 2370.045398][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2370.051841][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2371.742039][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2371.752852][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2371.770367][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2371.788824][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2371.798013][ T5156] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2371.805484][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2372.918652][T12256] chnl_net:caif_netlink_parms(): no params data found [ 2373.724003][T12256] bridge0: port 1(bridge_slave_0) entered blocking state [ 2373.754499][T12256] bridge0: port 1(bridge_slave_0) entered disabled state [ 2373.794580][T12256] bridge_slave_0: entered allmulticast mode [ 2373.816542][T12256] bridge_slave_0: entered promiscuous mode [ 2373.842667][T12256] bridge0: port 2(bridge_slave_1) entered blocking state [ 2373.849948][T12256] bridge0: port 2(bridge_slave_1) entered disabled state [ 2373.875211][T12256] bridge_slave_1: entered allmulticast mode [ 2373.896271][T12256] bridge_slave_1: entered promiscuous mode [ 2374.145046][ T5156] Bluetooth: hci3: command tx timeout [ 2374.391015][T12256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2374.437115][T12256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2374.928250][T12256] team0: Port device team_slave_0 added [ 2375.218836][T12256] team0: Port device team_slave_1 added [ 2375.579420][T12256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2375.586470][T12256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2375.675501][T12256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2375.721400][T12256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2375.728433][T12256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2375.847320][T12256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2376.407481][ T5156] Bluetooth: hci3: command tx timeout [ 2376.883030][T12256] hsr_slave_0: entered promiscuous mode [ 2377.018479][T12256] hsr_slave_1: entered promiscuous mode [ 2377.333237][T12256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2377.377945][T12256] Cannot create hsr debugfs directory [ 2378.677193][ T5156] Bluetooth: hci3: command tx timeout [ 2378.998439][T12256] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2379.840556][T12256] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.712931][T12256] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.947042][ T5156] Bluetooth: hci3: command tx timeout [ 2381.497154][T12256] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2382.149567][T12256] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2382.213667][T12256] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2382.259025][T12256] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2382.345769][T12256] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2382.788709][T12256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2382.887182][T12256] 8021q: adding VLAN 0 to HW filter on device team0 [ 2382.937902][ T7240] bridge0: port 1(bridge_slave_0) entered blocking state [ 2382.945171][ T7240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2383.011203][T18463] bridge0: port 2(bridge_slave_1) entered blocking state [ 2383.019026][T18463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2383.866582][T12256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2384.089441][T12256] veth0_vlan: entered promiscuous mode [ 2384.186607][T12256] veth1_vlan: entered promiscuous mode [ 2384.239178][T12409] svc: failed to register nfsdv3 RPC service (errno 111). [ 2384.288746][T12409] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2384.335106][T12256] veth0_macvtap: entered promiscuous mode [ 2384.370089][T12256] veth1_macvtap: entered promiscuous mode [ 2384.419991][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2384.444585][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2384.471781][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2384.507017][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2384.535947][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2384.586215][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2384.633322][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2384.681720][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2384.713645][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2384.756321][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2384.820996][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2384.851382][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2384.884803][T12256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2384.944354][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2384.985275][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.015856][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2385.046941][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.071087][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2385.095692][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.137248][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2385.168537][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.191297][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2385.213585][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.246345][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2385.276638][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2385.334847][T12256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2385.408877][T12256] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2385.450312][T12256] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2385.486837][T12256] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2385.527151][T12256] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2385.845277][T18463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2385.859664][T18463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2386.005366][T18463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2386.022861][T18463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2387.879385][T12465] svc: failed to register nfsdv3 RPC service (errno 111). [ 2387.914615][T12465] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2388.920606][T12491] svc: failed to register nfsdv3 RPC service (errno 111). [ 2388.921391][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6803'. [ 2388.947644][T12491] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2389.068219][T32006] Bluetooth: hci1: command 0x0406 tx timeout [ 2389.114403][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6804'. [ 2390.525587][T12535] svc: failed to register nfsdv3 RPC service (errno 111). [ 2390.544641][T12535] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2391.184021][T12548] svc: failed to register nfsdv3 RPC service (errno 111). [ 2391.238253][T12548] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2391.831728][T12559] netlink: get zone limit has 4 unknown bytes [ 2394.746853][T17198] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2394.875767][T12595] netlink: 342 bytes leftover after parsing attributes in process `syz.2.6827'. [ 2395.272988][T32006] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2395.284031][T32006] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2395.292810][T32006] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2395.301737][T32006] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2395.310722][T32006] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2395.318149][T32006] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2395.650748][T17198] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2396.163072][T17198] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2396.457359][T17198] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2397.037599][T12600] chnl_net:caif_netlink_parms(): no params data found [ 2397.428006][T17198] bridge_slave_1: left allmulticast mode [ 2397.459885][T17198] bridge_slave_1: left promiscuous mode [ 2397.465737][T17198] bridge0: port 2(bridge_slave_1) entered disabled state [ 2397.624139][ T5156] Bluetooth: hci0: command tx timeout [ 2397.746602][T17198] bridge_slave_0: left allmulticast mode [ 2397.752817][T17198] bridge_slave_0: left promiscuous mode [ 2397.799574][T17198] bridge0: port 1(bridge_slave_0) entered disabled state [ 2397.822324][T12627] svc: failed to register nfsdv3 RPC service (errno 111). [ 2397.851870][T12627] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2399.947771][ T5156] Bluetooth: hci0: command tx timeout [ 2400.179811][T12653] Process accounting resumed [ 2400.254748][ T5156] Bluetooth: hci2: command 0x0406 tx timeout [ 2400.795529][T17198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2400.856853][T17198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2400.885371][T17198] bond0 (unregistering): Released all slaves [ 2401.716571][T12600] bridge0: port 1(bridge_slave_0) entered blocking state [ 2401.748596][T12600] bridge0: port 1(bridge_slave_0) entered disabled state [ 2401.755954][T12600] bridge_slave_0: entered allmulticast mode [ 2401.802401][T12600] bridge_slave_0: entered promiscuous mode [ 2401.811717][T12600] bridge0: port 2(bridge_slave_1) entered blocking state [ 2401.856106][T12600] bridge0: port 2(bridge_slave_1) entered disabled state [ 2401.865601][T12600] bridge_slave_1: entered allmulticast mode [ 2401.891803][T12600] bridge_slave_1: entered promiscuous mode [ 2402.165199][T32006] Bluetooth: hci0: command tx timeout [ 2402.367292][T12600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2402.405946][T12600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2402.694070][T17198] hsr_slave_0: left promiscuous mode [ 2402.779561][T17198] hsr_slave_1: left promiscuous mode [ 2402.829550][T17198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2402.837448][T17198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2402.928361][T17198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2402.935906][T17198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2403.028135][T17198] veth1_macvtap: left promiscuous mode [ 2403.033774][T17198] veth0_macvtap: left promiscuous mode [ 2403.062860][T17198] veth1_vlan: left promiscuous mode [ 2403.076914][T17198] veth0_vlan: left promiscuous mode [ 2404.432722][T32006] Bluetooth: hci0: command tx timeout [ 2404.821013][T17198] team0 (unregistering): Port device team_slave_1 removed [ 2404.898013][T17198] team0 (unregistering): Port device team_slave_0 removed [ 2407.050146][T12600] team0: Port device team_slave_0 added [ 2407.228237][T12600] team0: Port device team_slave_1 added [ 2407.446298][T12695] unsupported nlmsg_type 40 [ 2407.558597][T12600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2407.578148][T12600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2407.653639][T12600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2407.875918][T12600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2407.913827][T12600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2407.971210][T12600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2408.302997][T12600] hsr_slave_0: entered promiscuous mode [ 2408.470889][T12600] hsr_slave_1: entered promiscuous mode [ 2408.489042][T12600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2408.510420][T12600] Cannot create hsr debugfs directory [ 2409.139107][T12728] svc: failed to register nfsdv3 RPC service (errno 111). [ 2409.202743][T12728] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2410.639004][T12764] svc: failed to register nfsdv3 RPC service (errno 111). [ 2410.688703][T12764] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2410.836861][T12600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2411.039846][T12600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2411.113849][T12600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2411.216367][T12600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2411.550304][T12600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2411.614165][T12600] 8021q: adding VLAN 0 to HW filter on device team0 [ 2411.658769][ T2190] bridge0: port 1(bridge_slave_0) entered blocking state [ 2411.665947][ T2190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2411.707748][ T2190] bridge0: port 2(bridge_slave_1) entered blocking state [ 2411.715004][ T2190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2412.041714][T12786] can: request_module (can-proto-5) failed. [ 2412.473711][T12813] svc: failed to register nfsdv3 RPC service (errno 111). [ 2412.514187][T12600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2412.552615][T12600] veth0_vlan: entered promiscuous mode [ 2412.566208][T12600] veth1_vlan: entered promiscuous mode [ 2412.617351][T12813] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2412.639994][T12600] veth0_macvtap: entered promiscuous mode [ 2412.651012][T12600] veth1_macvtap: entered promiscuous mode [ 2412.668237][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2412.680428][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2412.690963][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2412.701930][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2412.712346][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2412.723110][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2412.735912][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2412.747263][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2412.758871][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2412.769598][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2412.781293][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2412.801697][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2412.877253][T12600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2412.948671][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.009127][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.046010][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.093236][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.119564][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.152904][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.187488][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.215767][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.250588][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.276246][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.309238][T12600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.346126][T12600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.375065][T12600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2413.482457][T12600] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.500486][T12600] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.509904][T12600] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.533364][T12600] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.667339][ T2190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2413.675243][ T2190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2413.719370][ T2190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2413.762396][ T2190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2415.109554][T12899] HfR: entered promiscuous mode [ 2415.217954][T12901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6873'. [ 2415.794110][T12920] svc: failed to register nfsdv3 RPC service (errno 111). [ 2415.838536][T12920] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2416.858231][T17198] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2417.233276][T17198] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2417.317428][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2417.328894][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2417.341208][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2417.352182][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2417.361308][ T5156] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2417.372339][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2417.565416][T17198] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2417.957975][T17198] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2418.313872][T12949] chnl_net:caif_netlink_parms(): no params data found [ 2419.261326][T17198] bridge_slave_1: left allmulticast mode [ 2419.273702][T17198] bridge_slave_1: left promiscuous mode [ 2419.292018][T17198] bridge0: port 2(bridge_slave_1) entered disabled state [ 2419.353594][T17198] bridge_slave_0: left allmulticast mode [ 2419.359662][T17198] bridge_slave_0: left promiscuous mode [ 2419.373469][T17198] bridge0: port 1(bridge_slave_0) entered disabled state [ 2419.637312][ T5156] Bluetooth: hci0: command tx timeout [ 2419.935115][T12980] svc: failed to register nfsdv3 RPC service (errno 111). [ 2419.988276][T12980] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2420.222789][T12983] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6890'. [ 2421.215433][T17198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2421.249756][T17198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2421.297949][T17198] bond0 (unregistering): Released all slaves [ 2421.400533][T12997] Unable to find swap-space signature [ 2421.415448][T12949] bridge0: port 1(bridge_slave_0) entered blocking state [ 2421.422617][T12949] bridge0: port 1(bridge_slave_0) entered disabled state [ 2421.470253][T12949] bridge_slave_0: entered allmulticast mode [ 2421.477921][T12949] bridge_slave_0: entered promiscuous mode [ 2421.508753][T12949] bridge0: port 2(bridge_slave_1) entered blocking state [ 2421.534322][T12949] bridge0: port 2(bridge_slave_1) entered disabled state [ 2421.541678][T12949] bridge_slave_1: entered allmulticast mode [ 2421.567804][T12949] bridge_slave_1: entered promiscuous mode [ 2421.628979][T17198] HfR: left promiscuous mode [ 2421.938436][ T5156] Bluetooth: hci0: command tx timeout [ 2421.996096][T12949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2422.014674][T12949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2422.397477][T12949] team0: Port device team_slave_0 added [ 2422.460745][T12949] team0: Port device team_slave_1 added [ 2422.583380][T12949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2422.614281][T12949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2422.640751][T12949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2422.824869][T12949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2422.831919][T12949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2422.893450][T12949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2423.056210][T17198] hsr_slave_0: left promiscuous mode [ 2423.069993][T17198] hsr_slave_1: left promiscuous mode [ 2423.228102][T17198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2423.242368][T17198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2423.306153][T17198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2423.318393][T17198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2423.388523][T17198] veth1_macvtap: left promiscuous mode [ 2423.430258][T17198] veth0_macvtap: left promiscuous mode [ 2423.447269][T17198] veth1_vlan: left promiscuous mode [ 2423.465932][T17198] veth0_vlan: left promiscuous mode [ 2423.620878][T13038] ptrace attach of "./syz-executor exec"[10760] was attempted by "./syz-executor exec"[13038] [ 2424.171289][ T5156] Bluetooth: hci0: command tx timeout [ 2425.785893][T17198] team0 (unregistering): Port device team_slave_1 removed [ 2425.945834][T17198] team0 (unregistering): Port device team_slave_0 removed [ 2426.434821][ T5156] Bluetooth: hci0: command tx timeout [ 2427.691026][T12949] hsr_slave_0: entered promiscuous mode [ 2427.707261][T12949] hsr_slave_1: entered promiscuous mode [ 2427.722592][T12949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2427.730788][T12949] Cannot create hsr debugfs directory [ 2430.029210][T12949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2430.057715][T12949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2430.114931][T12949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2430.144234][T12949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2430.254329][T13093] Process accounting resumed [ 2430.438718][T12949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2430.501384][T12949] 8021q: adding VLAN 0 to HW filter on device team0 [ 2430.555203][ T6268] bridge0: port 1(bridge_slave_0) entered blocking state [ 2430.562477][ T6268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2430.604678][ T6268] bridge0: port 2(bridge_slave_1) entered blocking state [ 2430.611877][ T6268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2431.234727][T12949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2431.382685][T12949] veth0_vlan: entered promiscuous mode [ 2431.433960][T12949] veth1_vlan: entered promiscuous mode [ 2431.536092][T12949] veth0_macvtap: entered promiscuous mode [ 2431.565188][T12949] veth1_macvtap: entered promiscuous mode [ 2431.625657][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2431.683285][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2431.693225][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2431.752690][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2431.791047][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2431.817300][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2431.841492][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2431.865772][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2431.896768][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2431.934334][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2431.944260][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2432.010722][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2432.044382][T12949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2432.073207][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2432.132387][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2432.163432][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2432.173953][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2432.228936][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2432.261673][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2432.271589][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2432.328149][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2432.338401][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2432.371161][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2432.381092][T12949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2432.425348][T12949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2432.493063][T12949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2432.520364][T12949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2432.531841][T12949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2432.541045][T12949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2432.550362][T12949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2432.977907][ T2190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2433.022211][ T2190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2433.164601][T17198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2433.186189][T17198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2433.485440][T13172] svc: failed to register nfsdv3 RPC service (errno 111). [ 2433.545230][T13172] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2437.091339][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2437.099253][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2437.198017][T17198] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2437.631239][T32006] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2437.654151][T32006] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2437.664102][T32006] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2437.677799][T32006] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2437.687624][T32006] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2437.695121][T32006] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2437.704408][T17198] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2438.388944][T17198] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2438.470974][T13241] ptrace attach of "./syz-executor exec"[10760] was attempted by "./syz-executor exec"[13241] [ 2438.813771][T17198] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2439.060032][T13230] chnl_net:caif_netlink_parms(): no params data found [ 2439.546425][T13230] bridge0: port 1(bridge_slave_0) entered blocking state [ 2439.566471][T13230] bridge0: port 1(bridge_slave_0) entered disabled state [ 2439.594623][T13230] bridge_slave_0: entered allmulticast mode [ 2439.628043][T13230] bridge_slave_0: entered promiscuous mode [ 2439.672961][T13230] bridge0: port 2(bridge_slave_1) entered blocking state [ 2439.693975][T13230] bridge0: port 2(bridge_slave_1) entered disabled state [ 2439.701331][T13230] bridge_slave_1: entered allmulticast mode [ 2439.716688][T13230] bridge_slave_1: entered promiscuous mode [ 2439.815001][T17198] bridge_slave_1: left allmulticast mode [ 2439.821233][T17198] bridge_slave_1: left promiscuous mode [ 2439.829920][T17198] bridge0: port 2(bridge_slave_1) entered disabled state [ 2439.881446][T17198] bridge_slave_0: left allmulticast mode [ 2439.890398][T17198] bridge_slave_0: left promiscuous mode [ 2439.896231][T17198] bridge0: port 1(bridge_slave_0) entered disabled state [ 2439.966807][T32006] Bluetooth: hci0: command tx timeout [ 2442.236745][T32006] Bluetooth: hci0: command tx timeout [ 2442.630373][T17198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2442.790268][T17198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2442.832674][T17198] bond0 (unregistering): Released all slaves [ 2442.887155][T13230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2443.254062][T13230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2443.783539][T13230] team0: Port device team_slave_0 added [ 2443.792373][T13230] team0: Port device team_slave_1 added [ 2444.507520][T32006] Bluetooth: hci0: command tx timeout [ 2445.418874][T13230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2445.437286][T13230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2445.502909][T13230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2446.462610][T13230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2446.470392][T13230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2446.580102][T13230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2446.776651][T32006] Bluetooth: hci0: command tx timeout [ 2447.293713][T13230] hsr_slave_0: entered promiscuous mode [ 2447.444178][T13230] hsr_slave_1: entered promiscuous mode [ 2447.450929][T13230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2447.464194][T13230] Cannot create hsr debugfs directory [ 2447.482353][T17198] hsr_slave_0: left promiscuous mode [ 2447.530190][T17198] hsr_slave_1: left promiscuous mode [ 2447.870018][T17198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2447.889282][T17198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2447.956129][T17198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2447.963956][T17198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2448.041240][T17198] veth1_macvtap: left promiscuous mode [ 2448.063152][T17198] veth0_macvtap: left promiscuous mode [ 2448.069021][T17198] veth1_vlan: left promiscuous mode [ 2448.074421][T17198] veth0_vlan: left promiscuous mode [ 2451.076594][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6963'. [ 2451.175726][T13412] nbd: must specify at least one socket [ 2453.152340][T17198] team0 (unregistering): Port device team_slave_1 removed [ 2453.462816][T17198] team0 (unregistering): Port device team_slave_0 removed [ 2460.651470][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2460.662022][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2460.674345][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2460.688230][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2460.698832][ T5156] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2460.713083][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2462.929477][T32006] Bluetooth: hci4: command tx timeout [ 2463.598015][T13230] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2463.630955][T13230] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2463.692188][T13486] chnl_net:caif_netlink_parms(): no params data found [ 2463.741636][T13230] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2463.842218][T13230] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2464.423466][T13486] bridge0: port 1(bridge_slave_0) entered blocking state [ 2464.433680][T13486] bridge0: port 1(bridge_slave_0) entered disabled state [ 2464.475254][T13486] bridge_slave_0: entered allmulticast mode [ 2464.492358][T13486] bridge_slave_0: entered promiscuous mode [ 2464.518415][T13486] bridge0: port 2(bridge_slave_1) entered blocking state [ 2464.536481][T13486] bridge0: port 2(bridge_slave_1) entered disabled state [ 2464.550923][T13486] bridge_slave_1: entered allmulticast mode [ 2464.562856][T13486] bridge_slave_1: entered promiscuous mode [ 2464.589967][T13230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2465.016612][T13486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2465.056122][T13486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2465.145451][T13230] 8021q: adding VLAN 0 to HW filter on device team0 [ 2465.198657][T32006] Bluetooth: hci4: command tx timeout [ 2465.399475][T13548] netlink: zone id is out of range [ 2465.402181][T17198] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2465.404643][T13548] netlink: zone id is out of range [ 2465.404659][T13548] netlink: zone id is out of range [ 2465.404673][T13548] netlink: zone id is out of range [ 2465.538274][T13548] netlink: zone id is out of range [ 2465.543469][T13548] netlink: zone id is out of range [ 2465.588987][T13548] netlink: zone id is out of range [ 2465.656862][T13548] netlink: zone id is out of range [ 2465.662069][T13548] netlink: set zone limit has 4 unknown bytes [ 2465.829714][T17198] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2465.932692][T13486] team0: Port device team_slave_0 added [ 2465.976294][T13486] team0: Port device team_slave_1 added [ 2466.426344][T17198] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2466.510529][T13580] delete_channel: no stack [ 2466.536985][T13486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2466.567485][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2466.624923][T13486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2466.648568][ T6268] bridge0: port 1(bridge_slave_0) entered blocking state [ 2466.655805][ T6268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2466.674645][ T6268] bridge0: port 2(bridge_slave_1) entered blocking state [ 2466.681843][ T6268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2466.778494][T13230] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2466.807237][T13230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2466.883349][T17198] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2466.925094][T13486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2466.932827][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2467.014180][T13486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2467.030986][T13587] svc: failed to register nfsdv3 RPC service (errno 111). [ 2467.067530][T13587] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2467.311778][T13486] hsr_slave_0: entered promiscuous mode [ 2467.342535][T13486] hsr_slave_1: entered promiscuous mode [ 2467.363621][T13486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2467.398598][T13486] Cannot create hsr debugfs directory [ 2467.468821][T32006] Bluetooth: hci4: command tx timeout [ 2467.679509][T13598] svc: failed to register nfsdv3 RPC service (errno 111). [ 2467.696703][T13598] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2468.460406][T13230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2468.532867][T17198] bridge_slave_1: left allmulticast mode [ 2468.550499][T17198] bridge_slave_1: left promiscuous mode [ 2468.595709][T17198] bridge0: port 2(bridge_slave_1) entered disabled state [ 2468.633104][T17198] bridge_slave_0: left allmulticast mode [ 2468.658093][T17198] bridge_slave_0: left promiscuous mode [ 2468.705245][T17198] bridge0: port 1(bridge_slave_0) entered disabled state [ 2469.793324][T32006] Bluetooth: hci4: command tx timeout [ 2470.934536][T17198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2470.982341][T17198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2471.061514][T17198] bond0 (unregistering): Released all slaves [ 2472.211966][T13230] veth0_vlan: entered promiscuous mode [ 2472.457973][T17198] hsr_slave_0: left promiscuous mode [ 2472.543475][T17198] hsr_slave_1: left promiscuous mode [ 2472.549999][T17198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2472.596101][T17198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2472.625633][T17198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2472.658053][T17198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2472.776549][T17198] veth1_macvtap: left promiscuous mode [ 2472.782283][T17198] veth0_macvtap: left promiscuous mode [ 2472.860056][T17198] veth1_vlan: left promiscuous mode [ 2472.865552][T17198] veth0_vlan: left promiscuous mode [ 2476.463306][T17198] team0 (unregistering): Port device team_slave_1 removed [ 2476.734892][T17198] team0 (unregistering): Port device team_slave_0 removed [ 2479.282486][T13230] veth1_vlan: entered promiscuous mode [ 2479.309653][T13673] netlink: 326 bytes leftover after parsing attributes in process `syz.2.6997'. [ 2479.611671][T13230] veth0_macvtap: entered promiscuous mode [ 2479.630170][T13230] veth1_macvtap: entered promiscuous mode [ 2479.715401][T13681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6999'. [ 2479.723154][T13230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2479.781593][T13230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2479.819465][T13230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2479.844366][T13230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2479.876099][T13230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2479.910760][T13230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2479.941824][T13230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2479.964631][T13230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2479.974626][T13230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2480.008857][T13230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2480.052140][T13230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2480.059575][T13486] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2480.086971][T13486] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2480.224509][T13230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2480.280915][T13230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2480.307448][T13230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2480.335423][T13230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2480.357259][T13230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2480.367779][T13230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2480.401742][T13230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2480.412335][T13230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2480.422191][T13230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2480.432872][T13230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2480.444151][T13230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2480.456533][T13230] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2480.465314][T13230] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2480.474326][T13230] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2480.483396][T13230] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2480.591084][T13486] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2480.700784][T13486] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2480.921328][T25165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2480.958014][T25165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2481.026534][T25165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2481.055916][T25165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2481.074384][T13486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2481.141908][T13486] 8021q: adding VLAN 0 to HW filter on device team0 [ 2481.183317][ T6268] bridge0: port 1(bridge_slave_0) entered blocking state [ 2481.190556][ T6268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2481.240932][T25165] bridge0: port 2(bridge_slave_1) entered blocking state [ 2481.248187][T25165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2481.648548][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7006'. [ 2481.761069][T13486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2481.921740][T13723] Unable to find swap-space signature [ 2481.979173][T13486] veth0_vlan: entered promiscuous mode [ 2482.023554][T13486] veth1_vlan: entered promiscuous mode [ 2482.128713][T13486] veth0_macvtap: entered promiscuous mode [ 2482.161665][T13486] veth1_macvtap: entered promiscuous mode [ 2482.229505][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2482.300341][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2482.310247][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2482.398875][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2482.447933][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2482.502240][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2482.552016][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2482.583478][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2482.602840][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2482.649092][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2482.692363][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2482.729683][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2482.771515][T13486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2482.818383][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2482.872846][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2482.910277][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2482.933762][T13737] FAULT_INJECTION: forcing a failure. [ 2482.933762][T13737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2482.965581][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2482.995658][T13737] CPU: 0 UID: 0 PID: 13737 Comm: syz.3.7010 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 2483.006509][T13737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2483.016606][T13737] Call Trace: [ 2483.019918][T13737] [ 2483.022887][T13737] dump_stack_lvl+0x16c/0x1f0 [ 2483.027642][T13737] should_fail_ex+0x497/0x5b0 [ 2483.032388][T13737] _copy_from_user+0x30/0xf0 [ 2483.037025][T13737] sctp_setsockopt+0x422/0xb880 [ 2483.041940][T13737] ? __pfx_sctp_setsockopt+0x10/0x10 [ 2483.047281][T13737] ? __pfx_aa_sk_perm+0x10/0x10 [ 2483.052199][T13737] ? sock_common_setsockopt+0x2e/0xf0 [ 2483.057634][T13737] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2483.063583][T13737] do_sock_setsockopt+0x222/0x480 [ 2483.068702][T13737] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2483.074322][T13737] ? fdget+0x176/0x210 [ 2483.078530][T13737] __sys_setsockopt+0x1a4/0x270 [ 2483.083447][T13737] ? __pfx___sys_setsockopt+0x10/0x10 [ 2483.088882][T13737] ? fput+0x30/0x390 [ 2483.092837][T13737] ? ksys_write+0x1ad/0x260 [ 2483.097385][T13737] ? __pfx_ksys_write+0x10/0x10 [ 2483.102287][T13737] __x64_sys_setsockopt+0xbd/0x160 [ 2483.107458][T13737] ? do_syscall_64+0x91/0x250 [ 2483.112198][T13737] ? lockdep_hardirqs_on+0x7c/0x110 [ 2483.117452][T13737] do_syscall_64+0xcd/0x250 [ 2483.122191][T13737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2483.128148][T13737] RIP: 0033:0x7fb3a037dff9 [ 2483.132607][T13737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2483.152377][T13737] RSP: 002b:00007fb3a11f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2483.160857][T13737] RAX: ffffffffffffffda RBX: 00007fb3a0535f80 RCX: 00007fb3a037dff9 [ 2483.168879][T13737] RDX: 0000000000000064 RSI: 0000010000000084 RDI: 0000000000000003 [ 2483.176893][T13737] RBP: 00007fb3a11f5090 R08: 00000000000003ff R09: 0000000000000000 [ 2483.184907][T13737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2483.192919][T13737] R13: 0000000000000000 R14: 00007fb3a0535f80 R15: 00007ffc932648f8 [ 2483.200982][T13737] [ 2483.205749][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2483.248170][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2483.275138][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2483.301922][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2483.333945][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2483.389427][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2483.443680][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2483.489782][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2483.542882][T13486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2483.586832][T13486] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2483.643479][T13486] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2483.684872][T13486] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2483.736398][T13486] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2484.049857][ T7239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2484.058021][ T7239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2484.329791][T20038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2484.343849][T20038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2485.613970][T13771] FAULT_INJECTION: forcing a failure. [ 2485.613970][T13771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2485.668064][T13771] CPU: 0 UID: 0 PID: 13771 Comm: syz.0.7018 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 2485.679019][T13771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2485.689125][T13771] Call Trace: [ 2485.692444][T13771] [ 2485.695505][T13771] dump_stack_lvl+0x16c/0x1f0 [ 2485.700273][T13771] should_fail_ex+0x497/0x5b0 [ 2485.705042][T13771] _copy_to_user+0x30/0xc0 [ 2485.709526][T13771] simple_read_from_buffer+0xd0/0x160 [ 2485.714980][T13771] proc_fail_nth_read+0x198/0x270 [ 2485.720076][T13771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2485.725702][T13771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2485.731318][T13771] vfs_read+0x1ce/0xbd0 [ 2485.735513][T13771] ? __fget_files+0x23a/0x3f0 [ 2485.740242][T13771] ? fdget_pos+0x24c/0x360 [ 2485.744720][T13771] ? __pfx_lock_release+0x10/0x10 [ 2485.749787][T13771] ? trace_lock_acquire+0x14a/0x1d0 [ 2485.755024][T13771] ? __pfx_vfs_read+0x10/0x10 [ 2485.759731][T13771] ? __pfx___mutex_lock+0x10/0x10 [ 2485.765091][T13771] ? __fget_files+0x244/0x3f0 [ 2485.769827][T13771] ksys_read+0x12f/0x260 [ 2485.774224][T13771] ? __pfx_ksys_read+0x10/0x10 [ 2485.779323][T13771] do_syscall_64+0xcd/0x250 [ 2485.784322][T13771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2485.790355][T13771] RIP: 0033:0x7f5bf0f7ca3c [ 2485.794800][T13771] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2485.814529][T13771] RSP: 002b:00007f5bf1e01030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2485.823086][T13771] RAX: ffffffffffffffda RBX: 00007f5bf1135f80 RCX: 00007f5bf0f7ca3c [ 2485.831088][T13771] RDX: 000000000000000f RSI: 00007f5bf1e010a0 RDI: 0000000000000004 [ 2485.839088][T13771] RBP: 00007f5bf1e01090 R08: 0000000000000000 R09: 0000000000000000 [ 2485.847082][T13771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2485.855173][T13771] R13: 0000000000000000 R14: 00007f5bf1135f80 R15: 00007ffd9074b178 [ 2485.863197][T13771] [ 2487.476314][T13784] Process accounting resumed [ 2488.893144][T13838] netlink: 113 bytes leftover after parsing attributes in process `syz.2.7033'. [ 2489.069772][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7036'. [ 2498.784220][ T7240] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2498.932548][T13924] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2498.944204][T13924] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2498.955049][T13924] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2498.963199][T13924] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2498.971415][T13924] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2498.979098][T13924] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2499.008375][ T29] audit: type=1326 audit(8277292045.629:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.0.7052" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bf0f7dff9 code=0x0 [ 2501.256615][T13924] Bluetooth: hci3: command tx timeout [ 2501.586483][ T7240] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2502.466605][T13922] chnl_net:caif_netlink_parms(): no params data found [ 2503.508928][ T7240] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2503.526784][T13924] Bluetooth: hci3: command tx timeout [ 2504.150566][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2504.156983][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2504.478658][ T7240] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2505.841706][T13924] Bluetooth: hci3: command tx timeout [ 2509.660265][T13924] Bluetooth: hci3: command tx timeout [ 2510.521794][T13922] bridge0: port 1(bridge_slave_0) entered blocking state [ 2510.546359][T13922] bridge0: port 1(bridge_slave_0) entered disabled state [ 2510.553684][T13922] bridge_slave_0: entered allmulticast mode [ 2510.651344][T13922] bridge_slave_0: entered promiscuous mode [ 2510.980648][T13922] bridge0: port 2(bridge_slave_1) entered blocking state [ 2511.003070][T13922] bridge0: port 2(bridge_slave_1) entered disabled state [ 2511.010463][T13922] bridge_slave_1: entered allmulticast mode [ 2511.079026][T13922] bridge_slave_1: entered promiscuous mode [ 2512.294810][T13922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2512.564554][ T7240] bridge_slave_1: left allmulticast mode [ 2512.578326][ T7240] bridge_slave_1: left promiscuous mode [ 2512.650128][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 2512.924003][ T7240] bridge_slave_0: left allmulticast mode [ 2512.934150][ T7240] bridge_slave_0: left promiscuous mode [ 2512.939937][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 2513.757849][T13924] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2513.769914][T13924] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2513.782015][T13924] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2513.802564][T13924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2513.824471][T13924] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2513.833830][T13924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2516.103770][T13924] Bluetooth: hci4: command tx timeout [ 2518.369212][T13924] Bluetooth: hci4: command tx timeout [ 2519.123380][ T7240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2519.449959][ T7240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2519.534729][ T7240] bond0 (unregistering): Released all slaves [ 2519.732696][T13922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2520.649319][T13924] Bluetooth: hci4: command tx timeout [ 2521.826855][T13922] team0: Port device team_slave_0 added [ 2521.904282][T13922] team0: Port device team_slave_1 added [ 2522.921022][T13924] Bluetooth: hci4: command tx timeout [ 2525.136386][T13922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2525.143430][T13922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2525.255222][T13922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2525.303001][T14045] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7073'. [ 2525.823156][ T30] INFO: task syz.1.6722:12129 blocked for more than 143 seconds. [ 2525.834120][ T30] Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 2525.841815][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2525.899348][ T30] task:syz.1.6722 state:D stack:25808 pid:12129 tgid:12129 ppid:10777 flags:0x00004004 [ 2525.909710][ T30] Call Trace: [ 2525.964416][ T30] [ 2525.967811][ T30] __schedule+0xef5/0x5750 [ 2525.972707][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2526.019946][ T30] ? __pfx___schedule+0x10/0x10 [ 2526.024916][ T30] ? schedule+0x298/0x350 [ 2526.029326][ T30] ? __pfx_lock_release+0x10/0x10 [ 2526.079541][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 2526.117408][ T30] ? lock_acquire+0x2f/0xb0 [ 2526.122027][ T30] ? schedule+0x1fd/0x350 [ 2526.126416][ T30] schedule+0xe7/0x350 [ 2526.158831][ T30] schedule_timeout+0x258/0x2a0 [ 2526.172058][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 2526.177555][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2526.193847][ T30] __wait_for_common+0x3e1/0x600 [ 2526.198979][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 2526.204430][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 2526.226488][ T30] ? __pfx_try_to_wake_up+0x10/0x10 [ 2526.231835][ T30] wait_for_completion_state+0x1c/0x40 [ 2526.248338][ T30] do_coredump+0x82f/0x4160 [ 2526.252950][ T30] ? hlock_class+0x4e/0x130 [ 2526.257523][ T30] ? __lock_acquire+0x163e/0x3ce0 [ 2526.282805][ T30] ? __pfx_do_coredump+0x10/0x10 [ 2526.287863][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2526.302861][ T30] ? __kernel_text_address+0xd/0x40 [ 2526.308618][ T30] ? unwind_get_return_address+0x59/0xa0 [ 2526.324691][ T30] ? lookup_address_in_pgd_attr+0x48b/0x500 [ 2526.330956][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 2526.346543][ T30] ? find_held_lock+0x2d/0x110 [ 2526.351429][ T30] ? kfence_guarded_free+0x30e/0x5d0 [ 2526.356804][ T30] ? lock_acquire+0x2f/0xb0 [ 2526.376284][ T30] ? kfence_guarded_free+0x232/0x5d0 [ 2526.383288][ T30] get_signal+0x237c/0x26d0 [ 2526.388577][ T30] ? __pfx_get_signal+0x10/0x10 [ 2526.393590][ T30] ? rcu_is_watching+0x12/0xc0 [ 2526.398422][ T30] ? trace_irq_disable.constprop.0+0xe4/0x130 [ 2526.404808][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 2526.410445][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2526.417218][ T30] ? do_user_addr_fault+0xa4b/0x13f0 [ 2526.423097][ T30] irqentry_exit_to_user_mode+0x13f/0x280 [ 2526.428910][ T30] asm_exc_page_fault+0x26/0x30 [ 2526.434065][ T30] RIP: 0033:0x7ff451345a7c [ 2526.438764][ T30] RSP: 002b:00007ffd3cc3d1f8 EFLAGS: 00010202 [ 2526.445058][ T30] RAX: 0000000020000000 RBX: 0000000000000004 RCX: 8000000000000014 [ 2526.453095][ T30] RDX: 0000000000000014 RSI: 00007ff450e0032b RDI: 0000000020000000 [ 2526.461652][ T30] RBP: 00007ff451535f8c R08: 00007ff451200000 R09: 0000000000000001 [ 2526.469727][ T30] R10: 0000000000000001 R11: 0000000000000009 R12: 0000000000000000 [ 2526.477824][ T30] R13: 00007ff451535f80 R14: 0000000000000003 R15: fffffffffffffffe [ 2526.485874][ T30] [ 2526.490363][ T30] [ 2526.490363][ T30] Showing all locks held in the system: [ 2526.498987][ T30] 1 lock held by khungtaskd/30: [ 2526.504762][ T30] #0: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 2526.515070][ T30] 3 locks held by kworker/u8:3/52: [ 2526.520241][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 2526.531916][ T30] #1: ffffc90000bd7d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 2526.542856][ T30] #2: ffffffff8fac4128 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 2526.552543][ T30] 1 lock held by dhcpcd/4900: [ 2526.557333][ T30] #0: ffffffff8fac4128 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x1c1/0x1e10 [ 2526.566684][ T30] 2 locks held by getty/4997: [ 2526.571406][ T30] #0: ffff88814d1a80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2526.581520][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 2526.591921][ T30] 3 locks held by kworker/u8:16/6268: [ 2526.597370][ T30] 4 locks held by kworker/u8:34/7240: [ 2526.602863][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 2526.613745][ T30] #1: ffffc9000464fd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 2526.624346][ T30] #2: ffffffff8faae510 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 2526.633889][ T30] #3: ffffffff8fac4128 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_unregister+0x13e/0xc10 [ 2526.643866][ T30] 4 locks held by kworker/0:2/32561: [ 2526.649220][ T30] #0: ffff8880b863ee98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 2526.659712][ T30] #1: ffff8880b8628a48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 2526.671541][ T30] #2: ffff8880b862b918 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x5d/0x220 [ 2526.681202][ T30] #3: ffffffff9a5df1c8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x199/0x540 [ 2526.691793][ T30] 1 lock held by syz.2.5777/7062: [ 2526.696926][ T30] 1 lock held by syz-executor/10672: [ 2526.702268][ T30] 2 locks held by syz.0.6568/11410: [ 2526.707577][ T30] 1 lock held by syz.1.6722/12139: [ 2526.712731][ T30] 2 locks held by syz-executor/13230: [ 2526.718386][ T30] 2 locks held by syz.0.6953/13352: [ 2526.724324][ T30] 2 locks held by syz.0.7009/13735: [ 2526.729640][ T30] 2 locks held by syz.0.7012/13757: [ 2526.734904][ T30] 2 locks held by syz.3.7034/13851: [ 2526.740285][ T30] 1 lock held by syz-executor/13922: [ 2526.745668][ T30] #0: ffffffff8fac4128 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2526.755855][ T30] 2 locks held by syz.2.7057/13938: [ 2526.761615][ T30] #0: ffffffff8fac4128 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x38/0x230 [ 2526.770714][ T30] #1: ffffffff8ddc30f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 2526.781290][ T30] 2 locks held by syz-executor/13987: [ 2526.787007][ T30] #0: ffffffff8faae510 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 2526.797025][ T30] #1: ffffffff8fac4128 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1b/0x230 [ 2526.806558][ T30] 2 locks held by syz.3.7061/13995: [ 2526.811895][ T30] 3 locks held by syz.3.7061/13999: [ 2526.817250][ T30] 2 locks held by syz.0.7072/14033: [ 2526.822494][ T30] #0: ffffffff8faae510 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 2526.832367][ T30] #1: ffffffff8fac4128 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x1b0/0x6e0 [ 2526.842536][ T30] 2 locks held by syz.3.7074/14056: [ 2526.847816][ T30] [ 2526.850302][ T30] ============================================= [ 2526.850302][ T30] [ 2526.858785][ T30] NMI backtrace for cpu 1 [ 2526.863170][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 2526.873732][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2526.883842][ T30] Call Trace: [ 2526.887153][ T30] [ 2526.890162][ T30] dump_stack_lvl+0x116/0x1f0 [ 2526.894906][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 2526.899920][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2526.905950][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2526.911971][ T30] watchdog+0xf0c/0x1240 [ 2526.916349][ T30] ? __pfx_watchdog+0x10/0x10 [ 2526.921066][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2526.926320][ T30] ? __kthread_parkme+0x148/0x220 [ 2526.931409][ T30] ? __pfx_watchdog+0x10/0x10 [ 2526.936140][ T30] kthread+0x2c1/0x3a0 [ 2526.940249][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2526.945514][ T30] ? __pfx_kthread+0x10/0x10 [ 2526.950145][ T30] ret_from_fork+0x45/0x80 [ 2526.954598][ T30] ? __pfx_kthread+0x10/0x10 [ 2526.959222][ T30] ret_from_fork_asm+0x1a/0x30 [ 2526.964040][ T30] [ 2526.968024][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2526.974392][ C0] NMI backtrace for cpu 0 [ 2526.974409][ C0] CPU: 0 UID: 0 PID: 18463 Comm: kworker/u8:25 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 2526.974442][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2526.974460][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 2526.974494][ C0] RIP: 0010:__mutex_trylock_common+0x94/0x250 [ 2526.974541][ C0] Code: 48 c7 44 24 30 00 00 00 00 e8 38 54 85 00 48 89 d8 48 c1 e8 03 65 4c 8b 35 f9 26 9b 7e 80 3c 28 00 0f 85 98 01 00 00 48 8b 03 <4c> 8d 7c 24 30 48 89 44 24 30 48 8b 44 24 30 48 89 c5 49 89 c5 83 [ 2526.974568][ C0] RSP: 0018:ffffc9000310faa0 EFLAGS: 00000246 [ 2526.974593][ C0] RAX: 0000000000000000 RBX: ffff888058238700 RCX: ffffffff8168b4b8 [ 2526.974613][ C0] RDX: ffffed100b0470e1 RSI: 0000000000000008 RDI: ffff888058238700 [ 2526.974631][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffed100b0470e0 [ 2526.974649][ C0] R10: ffff888058238707 R11: 0000000000000000 R12: 1ffff92000621f56 [ 2526.974667][ C0] R13: 0000000000000002 R14: ffff88801e720000 R15: 0000000000000000 [ 2526.974685][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 2526.974712][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2526.974731][ C0] CR2: 0000001b2e91cff8 CR3: 000000006ab5c000 CR4: 00000000003526f0 [ 2526.974749][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2526.974766][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2526.974783][ C0] Call Trace: [ 2526.974791][ C0] [ 2526.974801][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2526.974836][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2526.974878][ C0] ? nmi_handle+0x1a9/0x5c0 [ 2526.974907][ C0] ? __mutex_trylock_common+0x94/0x250 [ 2526.974955][ C0] ? default_do_nmi+0x6a/0x160 [ 2526.974984][ C0] ? exc_nmi+0x170/0x1e0 [ 2526.975011][ C0] ? end_repeat_nmi+0xf/0x53 [ 2526.975051][ C0] ? __mutex_trylock_common+0x78/0x250 [ 2526.975093][ C0] ? __mutex_trylock_common+0x94/0x250 [ 2526.975135][ C0] ? __mutex_trylock_common+0x94/0x250 [ 2526.975178][ C0] ? __mutex_trylock_common+0x94/0x250 [ 2526.975221][ C0] [ 2526.975230][ C0] [ 2526.975240][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2526.975282][ C0] ? cfg80211_wiphy_work+0x9e/0x550 [ 2526.975312][ C0] ? rcu_is_watching+0x12/0xc0 [ 2526.975343][ C0] __mutex_lock+0x18c/0x9c0 [ 2526.975381][ C0] ? cfg80211_wiphy_work+0x9e/0x550 [ 2526.975409][ C0] ? lock_acquire+0x2f/0xb0 [ 2526.975448][ C0] ? try_to_wake_up+0xa1/0x14f0 [ 2526.975488][ C0] ? cfg80211_wiphy_work+0x9e/0x550 [ 2526.975518][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 2526.975557][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2526.975599][ C0] ? rcu_is_watching+0x12/0xc0 [ 2526.975628][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 2526.975661][ C0] ? cfg80211_wiphy_work+0x9e/0x550 [ 2526.975690][ C0] cfg80211_wiphy_work+0x9e/0x550 [ 2526.975721][ C0] process_one_work+0x958/0x1b30 [ 2526.975788][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 2526.975819][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2526.975864][ C0] ? assign_work+0x1a0/0x250 [ 2526.975903][ C0] worker_thread+0x6c8/0xf00 [ 2526.975955][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2526.975996][ C0] kthread+0x2c1/0x3a0 [ 2526.976024][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2526.976057][ C0] ? __pfx_kthread+0x10/0x10 [ 2526.976087][ C0] ret_from_fork+0x45/0x80 [ 2526.976111][ C0] ? __pfx_kthread+0x10/0x10 [ 2526.976140][ C0] ret_from_fork_asm+0x1a/0x30 [ 2526.976188][ C0] [ 2526.976394][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2527.327601][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 2527.338138][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2527.348221][ T30] Call Trace: [ 2527.351518][ T30] [ 2527.354468][ T30] dump_stack_lvl+0x3d/0x1f0 [ 2527.359141][ T30] panic+0x71d/0x800 [ 2527.363078][ T30] ? __pfx_panic+0x10/0x10 [ 2527.367531][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2527.372936][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2527.378963][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2527.384367][ T30] ? watchdog+0xd76/0x1240 [ 2527.388826][ T30] ? watchdog+0xd69/0x1240 [ 2527.393299][ T30] watchdog+0xd87/0x1240 [ 2527.397592][ T30] ? __pfx_watchdog+0x10/0x10 [ 2527.402307][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2527.407571][ T30] ? __kthread_parkme+0x148/0x220 [ 2527.412630][ T30] ? __pfx_watchdog+0x10/0x10 [ 2527.417434][ T30] kthread+0x2c1/0x3a0 [ 2527.421536][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2527.426801][ T30] ? __pfx_kthread+0x10/0x10 [ 2527.431429][ T30] ret_from_fork+0x45/0x80 [ 2527.435873][ T30] ? __pfx_kthread+0x10/0x10 [ 2527.440500][ T30] ret_from_fork_asm+0x1a/0x30 [ 2527.445320][ T30] [ 2527.448689][ T30] Kernel Offset: disabled [ 2527.453041][ T30] Rebooting in 86400 seconds..