last executing test programs: 22.810767901s ago: executing program 2 (id=2402): madvise$auto(0x0, 0x2000040080000004, 0xe) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002240), 0xffffffffffffffff) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) writev$auto(0x2, &(0x7f0000000000)={&(0x7f0000000040), 0x7ffffffc}, 0x5) (async) writev$auto(0x2, &(0x7f0000000000)={&(0x7f0000000040), 0x7ffffffc}, 0x5) copy_file_range$auto(0x2, 0x0, 0x2, 0x0, 0x8001, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4, 0x0) sysfs$auto(0x1, 0x0, 0x6) (async) sysfs$auto(0x1, 0x0, 0x6) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000007c66aa1ef6276b202397c047b7f3bbe7113386a47bc4c1ee272d5e8c9ac1e2bd609d45e934260163c453d6c04814b6f58377848ae6b5d8ad3609410486f8820c3bc1f3e0dc288d5ae01c03b6f51cc2b53186824d49", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000040007000c0006007fff000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) syz_genetlink_get_family_id$auto_nfc(0x0, r0) mlock$auto(0x2a39, 0x9) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) prctl$auto(0x1000000003b, 0x1, 0x6, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4, 0x0) utimes$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_SEG6(&(0x7f0000000080), r2) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="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"/264], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) close_range$auto(0x6, 0xffffffffffdffff8, 0x8000000000002) (async) close_range$auto(0x6, 0xffffffffffdffff8, 0x8000000000002) socket(0x2, 0x2, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) timer_gettime$auto(0x7ea, 0x0) 21.007425771s ago: executing program 2 (id=2412): close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r1, 0xb01, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) socket(0xa, 0x3, 0x6) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0x0, 0x9, 0xfffffffffffffffc, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000000, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40400"}, 0x55) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_GET(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x1200c801}, 0x240000c8) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x81) write$auto(0x3, 0x0, 0xfff5) 9.128341212s ago: executing program 1 (id=2447): signalfd4$auto(0xfffffffe, &(0x7f0000000040)={0x7ffd}, 0x8, 0x8000000) signalfd4$auto(0x7, &(0x7f0000000000)={0x3}, 0xfffffffffffffe01, 0x6) (async) read$auto(0x3, 0x0, 0x80) (async) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(0x0, 0xffffffffffffffff) 8.723558441s ago: executing program 1 (id=2449): mmap$auto(0x0, 0x9, 0xdf, 0xc78, 0x4, 0x10000) socket(0x2, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x23, 0x80805, 0x0) socket(0x1e, 0x80805, 0x0) socket(0x2c, 0x80003, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfd, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x101, 0xffffffff, 0x4) socket(0xa, 0x3, 0x3a) ioctl$auto(0x1, 0x8983, 0x8) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x1ff, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x75, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) statx$auto(0xffffff9c, 0x0, 0x1000, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/net\x00') socket(0x2, 0x1, 0x106) getsockopt$auto(0x6, 0x11c, 0x3, 0xfffffffffffffffe, 0x0) move_pages$auto(0x8, 0x6, &(0x7f0000000100)=&(0x7f0000000040)="b9dd87225eabe52e1ece6ae5f84e3b770faa96e4ea39ddd28cafb5ac3bce64a8597527f9fe6cc94e79bcd1287cd2a64dcf14e2a74628d3169d00f6625d47c44a60d5bec668c7fa78597bf8561b05a5331ca78effa65fd1a25c3b946bbe7f0e24f633be96b52e44e7ec0387ab958450e184f8a14461173a6494224fb8ac833f3136159eeecbb5519f3d7b90319beb767725ec57c854c8a0e9595eea0287a2a85e4c5cf5a20dcfbcc70a7e77355f37f85f16a34a8f8eb11f7b2c", &(0x7f0000000140)=0x59, &(0x7f0000000180)=0x3, 0x5c1) socket(0x2, 0xa, 0x0) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x8, 0x7, 0xfffffffffffffffe, 0x15, 0x5, 0x5) close_range$auto(0x0, 0xffffffff, 0xd3a) 7.617171386s ago: executing program 1 (id=2453): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0x2, 0x8000) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0x2}, 0x3, 0x410) connect$auto(0x3, 0x0, 0x55) 6.490059692s ago: executing program 1 (id=2457): mmap$auto(0x4, 0x8001, 0x2, 0x17, 0x2, 0xa) mmap$auto(0x400, 0x3ff, 0x100, 0x12, 0x200000000000800, 0x7) madvise$auto(0xb5, 0xffffffffffff0001, 0x15) syz_open_procfs$namespace(0x0, 0x0) syslog$auto(0x9, 0xfffffffffffffffc, 0x1) mmap$auto(0xfffffffffffffffb, 0x24009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x7fffffff, 0x1000000004, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0xfbe8, 0xc) mlock$auto(0x81, 0xffff) socket(0x28, 0x800, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x9, 0x3f4c, 0x45) mmap$auto(0x1426000000, 0x20009, 0x3, 0xeb1, 0x401, 0x8004) mremap$auto(0x1, 0x80000000, 0x3fd6, 0x3, 0x7fffffffb000) memfd_create$auto(&(0x7f0000000000)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00', 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x5) mknod$auto(&(0x7f0000000080)='\x00', 0x1001, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x301200, 0x81) acct$auto(&(0x7f0000000000)='::J/}:\\-*\x00') prctl$auto(0x69, 0x1, 0xd, 0xcd7, 0x9) socket$nl_generic(0x10, 0x3, 0x10) msync$auto(0x1ffff000, 0x100000, 0x2) 5.916801205s ago: executing program 0 (id=2460): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_802_15_4_MAC(0x0, 0xffffffffffffffff) sigaltstack$auto(&(0x7f0000000240)={0x0, 0x80000000, 0x7fffffff}, 0x0) sigaltstack$auto(&(0x7f0000000100)={0x0, 0x2, 0xfffffffffffffffb}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) fcntl$auto(0x9, 0x800, 0x0) getsockopt$auto(0x3, 0x84, 0x14, 0xfffffffffffffffe, 0xfffffffffffffffd) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setrlimit$auto(0x1c921f41, 0x0) userfaultfd$auto(0x1) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) lsm_set_self_attr$auto(0xfffc, 0x0, 0xc, 0x8) close_range$auto(0x0, 0xe903, 0x2) mmap$auto(0x800000000000002, 0x400005, 0xdf, 0x9b72, 0x2, 0x5) madvise$auto(0x0, 0xffffffffffff0001, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendfile$auto(0xa58, 0x5, &(0x7f0000000100)=0x6, 0x3) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0) 4.1907425s ago: executing program 3 (id=2464): mmap$auto(0x8000000000000004, 0x3ff, 0x4000000000000008, 0x15, 0x800, 0x7) madvise$auto(0xb5, 0xffffffffffff0001, 0x15) (async) madvise$auto(0xb5, 0xffffffffffff0001, 0x15) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xff, 0x1000000004, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0xff, 0x1000000004, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0xfbe8, 0xc) mlock$auto(0x81, 0xffff) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x0, 0x80000000, 0x3fd6, 0x3, 0x7fffffffb000) memfd_create$auto(&(0x7f0000000000)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00', 0x10) (async) memfd_create$auto(&(0x7f0000000000)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00', 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x5) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x5) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a4) acct$auto(&(0x7f0000000000)='::J/}:\\-*\x00') prctl$auto(0x69, 0x1, 0xd, 0xcd7, 0x2) (async) prctl$auto(0x69, 0x1, 0xd, 0xcd7, 0x2) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) mmap$auto(0x0, 0x20009, 0xdf, 0x35, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0x35, 0x401, 0x8000) socket(0x2b, 0x1, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2b, 0x1, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) 4.003817473s ago: executing program 0 (id=2465): mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0x2b, 0x1, 0x1) futex$auto(0x0, 0x8, 0x8243, 0x0, 0x0, 0x4) r0 = socket(0x10, 0x2, 0x9) sendmsg$auto_L2TP_CMD_NOOP(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, r0}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0xcf}]}, 0x46}, 0x1, 0x0, 0x0, 0x4042}, 0x8000) socket(0x1d, 0x2, 0x2) socket(0x2, 0x1, 0x106) setsockopt$auto(0x3, 0x6, 0x1, 0x0, 0x4) listen$auto(0x3, 0x9) mkdirat$auto(0x9, &(0x7f0000000000)='/:{[*!\x84\'@/\x00', 0x8) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket(0x2, 0x1, 0x0) (async) socket(0x2b, 0x1, 0x1) (async) futex$auto(0x0, 0x8, 0x8243, 0x0, 0x0, 0x4) (async) socket(0x10, 0x2, 0x9) (async) sendmsg$auto_L2TP_CMD_NOOP(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, r0}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0xcf}]}, 0x46}, 0x1, 0x0, 0x0, 0x4042}, 0x8000) (async) socket(0x1d, 0x2, 0x2) (async) socket(0x2, 0x1, 0x106) (async) setsockopt$auto(0x3, 0x6, 0x1, 0x0, 0x4) (async) listen$auto(0x3, 0x9) (async) mkdirat$auto(0x9, &(0x7f0000000000)='/:{[*!\x84\'@/\x00', 0x8) (async) 3.611655621s ago: executing program 0 (id=2466): msync$auto(0x7, 0x1, 0x20008) 3.469526085s ago: executing program 0 (id=2467): set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x2, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) epoll_ctl$auto(0x7f, 0x7, 0x5, 0xfffffffffffffffe) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mlock2$auto(0x1, 0x8001, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mmap$auto(0x80000001, 0x8, 0xdd, 0x9b72, 0x1, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) mmap$auto(0x3, 0x8, 0x400df, 0x9b72, 0x2, 0x2) move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000) getsockopt$auto(0x6, 0x40000000084, 0x7a, 0xfffffffffffffffe, 0x0) readv$auto(0x3, &(0x7f00000000c0)={&(0x7f0000000040), 0x8}, 0x400) keyctl$auto(0x5, 0xfffffffd, 0x8, 0x1, 0xb8b) keyctl$auto(0xb, 0xfffffffd, 0x5, 0x4, 0x9) mmap$auto(0x8, 0x7, 0x2, 0x11, 0xd, 0x7f) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mseal$auto(0x1ffff000, 0x7dda, 0x0) munmap$auto(0x20001000, 0x2000000c) 2.971503489s ago: executing program 3 (id=2468): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x6, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) 2.90963395s ago: executing program 1 (id=2469): fallocate$auto(0x0, 0x5, 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setuid$auto(0x57a) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r0) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f00000016c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001540)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x92c4d7337f4dc58d}, 0x0) 2.850773506s ago: executing program 2 (id=2412): close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r1, 0xb01, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) socket(0xa, 0x3, 0x6) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0x0, 0x9, 0xfffffffffffffffc, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000000, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40400"}, 0x55) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_GET(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x1200c801}, 0x240000c8) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x81) write$auto(0x3, 0x0, 0xfff5) 2.572768273s ago: executing program 1 (id=2470): mmap$auto(0x0, 0x20009, 0xe2, 0x50, 0x403, 0x8000) socket(0x1, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x0, 0x0) mmap$auto(0x4000, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x4, 0x2, 0x100, 0x810, 0xaa, 0xfffffffffffffffb) 2.529654166s ago: executing program 2 (id=2471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x6e}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040840}, 0x4) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x20008000) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000002c0), r0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_STATS={0x75, 0x1e, "69c288f5559ddf2ab875c16b64f9306ba814746a4e62065cd4f7f1a4e7fc9726e348b7232b1cea2371e4598322be40f2da6244956facfc68e3b73e88907463bb773e91b5c12d5f20bf9a5e2a125054898cd1a967a8cf30398745532ef88031725fcaf28c9029e3923856d876b09982fb0e"}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0xfffffe01}, @L2TP_ATTR_FD={0x8}]}, 0xa4}}, 0x4000) r4 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000480), r0) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x7}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x4f4dca5a}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}]}, 0x3c}}, 0x4011) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'dummy0\x00', 0x0}) sendmsg$auto_OVS_VPORT_CMD_GET(r0, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x104, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@OVS_VPORT_ATTR_UPCALL_PID={0xe5, 0x5, "98f592216875d27255714536b5dc9d583561921de16e00dfd28854b7512d910e07118aeee7abbf9bdd0125249329e949c80f85f35a52b126fe049c12729e712fe228132183b6fb8979ed7db52be18e4efecef97aa02cbf09e97d0bd9cf6fa755bdcd47b7ff8d891942f46499c88e9cf76b643ab988328e2c5061788dee4e46f39fa95d992526c25ab0a793f9720b42afe89cf80384003f81852566400a3289b7473cd68fa821f2ec8b5d997bf6cb1bec12946f467d73935facaf30a41654d290299c59c25d1d3d32fa09f71c646853abaeaf4886075542cd2d91f5d05f93e0328d"}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r6}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$auto_IEEE802154_DEL_IFACE(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x10}, @IEEE802154_ATTR_DEST_HW_ADDR={0xc, 0xf, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x49}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r7 = syz_genetlink_get_family_id$auto_NLBL_UNLBL(&(0x7f0000000980), r0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xf4, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0xf7}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, {0x5}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, {0x5}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, {0x8}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, {@u6_addr32=[0x93f, 0x7ff, 0x1, 0x4]}}, @NLBL_UNLABEL_A_IFACE={0xa, 0x6, '\x8a$%-#\x00'}, @NLBL_UNLABEL_A_SECCTX={0x82, 0x7, "650928bdec9857a779413347ab870691254b9a59fa1a10326dd945088b1dd2892a79ee380edf649e89cd755ec158da9e8830eee3c2e9932a1c0c74f05278f4436b349d2290de017a131f751af36b04f20751a8af066ffe72f124cae7d82ce665d5645d16d0906b20bb6930222ef8418878feda5c51597b0f46e3e5eb6411"}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, {@u6_addr16=[0x4, 0x6, 0x9, 0xfffd, 0x9, 0x0, 0x8001, 0x2]}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20004011) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x90, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x7b, 0xac, "227eb32628e4196328d39aed6282851a1e8703ecc82805ab87c03236b9b2bdf8ea88accfac1ce516a0c5a520a869657816053dee8ffa6b55b200da2da7375e58dc1058c538f5af40e6109cf2b14f454e1e8ba96b95435603204133fd907400ce2c171bdca4acf132fad4737fdd3eb8fb4791271bcd9089"}]}, 0x90}, 0x1, 0x0, 0x0, 0x20008080}, 0x5) r8 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000d00), r0) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x54, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IOAM6_ATTR_NS_DATA={0x8, 0x2, 0x6}, @IOAM6_ATTR_NS_DATA_WIDE={0xc, 0x3, 0x4}, @IOAM6_ATTR_NS_DATA_WIDE={0xc, 0x3, 0x9}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x7}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x8001}, @IOAM6_ATTR_NS_DATA={0x8, 0x2, 0x1}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x200}]}, 0x54}, 0x1, 0x0, 0x0, 0x44001}, 0xc040) r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000e80), r0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f00000013c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001380)={&(0x7f0000000ec0)={0x49c, r9, 0x400, 0x4, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r6}, @MACSEC_ATTR_OFFLOAD={0x87, 0x9, "57456fcc7af84eea6920d62fa6eb63132890b6f03a3767b8afaf178697104d454d2f0da2576ff0816cb26031f5b46c77163ac0fd7f71b12fd078d55f0802123da0303c163661de5752c80fd0fa487cd64cdeadbefec9913b1e281962cfa6daf68b8c6e32ce3f0fdc4dbeab1495013d8429b586f84fa252aaf253449493831053d0a32e"}, @MACSEC_ATTR_RXSC_CONFIG={0x102, 0x2, "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"}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r6}, @MACSEC_ATTR_RXSC_CONFIG={0xeb, 0x2, "4fef85d00b65da4d6a590112cb2f7c0bf91122d245e4545d57a17ad20244ccef727147092bffa8297d659a272d02d4002fdd3da599cc67795a83ccfde7b923b35cee9681695bdbe21eb325555ed1503e149af3dee50f459a231baa946de2aa990a5cbeacab49699d9524f4d2aee934c2b642627e6099c6571cd9acfa6d9be40341884b42927c4ca625192a50b82ac0d2f8d1ed811cfa40707f88662da30b1d65ea918f7d8df90dbf127d25f616626cb09e072fea2121b7233a217a3d27874b924fdda6be7c8c5182e02a12a3dac645beaa8ac8c4976d2355f5453d28cf9e23f6cc96e223bcb908"}, @MACSEC_ATTR_SA_CONFIG={0xaa, 0x3, "fb6828c0579cf940c17c6802248b58333024e19670deb41dbd20244d0a814ef9a3dd9fb7493802a65744880b6822934de958966ec9b8fdc8d170c38f26e08aaf500277040773848e55b52e21cc07ecd220551994c3604ef96a70950917733e48e5e6f7a3bb82810b0f97fbbd141c94e82929b4c978cd499e6dea01812717149b34242ce56a89acbb408e747932eb57ab064d1f5cc74b08f07ad5594051d40d27c64f9e5f08de"}, @MACSEC_ATTR_RXSC_CONFIG={0x100, 0x2, "6bd99be71d137226ceadeba85a7591d8ce95e6552c3b1d2ab0c731a6a63cd48abc5ea71a160bb51e50f714e6b6bc1747dec89cf2567a8a8acf4be812c58ab89b160a8209c96d5424d49c09d9ab70e1b31ddece6c98a5984649dd325713a42ae1de151f90b310851d35a35586f90bb3ba74a4cc367a1c795ba26a13c130d0d13ea2f9de73e11ec17c18ce7e95445c4e8ecc7f11072c2f5668444024d6dd1c92b61f4b6f3f77df635f90d01ec7365a5a48c9d16798dd57bef437a37d3ee0a243b579b9c454d8cd36e7298b8ee6e65d0154be26e8c4653523c6ec4a132df3cb41a3fcfa1a596724979d2c73b4ac636a0bd9145a185a80077dfd9a6de4d5"}, @MACSEC_ATTR_RXSC_CONFIG={0x53, 0x2, "bbc74b79ac8cf589474aa7cce7da21c0376c385c270c1aac93faedf599ac836202c9ffc5457ae85d737a1043d1f97f8f0c904fd9c2f780ce58adac0ed9f0f3d93637d759bc13d611de645e6cb0d1c5"}]}, 0x49c}}, 0x20000000) r10 = getpid() syz_open_procfs$namespace(r10, &(0x7f0000001400)='ns/pid_for_children\x00') connect$auto(0x6, &(0x7f0000001440)={0x4, @sa_data_min="cb53820d6b570160e7a013b3b1fb"}, 0xe) setitimer$auto(0x6, &(0x7f0000001480)={{0x8, 0xd}, {0xb, 0x3}}, &(0x7f00000014c0)={{0x9, 0x4}, {0x8, 0x2}}) r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001540), r0) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0xf154a68533574494}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x44, r11, 0x100, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x7, 0x1, "fd4750"}, @ETHTOOL_A_PAUSE_HEADER={0x7, 0x1, "0f7695"}, @ETHTOOL_A_PAUSE_HEADER={0x7, 0x1, "a96196"}, @ETHTOOL_A_PAUSE_STATS_SRC={0x8, 0x6, 0x7}, @ETHTOOL_A_PAUSE_HEADER={0x7, 0x1, "ee2baa"}, @ETHTOOL_A_PAUSE_STATS_SRC={0x8, 0x6, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) connect$auto(0x6, &(0x7f0000001680)={0x1, @sockaddr_1_1={"aa614ee0c03bc334d3fdfe1479abf3beff01a0ae15a72840f1076c"}}, 0x0) r12 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001700), r0) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xc110000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x3c, r12, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x7, 0x1, "449248"}, @ETHTOOL_A_FEATURES_HEADER={0x7, 0x1, "4e9ec0"}, @ETHTOOL_A_FEATURES_HEADER={0x7, 0x1, "59a001"}, @ETHTOOL_A_FEATURES_HEADER={0x7, 0x1, '\x001m'}, @ETHTOOL_A_FEATURES_HEADER={0x7, 0x1, "3eb86e"}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc844}, 0x40000010) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001800), r0) 2.402570203s ago: executing program 3 (id=2472): unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0xf) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(0xffffffffffffffff, 0x0, 0x8800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) capget$auto(0x0, 0xfffffffffffffffe) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x23, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone3$auto(0x0, 0x1000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioprio_set$auto(0x2, 0x800000000, 0x8) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), r0) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, 0x0, 0x4000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x4) fanotify_init$auto(0x5, 0x2) write$auto(0x3, 0x0, 0x81) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) mq_open$auto(0x0, 0x3ff, 0xaa, &(0x7f0000000140)={0x7, 0x2f05, 0xa509, 0x4, [0x3e86, 0x1, 0xb, 0x8000000000]}) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) 2.159558914s ago: executing program 2 (id=2473): mmap$auto(0x0, 0x9, 0x2, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0xffffffffffffffff, 0x4, 0x3, 0x7) close_range$auto(0x2, 0x8004, 0x6) preadv2$auto(0x2036e6, 0xfffffffffffffffe, 0x6, 0xffffffffffffffff, 0x8, 0xc0000000000) r0 = socket(0x1d, 0x800, 0x0) mmap$auto(0x47, 0x1, 0xdf, 0x1f, 0x956c, 0x6) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x5, 0x63b2b2b1, 0xe0, 0x15, 0x2, 0x8000) mmap$auto(0x0, 0x20007, 0xdf, 0x10000000eb1, 0x8, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x45, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r0) sendmsg$auto_BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0xfffffffc}, @BATADV_ATTR_TPMETER_COOKIE={0x8, 0xd, 0x6}, @BATADV_ATTR_HARD_ADDRESS={0xa, 0x8, "05d64db35a95"}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c800}, 0x4) getitimer$auto(0x2, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) 1.616690922s ago: executing program 0 (id=2474): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 64) exit$auto(0x7) (async, rerun: 64) unshare$auto(0x40000080) exit$auto(0x1) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) set_mempolicy_home_node$auto(0x600000, 0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) fanotify_init$auto(0x5, 0x2000000000002) (async, rerun: 32) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') (async, rerun: 32) open(&(0x7f0000000040)='./cgroup\x00', 0x745240, 0x40) (async) fanotify_init$auto(0x4, 0x2000000002) (async) r0 = socket(0x1, 0x2, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) syz_genetlink_get_family_id$auto_NLBL_MGMT(&(0x7f0000000100), 0xffffffffffffffff) (async) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x401) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x48004) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) mmap$auto(0x0, 0x20008, 0xdf, 0x17, 0x6, 0x8000) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000010000c1728d2af766"}, 0x55) (async, rerun: 32) socket(0xa, 0x801, 0x84) (rerun: 32) shutdown$auto(0x200000003, 0x2) (async) socket(0x0, 0x4, 0x1) (async) socket(0x23, 0x80805, 0x0) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfd, 0x0, 0xfffffffffffffffd) 722.999503ms ago: executing program 3 (id=2475): socket(0xa, 0x2, 0x88) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) bpf$auto(0x800000000000001b, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0xffffffffffffffff, 0x0) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) getsockopt$auto(0x4, 0x6, 0x6, 0xfffffffffffffffc, 0x0) lseek$auto(0x0, 0x0, 0x1) connect$auto(0x3, 0x0, 0x100055) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8ff"], 0x14}, 0x1, 0x0, 0x0, 0x7}, 0x4010) close_range$auto(0x0, 0x3, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x1, 0x1, 0x25, &(0x7f0000000000)='\x00', 0xbb) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/ipc\x00') setsockopt$auto(0x400000000000003, 0x9, 0x800046, 0xffffffffffffffff, 0x3) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x47000000) 463.427752ms ago: executing program 2 (id=2476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) socket(0x1d, 0x2, 0x7) getsockopt$auto(0x6, 0x40000000029, 0x1, 0xfffffffffffffffe, 0x0) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c040) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000006c0), r2) r3 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000cc0), r2) sendmsg$auto_HANDSHAKE_CMD_DONE(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 271.637704ms ago: executing program 3 (id=2477): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x20007, 0x80000000000000de, 0x10004000eb1, 0x8, 0x8000) (async) socket(0x2b, 0x1, 0x1) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x8000000000000006, 0x0, 0x0, 0x7fffdc) (async) socket(0xa, 0x2, 0x0) mmap$auto(0x81, 0x8e, 0x33, 0x280000000000010, 0x8cff, 0x2) (async) setsockopt$auto(0x400000000000003, 0x29, 0x20, 0x0, 0x56b) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) madvise$auto(0x0, 0x20200, 0x15) 217.987875ms ago: executing program 0 (id=2478): socket(0x2, 0x5, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x10677d, 0x37e5c9853cd1b999) pwritev$auto(0x4, &(0x7f00000000c0)={&(0x7f0000000040), 0xd74}, 0x8, 0xf, 0xfffffffffffffff9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01032cbd7000fcdbdf2507000000080003003e00c5"], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01032cbd7000fcdbdf2507000000080003003e00c5"], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000) (async) move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000) keyctl$auto(0x2000000000000018, 0xfffffffffffffffd, 0x0, 0x1, 0xa0) mremap$auto(0x0, 0x7, 0xc, 0x7, 0x100000000) 0s ago: executing program 3 (id=2479): keyctl$auto(0x4, 0xfffffffd, 0x6, 0xffffffffffffffff, 0xb8a) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) socket(0x2, 0x1, 0x0) mmap$auto(0x9, 0x3, 0xdc, 0xd2, 0xffffffffffffffff, 0x7ff9) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) setsockopt$auto(0x6, 0x6, 0x14, &(0x7f0000000240)='ns/cgroup\x00', 0xc) r1 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000340), 0xffffffffffffffff) select$auto(0x9, &(0x7f0000000040)={[0xffffffff00000001, 0x8, 0x0, 0x7fffffffffffffff, 0x80000000, 0x1ba6, 0x1000, 0x10, 0x9, 0xf1500000000, 0x7fffffffffffffff, 0x4ba, 0xc33, 0xfffffffffffffffa, 0x3, 0x800000000000000]}, &(0x7f0000000100)={[0x0, 0x8, 0x5, 0x7, 0x9a8, 0x9c3, 0xfff, 0x0, 0x6, 0x2, 0x6, 0x2, 0x6, 0x8, 0x8, 0xbb6c]}, &(0x7f0000000280)={[0xfffffffffffffe01, 0xbe, 0x1, 0x3353, 0x8000000000010, 0x0, 0x5, 0x7, 0x3, 0xe21, 0x1, 0x80000001, 0x8, 0x4, 0x9, 0x4]}, &(0x7f0000000300)={0xef9, 0x81}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f00000022c0), r2) sendmsg$auto_ILA_CMD_DEL(r2, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc811}, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x0, 0x40008, 0xdb, 0x9b72, 0x7, 0x28000) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004040) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r4, 0xb01, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendfile$auto(0x1, 0x3, 0x0, 0xc01) mkdir$auto(0x0, 0x8001) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001340)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40) kernel console output (not intermixed with test programs): 381.549188][T10170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.607111][T10170] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.668141][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.675349][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.713422][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.720770][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.866189][T10170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.374236][T10170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.532824][T10170] veth0_vlan: entered promiscuous mode [ 382.590935][T10170] veth1_vlan: entered promiscuous mode [ 382.714012][T10170] veth0_macvtap: entered promiscuous mode [ 382.724524][ T5243] Bluetooth: hci2: command tx timeout [ 382.742282][T10170] veth1_macvtap: entered promiscuous mode [ 382.855056][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.881696][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.909220][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.947425][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.979785][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.014513][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.046173][T10170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.077321][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.106915][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.143383][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.176671][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.202568][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.245127][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.285953][T10170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.299642][T10170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.344444][T10170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.384404][T10170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.393192][T10170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.661416][ T7135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.685225][ T7135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.933553][ T7129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.945151][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.951530][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.965411][ T7129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.820863][T10377] nbd: must specify at least one socket [ 385.234971][T10391] unsupported nlmsg_type 40 [ 386.944022][T10445] netlink: 4380 bytes leftover after parsing attributes in process `syz.2.969'. [ 387.535599][T10453] netlink: 13 bytes leftover after parsing attributes in process `syz.0.971'. [ 390.491527][T10493] netlink: 4376 bytes leftover after parsing attributes in process `syz.2.978'. [ 395.161205][T10573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.739058][T10599] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1006'. [ 398.645000][T10633] Process accounting resumed [ 409.615271][T10743] sctp: [Deprecated]: syz.0.1044 (pid 10743) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.615271][T10743] Use struct sctp_sack_info instead [ 409.703883][T10747] svc: failed to register nfsdv3 RPC service (errno 111). [ 409.751218][T10747] svc: failed to register nfsaclv3 RPC service (errno 111). [ 410.788817][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'. [ 411.914482][T10798] can: request_module (can-proto-3) failed. [ 413.321993][T10848] FAULT_INJECTION: forcing a failure. [ 413.321993][T10848] name failslab, interval 1, probability 0, space 0, times 1 [ 413.391232][T10848] CPU: 1 UID: 0 PID: 10848 Comm: syz.3.1077 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 413.402079][T10848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 413.412176][T10848] Call Trace: [ 413.415495][T10848] [ 413.418468][T10848] dump_stack_lvl+0x16c/0x1f0 [ 413.423224][T10848] should_fail_ex+0x497/0x5b0 [ 413.427998][T10848] ? fs_reclaim_acquire+0xae/0x160 [ 413.433195][T10848] should_failslab+0xc2/0x120 [ 413.437951][T10848] kmem_cache_alloc_node_noprof+0x71/0x310 [ 413.443838][T10848] ? __alloc_skb+0x2b3/0x380 [ 413.448495][T10848] ? genl_start+0x1e7/0x950 [ 413.453070][T10848] __alloc_skb+0x2b3/0x380 [ 413.457556][T10848] ? __pfx___alloc_skb+0x10/0x10 [ 413.462551][T10848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.468778][T10848] netlink_dump+0x6af/0xcc0 [ 413.473341][T10848] ? __pfx_netlink_dump+0x10/0x10 [ 413.478441][T10848] ? kasan_save_track+0x14/0x30 [ 413.483358][T10848] ? __kasan_kmalloc+0xaa/0xb0 [ 413.488187][T10848] ? genl_start+0x677/0x950 [ 413.492755][T10848] __netlink_dump_start+0x6d9/0x980 [ 413.498016][T10848] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 413.503814][T10848] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 413.510124][T10848] ? genl_op_from_small+0x25/0x440 [ 413.515298][T10848] ? __pfx_genl_get_cmd+0x10/0x10 [ 413.520368][T10848] ? __pfx_genl_start+0x10/0x10 [ 413.525272][T10848] ? __pfx_genl_dumpit+0x10/0x10 [ 413.530258][T10848] ? __pfx_genl_done+0x10/0x10 [ 413.535114][T10848] ? __radix_tree_lookup+0x21f/0x2c0 [ 413.540500][T10848] genl_rcv_msg+0x470/0x800 [ 413.545064][T10848] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.550137][T10848] ? __pfx_ovs_flow_cmd_dump+0x10/0x10 [ 413.555669][T10848] netlink_rcv_skb+0x165/0x410 [ 413.560482][T10848] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.565571][T10848] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.570982][T10848] ? down_read+0xc9/0x330 [ 413.575367][T10848] ? __pfx_down_read+0x10/0x10 [ 413.580204][T10848] ? netlink_deliver_tap+0x1ae/0xcf0 [ 413.585545][T10848] genl_rcv+0x28/0x40 [ 413.589578][T10848] netlink_unicast+0x53c/0x7f0 [ 413.594409][T10848] ? __pfx_netlink_unicast+0x10/0x10 [ 413.599751][T10848] ? __phys_addr_symbol+0x30/0x80 [ 413.604837][T10848] ? __check_object_size+0x488/0x710 [ 413.610176][T10848] netlink_sendmsg+0x8b8/0xd70 [ 413.614994][T10848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.620350][T10848] ____sys_sendmsg+0x9ae/0xb40 [ 413.625188][T10848] ? copy_msghdr_from_user+0x10b/0x160 [ 413.630736][T10848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.636090][T10848] ? __pfx___lock_acquire+0x10/0x10 [ 413.641378][T10848] ___sys_sendmsg+0x135/0x1e0 [ 413.646122][T10848] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.651412][T10848] ? lock_acquire+0x2f/0xb0 [ 413.655984][T10848] ? __fget_files+0x40/0x3f0 [ 413.660644][T10848] ? fdget+0x176/0x210 [ 413.664773][T10848] __sys_sendmsg+0x117/0x1f0 [ 413.669434][T10848] ? __pfx___sys_sendmsg+0x10/0x10 [ 413.674607][T10848] ? __fget_files+0x244/0x3f0 [ 413.679374][T10848] do_syscall_64+0xcd/0x250 [ 413.683943][T10848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.689903][T10848] RIP: 0033:0x7f443757dff9 [ 413.694374][T10848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.714053][T10848] RSP: 002b:00007f443835c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.722542][T10848] RAX: ffffffffffffffda RBX: 00007f4437735f80 RCX: 00007f443757dff9 [ 413.730567][T10848] RDX: 0000000000000000 RSI: 0000000020001300 RDI: 0000000000000003 [ 413.738579][T10848] RBP: 00007f443835c090 R08: 0000000000000000 R09: 0000000000000000 [ 413.746591][T10848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.754608][T10848] R13: 0000000000000000 R14: 00007f4437735f80 R15: 00007ffc2dded188 [ 413.762641][T10848] [ 415.466269][T10879] nbd: must specify at least one socket [ 416.034800][ T5243] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 423.078032][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.453043][ T4624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 423.462246][ T4624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 423.473706][ T4624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 423.484682][ T4624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 423.507094][ T4624] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 423.514951][ T4624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 423.734024][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.097306][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.422940][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.564582][ T29] audit: type=1326 audit(8277292146.220:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.0.1109" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff26337dff9 code=0x0 [ 425.102822][T10958] chnl_net:caif_netlink_parms(): no params data found [ 425.153487][ T52] bridge_slave_1: left allmulticast mode [ 425.164358][ T52] bridge_slave_1: left promiscuous mode [ 425.170149][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.445405][ T52] bridge_slave_0: left allmulticast mode [ 425.451177][ T52] bridge_slave_0: left promiscuous mode [ 425.457847][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.604688][ T4624] Bluetooth: hci3: command tx timeout [ 426.461777][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.516637][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.559997][ T52] bond0 (unregistering): Released all slaves [ 427.103298][T10958] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.111692][T10958] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.125901][T10958] bridge_slave_0: entered allmulticast mode [ 427.133271][T10958] bridge_slave_0: entered promiscuous mode [ 427.184196][ T52] HSR: left promiscuous mode [ 427.284167][T10958] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.368058][T10958] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.375394][T10958] bridge_slave_1: entered allmulticast mode [ 427.391264][T10958] bridge_slave_1: entered promiscuous mode [ 427.527649][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 427.536455][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 427.545099][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 427.553880][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 427.562264][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 427.627907][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 427.684896][ T5243] Bluetooth: hci3: command tx timeout [ 427.756482][T10958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.112700][T10958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.260046][T10958] team0: Port device team_slave_0 added [ 428.280594][T10958] team0: Port device team_slave_1 added [ 428.527791][ T52] hsr_slave_0: left promiscuous mode [ 428.535236][ T52] hsr_slave_1: left promiscuous mode [ 428.545332][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.559497][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.606393][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.626941][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.687305][ T52] veth1_macvtap: left promiscuous mode [ 428.702258][ T52] veth0_macvtap: left promiscuous mode [ 428.718037][ T52] veth1_vlan: left promiscuous mode [ 428.733772][ T52] veth0_vlan: left promiscuous mode [ 429.769886][ T4624] Bluetooth: hci3: command tx timeout [ 429.774508][ T5234] Bluetooth: hci4: command tx timeout [ 430.177063][ T52] team0 (unregistering): Port device team_slave_1 removed [ 430.280122][ T52] team0 (unregistering): Port device team_slave_0 removed [ 430.994186][T11059] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 431.104582][T11059] svc: failed to register nfsdv3 RPC service (errno 111). [ 431.157353][T11059] svc: failed to register nfsaclv3 RPC service (errno 111). [ 431.468276][T10958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.481232][T10958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.544871][T10958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.571866][T10958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.587754][T10958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.632651][T11062] raw_sendmsg: syz.2.1124 forgot to set AF_INET. Fix it! [ 431.643921][T10958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.847963][ T5234] Bluetooth: hci4: command tx timeout [ 431.857682][ T5234] Bluetooth: hci3: command tx timeout [ 432.128690][T10958] hsr_slave_0: entered promiscuous mode [ 432.214918][T10958] hsr_slave_1: entered promiscuous mode [ 432.314946][T10958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.322592][T10958] Cannot create hsr debugfs directory [ 432.993286][T11003] chnl_net:caif_netlink_parms(): no params data found [ 433.397998][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.601542][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.656452][T11003] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.663628][T11003] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.693875][T11003] bridge_slave_0: entered allmulticast mode [ 433.716221][T11003] bridge_slave_0: entered promiscuous mode [ 433.741107][T11003] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.750226][T11003] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.773632][T11003] bridge_slave_1: entered allmulticast mode [ 433.795710][T11003] bridge_slave_1: entered promiscuous mode [ 433.917418][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.928093][ T5234] Bluetooth: hci4: command tx timeout [ 434.218034][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.280346][T11003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.324112][T11003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.490126][T11003] team0: Port device team_slave_0 added [ 434.541141][T11003] team0: Port device team_slave_1 added [ 434.738380][T11003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.765343][T11003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.821231][T11003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.906534][T10958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 434.950445][T11003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.970998][T11003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.997776][T11003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.013855][ T52] bridge_slave_1: left allmulticast mode [ 435.020367][ T52] bridge_slave_1: left promiscuous mode [ 435.026616][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.043333][ T52] bridge_slave_0: left allmulticast mode [ 435.052078][ T52] bridge_slave_0: left promiscuous mode [ 435.058147][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.518018][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.531307][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.543173][ T52] bond0 (unregistering): Released all slaves [ 435.556188][T10958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 435.565817][T10958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 435.577392][T10958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 435.744511][T11003] hsr_slave_0: entered promiscuous mode [ 435.772636][T11003] hsr_slave_1: entered promiscuous mode [ 435.796130][T11003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.813963][T11003] Cannot create hsr debugfs directory [ 436.010505][ T5234] Bluetooth: hci4: command tx timeout [ 436.240221][ T52] hsr_slave_0: left promiscuous mode [ 436.299473][ T52] hsr_slave_1: left promiscuous mode [ 436.314588][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.322076][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.345242][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.352974][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.432322][ T52] veth1_macvtap: left promiscuous mode [ 436.444771][ T52] veth0_macvtap: left promiscuous mode [ 436.450450][ T52] veth1_vlan: left promiscuous mode [ 436.474769][ T52] veth0_vlan: left promiscuous mode [ 437.860842][ T52] team0 (unregistering): Port device team_slave_1 removed [ 437.943195][ T52] team0 (unregistering): Port device team_slave_0 removed [ 438.947763][T10958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.050757][T10958] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.117240][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.124483][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.175831][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.183019][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.484810][T11003] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 439.582538][T11003] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 439.624700][T11003] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 439.663742][T11003] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 439.901880][T10958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.053051][T10958] veth0_vlan: entered promiscuous mode [ 440.080957][T10958] veth1_vlan: entered promiscuous mode [ 440.108226][T11003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.166639][T11003] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.254799][T11003] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 440.265895][T11003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 440.291773][ T7129] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.299010][ T7129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.319018][ T7129] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.326257][ T7129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.416811][T10958] veth0_macvtap: entered promiscuous mode [ 440.477663][T10958] veth1_macvtap: entered promiscuous mode [ 440.556982][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.614591][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.648675][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.677095][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.702969][T10958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.742942][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.761306][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.771426][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.791876][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.818321][T10958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.876751][T11003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.947498][T10958] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.965545][T10958] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.986281][T10958] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.001784][T10958] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.216429][T11003] veth0_vlan: entered promiscuous mode [ 441.287258][T11003] veth1_vlan: entered promiscuous mode [ 441.388263][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.428390][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.491352][T11003] veth0_macvtap: entered promiscuous mode [ 441.569687][T11003] veth1_macvtap: entered promiscuous mode [ 441.569766][ T7129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.583716][ T7129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.646259][T11003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.694657][T11003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.726031][T11003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.754469][T11003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.774715][T11003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.809193][T11003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.842507][T11003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.883751][T11003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.909648][T11003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.945094][T11003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.974478][T11003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.013277][T11003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.044371][T11003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.077240][T11003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.135894][T11003] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.161309][T11003] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.194403][T11003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.219536][T11003] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.554426][ T1062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.566375][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.580934][ T1062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.589304][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.367004][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.373486][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.878425][T11389] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1174'. [ 447.786982][T11432] netlink: 123 bytes leftover after parsing attributes in process `syz.1.1188'. [ 447.856789][T11432] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1188'. [ 449.820244][ T4624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 449.829135][ T4624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 449.838195][ T4624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 449.850754][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.863880][ T4624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 449.874469][ T4624] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 449.881926][ T4624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 450.171086][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 450.181469][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 450.192461][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 450.209433][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 450.218399][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 450.226974][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 450.336661][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.561044][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.745827][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.757750][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 450.769182][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 450.777246][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 450.796495][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 450.817485][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 450.826092][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 451.053531][T11455] chnl_net:caif_netlink_parms(): no params data found [ 451.247895][ T52] bridge_slave_1: left allmulticast mode [ 451.253623][ T52] bridge_slave_1: left promiscuous mode [ 451.262995][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.309076][ T52] bridge_slave_0: left allmulticast mode [ 451.327976][ T52] bridge_slave_0: left promiscuous mode [ 451.334655][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.849697][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.864486][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.876690][ T52] bond0 (unregistering): Released all slaves [ 451.925033][ T5234] Bluetooth: hci1: command tx timeout [ 452.055029][T11459] chnl_net:caif_netlink_parms(): no params data found [ 452.255810][T11455] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.272636][T11455] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.301294][T11455] bridge_slave_0: entered allmulticast mode [ 452.309881][T11455] bridge_slave_0: entered promiscuous mode [ 452.325173][ T5234] Bluetooth: hci2: command tx timeout [ 452.473281][T11455] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.494982][T11455] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.502376][T11455] bridge_slave_1: entered allmulticast mode [ 452.521736][T11455] bridge_slave_1: entered promiscuous mode [ 452.738912][T11455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.761622][T11455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.894708][ T5234] Bluetooth: hci3: command tx timeout [ 452.937773][ T52] hsr_slave_0: left promiscuous mode [ 452.953209][ T52] hsr_slave_1: left promiscuous mode [ 452.961987][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.969674][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.981873][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.992447][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.023881][ T52] veth1_macvtap: left promiscuous mode [ 453.029627][ T52] veth0_macvtap: left promiscuous mode [ 453.035994][ T52] veth1_vlan: left promiscuous mode [ 453.041410][ T52] veth0_vlan: left promiscuous mode [ 453.509854][ T52] team0 (unregistering): Port device team_slave_1 removed [ 453.567996][ T52] team0 (unregistering): Port device team_slave_0 removed [ 453.978507][T11459] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.987413][T11459] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.995452][T11459] bridge_slave_0: entered allmulticast mode [ 454.003835][T11459] bridge_slave_0: entered promiscuous mode [ 454.009851][ T5234] Bluetooth: hci1: command tx timeout [ 454.028105][T11455] team0: Port device team_slave_0 added [ 454.039476][T11459] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.046856][T11459] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.054123][T11459] bridge_slave_1: entered allmulticast mode [ 454.061983][T11459] bridge_slave_1: entered promiscuous mode [ 454.142735][T11455] team0: Port device team_slave_1 added [ 454.230685][T11459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.257566][T11459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.333594][T11455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.350596][T11455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.404429][ T5234] Bluetooth: hci2: command tx timeout [ 454.423172][T11455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.462465][T11467] chnl_net:caif_netlink_parms(): no params data found [ 454.516609][T11455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.523606][T11455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.559478][T11455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.605093][T11459] team0: Port device team_slave_0 added [ 454.628421][T11459] team0: Port device team_slave_1 added [ 454.790059][T11455] hsr_slave_0: entered promiscuous mode [ 454.796716][T11455] hsr_slave_1: entered promiscuous mode [ 454.803596][T11455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.832162][T11455] Cannot create hsr debugfs directory [ 454.855033][T11459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.862052][T11459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.895598][T11459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.964808][ T5234] Bluetooth: hci3: command tx timeout [ 454.997449][T11459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.014279][T11459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.040596][T11459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.240369][T11467] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.261156][T11467] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.274706][T11467] bridge_slave_0: entered allmulticast mode [ 455.290871][T11467] bridge_slave_0: entered promiscuous mode [ 455.315530][T11467] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.322992][T11467] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.334623][T11467] bridge_slave_1: entered allmulticast mode [ 455.342027][T11467] bridge_slave_1: entered promiscuous mode [ 455.391264][T11459] hsr_slave_0: entered promiscuous mode [ 455.403070][T11459] hsr_slave_1: entered promiscuous mode [ 455.413578][T11459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.433247][T11459] Cannot create hsr debugfs directory [ 455.573448][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.593894][T11467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.699984][T11467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.798507][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.976659][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.061744][T11467] team0: Port device team_slave_0 added [ 456.076652][T11467] team0: Port device team_slave_1 added [ 456.093819][ T5234] Bluetooth: hci1: command tx timeout [ 456.246036][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.340353][T11467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.374310][T11467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.413350][T11467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.436921][T11467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.454349][T11467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.497248][ T5234] Bluetooth: hci2: command tx timeout [ 456.515297][T11467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.045161][ T5234] Bluetooth: hci3: command tx timeout [ 457.257667][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.530271][T11467] hsr_slave_0: entered promiscuous mode [ 457.537429][T11467] hsr_slave_1: entered promiscuous mode [ 457.543954][T11467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.552670][T11467] Cannot create hsr debugfs directory [ 457.587724][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.699465][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.815160][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.150805][T11455] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 458.164704][ T5234] Bluetooth: hci1: command tx timeout [ 458.173816][ T52] bridge_slave_1: left allmulticast mode [ 458.180025][ T52] bridge_slave_1: left promiscuous mode [ 458.186251][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.197141][ T52] bridge_slave_0: left allmulticast mode [ 458.202842][ T52] bridge_slave_0: left promiscuous mode [ 458.208684][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.221545][ T52] bridge_slave_1: left allmulticast mode [ 458.227489][ T52] bridge_slave_1: left promiscuous mode [ 458.233337][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.262705][ T52] bridge_slave_0: left allmulticast mode [ 458.269757][ T52] bridge_slave_0: left promiscuous mode [ 458.275691][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.573885][ T5234] Bluetooth: hci2: command tx timeout [ 459.125369][ T5234] Bluetooth: hci3: command tx timeout [ 459.642785][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.656454][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.677932][ T52] bond0 (unregistering): Released all slaves [ 459.879006][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.898406][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.921984][ T52] bond0 (unregistering): Released all slaves [ 459.969059][T11455] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 459.985303][T11455] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 460.095490][T11455] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 460.707956][T11631] tmpfs: Unknown parameter '' [ 461.031065][T11455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.429566][T11455] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.482815][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.490035][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.534205][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.541458][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.682871][T11455] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 461.726167][T11455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.016769][T11459] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 462.067410][T11459] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 462.098709][T11459] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 462.329214][ T52] hsr_slave_0: left promiscuous mode [ 462.352270][ T52] hsr_slave_1: left promiscuous mode [ 462.358741][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.385690][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.435363][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.442863][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.480706][ T52] hsr_slave_0: left promiscuous mode [ 462.551014][ T52] hsr_slave_1: left promiscuous mode [ 462.568692][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.584440][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.605914][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.613394][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.675711][T11660] Process accounting resumed [ 462.713367][ T52] veth1_macvtap: left promiscuous mode [ 462.733424][ T52] veth0_macvtap: left promiscuous mode [ 462.739227][ T52] veth1_vlan: left promiscuous mode [ 462.745087][ T52] veth0_vlan: left promiscuous mode [ 462.756371][ T52] veth1_macvtap: left promiscuous mode [ 462.761951][ T52] veth0_macvtap: left promiscuous mode [ 462.774569][ T52] veth1_vlan: left promiscuous mode [ 462.779947][ T52] veth0_vlan: left promiscuous mode [ 463.755440][ T52] team0 (unregistering): Port device team_slave_1 removed [ 463.807110][ T52] team0 (unregistering): Port device team_slave_0 removed [ 464.476509][ T52] team0 (unregistering): Port device team_slave_1 removed [ 464.517911][ T52] team0 (unregistering): Port device team_slave_0 removed [ 464.923779][T11459] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 465.071845][T11467] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 465.153886][T11467] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 465.167095][T11467] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 465.194148][T11455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.212765][T11467] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 465.363102][T11455] veth0_vlan: entered promiscuous mode [ 465.378406][T11455] veth1_vlan: entered promiscuous mode [ 465.406915][T11455] veth0_macvtap: entered promiscuous mode [ 465.417734][T11455] veth1_macvtap: entered promiscuous mode [ 465.435795][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.446575][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.459253][T11455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.470063][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.480736][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.491971][T11455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.502505][T11455] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.511377][T11455] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.520421][T11455] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.529368][T11455] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.737350][T11467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.755346][T11467] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.767949][ T7129] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.775131][ T7129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.823974][T11459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.873029][ T7129] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.880238][ T7129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.013830][T11459] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.065540][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.072690][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.140381][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.147565][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.192669][ T7129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.228514][ T7129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.301630][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.333888][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.661382][T11467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.892963][T11467] veth0_vlan: entered promiscuous mode [ 466.932939][T11467] veth1_vlan: entered promiscuous mode [ 467.041322][T11467] veth0_macvtap: entered promiscuous mode [ 467.082969][T11467] veth1_macvtap: entered promiscuous mode [ 467.102652][T11459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.137779][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.149288][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.160859][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.172655][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.185261][T11467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.218362][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.249638][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.263008][T11467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.285632][T11467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.307054][T11467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.361204][T11467] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.376917][T11467] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.390760][T11467] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.400696][T11467] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.506718][T11459] veth0_vlan: entered promiscuous mode [ 467.575606][T11459] veth1_vlan: entered promiscuous mode [ 467.620385][ T7135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.646238][ T7135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.733042][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.753470][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.757771][T11459] veth0_macvtap: entered promiscuous mode [ 467.823936][T11459] veth1_macvtap: entered promiscuous mode [ 467.905758][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.925123][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.947860][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.969921][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.988919][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.011051][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.033955][T11459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.080777][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.112449][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.159500][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.198179][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.227072][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.248084][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.284199][T11459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.500642][T11459] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.536303][T11459] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.566820][T11459] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.605353][T11459] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.008581][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.027391][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.079933][ T7135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.092646][ T7135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.026375][T11928] Process accounting resumed [ 477.973643][T11979] netlink: zone id is out of range [ 478.012005][T11979] netlink: zone id is out of range [ 478.027493][T11979] netlink: zone id is out of range [ 478.043507][T11979] netlink: zone id is out of range [ 478.062441][T11979] netlink: zone id is out of range [ 478.080987][T11979] netlink: zone id is out of range [ 478.098616][T11979] netlink: zone id is out of range [ 478.114586][T11979] netlink: zone id is out of range [ 478.131248][T11979] netlink: zone id is out of range [ 478.150253][T11979] netlink: zone id is out of range [ 479.736011][T11997] Process accounting resumed [ 488.405968][ T4624] Bluetooth: hci0: command 0x0406 tx timeout [ 490.222041][T12139] svc: failed to register nfsdv3 RPC service (errno 111). [ 490.354163][T12139] svc: failed to register nfsaclv3 RPC service (errno 111). [ 492.336643][T12221] FAULT_INJECTION: forcing a failure. [ 492.336643][T12221] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 492.374354][T12221] CPU: 0 UID: 0 PID: 12221 Comm: syz.3.1338 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 492.385569][T12221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 492.395773][T12221] Call Trace: [ 492.399140][T12221] [ 492.403805][T12221] dump_stack_lvl+0x16c/0x1f0 [ 492.409619][T12221] should_fail_ex+0x497/0x5b0 [ 492.415010][T12221] _copy_from_iter+0x29b/0x13e0 [ 492.420201][T12221] ? __pfx__copy_from_iter+0x10/0x10 [ 492.425740][T12221] ? __virt_addr_valid+0x1a4/0x590 [ 492.431021][T12221] ? __virt_addr_valid+0x5e/0x590 [ 492.436339][T12221] ? __phys_addr_symbol+0x30/0x80 [ 492.441997][T12221] ? __check_object_size+0x488/0x710 [ 492.447362][T12221] netlink_sendmsg+0x813/0xd70 [ 492.452567][T12221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.457951][T12221] ____sys_sendmsg+0x9ae/0xb40 [ 492.462784][T12221] ? copy_msghdr_from_user+0x10b/0x160 [ 492.468507][T12221] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.473978][T12221] ? find_held_lock+0x2d/0x110 [ 492.478839][T12221] ___sys_sendmsg+0x135/0x1e0 [ 492.483886][T12221] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.489286][T12221] ? fdget+0x176/0x210 [ 492.493484][T12221] __sys_sendmsg+0x117/0x1f0 [ 492.498128][T12221] ? __pfx___sys_sendmsg+0x10/0x10 [ 492.503397][T12221] do_syscall_64+0xcd/0x250 [ 492.507944][T12221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.513915][T12221] RIP: 0033:0x7f0d1f17dff9 [ 492.518456][T12221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.538720][T12221] RSP: 002b:00007f0d2002c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.547255][T12221] RAX: ffffffffffffffda RBX: 00007f0d1f335f80 RCX: 00007f0d1f17dff9 [ 492.555260][T12221] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 492.563252][T12221] RBP: 00007f0d2002c090 R08: 0000000000000000 R09: 0000000000000000 [ 492.571253][T12221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.579425][T12221] R13: 0000000000000000 R14: 00007f0d1f335f80 R15: 00007fffcb5254a8 [ 492.587976][T12221] [ 493.745783][T12257] Invalid ELF header magic: != ELF [ 494.522151][T12279] FAULT_INJECTION: forcing a failure. [ 494.522151][T12279] name failslab, interval 1, probability 0, space 0, times 0 [ 494.624284][T12279] CPU: 1 UID: 0 PID: 12279 Comm: syz.1.1347 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 494.635772][T12279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 494.646625][T12279] Call Trace: [ 494.649989][T12279] [ 494.652970][T12279] dump_stack_lvl+0x16c/0x1f0 [ 494.657728][T12279] should_fail_ex+0x497/0x5b0 [ 494.662517][T12279] should_failslab+0xc2/0x120 [ 494.667281][T12279] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 494.672739][T12279] ? skb_clone+0x190/0x3f0 [ 494.677246][T12279] skb_clone+0x190/0x3f0 [ 494.681570][T12279] netlink_deliver_tap+0xb26/0xcf0 [ 494.686751][T12279] netlink_unicast+0x5e1/0x7f0 [ 494.691580][T12279] ? __pfx_netlink_unicast+0x10/0x10 [ 494.696930][T12279] ? __phys_addr_symbol+0x30/0x80 [ 494.702024][T12279] ? __check_object_size+0x488/0x710 [ 494.707391][T12279] netlink_sendmsg+0x8b8/0xd70 [ 494.712248][T12279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.717625][T12279] ____sys_sendmsg+0x9ae/0xb40 [ 494.722563][T12279] ? copy_msghdr_from_user+0x10b/0x160 [ 494.728205][T12279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.734477][T12279] ? find_held_lock+0x2d/0x110 [ 494.740752][T12279] ___sys_sendmsg+0x135/0x1e0 [ 494.745769][T12279] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.753534][T12279] ? fdget+0x176/0x210 [ 494.758099][T12279] __sys_sendmsg+0x117/0x1f0 [ 494.763211][T12279] ? __pfx___sys_sendmsg+0x10/0x10 [ 494.768817][T12279] do_syscall_64+0xcd/0x250 [ 494.774419][T12279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.781270][T12279] RIP: 0033:0x7f5f4d77dff9 [ 494.785752][T12279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.806156][T12279] RSP: 002b:00007f5f4e61d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.814644][T12279] RAX: ffffffffffffffda RBX: 00007f5f4d935f80 RCX: 00007f5f4d77dff9 [ 494.822677][T12279] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 494.830707][T12279] RBP: 00007f5f4e61d090 R08: 0000000000000000 R09: 0000000000000000 [ 494.838740][T12279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.846766][T12279] R13: 0000000000000000 R14: 00007f5f4d935f80 R15: 00007ffc89326238 [ 494.855115][T12279] [ 502.340091][ T7135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.649065][ T7135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.837983][ T7135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.051200][ T7135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.463552][ T7135] bridge_slave_1: left allmulticast mode [ 503.501303][ T7135] bridge_slave_1: left promiscuous mode [ 503.542215][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.581354][ T7135] bridge_slave_0: left allmulticast mode [ 503.624813][ T7135] bridge_slave_0: left promiscuous mode [ 503.654660][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.761403][ T4624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 503.771579][ T4624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 503.781005][ T4624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 503.793390][ T4624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 503.807247][ T4624] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 503.814999][ T4624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 505.032676][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 505.043220][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 505.052128][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 505.064634][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 505.073158][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 505.080921][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 505.930954][ T5234] Bluetooth: hci2: command tx timeout [ 506.617352][ T7135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.769543][ T7135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.781932][ T7135] bond0 (unregistering): Released all slaves [ 506.806776][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.813165][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.284420][ T5234] Bluetooth: hci0: command tx timeout [ 507.631230][ T7135] hsr_slave_0: left promiscuous mode [ 507.652495][ T7135] hsr_slave_1: left promiscuous mode [ 507.696748][ T7135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.714404][ T7135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.760450][ T7135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.783782][ T7135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.831345][ T7135] veth1_macvtap: left promiscuous mode [ 507.846521][ T7135] veth0_macvtap: left promiscuous mode [ 507.859931][ T7135] veth1_vlan: left promiscuous mode [ 507.875819][ T7135] veth0_vlan: left promiscuous mode [ 508.004644][ T5234] Bluetooth: hci2: command tx timeout [ 509.013117][ T7135] team0 (unregistering): Port device team_slave_1 removed [ 509.068528][ T7135] team0 (unregistering): Port device team_slave_0 removed [ 509.364322][ T5234] Bluetooth: hci0: command tx timeout [ 510.084394][ T5234] Bluetooth: hci2: command tx timeout [ 510.742243][T12383] chnl_net:caif_netlink_parms(): no params data found [ 510.980801][T12368] chnl_net:caif_netlink_parms(): no params data found [ 511.394547][T12383] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.404485][T12383] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.412474][T12383] bridge_slave_0: entered allmulticast mode [ 511.444330][ T5234] Bluetooth: hci0: command tx timeout [ 511.448497][T12383] bridge_slave_0: entered promiscuous mode [ 511.509951][T12383] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.545170][T12383] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.581136][T12383] bridge_slave_1: entered allmulticast mode [ 511.605825][T12383] bridge_slave_1: entered promiscuous mode [ 511.796217][T12368] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.803423][T12368] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.835705][T12368] bridge_slave_0: entered allmulticast mode [ 511.843491][T12368] bridge_slave_0: entered promiscuous mode [ 511.882480][T12368] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.892624][T12368] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.900858][T12368] bridge_slave_1: entered allmulticast mode [ 511.928379][T12368] bridge_slave_1: entered promiscuous mode [ 511.972958][T12383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.164773][ T5234] Bluetooth: hci2: command tx timeout [ 512.193769][ T7135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.302911][T12383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.473883][T12368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.550370][ T7135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.595459][T12383] team0: Port device team_slave_0 added [ 512.614080][T12368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.694802][T12383] team0: Port device team_slave_1 added [ 512.892962][ T7135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.046503][T12383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.053569][T12383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.123247][T12383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.276724][ T7135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.369058][T12368] team0: Port device team_slave_0 added [ 513.398857][T12368] team0: Port device team_slave_1 added [ 513.425142][T12383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.432165][T12383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.492214][T12383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.524443][ T5234] Bluetooth: hci0: command tx timeout [ 513.736325][T12383] hsr_slave_0: entered promiscuous mode [ 513.785414][T12383] hsr_slave_1: entered promiscuous mode [ 513.877299][T12368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.894872][T12368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.936338][T12368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.051353][T12368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.074639][T12368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.145004][T12368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.625066][T12368] hsr_slave_0: entered promiscuous mode [ 514.661679][T12368] hsr_slave_1: entered promiscuous mode [ 514.704484][T12368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.712929][T12368] Cannot create hsr debugfs directory [ 514.832108][T12564] delete_channel: no stack [ 515.151266][ T7135] bridge_slave_1: left allmulticast mode [ 515.161837][ T7135] bridge_slave_1: left promiscuous mode [ 515.172196][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.346722][ T7135] bridge_slave_0: left allmulticast mode [ 515.352462][ T7135] bridge_slave_0: left promiscuous mode [ 515.374493][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.784885][ T7135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.847410][ T7135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.996921][ T7135] bond0 (unregistering): Released all slaves [ 522.597243][ T7135] hsr_slave_0: left promiscuous mode [ 522.643096][ T7135] hsr_slave_1: left promiscuous mode [ 522.658252][ T7135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.674367][ T7135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.697717][ T7135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.710124][ T7135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.741713][ T7135] veth1_macvtap: left promiscuous mode [ 522.747916][ T7135] veth0_macvtap: left promiscuous mode [ 522.753681][ T7135] veth1_vlan: left promiscuous mode [ 522.761442][ T7135] veth0_vlan: left promiscuous mode [ 523.975203][ T7135] team0 (unregistering): Port device team_slave_1 removed [ 524.079120][ T7135] team0 (unregistering): Port device team_slave_0 removed [ 525.667018][T12383] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 525.724552][T12383] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 525.757097][T12383] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 525.800620][T12383] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 525.869089][T12368] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 525.931484][T12368] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 525.972456][T12368] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 525.990408][T12368] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 526.183304][T12383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.297352][T12383] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.348368][T12368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.406903][T12368] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.429226][T12512] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.436435][T12512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.509169][T12512] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.517027][T12512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.625873][T12512] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.633053][T12512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.643773][T12512] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.651114][T12512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.709442][T12368] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 526.720140][T12368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 526.810034][T12383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 527.190319][T12368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.342033][T12368] veth0_vlan: entered promiscuous mode [ 527.398709][T12368] veth1_vlan: entered promiscuous mode [ 527.501760][T12383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.560766][T12368] veth0_macvtap: entered promiscuous mode [ 527.588520][T12368] veth1_macvtap: entered promiscuous mode [ 527.687100][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.708389][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.729062][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.757881][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.801460][T12368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.853205][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.871902][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.916470][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.946199][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.983615][T12368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.013476][T12383] veth0_vlan: entered promiscuous mode [ 528.059529][T12368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.106114][T12368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.130236][T12368] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.164373][T12368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.262000][T12383] veth1_vlan: entered promiscuous mode [ 528.459110][T12383] veth0_macvtap: entered promiscuous mode [ 528.469705][T12383] veth1_macvtap: entered promiscuous mode [ 528.487469][T12383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.498303][T12383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.508734][T12383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.520088][T12383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.530099][T12383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.540947][T12383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.552779][T12383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.563202][T12383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.574813][T12383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.585718][T12383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.596571][T12383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.606754][T12383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.617867][T12383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.629760][T12383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.645970][T12383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.655043][T12383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.663802][T12383] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.667842][T12513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.672685][T12383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.744273][T12513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.897441][T12512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.947693][T12512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.035841][T12512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.063592][T12512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.180776][ T7135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.203803][ T7135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.602348][ T29] audit: type=1326 audit(4294967343.140:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.3.1438" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d1f17dff9 code=0x0 [ 537.621020][ T4624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 537.630894][ T4624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 537.639390][ T4624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 537.661024][ T4624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 537.669984][ T4624] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 537.678416][ T4624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 538.291672][T12880] chnl_net:caif_netlink_parms(): no params data found [ 539.257393][T12880] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.271016][T12880] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.282142][T12880] bridge_slave_0: entered allmulticast mode [ 539.302005][T12880] bridge_slave_0: entered promiscuous mode [ 539.330784][T12880] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.351616][T12880] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.369546][T12880] bridge_slave_1: entered allmulticast mode [ 539.390800][T12880] bridge_slave_1: entered promiscuous mode [ 539.513907][T12603] syz.1.1411 (12603) used greatest stack depth: 17824 bytes left [ 539.884461][ T5234] Bluetooth: hci4: command tx timeout [ 540.222099][T12931] can: request_module (can-proto-0) failed. [ 540.249416][T12880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.298476][T12880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.435871][T12939] can: request_module (can-proto-0) failed. [ 541.490186][T12880] team0: Port device team_slave_0 added [ 541.509764][T12880] team0: Port device team_slave_1 added [ 541.934302][ T5234] Bluetooth: hci4: command tx timeout [ 542.219425][T12972] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1463'. [ 542.236311][T12880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.243453][T12880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.357912][T12880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.397325][T12880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.422224][T12880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.484340][T12880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.188934][T12880] hsr_slave_0: entered promiscuous mode [ 543.283446][T12880] hsr_slave_1: entered promiscuous mode [ 543.324564][T12880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 543.362822][T12880] Cannot create hsr debugfs directory [ 544.026959][ T5234] Bluetooth: hci4: command tx timeout [ 544.862813][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.699401][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.084631][ T5234] Bluetooth: hci4: command tx timeout [ 546.138489][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.522951][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.944877][ T52] bridge_slave_1: left allmulticast mode [ 546.964515][ T52] bridge_slave_1: left promiscuous mode [ 546.974541][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.079726][ T52] bridge_slave_0: left allmulticast mode [ 547.104297][ T52] bridge_slave_0: left promiscuous mode [ 547.110121][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.246233][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.295832][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.326736][ T52] bond0 (unregistering): Released all slaves [ 550.053044][ T52] hsr_slave_0: left promiscuous mode [ 550.061678][ T52] hsr_slave_1: left promiscuous mode [ 550.076264][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.083835][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.093642][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.101697][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.142786][ T52] veth1_macvtap: left promiscuous mode [ 550.154858][ T52] veth0_macvtap: left promiscuous mode [ 550.164949][ T52] veth1_vlan: left promiscuous mode [ 550.170341][ T52] veth0_vlan: left promiscuous mode [ 551.111877][ T52] team0 (unregistering): Port device team_slave_1 removed [ 551.181605][ T52] team0 (unregistering): Port device team_slave_0 removed [ 552.233643][T12880] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 552.265846][T12880] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 552.301454][T12880] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 552.335784][T12880] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 552.542049][T12880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.562152][T12880] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.579044][T12508] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.586274][T12508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.682928][T12508] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.690143][T12508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.789852][T12880] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 552.800386][T12880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 553.490843][T12880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.644972][T12880] veth0_vlan: entered promiscuous mode [ 553.681181][T12880] veth1_vlan: entered promiscuous mode [ 553.756996][T12880] veth0_macvtap: entered promiscuous mode [ 553.783850][T12880] veth1_macvtap: entered promiscuous mode [ 553.843861][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.864784][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.891126][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.911082][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.921759][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.947100][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.963388][T12880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.989393][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.008668][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.022713][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.038895][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.070233][T12880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.094376][T12880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.122421][T12880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.147969][T12880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.165562][T12880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.198459][T12880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.209218][T12880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.411298][ T7135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.460122][ T7135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.562815][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.581795][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.064739][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1493'. [ 556.311297][T13204] could not allocate digest TFM handle [ 556.519674][T13204] could not allocate digest TFM handle [ 556.689314][T13204] could not allocate digest TFM handle [ 556.959392][T13204] could not allocate digest TFM handle [ 557.031617][T13204] could not allocate digest TFM handle [ 557.739870][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1516'. [ 558.802636][T13297] ptrace attach of "./syz-executor exec"[11467] was attempted by "./syz-executor exec"[13297] [ 559.079887][T13296] cgroup: fork rejected by pids controller in /syz2 [ 565.586692][T13554] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 565.634264][T13554] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 566.179209][T13556] futex_wake_op: syz.0.1548 tries to shift op by -256; fix this program [ 566.757212][T13567] HSR: entered promiscuous mode [ 567.755076][T13582] can: request_module (can-proto-4) failed. [ 568.225925][T13593] ptrace attach of "./syz-executor exec"[12368] was attempted by "./syz-executor exec"[13593] [ 568.286393][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.293130][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.475244][ T1051] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.657032][ T1051] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.796396][ T1051] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.912443][ T1051] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.200617][ T1051] bridge_slave_1: left allmulticast mode [ 569.221078][ T1051] bridge_slave_1: left promiscuous mode [ 569.251310][ T1051] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.335325][ T1051] bridge_slave_0: left allmulticast mode [ 569.341099][ T1051] bridge_slave_0: left promiscuous mode [ 569.363045][ T4624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 569.383278][ T1051] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.395003][ T4624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 569.406970][ T4624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 569.415251][ T4624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 569.429540][ T4624] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 569.439087][ T4624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 570.458174][ T1051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.486281][ T1051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.509852][ T1051] bond0 (unregistering): Released all slaves [ 571.219529][T13686] net_ratelimit: 18 callbacks suppressed [ 571.219557][T13686] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 571.243871][ T1051] hsr_slave_0: left promiscuous mode [ 571.253248][ T1051] hsr_slave_1: left promiscuous mode [ 571.262289][ T1051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.292305][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.323079][ T1051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.349748][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.459453][ T1051] veth1_macvtap: left promiscuous mode [ 571.498810][ T1051] veth0_macvtap: left promiscuous mode [ 571.519152][ T1051] veth1_vlan: left promiscuous mode [ 571.519353][T13687] delete_channel: no stack [ 571.525989][ T5234] Bluetooth: hci0: command tx timeout [ 571.539555][ T1051] veth0_vlan: left promiscuous mode [ 573.250803][ T1051] team0 (unregistering): Port device team_slave_1 removed [ 573.347832][ T1051] team0 (unregistering): Port device team_slave_0 removed [ 573.644519][ T4624] Bluetooth: hci0: command tx timeout [ 575.040350][T13640] chnl_net:caif_netlink_parms(): no params data found [ 575.122966][ T29] audit: type=1326 audit(8277292038.750:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13723 comm="syz.1.1585" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff50b57dff9 code=0x0 [ 575.286433][T13640] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.304142][T13640] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.317569][T13640] bridge_slave_0: entered allmulticast mode [ 575.332040][T13640] bridge_slave_0: entered promiscuous mode [ 575.359327][T13640] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.387421][T13640] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.411223][T13640] bridge_slave_1: entered allmulticast mode [ 575.428401][T13640] bridge_slave_1: entered promiscuous mode [ 575.449414][ T4624] Bluetooth: hci3: command 0x0406 tx timeout [ 575.608295][T13640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.672884][T13640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.691270][ T5234] Bluetooth: hci0: command tx timeout [ 575.947160][T13640] team0: Port device team_slave_0 added [ 575.992374][T13640] team0: Port device team_slave_1 added [ 576.083796][T13640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.102219][T13640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.135687][T13640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.171444][T13640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.196485][T13640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.259491][T13640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.486470][T13640] hsr_slave_0: entered promiscuous mode [ 576.513601][T13640] hsr_slave_1: entered promiscuous mode [ 577.768266][ T5234] Bluetooth: hci0: command tx timeout [ 577.933960][T13792] delete_channel: no stack [ 578.150636][T13640] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 578.212900][T13640] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 578.237898][T13640] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 578.269276][T13640] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 578.481589][T13640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.543797][T13640] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.692590][ T7135] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.700091][ T7135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.780160][ T7135] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.787383][ T7135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.933160][T13640] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 579.013153][T13640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.759491][T13640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.800463][T13640] veth0_vlan: entered promiscuous mode [ 579.814888][T13640] veth1_vlan: entered promiscuous mode [ 579.840828][T13640] veth0_macvtap: entered promiscuous mode [ 579.850638][T13640] veth1_macvtap: entered promiscuous mode [ 579.868869][T13640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.879446][T13640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.889741][T13640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.900586][T13640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.910791][T13640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.921770][T13640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.936172][T13640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.957249][T13640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.968316][T13640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.978839][T13640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.989620][T13640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.999760][T13640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.010519][T13640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.028316][T13640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.040204][T13640] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.049184][T13640] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.058281][T13640] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.067440][T13640] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.446303][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.474891][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.585473][ T7135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.628798][ T7135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.282140][T13876] Process accounting resumed [ 584.490668][T13972] syz.1.1621(13972): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 585.643474][T14018] openvswitch: netlink: Message has 190 unknown bytes. [ 589.450190][T14085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'. [ 607.388350][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'. [ 610.079061][T14411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1721'. [ 613.454118][T14491] nbd: must specify a device to reconfigure [ 621.612144][T14590] kexec: Could not allocate control_code_buffer [ 623.422386][T14657] ptrace attach of "./syz-executor exec"[11467] was attempted by "./syz-executor exec"[14657] [ 626.644505][ T4624] Bluetooth: hci2: command 0x0406 tx timeout [ 629.686541][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.692939][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.517527][T14841] nbd: must specify at least one socket [ 638.896627][T14904] netlink: 'syz.2.1843': attribute type 11 has an invalid length. [ 641.189817][T14942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1850'. [ 645.339503][ T5234] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 651.193685][T15146] Process accounting resumed [ 651.452507][T15146] Process accounting resumed [ 652.587958][T15158] sctp: [Deprecated]: syz.1.1887 (pid 15158) Use of struct sctp_assoc_value in delayed_ack socket option. [ 652.587958][T15158] Use struct sctp_sack_info instead [ 658.863298][T15265] )zV: entered promiscuous mode [ 658.879865][T15264] netlink: 202 bytes leftover after parsing attributes in process `syz.1.1921'. [ 661.699004][T15298] can: request_module (can-proto-0) failed. [ 662.486665][ T4624] Bluetooth: hci4: command 0x0406 tx timeout [ 671.643327][ T29] audit: type=1326 audit(3607.820:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15419 comm="syz.0.1966" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f226877dff9 code=0x0 [ 674.558615][T15459] sctp: [Deprecated]: syz.1.1977 (pid 15459) Use of struct sctp_assoc_value in delayed_ack socket option. [ 674.558615][T15459] Use struct sctp_sack_info instead [ 674.605816][T15459] sctp: [Deprecated]: syz.1.1977 (pid 15459) Use of struct sctp_assoc_value in delayed_ack socket option. [ 674.605816][T15459] Use struct sctp_sack_info instead [ 681.601597][T15567] Process accounting resumed [ 683.906071][ T4624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 683.916640][ T4624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 683.925625][ T4624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 683.933719][ T4624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 683.943567][ T4624] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 683.951540][ T4624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 686.164503][ T4624] Bluetooth: hci1: command tx timeout [ 688.244370][ T4624] Bluetooth: hci1: command tx timeout [ 688.746936][T15580] chnl_net:caif_netlink_parms(): no params data found [ 690.111346][T15580] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.150108][T15580] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.192775][T15580] bridge_slave_0: entered allmulticast mode [ 690.235427][T15580] bridge_slave_0: entered promiscuous mode [ 690.318068][T15580] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.336627][ T4624] Bluetooth: hci1: command tx timeout [ 690.374394][T15580] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.424493][T15580] bridge_slave_1: entered allmulticast mode [ 690.469291][T15580] bridge_slave_1: entered promiscuous mode [ 690.825200][T15580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.856733][T15580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.099033][T14647] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.129384][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.138920][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.319323][T15580] team0: Port device team_slave_0 added [ 691.408061][T14647] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.500749][T15580] team0: Port device team_slave_1 added [ 691.698008][T15580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.708961][T15580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.784580][T15580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.891820][T14647] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.039166][T15580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.059217][T15580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.158747][T15580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.296422][T14647] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.406502][ T4624] Bluetooth: hci1: command tx timeout [ 692.739647][T15580] hsr_slave_0: entered promiscuous mode [ 692.788446][T15580] hsr_slave_1: entered promiscuous mode [ 692.810517][T15580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 692.819769][T15580] Cannot create hsr debugfs directory [ 693.301168][T14647] bridge_slave_1: left allmulticast mode [ 693.324686][T14647] bridge_slave_1: left promiscuous mode [ 693.330495][T14647] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.397508][T14647] bridge_slave_0: left allmulticast mode [ 693.403232][T14647] bridge_slave_0: left promiscuous mode [ 693.416608][T14647] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.640268][T14647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.668337][T14647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.690636][T14647] bond0 (unregistering): Released all slaves [ 694.743282][T15800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2052'. [ 695.127503][T15806] svc: failed to register nfsdv3 RPC service (errno 111). [ 695.160019][T15806] svc: failed to register nfsaclv3 RPC service (errno 111). [ 695.574419][T14647] hsr_slave_0: left promiscuous mode [ 695.629877][T14647] hsr_slave_1: left promiscuous mode [ 695.636291][T14647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.643758][T14647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.707092][T14647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.745768][T14647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.797294][T14647] veth1_macvtap: left promiscuous mode [ 695.802903][T14647] veth0_macvtap: left promiscuous mode [ 695.839699][T14647] veth1_vlan: left promiscuous mode [ 695.848885][T14647] veth0_vlan: left promiscuous mode [ 697.960029][T14647] team0 (unregistering): Port device team_slave_1 removed [ 698.197464][T14647] team0 (unregistering): Port device team_slave_0 removed [ 699.749483][T15580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 699.801521][T15580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 699.851903][T15580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 699.917156][T15580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 700.215091][T15881] nbd: must specify at least one socket [ 700.233709][T15580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.266083][T15879] svc: failed to register nfsdv3 RPC service (errno 111). [ 700.286095][T15881] nbd: must specify at least one socket [ 700.292023][T15881] nbd: must specify at least one socket [ 700.306020][T15580] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.346741][T15879] svc: failed to register nfsaclv3 RPC service (errno 111). [ 700.367835][T14644] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.375149][T14644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.396422][T15881] nbd: must specify at least one socket [ 700.420108][T14644] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.427503][T14644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.452068][T15881] nbd: must specify at least one socket [ 700.471709][T15881] nbd: must specify at least one socket [ 700.489009][T15881] nbd: must specify at least one socket [ 700.508680][T15881] nbd: must specify at least one socket [ 700.528932][T15881] nbd: must specify at least one socket [ 700.552496][T15881] nbd: must specify at least one socket [ 700.574741][T15881] nbd: must specify at least one socket [ 700.596827][T15881] nbd: must specify at least one socket [ 700.618624][T15881] nbd: must specify at least one socket [ 700.628768][T15881] nbd: must specify at least one socket [ 700.656922][T15881] nbd: must specify at least one socket [ 700.675763][T15881] nbd: must specify at least one socket [ 700.704619][T15881] nbd: must specify at least one socket [ 700.719368][T15881] nbd: must specify at least one socket [ 700.735095][T15881] nbd: must specify at least one socket [ 700.756790][T15881] nbd: must specify at least one socket [ 700.775103][T15881] nbd: must specify at least one socket [ 700.806253][T15881] nbd: must specify at least one socket [ 700.824513][T15881] nbd: must specify at least one socket [ 700.844778][T15881] nbd: must specify at least one socket [ 700.851185][T15881] nbd: must specify at least one socket [ 700.858412][T15881] nbd: must specify at least one socket [ 700.864748][T15881] nbd: must specify at least one socket [ 700.870687][T15881] nbd: must specify at least one socket [ 700.876613][T15881] nbd: must specify at least one socket [ 700.882537][T15881] nbd: must specify at least one socket [ 700.888632][T15881] nbd: must specify at least one socket [ 700.894831][T15881] nbd: must specify at least one socket [ 700.901246][T15881] nbd: must specify at least one socket [ 701.064835][T15580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.156305][T15580] veth0_vlan: entered promiscuous mode [ 701.198563][T15580] veth1_vlan: entered promiscuous mode [ 701.271038][T15580] veth0_macvtap: entered promiscuous mode [ 701.282880][T15580] veth1_macvtap: entered promiscuous mode [ 701.320301][T15580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.351624][T15580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.376587][T15580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.404201][T15580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.442682][T15580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.485582][T15580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.510555][T15580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.531320][T15580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.576015][T15580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.601740][T15580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.633588][T15580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.661966][T15580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.708285][T15580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.738341][T15580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.789999][T15580] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.819908][T15580] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.853243][T15580] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.921657][T15580] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.417114][T14640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.469862][T14640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.667272][T14644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.694221][T14644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.873419][T16018] tc_dump_action: action bad kind [ 707.540746][T16059] ptrace attach of "./syz-executor exec"[15580] was attempted by "./syz-executor exec"[16059] [ 707.574021][T16059] ptrace attach of "./syz-executor exec"[15580] was attempted by "./syz-executor exec"[16059] [ 711.077976][T16120] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 711.093307][T16120] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 712.105177][T16144] svc: failed to register nfsdv3 RPC service (errno 111). [ 712.123310][T16144] svc: failed to register nfsaclv3 RPC service (errno 111). [ 716.099881][T15089] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.437947][T15089] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.577586][T16252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2167'. [ 716.689862][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 716.730083][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 716.738414][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 716.748998][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 716.757944][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 716.765378][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 716.791338][T15089] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.102161][T16253] nbd: couldn't find a device at index 1588667012 [ 717.120441][T15089] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.508018][T16256] chnl_net:caif_netlink_parms(): no params data found [ 717.757570][T15089] bridge_slave_1: left allmulticast mode [ 717.763305][T15089] bridge_slave_1: left promiscuous mode [ 717.777856][T15089] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.856341][T15089] bridge_slave_0: left allmulticast mode [ 717.875944][T15089] bridge_slave_0: left promiscuous mode [ 717.946297][T15089] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.804352][ T4624] Bluetooth: hci0: command tx timeout [ 719.662451][T16305] ptrace attach of "./syz-executor exec"[11467] was attempted by "./syz-executor exec"[16305] [ 719.693191][T15089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 719.727584][T15089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 719.749299][T15089] bond0 (unregistering): Released all slaves [ 720.015345][T16256] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.034291][T16256] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.041565][T16256] bridge_slave_0: entered allmulticast mode [ 720.050002][T16256] bridge_slave_0: entered promiscuous mode [ 720.058559][T16256] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.066287][T16256] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.073549][T16256] bridge_slave_1: entered allmulticast mode [ 720.095605][T16256] bridge_slave_1: entered promiscuous mode [ 720.321459][T16256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.392857][T16256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.790978][T16256] team0: Port device team_slave_0 added [ 720.817130][T16256] team0: Port device team_slave_1 added [ 720.885366][ T4624] Bluetooth: hci0: command tx timeout [ 721.498431][T16256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.524236][T16256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.611172][T16256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.627688][T16256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.635131][T16256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.661669][T16256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.974317][T15089] hsr_slave_0: left promiscuous mode [ 722.054289][T15089] hsr_slave_1: left promiscuous mode [ 722.170055][T15089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.194230][T15089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.255437][T15089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.263082][T15089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.405906][T15089] veth1_macvtap: left promiscuous mode [ 722.411512][T15089] veth0_macvtap: left promiscuous mode [ 722.444393][T15089] veth1_vlan: left promiscuous mode [ 722.449804][T15089] veth0_vlan: left promiscuous mode [ 722.964384][ T4624] Bluetooth: hci0: command tx timeout [ 725.050419][ T4624] Bluetooth: hci0: command tx timeout [ 725.310230][T15089] team0 (unregistering): Port device team_slave_1 removed [ 725.468221][T15089] team0 (unregistering): Port device team_slave_0 removed [ 727.438025][T16256] hsr_slave_0: entered promiscuous mode [ 727.525650][T16256] hsr_slave_1: entered promiscuous mode [ 730.943016][T16256] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 731.108210][T16256] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 731.130835][T16256] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 731.267175][T16256] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 731.709752][T16256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.831056][T16256] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.881184][T15089] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.888417][T15089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.957389][T15089] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.964626][T15089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.051459][T16256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 732.615980][T16256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.761113][T16256] veth0_vlan: entered promiscuous mode [ 732.834307][T16256] veth1_vlan: entered promiscuous mode [ 732.938195][T16256] veth0_macvtap: entered promiscuous mode [ 732.988123][T16256] veth1_macvtap: entered promiscuous mode [ 733.032235][T16256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.075650][T16256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.089997][T16256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.134178][T16256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.144063][T16256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.187982][T16256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.223150][T16256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.243832][T16527] delete_channel: no stack [ 733.253316][T16256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.284737][T16256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.310598][T16256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.346860][T16256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.365062][T16256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.390630][T16256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.417494][T16256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.438743][T16256] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.495528][T16256] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.530132][T16256] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.559766][T16256] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.074544][ T7129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.104301][ T7129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.179644][T15089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.197908][T15089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.986505][T16627] netlink: zone id is out of range [ 736.991703][T16627] netlink: zone id is out of range [ 737.034291][T16627] netlink: zone id is out of range [ 737.039495][T16627] netlink: zone id is out of range [ 737.074347][T16627] netlink: zone id is out of range [ 737.079531][T16627] netlink: zone id is out of range [ 737.122748][T16627] netlink: zone id is out of range [ 737.128713][T16627] netlink: zone id is out of range [ 737.666132][T16634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2229'. [ 747.157384][T16802] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2274'. [ 752.577207][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.585913][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.956341][T16896] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2296'. [ 762.835989][T17076] __kmem_cache_create_args(nfsd_file) failed with error -22 [ 762.875983][T17076] CPU: 1 UID: 0 PID: 17076 Comm: syz.2.2345 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 762.886838][T17076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 762.897694][T17076] Call Trace: [ 762.901024][T17076] [ 762.904012][T17076] dump_stack_lvl+0x16c/0x1f0 [ 762.908868][T17076] __kmem_cache_create_args+0x130/0x3c0 [ 762.914919][T17076] nfsd_file_cache_init+0x126/0x4d0 [ 762.920462][T17076] ? net_generic+0xf4/0x2a0 [ 762.925496][T17076] nfsd_svc+0x5db/0x940 [ 762.931622][T17076] nfsd_nl_threads_set_doit+0x535/0xbe0 [ 762.940656][T17076] genl_family_rcv_msg_doit+0x202/0x2f0 [ 762.946747][T17076] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 762.953367][T17076] ? bpf_lsm_capable+0x9/0x10 [ 762.958543][T17076] ? security_capable+0x7e/0x260 [ 762.964031][T17076] genl_rcv_msg+0x565/0x800 [ 762.968658][T17076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.973863][T17076] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 762.980130][T17076] netlink_rcv_skb+0x165/0x410 [ 762.985719][T17076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.990828][T17076] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 762.996252][T17076] ? down_read+0xc9/0x330 [ 763.001016][T17076] ? __pfx_down_read+0x10/0x10 [ 763.005984][T17076] ? netlink_deliver_tap+0x1ae/0xcf0 [ 763.011370][T17076] genl_rcv+0x28/0x40 [ 763.015530][T17076] netlink_unicast+0x53c/0x7f0 [ 763.020918][T17076] ? __pfx_netlink_unicast+0x10/0x10 [ 763.026381][T17076] ? __phys_addr_symbol+0x30/0x80 [ 763.031485][T17076] ? __check_object_size+0x488/0x710 [ 763.036870][T17076] netlink_sendmsg+0x8b8/0xd70 [ 763.041731][T17076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 763.047214][T17076] ____sys_sendmsg+0x9ae/0xb40 [ 763.052107][T17076] ? copy_msghdr_from_user+0x10b/0x160 [ 763.057753][T17076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 763.063130][T17076] ? __pfx___lock_acquire+0x10/0x10 [ 763.068425][T17076] ___sys_sendmsg+0x135/0x1e0 [ 763.073232][T17076] ? __pfx____sys_sendmsg+0x10/0x10 [ 763.078632][T17076] ? lock_acquire+0x2f/0xb0 [ 763.083227][T17076] ? __fget_files+0x40/0x3f0 [ 763.087916][T17076] ? fdget+0x176/0x210 [ 763.092199][T17076] __sys_sendmsg+0x117/0x1f0 [ 763.096917][T17076] ? __pfx___sys_sendmsg+0x10/0x10 [ 763.102151][T17076] ? __x64_sys_futex+0x1e1/0x4c0 [ 763.107853][T17076] do_syscall_64+0xcd/0x250 [ 763.112451][T17076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.118425][T17076] RIP: 0033:0x7f071b97dff9 [ 763.122898][T17076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.142852][T17076] RSP: 002b:00007f071c76f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.151435][T17076] RAX: ffffffffffffffda RBX: 00007f071bb35f80 RCX: 00007f071b97dff9 [ 763.159649][T17076] RDX: 0000000000008004 RSI: 0000000020000140 RDI: 0000000000000085 [ 763.167869][T17076] RBP: 00007f071b9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 763.176661][T17076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.184793][T17076] R13: 0000000000000000 R14: 00007f071bb35f80 R15: 00007ffe3065a3b8 [ 763.193040][T17076] [ 763.250797][T17076] nfsd: unable to create nfsd_file_slab [ 764.250783][T17092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2349'. [ 765.082866][T17110] netlink: zone id is out of range [ 765.118084][T17110] netlink: zone id is out of range [ 765.145041][T17110] netlink: zone id is out of range [ 765.192847][T17110] netlink: zone id is out of range [ 765.205380][T17110] netlink: del zone limit has 4 unknown bytes [ 765.253923][ T4624] Bluetooth: hci4: Malformed HCI Event [ 767.489309][T17178] nbd: couldn't find device at index -1248024118 [ 774.307547][T17345] tmpfs: Unknown parameter 'nwZW U܃ܓ+``Sfq?P02$as-ҞmHpb@TcblY64 [ 774.307547][T17345] NtyA+m"իj2m4Е+-Nx>%!M淐+10g+#6?ࠏr+CY EAÄþ(DQjt6Ł&tʊ PPNr7 ' [ 774.379564][T14644] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.641728][T14644] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.972571][T14644] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.216335][T17369] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 775.231447][T17369] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 775.240119][T17369] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 775.249523][T17369] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 775.259883][T17369] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 775.268635][T17369] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 775.498150][T14644] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.792255][T14644] bridge_slave_1: left allmulticast mode [ 775.833132][T14644] bridge_slave_1: left promiscuous mode [ 775.856590][T14644] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.906342][T14644] bridge_slave_0: left allmulticast mode [ 775.918135][T14644] bridge_slave_0: left promiscuous mode [ 775.928144][T14644] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.284939][T14644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 777.329544][T14644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 777.364463][ T4624] Bluetooth: hci1: command tx timeout [ 777.372150][T14644] bond0 (unregistering): Released all slaves [ 777.955852][T17368] chnl_net:caif_netlink_parms(): no params data found [ 778.764377][T14644] hsr_slave_0: left promiscuous mode [ 778.814581][T14644] hsr_slave_1: left promiscuous mode [ 778.842004][T14644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.864288][T14644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.929357][T14644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.947283][T14644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.033989][T14644] veth1_macvtap: left promiscuous mode [ 779.054346][T14644] veth0_macvtap: left promiscuous mode [ 779.064700][T14644] veth1_vlan: left promiscuous mode [ 779.094411][T14644] veth0_vlan: left promiscuous mode [ 779.444648][ T4624] Bluetooth: hci1: command tx timeout [ 780.071149][T17432] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 780.829622][T17442] FAULT_INJECTION: forcing a failure. [ 780.829622][T17442] name failslab, interval 1, probability 0, space 0, times 0 [ 780.904294][T17442] CPU: 0 UID: 0 PID: 17442 Comm: syz.0.2431 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 780.915178][T17442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 780.925552][T17442] Call Trace: [ 780.928882][T17442] [ 780.931866][T17442] dump_stack_lvl+0x16c/0x1f0 [ 780.936635][T17442] should_fail_ex+0x497/0x5b0 [ 780.941390][T17442] ? fs_reclaim_acquire+0xae/0x160 [ 780.946576][T17442] should_failslab+0xc2/0x120 [ 780.951335][T17442] kmem_cache_alloc_node_noprof+0x71/0x310 [ 780.957220][T17442] ? __alloc_skb+0x2b3/0x380 [ 780.961894][T17442] __alloc_skb+0x2b3/0x380 [ 780.966394][T17442] ? __pfx___alloc_skb+0x10/0x10 [ 780.971398][T17442] ? raw6_getfrag+0x1f4/0x270 [ 780.976118][T17442] ? __lock_acquire+0x163e/0x3ce0 [ 780.981194][T17442] __ip6_append_data.isra.0+0x2a9e/0x4540 [ 780.986973][T17442] ? __pfx_raw6_getfrag+0x10/0x10 [ 780.992042][T17442] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 780.998156][T17442] ? ip6_mtu+0x231/0x4a0 [ 781.002439][T17442] ? ip6_setup_cork+0xc1b/0x1360 [ 781.007447][T17442] ip6_append_data+0x1e6/0x500 [ 781.012351][T17442] ? __pfx_raw6_getfrag+0x10/0x10 [ 781.017422][T17442] rawv6_sendmsg+0x1578/0x43e0 [ 781.022225][T17442] ? __lock_acquire+0xbdd/0x3ce0 [ 781.027221][T17442] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 781.032367][T17442] ? __pfx___lock_acquire+0x10/0x10 [ 781.037638][T17442] ? trace_lock_acquire+0x14a/0x1d0 [ 781.042875][T17442] ? __pfx___might_resched+0x10/0x10 [ 781.048208][T17442] ? __pfx_aa_sk_perm+0x10/0x10 [ 781.053119][T17442] ? find_held_lock+0x2d/0x110 [ 781.057913][T17442] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 781.063067][T17442] ? inet_sendmsg+0x119/0x140 [ 781.067806][T17442] inet_sendmsg+0x119/0x140 [ 781.072339][T17442] sock_write_iter+0x4ac/0x5b0 [ 781.077140][T17442] ? __pfx_sock_write_iter+0x10/0x10 [ 781.082560][T17442] ? bpf_lsm_file_permission+0x9/0x10 [ 781.087995][T17442] ? security_file_permission+0x71/0x210 [ 781.093693][T17442] vfs_write+0x6b5/0x1140 [ 781.098066][T17442] ? __pfx_sock_write_iter+0x10/0x10 [ 781.103420][T17442] ? trace_lock_acquire+0x14a/0x1d0 [ 781.108764][T17442] ? __pfx_vfs_write+0x10/0x10 [ 781.113572][T17442] ? __fget_files+0x40/0x3f0 [ 781.118215][T17442] ksys_write+0x1fa/0x260 [ 781.122593][T17442] ? __pfx_ksys_write+0x10/0x10 [ 781.127501][T17442] do_syscall_64+0xcd/0x250 [ 781.132064][T17442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.138005][T17442] RIP: 0033:0x7fa5f0f7dff9 [ 781.142451][T17442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.162093][T17442] RSP: 002b:00007fa5f1cc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 781.170538][T17442] RAX: ffffffffffffffda RBX: 00007fa5f1135f80 RCX: 00007fa5f0f7dff9 [ 781.178531][T17442] RDX: 000000000000fff5 RSI: 0000000000000000 RDI: 0000000000000003 [ 781.186630][T17442] RBP: 00007fa5f1cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 781.194634][T17442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.202629][T17442] R13: 0000000000000000 R14: 00007fa5f1135f80 R15: 00007ffc46571c88 [ 781.210727][T17442] [ 781.524808][ T4624] Bluetooth: hci1: command tx timeout [ 781.752427][T17452] openvswitch: netlink: Flow key attribute not present in set flow. [ 782.175513][T14644] team0 (unregistering): Port device team_slave_1 removed [ 782.496526][T14644] team0 (unregistering): Port device team_slave_0 removed [ 783.615580][ T4624] Bluetooth: hci1: command tx timeout [ 784.574533][T17368] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.581720][T17368] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.592653][T17368] bridge_slave_0: entered allmulticast mode [ 784.625284][T17368] bridge_slave_0: entered promiscuous mode [ 784.648933][T17368] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.663098][T17368] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.673829][T17368] bridge_slave_1: entered allmulticast mode [ 784.685548][T17368] bridge_slave_1: entered promiscuous mode [ 784.927227][T17368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.972874][T17368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.140313][T17368] team0: Port device team_slave_0 added [ 785.172576][T17368] team0: Port device team_slave_1 added [ 785.246980][T17368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.267743][T17368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.313835][T17368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.394500][T17368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.401521][T17368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.460821][T17368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.134049][T17504] nbd: illegal input index 50331648 [ 786.163551][T17504] nfsd: Unknown parameter 'g]ߓ%r.`kT1NNF$A3' [ 786.225165][T17368] hsr_slave_0: entered promiscuous mode [ 786.266061][T17368] hsr_slave_1: entered promiscuous mode [ 786.287921][T17368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 786.295796][T17368] Cannot create hsr debugfs directory [ 789.351576][T17368] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 789.426183][T17368] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 789.496075][T17368] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 789.586573][T17368] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 789.938128][T17368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.028189][T17368] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.076095][T15059] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.083314][T15059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.150640][T14647] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.157833][T14647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.848163][T17368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.979663][T17368] veth0_vlan: entered promiscuous mode [ 791.022774][T17368] veth1_vlan: entered promiscuous mode [ 791.131255][T17368] veth0_macvtap: entered promiscuous mode [ 791.177906][T17368] veth1_macvtap: entered promiscuous mode [ 791.235105][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.266627][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.281186][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.328607][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.339097][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.361428][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.386294][T17368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.441665][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.468860][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.494262][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.514171][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.527654][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.539732][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.561556][T17368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.613760][T17368] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.664416][T17368] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.673294][T17368] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.710329][T17368] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.107052][ T1062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.125733][ T1062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.235965][T14644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.258541][T14644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.171839][T17672] can: request_module (can-proto-0) failed. [ 795.120769][T17710] svc: failed to register nfsdv3 RPC service (errno 111). [ 795.232241][T17710] svc: failed to register nfsaclv3 RPC service (errno 111). [ 795.320319][T17710] ================================================================== [ 795.328555][T17710] BUG: KASAN: slab-use-after-free in rhashtable_walk_enter+0x333/0x370 [ 795.336885][T17710] Read of size 8 at addr ffff88802fe06010 by task syz.2.2476/17710 [ 795.345069][T17710] [ 795.347431][T17710] CPU: 0 UID: 0 PID: 17710 Comm: syz.2.2476 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 795.358370][T17710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 795.368564][T17710] Call Trace: [ 795.371874][T17710] [ 795.374844][T17710] dump_stack_lvl+0x116/0x1f0 [ 795.379596][T17710] print_report+0xc3/0x620 [ 795.384168][T17710] ? __virt_addr_valid+0x5e/0x590 [ 795.389249][T17710] ? __phys_addr+0xc6/0x150 [ 795.393819][T17710] kasan_report+0xd9/0x110 [ 795.398310][T17710] ? rhashtable_walk_enter+0x333/0x370 [ 795.403839][T17710] ? rhashtable_walk_enter+0x333/0x370 [ 795.409375][T17710] rhashtable_walk_enter+0x333/0x370 [ 795.414748][T17710] __nfsd_file_cache_purge+0xad/0x470 [ 795.420365][T17710] ? __pfx___nfsd_file_cache_purge+0x10/0x10 [ 795.426418][T17710] ? lockdep_hardirqs_on+0x7c/0x110 [ 795.431683][T17710] ? enable_work+0x246/0x340 [ 795.436327][T17710] ? __pfx_enable_work+0x10/0x10 [ 795.441329][T17710] nfsd_file_cache_shutdown+0xcf/0x4e0 [ 795.446865][T17710] nfsd_svc+0x6a9/0x940 [ 795.451080][T17710] nfsd_nl_threads_set_doit+0x535/0xbe0 [ 795.456779][T17710] genl_family_rcv_msg_doit+0x202/0x2f0 [ 795.462394][T17710] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 795.468534][T17710] ? bpf_lsm_capable+0x9/0x10 [ 795.473282][T17710] ? security_capable+0x7e/0x260 [ 795.478284][T17710] genl_rcv_msg+0x565/0x800 [ 795.482857][T17710] ? __pfx_genl_rcv_msg+0x10/0x10 [ 795.487949][T17710] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 795.494091][T17710] netlink_rcv_skb+0x165/0x410 [ 795.498911][T17710] ? __pfx_genl_rcv_msg+0x10/0x10 [ 795.504001][T17710] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 795.509357][T17710] ? down_read+0xc9/0x330 [ 795.513756][T17710] ? __pfx_down_read+0x10/0x10 [ 795.518723][T17710] ? netlink_deliver_tap+0x1ae/0xcf0 [ 795.524080][T17710] genl_rcv+0x28/0x40 [ 795.528126][T17710] netlink_unicast+0x53c/0x7f0 [ 795.532956][T17710] ? __pfx_netlink_unicast+0x10/0x10 [ 795.538312][T17710] ? __phys_addr_symbol+0x30/0x80 [ 795.543410][T17710] ? __check_object_size+0x488/0x710 [ 795.548766][T17710] netlink_sendmsg+0x8b8/0xd70 [ 795.553608][T17710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.558981][T17710] ____sys_sendmsg+0x9ae/0xb40 [ 795.563812][T17710] ? copy_msghdr_from_user+0x10b/0x160 [ 795.569348][T17710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 795.574697][T17710] ? __pfx___lock_acquire+0x10/0x10 [ 795.579975][T17710] ___sys_sendmsg+0x135/0x1e0 [ 795.584727][T17710] ? __pfx____sys_sendmsg+0x10/0x10 [ 795.590018][T17710] ? lock_acquire+0x2f/0xb0 [ 795.594588][T17710] ? __fget_files+0x40/0x3f0 [ 795.599234][T17710] ? fdget+0x176/0x210 [ 795.603355][T17710] __sys_sendmsg+0x117/0x1f0 [ 795.608019][T17710] ? __pfx___sys_sendmsg+0x10/0x10 [ 795.613302][T17710] ? __x64_sys_futex+0x1e1/0x4c0 [ 795.618335][T17710] do_syscall_64+0xcd/0x250 [ 795.622916][T17710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.628885][T17710] RIP: 0033:0x7fa49417dff9 [ 795.633357][T17710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.653024][T17710] RSP: 002b:00007fa49501a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 795.661501][T17710] RAX: ffffffffffffffda RBX: 00007fa494335f80 RCX: 00007fa49417dff9 [ 795.669521][T17710] RDX: 0000000000008004 RSI: 0000000020000140 RDI: 0000000000000003 [ 795.677571][T17710] RBP: 00007fa4941f0296 R08: 0000000000000000 R09: 0000000000000000 [ 795.685677][T17710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.693693][T17710] R13: 0000000000000000 R14: 00007fa494335f80 R15: 00007fff43708178 [ 795.701737][T17710] [ 795.704793][T17710] [ 795.707145][T17710] Allocated by task 5295: [ 795.711596][T17710] kasan_save_stack+0x33/0x60 [ 795.716537][T17710] kasan_save_track+0x14/0x30 [ 795.721282][T17710] __kasan_kmalloc+0xaa/0xb0 [ 795.725938][T17710] __kmalloc_node_track_caller_noprof+0x20f/0x440 [ 795.732424][T17710] kmalloc_reserve+0xef/0x2c0 [ 795.737176][T17710] __alloc_skb+0x164/0x380 [ 795.741651][T17710] nsim_dev_trap_report_work+0x2a4/0xc80 [ 795.747362][T17710] process_one_work+0x958/0x1b30 [ 795.752369][T17710] worker_thread+0x6c8/0xf00 [ 795.757031][T17710] kthread+0x2c1/0x3a0 [ 795.761150][T17710] ret_from_fork+0x45/0x80 [ 795.765611][T17710] ret_from_fork_asm+0x1a/0x30 [ 795.770448][T17710] [ 795.772804][T17710] Freed by task 5295: [ 795.776821][T17710] kasan_save_stack+0x33/0x60 [ 795.781561][T17710] kasan_save_track+0x14/0x30 [ 795.788908][T17710] kasan_save_free_info+0x3b/0x60 [ 795.793988][T17710] __kasan_slab_free+0x51/0x70 [ 795.798860][T17710] kfree+0x14f/0x4b0 [ 795.802833][T17710] skb_free_head+0x108/0x1d0 [ 795.807586][T17710] skb_release_data+0x560/0x730 [ 795.812546][T17710] consume_skb+0xbf/0x100 [ 795.817027][T17710] nsim_dev_trap_report_work+0x878/0xc80 [ 795.822996][T17710] process_one_work+0x958/0x1b30 [ 795.828112][T17710] worker_thread+0x6c8/0xf00 [ 795.833000][T17710] kthread+0x2c1/0x3a0 [ 795.837265][T17710] ret_from_fork+0x45/0x80 [ 795.841771][T17710] ret_from_fork_asm+0x1a/0x30 [ 795.846800][T17710] [ 795.849173][T17710] The buggy address belongs to the object at ffff88802fe06000 [ 795.849173][T17710] which belongs to the cache kmalloc-4k of size 4096 [ 795.863282][T17710] The buggy address is located 16 bytes inside of [ 795.863282][T17710] freed 4096-byte region [ffff88802fe06000, ffff88802fe07000) [ 795.878262][T17710] [ 795.880619][T17710] The buggy address belongs to the physical page: [ 795.887107][T17710] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fe00 [ 795.895916][T17710] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 795.904823][T17710] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 795.912508][T17710] page_type: f5(slab) [ 795.916538][T17710] raw: 00fff00000000040 ffff88801ac42140 ffffea0000c22800 dead000000000002 [ 795.925173][T17710] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 795.933815][T17710] head: 00fff00000000040 ffff88801ac42140 ffffea0000c22800 dead000000000002 [ 795.942543][T17710] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 795.951267][T17710] head: 00fff00000000003 ffffea0000bf8001 ffffffffffffffff 0000000000000000 [ 795.959993][T17710] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 795.968714][T17710] page dumped because: kasan: bad access detected [ 795.975169][T17710] page_owner tracks the page as allocated [ 795.980919][T17710] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12769, tgid 12769 (dhcpcd-run-hook), ts 532078374519, free_ts 531179111414 [ 796.002179][T17710] post_alloc_hook+0x2d1/0x350 [ 796.007017][T17710] get_page_from_freelist+0x101e/0x3070 [ 796.012640][T17710] __alloc_pages_noprof+0x223/0x25c0 [ 796.018175][T17710] alloc_pages_mpol_noprof+0x2c9/0x610 [ 796.023717][T17710] new_slab+0x2ba/0x3f0 [ 796.028285][T17710] ___slab_alloc+0xd1d/0x16f0 [ 796.033020][T17710] __slab_alloc.constprop.0+0x56/0xb0 [ 796.038461][T17710] __kmalloc_noprof+0x379/0x410 [ 796.043388][T17710] tomoyo_realpath_from_path+0xbf/0x710 [ 796.049012][T17710] tomoyo_check_open_permission+0x2a7/0x3b0 [ 796.054991][T17710] tomoyo_file_open+0xcf/0x100 [ 796.059808][T17710] security_file_open+0x64c/0x9d0 [ 796.064913][T17710] do_dentry_open+0x57c/0x1530 [ 796.069737][T17710] vfs_open+0x82/0x3f0 [ 796.073867][T17710] path_openat+0x1e6a/0x2d60 [ 796.078513][T17710] do_filp_open+0x1dc/0x430 [ 796.083067][T17710] page last free pid 12750 tgid 12750 stack trace: [ 796.089601][T17710] free_unref_page+0x5f4/0xdc0 [ 796.094431][T17710] __put_partials+0x14c/0x170 [ 796.099165][T17710] qlist_free_all+0x4e/0x120 [ 796.103809][T17710] kasan_quarantine_reduce+0x192/0x1e0 [ 796.109326][T17710] __kasan_slab_alloc+0x69/0x90 [ 796.114235][T17710] kmem_cache_alloc_noprof+0x121/0x2f0 [ 796.119760][T17710] vm_area_alloc+0x1f/0x1c0 [ 796.124317][T17710] mmap_region+0xf18/0x2a50 [ 796.128875][T17710] do_mmap+0xc00/0xfc0 [ 796.133002][T17710] vm_mmap_pgoff+0x1ba/0x360 [ 796.137653][T17710] ksys_mmap_pgoff+0x32c/0x5c0 [ 796.142480][T17710] __x64_sys_mmap+0x125/0x190 [ 796.147217][T17710] do_syscall_64+0xcd/0x250 [ 796.151795][T17710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.157921][T17710] [ 796.160272][T17710] Memory state around the buggy address: [ 796.165936][T17710] ffff88802fe05f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 796.174044][T17710] ffff88802fe05f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 796.182152][T17710] >ffff88802fe06000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 796.190253][T17710] ^ [ 796.194883][T17710] ffff88802fe06080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 796.203082][T17710] ffff88802fe06100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 796.211275][T17710] ================================================================== [ 796.222559][T17710] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 796.229815][T17710] CPU: 0 UID: 0 PID: 17710 Comm: syz.2.2476 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 796.240630][T17710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 796.250727][T17710] Call Trace: [ 796.254054][T17710] [ 796.257026][T17710] dump_stack_lvl+0x3d/0x1f0 [ 796.261697][T17710] panic+0x71d/0x800 [ 796.265713][T17710] ? mark_held_locks+0x9f/0xe0 [ 796.270550][T17710] ? __pfx_panic+0x10/0x10 [ 796.275033][T17710] ? irqentry_exit+0x3b/0x90 [ 796.279685][T17710] ? lockdep_hardirqs_on+0x7c/0x110 [ 796.284960][T17710] check_panic_on_warn+0xab/0xb0 [ 796.289979][T17710] end_report+0x117/0x180 [ 796.294379][T17710] kasan_report+0xe9/0x110 [ 796.298870][T17710] ? rhashtable_walk_enter+0x333/0x370 [ 796.304400][T17710] ? rhashtable_walk_enter+0x333/0x370 [ 796.309938][T17710] rhashtable_walk_enter+0x333/0x370 [ 796.315298][T17710] __nfsd_file_cache_purge+0xad/0x470 [ 796.320754][T17710] ? __pfx___nfsd_file_cache_purge+0x10/0x10 [ 796.326826][T17710] ? lockdep_hardirqs_on+0x7c/0x110 [ 796.332088][T17710] ? enable_work+0x246/0x340 [ 796.336724][T17710] ? __pfx_enable_work+0x10/0x10 [ 796.341731][T17710] nfsd_file_cache_shutdown+0xcf/0x4e0 [ 796.347272][T17710] nfsd_svc+0x6a9/0x940 [ 796.351483][T17710] nfsd_nl_threads_set_doit+0x535/0xbe0 [ 796.357098][T17710] genl_family_rcv_msg_doit+0x202/0x2f0 [ 796.362713][T17710] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 796.368855][T17710] ? bpf_lsm_capable+0x9/0x10 [ 796.373597][T17710] ? security_capable+0x7e/0x260 [ 796.378600][T17710] genl_rcv_msg+0x565/0x800 [ 796.383165][T17710] ? __pfx_genl_rcv_msg+0x10/0x10 [ 796.388232][T17710] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 796.394365][T17710] netlink_rcv_skb+0x165/0x410 [ 796.399175][T17710] ? __pfx_genl_rcv_msg+0x10/0x10 [ 796.404230][T17710] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 796.409558][T17710] ? down_read+0xc9/0x330 [ 796.413932][T17710] ? __pfx_down_read+0x10/0x10 [ 796.418737][T17710] ? netlink_deliver_tap+0x1ae/0xcf0 [ 796.424059][T17710] genl_rcv+0x28/0x40 [ 796.428083][T17710] netlink_unicast+0x53c/0x7f0 [ 796.432878][T17710] ? __pfx_netlink_unicast+0x10/0x10 [ 796.438199][T17710] ? __phys_addr_symbol+0x30/0x80 [ 796.443306][T17710] ? __check_object_size+0x488/0x710 [ 796.448657][T17710] netlink_sendmsg+0x8b8/0xd70 [ 796.453468][T17710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.458797][T17710] ____sys_sendmsg+0x9ae/0xb40 [ 796.463602][T17710] ? copy_msghdr_from_user+0x10b/0x160 [ 796.469120][T17710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 796.474470][T17710] ? __pfx___lock_acquire+0x10/0x10 [ 796.479708][T17710] ___sys_sendmsg+0x135/0x1e0 [ 796.484429][T17710] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.489671][T17710] ? lock_acquire+0x2f/0xb0 [ 796.494217][T17710] ? __fget_files+0x40/0x3f0 [ 796.498847][T17710] ? fdget+0x176/0x210 [ 796.502940][T17710] __sys_sendmsg+0x117/0x1f0 [ 796.507588][T17710] ? __pfx___sys_sendmsg+0x10/0x10 [ 796.512740][T17710] ? __x64_sys_futex+0x1e1/0x4c0 [ 796.517771][T17710] do_syscall_64+0xcd/0x250 [ 796.522312][T17710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.528236][T17710] RIP: 0033:0x7fa49417dff9 [ 796.532668][T17710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.552305][T17710] RSP: 002b:00007fa49501a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.560744][T17710] RAX: ffffffffffffffda RBX: 00007fa494335f80 RCX: 00007fa49417dff9 [ 796.568741][T17710] RDX: 0000000000008004 RSI: 0000000020000140 RDI: 0000000000000003 [ 796.576731][T17710] RBP: 00007fa4941f0296 R08: 0000000000000000 R09: 0000000000000000 [ 796.584735][T17710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.592724][T17710] R13: 0000000000000000 R14: 00007fa494335f80 R15: 00007fff43708178 [ 796.600772][T17710] [ 796.604052][T17710] Kernel Offset: disabled [ 796.608402][T17710] Rebooting in 86400 seconds..