last executing test programs: 31.064411761s ago: executing program 2 (id=835): syz_open_procfs$namespace(0x0, 0x0) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) getsockopt$auto(0x6, 0x10f, 0x87, 0x8000000000401, 0xa) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto(0xffffffffffffff15, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) adjtimex$auto(0x0) setregid$auto(0x5, 0x6) 28.165257772s ago: executing program 2 (id=840): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioperm$auto(0x3, 0x5, 0x149) r0 = socket(0x11, 0xb, 0x0) sendmsg$auto_OVS_VPORT_CMD_SET398(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x68094) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_FEC_SET37(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="b5"], 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x44) flock$auto(0x9, 0x8afe) ioperm$auto(0xde, 0x9, 0x100402) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) setsockopt$auto(0x200000004, 0x6, 0xd, 0x4808, 0x7) prlimit64$auto(0x1, 0x9, 0x3, 0x1) madvise$auto(0x2, 0xbce8, 0x9) dup2$auto(0x0, 0x3) 27.106527187s ago: executing program 2 (id=845): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x11, 0xa, 0x0, 0x5) syz_genetlink_get_family_id$auto_HSR(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x6) setsockopt$auto(0x3, 0x29, 0x2a, 0xe33, 0x90) mmap$auto(0x0, 0x20007, 0xdf, 0x10000000eb1, 0x8, 0x8000) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x4000001ff, 0xffffffffffffffff, 0x13, 0x3) setsockopt$auto(0x200000000000003, 0x0, 0x19, 0x8, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x40000000084, 0x12, 0x9, 0x6) madvise$auto(0x0, 0x1d26, 0x17) 26.275827167s ago: executing program 2 (id=848): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) userfaultfd$auto(0x1) open(&(0x7f0000000000)='./file0\x00', 0xa040, 0x122) open(&(0x7f0000000080)='./file0\x00', 0x101002, 0x1c) write$auto(0x5, 0x101, 0x80000001) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x0) setsockopt$auto(0x3, 0x88, 0x66, 0x633, 0x282f) prctl$auto(0x44, 0xfffffffefffffffd, 0x200000004, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) shutdown$auto(0x1, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x6, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd2$auto(0x7, 0xf) mmap$auto(0x0, 0x1, 0x4, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_MAC(0x0, 0xffffffffffffffff) rseq$auto(0x40000, 0xc8f, 0x0, 0x2) tkill$auto(0x1, 0x7) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x40000008000) socket(0xa, 0x2, 0x88) close_range$auto(0x2, 0x8000, 0x0) prctl$auto(0x1000000003b, 0x1, 0xe, 0x5, 0x7) ioperm$auto(0x7, 0x6, 0x3) fsmount$auto(0x3, 0xd3, 0x40) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$auto(0x3, 0x6, 0xaae) sendmmsg$auto(0x3, 0x549, 0x0, 0x5) pwritev$auto(0x3c63, 0x6, 0x1, 0x8, 0xcc7) mmap$auto(0x299, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 12.447177021s ago: executing program 2 (id=848): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) userfaultfd$auto(0x1) open(&(0x7f0000000000)='./file0\x00', 0xa040, 0x122) open(&(0x7f0000000080)='./file0\x00', 0x101002, 0x1c) write$auto(0x5, 0x101, 0x80000001) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x0) setsockopt$auto(0x3, 0x88, 0x66, 0x633, 0x282f) prctl$auto(0x44, 0xfffffffefffffffd, 0x200000004, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) shutdown$auto(0x1, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x6, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd2$auto(0x7, 0xf) mmap$auto(0x0, 0x1, 0x4, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_MAC(0x0, 0xffffffffffffffff) rseq$auto(0x40000, 0xc8f, 0x0, 0x2) tkill$auto(0x1, 0x7) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x40000008000) socket(0xa, 0x2, 0x88) close_range$auto(0x2, 0x8000, 0x0) prctl$auto(0x1000000003b, 0x1, 0xe, 0x5, 0x7) ioperm$auto(0x7, 0x6, 0x3) fsmount$auto(0x3, 0xd3, 0x40) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$auto(0x3, 0x6, 0xaae) sendmmsg$auto(0x3, 0x549, 0x0, 0x5) pwritev$auto(0x3c63, 0x6, 0x1, 0x8, 0xcc7) mmap$auto(0x299, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 11.102548097s ago: executing program 3 (id=881): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) munmap$auto(0x0, 0x2000000c) sendmsg$auto_NL80211_CMD_ASSOCIATE208(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf4e46fb82b3880e8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) setsockopt$auto(0xd5, 0x6, 0x3, 0x1, 0xfff) madvise$auto(0x0, 0x2000040080000000, 0x11) adjtimex$auto(0x2) r0 = socket(0xa, 0x3, 0x73) socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) write$auto(0x3, 0xfcd, 0x88) sendmsg$auto_NL80211_CMD_SET_WOWLAN299(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c880}, 0x2400c804) 11.100036699s ago: executing program 2 (id=882): setrlimit$auto(0x7aa6006e, 0x100008) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x20007, 0xdf, 0x10000000eb1, 0x2, 0x8000) (async) mmap$auto(0x0, 0x20007, 0xdf, 0x10000000eb1, 0x2, 0x8000) read$auto(0x3, 0x0, 0xfb6) sendmsg$auto_NBD_CMD_CONNECT158(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a"], 0x24}}, 0x80) (async) sendmsg$auto_NBD_CMD_CONNECT158(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a"], 0x24}}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0xff, 0x0, 0x1, 0x8000000000000000) close_range$auto(0x7, 0xfffffffffffffff8, 0x2) dup2$auto(0x2000000000000000, 0xff) ioctl$auto(0xc8, 0x400454d1, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) setsockopt$auto(0x4, 0x0, 0x60, 0x480c, 0x2000000) (async) setsockopt$auto(0x4, 0x0, 0x60, 0x480c, 0x2000000) 9.959859594s ago: executing program 3 (id=884): socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x23) (async) sendfile$auto(0x1, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) semop$auto(0x8001, 0xd568, 0xe7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mbind$auto(0x0, 0x91d2, 0x4, 0xe8a5, 0x6, 0x2) (async) mincore$auto(0x0, 0x8000000000005b, 0x2) (async) ioperm$auto(0x7f, 0x6, 0x2) (async) sync$auto() (async) getdents$auto(0x600000000, 0xfffffffffffffff8, 0xd00) (async) ioperm$auto(0x3b, 0xf99b, 0x6) preadv2$auto(0x100000000, 0x8e, 0x2, 0x400, 0xfffffffffffffffe, 0x400) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) open(&(0x7f0000000040)='./file0\x00', 0x121342, 0x66) (async) clone$auto(0x3b46, 0x6, 0x20000048, 0x0, 0x10) (async) ioctl$auto(0x3, 0x0, 0x0) socket(0x2, 0x5, 0x0) (async) semctl$auto(0x1ff, 0x2, 0x13, 0x4) (async) connect$auto(0x5, 0x11, 0x36) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1, 0x2, 0x0) (async) socket(0x2, 0x3, 0x1) (async) mmap$auto(0xfffffffffffffffc, 0x6, 0xdf, 0x9b72, 0x7, 0x28000) (async) move_pages$auto(0x1, 0xf88, 0x5, 0x0, 0x1, 0x8000000000000000) (async) setsockopt$auto(0x3, 0x0, 0x29, 0x7, 0x70) getrandom$auto(0xf, 0x1, 0x7) 7.875233985s ago: executing program 3 (id=888): r0 = getpid() mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sched_setscheduler$auto(0x1, 0x0, 0x8) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x8, 0xffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000000), r1) move_pages$auto(0x4, 0x100, 0x21, 0x1, 0x8, 0x8) socket(0xa, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_SET393(r2, 0x0, 0x4008810) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x1) socket(0xa, 0x801, 0x84) getsockopt$auto(0x6, 0x40000000029, 0x35, 0x9, 0x6) open(0x0, 0x22240, 0x154) io_uring_setup$auto(0x3ff, 0x3) prctl$auto(0x2, 0x9, 0x100000000, 0x0, 0x9c8) io_uring_register$auto(0x100000004, 0x1e, 0x5944, 0x1) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG242(r4, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001c80)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0x40080) syz_genetlink_get_family_id$auto_SMC_GEN_NETLINK(0x0, r4) prctl$auto(0x9b2, 0x5, 0x8, 0x7, 0x5) syslog$auto(0x4, 0xfffffffffffffff9, 0x147e) syz_open_procfs$namespace(r0, &(0x7f0000001200)='ns/net\x00') 6.081156592s ago: executing program 3 (id=892): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x140) r1 = syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET424(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x5, 0x2, '\x00'}, @SMC_PNETID_NAME={0xe, 0x1, ']\',,.\'$$*\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) mprotect$auto(0x0, 0x100000001, 0x6) io_uring_register$auto(0x0, 0xf, 0x8000, 0x0) creat$auto(0xef, 0x9) timer_create$auto(0x6a5, 0x5, 0xfff) setresuid$auto(0x7fff, 0x8, 0x8000) mmap$auto(0x1, 0x4, 0x8000000000000001, 0x876000000000010, 0x101, 0xfffffffffffffb83) sendmsg$auto_HWSIM_CMD_GET_RADIO78(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8400014}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) timer_create$auto(0x5, 0xa, 0x8001) splice$auto(0x1, 0xb5, 0x8, 0x6, 0x8001, 0x1) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), r0) sendmsg$auto_ETHTOOL_MSG_STATS_GET62(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x182000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_STATS_HEADER={0x7, 0x2, "f48dc0"}, @ETHTOOL_A_STATS_SRC={0x8, 0x5, 0x81}]}, 0x24}}, 0x80080c1) splice$auto(0x4, 0x0, 0x8001, 0x8, 0x0, 0x2) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000400), r0) sendmsg$auto_OVS_CT_LIMIT_CMD_SET381(r0, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x370, r3, 0x505, 0x70bd2b, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x29, 0x1, "781f3d8e120641a4d1ae9e57452e61c8db34bb1ad212c252b5f1cd8ddbab81433c422c044d"}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xaf, 0x1, "0de2ce5aa8182ffa99b6bc3d3f04e42be5eda3d332ab4aa5e3505b5be36e7524adf98eaa037a53bec46532aa792e24211cc43d095b8b2b6701f17ce8d5ba12f8c8dc7fea57be61c4adb4af739afa18c8c5a82642ea7f8fa9d71ec4aed3cab3481b89f0e07d7ef19127c730e5522659db7c47d83eacda574ad477688f53b540cb67c2f4f3bfa0cfceb39cfc1a12438789de1f244ac46dc8bd3a28422294422dce390e42a96b0f2834e46286"}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x12, 0x1, "5923b6d06dbf2ca32aaa5253a93e"}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xbf, 0x1, "6877bb497aefd6213920bcba4443ce5b80cb8622bbc3fd554b09a860eda1851d5721db4b8fbb559fb6927a48d7bcadb741e7461785f5048d8def7575e5acd3b0233b590e45492f0d9c499467d6f6c5723005fe9dca759823c4ab2c4fe4737be7af4ce317193611c59d518f627c468a64db637f8c53dfd4375bef42571bcd0b75013fadcdf23b8d660f1c7c454c4aaff0c184d5b4b1cf4aedd01079d5e38ed91a95275d9c7f1283813e19f4ba3dcd023385d9a3428bf26831a3489f"}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xdd, 0x1, "022f5f05fb92843d60005bce7575fc641828df0f89c5433a85e86289fbcfa72376c598827936af54bedc22f05420c89db923ff4fa3bdc34f542c3d1b0366cd057a21652d43256355b1abed3447b36bf1c5c119c0c7819e851da257d5484e245f70a01a7891cf6233635387f392e3725e0c636de1e946624d739a9bc5aecbd2787f1923441ef1760d5176fe5e9f1737186fda614e6b8207764dd7ef82f61725cb066f254759fa0814942296ba5098f307ecdaf61d5adbe2733ba8d591de0f6698977e519e15328928297c1d029c1048b82e44fb0ab72adf96ba"}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xcb, 0x1, "1fbc1e8b71ee0f4fd1fbf56778b6c084643b0aaef8dbf6f2f662c6ee49e7d17c87439e0975356c9756c4656441d5bfaa2c410420dbeed04c973628dcdbb9cc345d29c5dd8f8224bf5b024a9088cbe64e37cd4de45d304c01639dd96512d0d29fba2ee1ea2f34f6e31c2ad0741659af41244f4e99cdbd97daa421196ee22806533ac0795d16dbdac4260ffbc17b1f0dbbed1cabc85c9a251190029d62c99cfdf39b92f0c6f4a94ebf410e82f4be7c7e3892a42344ce96719ab5d8df91c2cf5b80afd4b95551258d"}]}, 0x370}, 0x1, 0x0, 0x0, 0x48094}, 0x41) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000840), r0) sendmsg$auto_TIPC_NL_SOCK_GET455(r0, &(0x7f0000000c40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f00000008c0)={0x320, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xe4, 0x7, "07d0f1e8496dc786981b80314d4ac1e9d90ef65c6954e068137b75268aa98eb833dd76acda6ff5d0d5d82d1e62e67b76956acdf6e0b18a1a58581633150457785d716cdd97669a2cbc2e9cd9355a894353af53945f42d53ba57de7e357246a6b639f88e7dc1e15490e7184bd4bc73131b2b52e42924a7acf6c248eb6ea649bacbe91406ab16d9d146e4c9df7254984b3b4095087f4fac74b60c614d8763b4c4570ee791dd2c413d8ca8add648075b108906ca1bcb8a6e2aa6544e7a21cb3ccfb79501954f8d646041089492e5e110fd06703f322381ab010ef9cfc01e10d65a4"}, @TIPC_NLA_BEARER={0x45, 0x1, "3b14001aa4f76dfee52a3c43a141fb1226681d94062a72e8a45cac3e707ec0ec14cfec5c56224439e4435e586f071ad396f003b61e1c429503ef2ed519ad8748ea"}, @TIPC_NLA_PUBL={0x1d, 0x3, "52c94ad6bf4e65bc2941f1c53c50e4dfe74ab6804362a8ecd3"}, @TIPC_NLA_LINK={0x101, 0x4, "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"}, @TIPC_NLA_NAME_TABLE={0xbc, 0x8, "9209a4286c4980172fb2257c7549b173936c084f300f12b5557b1152bebb59c95fd93ed1f4964515ed87d9a9e34a3e43b571a8ed097a016c4ff0c2bd5c371f1093684c8df31019ae066fbf054c64e0027c3bfa8658dbfbc245f681bc975130aac28355e13650f50a43654cb200604935d9ad47b5e1740ddff994594951c4a36d1584e29b5b875c98a308d67ef9e83bbb0cf02ca9f6303fcb86a124fc6d10314a57be4433c6845b1e30500459d608a9a72d28d7d19775965b"}]}, 0x320}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) splice$auto(0x80000001, 0x6, 0xd3, 0x101, 0x3, 0x4) splice$auto(0x0, 0xde0c, 0x9, 0x8, 0xf, 0x4) mprotect$auto(0x5, 0x3, 0xffffffffffffb29d) mremap$auto(0x7ff, 0x0, 0x6, 0x8003, 0x5) timer_create$auto(0x9e8, 0x2, 0x4) ioperm$auto(0xfffffffffffffffa, 0x80, 0x9) setrlimit$auto(0x4, 0x7) move_pages$auto(0xffffffffffffffd9, 0x400, 0x9, 0x6, 0x9, 0x4) recvfrom$auto(0xf6f2, 0x0, 0x7ff, 0x3, 0x8, 0xfffffffffffffff8) mprotect$auto(0xa253, 0x8000000000000001, 0x2) timer_create$auto(0x3, 0x1000, 0xad7) 5.249988609s ago: executing program 3 (id=894): r0 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_FEATURES391(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x46}, @OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x1c00}, @OVS_METER_ATTR_BANDS={0x6, 0x4, "abd1"}, @OVS_METER_ATTR_MAX_BANDS={0x8}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0xba46}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48011}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN182(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xb18}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7fffffff}, @NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, 'ovs_meter\x00'}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x48040}, 0x4004801) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/time_for_children\x00') r4 = open(&(0x7f0000000380)='./file0\x00', 0x200000, 0x2) sendmsg$auto_GTP_CMD_GETPDP70(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, "f9f9382960749ad5aa88f187cd0b33f7"}, @GTPA_LINK={0x8, 0x1, 0x4}, @GTPA_TID={0xc, 0x3, 0x6}, @GTPA_I_TEI={0x8, 0x8, 0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_LINK={0x8, 0x1, 0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000844}, 0x4000081) r5 = syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET425(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0xe, 0x3, 'ovs_meter\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000008) read$auto(0xfff, 0x0, 0xfffffffffffffffc) r6 = socket(0x2b, 0x6, 0x3) r7 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000640), r1) sendmsg$auto_OVS_METER_CMD_FEATURES391(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r7, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404805d}, 0x40) open(&(0x7f0000000740)='./file0\x00', 0x100, 0x89) mmap$auto(0x7fffffff, 0xf3, 0x232, 0x12, 0xffffffff, 0x8) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000007c0), r4) sendmsg$auto_NL80211_CMD_SET_MAC_ACL280(r4, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1ac, r8, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_S1G_CAPABILITY_MASK={0x63, 0x129, "64665bdd09989be9b78f4c689ddd2396b499c9358891fd7f518f19a959f9cd97adf0ec6224e284769ef3c4f35d0fd5b12298be09e91d2948bc161863f7b6ca9a0178bcd39d48908f75f0f17abec699b7d301a0e144a81a9e1cd125045a10d8"}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xaa, 0x136, "a05153a806450d5e8b3b315aeaf8ff3bc8ac5a50b85f0eb276b8f806170075eff950cfab61063ff5de779d033965827ee3c1be4381fff98a470d08ab6323c75171e0a6fa456889e341e55446e2c9ba49b54eba8f7180bc317927ff6a948c97704c9ca5fab737fa9dc9243fb5f4fbea50730bdefdcf13fa5bbc1056e28d5f683e4aa5fdebaa68858fbe6e6a6f59085e881f0f19a0934f2f10b6b24a8cb215587403efb6fba324"}, @NL80211_ATTR_MAC_HINT={0x6e, 0xc8, "c6438fe1c195dce6c63880ffa914b6974fdf48c3bcfe86a3033507f989ecb854c5c6e0f5b133b6e683ec4244d0d1fd32902f765688d8ff80fda56bc4fbb918f90e57dc8912eddcd5307037ef10c27f78761d81a87e0e8da7f71bd1eceebc2a9a10442d87438af041d0b9"}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0xf, 0x125, "16acc88fe920d4a55845bd"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0xc020}, 0x4000080) socket(0x2b, 0x4, 0x6) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE218(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r8, 0x246, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xca5b}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x20040049) recvfrom$auto(0x6, 0x4, 0x6, 0x9, 0xf, 0x59) sendmsg$auto_NL80211_CMD_AUTHENTICATE209(r1, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xd4, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xb48}, @NL80211_ATTR_NAN_FUNC={0x17, 0xf0, "19a5ecc67ef358ea01f68a70811060098753f1"}, @NL80211_ATTR_MLD_ADDR={0x3b, 0x13a, "34a5291ab92c2bcb52150884060dcc59cfab83ae8a0dcff16d7aded79ef1dd416419af324d46bd7b90fd6e606aea39390b1d40c3aed9eb"}, @NL80211_ATTR_RECONNECT_REQUESTED={0x57, 0x12b, "10e6b29eb5ca7d85ea85af285ddc6f798c124affdead6f4ac7ec4296f00150f3536edaedcdbf53f54c32907ef9da1c08dcd4a3c930cb52b4644dd849cce0b58fbee6a0f98d5dc8ebf987f7041d404a3ba331a7"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20040090}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$auto(0xe65e, 0x0, 0xd, 0xfffffffffffffffc, 0xf, 0x6) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000d00), r9) recvfrom$auto(0x7, 0x0, 0xf33, 0x7, 0x8000, 0x4f59a2bf) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d80), r1) sendmsg$auto_ETHTOOL_MSG_WOL_SET67(r1, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xf0, r10, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0xad, 0x2, "bfeea39666b76c7034181da4ff4bf88d592228b8e1e863be93e6bc60ee83d5586ff6d5fa271db7129a26ca36650fd6f00900ec285208826f65a81ee7fa5586ec3b3412e9f0dd39d4190532a15356ba5cf033b17816a3d9560be986c0e71a143d8ddfd487ea21815d297a4913c61b5d1c535ff767dfec58891fd1e70f33b0245c378d2627370897c6fd74b427612fef9c46c4191d2cff297d810ed6821e94df215b5469013e49346b60"}, @ETHTOOL_A_WOL_HEADER={0x7, 0x1, "3bfc5b"}, @ETHTOOL_A_WOL_SOPASS={0x9, 0x3, "a03f20b8d4"}, @ETHTOOL_A_WOL_HEADER={0x7, 0x1, "89f6c7"}, @ETHTOOL_A_WOL_HEADER={0x7, 0x1, "ec84e9"}, @ETHTOOL_A_WOL_HEADER={0x7, 0x1, "979cce"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) recvfrom$auto(0x4, 0x1, 0xffffffffffffffff, 0x3ff, 0x6e673639, 0x7) 3.412715615s ago: executing program 3 (id=901): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x35f8, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) setresuid$auto(0x0, 0x8, 0x8000) setsockopt$auto(0x4, 0x0, 0x11, 0x480c, 0x10001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x1000) madvise$auto(0x0, 0x3, 0x15) cachestat$auto(0x2, 0x5, 0x0, 0x0) 3.127940592s ago: executing program 1 (id=903): mmap$auto(0x0, 0x400000000100, 0x10000000000df, 0x80000000009b72, 0x2, 0x400007ffa) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x40000df, 0xeb1, 0x403, 0x8000) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) mincore$auto(0x0, 0x10000, 0x2) ioperm$auto(0x3b, 0xf99b, 0x6) r0 = socket(0x2, 0x5, 0x0) listen$auto(0x3, 0x81) syz_genetlink_get_family_id$auto_nl802154(0x0, r0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) clone$auto(0x8, 0x1, 0x400, 0xffffffffffff36cf, 0x401) setpriority$auto(0x1, 0x0, 0xe55c) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0x0) setsockopt$auto(0x3, 0x10d, 0xd, 0xe33, 0x8) ioperm$auto(0x7, 0x6, 0x2) lsm_set_self_attr$auto(0x200, 0x2, 0x40, 0x8000000000000004) ioprio_set$auto(0x2, 0x1, 0x9) semctl$auto(0x1ff, 0x2, 0x13, 0x4) setsockopt$auto(0x3, 0x10e, 0x4, 0x7, 0x13) 2.854939051s ago: executing program 1 (id=905): ioperm$auto(0x1000, 0x40, 0x6) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) bpf$auto(0x6, 0x3, 0x504) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init$auto() socket(0x15, 0x5, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x84, 0x7, 0x90) getsockopt$auto(0x6, 0x8, 0x7, 0x9, 0x6) futex_wait$auto(0xfffffffffffff001, 0x4, 0x8, 0x651, 0x800, 0x5) mmap$auto(0x0, 0x200, 0x2, 0x13, 0x5, 0x0) bpf$auto(0x4, 0xc71, 0x9) mmap$auto(0x0, 0x6, 0xe74, 0x9b72, 0x2, 0xe25) move_pages$auto(0x1, 0x2000000000003, 0xff, 0x0, 0x1, 0x8000000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') socket(0x2, 0x1, 0x106) setsockopt$auto(0x4, 0x400000000001, 0x40, 0x480c, 0x800000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x2, 0x8000) prctl$auto(0x482b20b3, 0x8, 0x4, 0x5, 0xfffffffffffffff9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x9, 0x7ffc) ioperm$auto(0x4, 0x5, 0x7) setgid$auto(0x9) 2.406048996s ago: executing program 1 (id=907): madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = getpid() munmap$auto(0x2f0, 0x8) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/pid_for_children\x00') (async) munmap$auto(0x20001000, 0x2000000c) (async) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) 2.311505856s ago: executing program 0 (id=908): mlock$auto(0xd58, 0x5) mlock$auto(0x6b3, 0xf236) (async) mlock$auto(0x5, 0x2) (async) mlock$auto(0x200, 0x6) (async) mlock$auto(0x0, 0x2) mlock$auto(0xd, 0x3) clone$auto(0x400000000000000, 0xbcb, 0x6, 0x8, 0x3) (async) sched_setaffinity$auto(0x4d, 0x0, 0x2) (async) clone$auto(0x80, 0x7, 0x34, 0xffffffffffffffff, 0x6) r0 = socket(0x8, 0x80000, 0xfffff2ec) (async) prctl$auto(0xa18a, 0x6, 0xf04, 0x5, 0x1) mbind$auto(0x5, 0xc, 0x6, 0x8, 0x1, 0x0) (async) clone$auto(0x81, 0x3, 0x4991, 0xa0d3, 0x8000) fork$auto() (async) flock$auto(0x7, 0x8) setresuid$auto(0x80000000, 0x3ff, 0x6) (async) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0) sendmsg$auto_NL802154_CMD_SET_PAN_ID348(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x6}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x44095) timer_create$auto(0x0, 0x3, 0x5) (async) mlock$auto(0xc5, 0x3) (async) mlock$auto(0x6, 0xad3) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), r0) (async) sendmsg$auto_IPVS_CMD_GET_CONFIG120(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ec}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc199}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xef}, @IPVS_CMD_ATTR_SERVICE={0xd3, 0x1, "d808d9572ce8df5e3d207b23906f571c4971ffc01ac7322dc00dfe4281a09cdb488e38c1b1c73526ef9f50723839929d264b0caa93595d073db08a284a484eae44dfe000e36b3d79024e16dbad63858bea519c9603152c31bb2f77f97f4c53f5409d1f62da8b341bedcde775df338d424970386f2523c73e8af5f72325d2f201e034a6a677d470e5f20503a7f011683517751ade3e16b454b77470e863ea96839a2b174902cbb49e6df4795825a93e7da51b6d6d06bd88d877965bf3bb95cc0e9e124b3f5ebbccffb2319c032432b3"}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x98bd}]}, 0x120}, 0x1, 0x0, 0x0, 0x8854}, 0x80) (async) mlock$auto(0x6, 0xfffffffffffffff0) (async) mlock$auto(0x5, 0x0) (async) mlock$auto(0x9ad4, 0x1) (async) r2 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f00000003c0), r0) sendmsg$auto_VDPA_CMD_DEV_CONFIG_GET457(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x10, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) mlock$auto(0x3, 0x5) fchown$auto(0x10000, 0x8, 0x3) 2.184010176s ago: executing program 1 (id=909): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x27f1) mremap$auto(0x9, 0x7fffffffffffffff, 0x200, 0x3492f984, 0x6) write$auto(0x3, 0xd2, 0xfdef) 2.012464284s ago: executing program 1 (id=910): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') r0 = socket(0x10, 0x2, 0x0) open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6) close_range$auto(0x2, 0x8000, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) setresuid$auto(0x0, 0x8, 0x8000) fchown$auto(0x2, 0x4ae, 0x4) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000000), r0) sendmsg$auto_CTRL_CMD_GETFAMILY21(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001200"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) syz_genetlink_get_family_id$auto_NCSI(&(0x7f00000000c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x801, 0x100) setsockopt$auto(0x3, 0x29, 0x1a, 0xe33, 0x3) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) getsockopt$auto(0x4, 0x6, 0x1a, 0x83bf, 0x6) r3 = socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setgroups$auto(0x3fd, 0x204) getgroups$auto(0x8001, 0x40) semctl$auto(0xd566, 0x2, 0x13, 0x4) pselect6$auto(0x5, 0x5, 0x5, 0x7, 0x0, 0x0) setsockopt$auto(0x4, 0x1, 0x7, 0x480c, 0x800000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r1) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK296(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000ff", @ANYRES16=r3, @ANYBLOB="00022cbd7000fedbdf253900000008001f0102000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x814) socket(0x2, 0x1, 0x106) ioctl$auto(0x3, 0x8907, 0xfffffffffffff4e0) dup2$auto(0x0, 0x3) 1.869119198s ago: executing program 0 (id=911): socket(0x2, 0x1, 0x106) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) fanotify_mark$auto(0x0, 0x8000000000000001, 0x7, 0x0, 0x2) (async, rerun: 32) socket(0x21, 0x2, 0x2) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) (async) shutdown$auto(0x5, 0x2) (async) mmap$auto(0xada0, 0xf7, 0x80f, 0x12, 0x8, 0x3) recvfrom$auto(0x5, 0x5634, 0xffffffff, 0x9, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000f00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_TXSA149(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000002140)={0x1050, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r3}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r3}, @MACSEC_ATTR_OFFLOAD={0xffa, 0x9, "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"}, @MACSEC_ATTR_RXSC_CONFIG={0x2e, 0x2, "3f247d82f9896d33c92fecdec030aabff7a0020f12976e02d61ce7e71543dc138423de72e5b5c89bac69"}]}, 0x1050}, 0x1, 0x0, 0x0, 0x44840}, 0x20046814) mmap$auto(0x7, 0x9, 0x9, 0x19, 0x8, 0x8) getsockname$auto(0x3, 0x6, 0xe) getsockname$auto(0xb8, 0x8, 0xffffffff) 1.327880419s ago: executing program 0 (id=912): close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0xd638699383017aa6, 0x3, 0x0) dup$auto(0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) fstatfs$auto(0x0, 0x3) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x24) socket(0x28, 0x5, 0x0) getsockopt$auto(0x6, 0x28, 0x2, 0x8000000000401, 0xa) ustat$auto(0x6, 0x3) ppoll$auto(0x7fff, 0x9, 0x6, 0x0, 0x2) socket(0xa, 0x3, 0x6) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(0x9, 0xc) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x27f1) mmap$auto(0x0, 0x8, 0x1000000004, 0x13, 0x3, 0x180000000) 1.326246379s ago: executing program 1 (id=913): mmap$auto(0x3, 0xffffffffffff0001, 0xdf, 0x9b72, 0xffffffff, 0x18b000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000000), r0) mprotect$auto(0x1ffff000, 0x810000, 0x0) 909.518769ms ago: executing program 0 (id=914): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) rseq$auto(0x40000, 0xc8f, 0x0, 0x0) rseq$auto(0x8, 0x7, 0x3, 0x79) r0 = socket(0x21, 0x2, 0xa) sendmsg$auto_CGROUPSTATS_CMD_GET19(r0, 0x0, 0x4) 584.590291ms ago: executing program 0 (id=915): mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x80044943, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getresuid$auto(0x3, 0x2, 0x7f) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async) socket(0x22, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x80044943, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) getresuid$auto(0x3, 0x2, 0x7f) (async) 0s ago: executing program 0 (id=916): socket(0x2, 0x3, 0x6) close_range$auto(0x7, 0xfffffffffffffff8, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd2$auto(0x2, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) pselect6$auto(0x6, 0x5, 0x5, 0x7, 0xba, 0x0) read$auto(0x3, 0x6, 0x4c0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fcntl$auto(0x300000000000000, 0x402, 0x80000001) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x4, 0x1, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mincore$auto(0x0, 0x8000000000005b, 0x2) madvise$auto(0x0, 0xf5, 0x9) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET201(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x9fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20060001}, 0x4) kernel console output (not intermixed with test programs): oredump: 30(syz.2.37): interrupted: fatal signal pending [ 95.001719][ T5453] coredump: 30(syz.2.37): written to core: VMAs: 38, size 103768064; core: 42534098 bytes, pos 79990784 [ 95.216787][ T5538] coredump: 92(syz.3.71): written to core: VMAs: 34, size 80703488; core: 60142578 bytes, pos 80711680 [ 95.936974][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.533210][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.542479][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.551675][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.577512][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.585385][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.592825][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.884462][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.293779][ T5604] unsupported nlmsg_type 40 [ 97.699478][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.741222][ T5432] coredump: 32(syz.1.33): written to core: VMAs: 36, size 99708928; core: 62252130 bytes, pos 99717120 [ 98.078796][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.611981][ T5598] chnl_net:caif_netlink_parms(): no params data found [ 98.643250][ T53] Bluetooth: hci1: command tx timeout [ 99.016919][ T35] bridge_slave_1: left allmulticast mode [ 99.026208][ T35] bridge_slave_1: left promiscuous mode [ 99.043531][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.122920][ T35] bridge_slave_0: left allmulticast mode [ 99.128645][ T35] bridge_slave_0: left promiscuous mode [ 99.152257][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.242263][ T5247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.262763][ T5247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.270792][ T5247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.281080][ T5247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.290974][ T5247] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 99.304894][ T5247] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.254575][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.277719][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.297186][ T35] bond0 (unregistering): Released all slaves [ 100.318745][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.327601][ T5602] coredump: 110(syz.3.90): written to core: VMAs: 33, size 97345536; core: 60011406 bytes, pos 97353728 [ 100.329310][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.358036][ T5598] bridge_slave_0: entered allmulticast mode [ 100.392730][ T5598] bridge_slave_0: entered promiscuous mode [ 100.401439][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.420532][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.429692][ T5598] bridge_slave_1: entered allmulticast mode [ 100.445048][ T5598] bridge_slave_1: entered promiscuous mode [ 100.575995][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.633938][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.721757][ T53] Bluetooth: hci1: command tx timeout [ 101.071689][ T5598] team0: Port device team_slave_0 added [ 101.193251][ T5598] team0: Port device team_slave_1 added [ 101.304039][ T35] hsr_slave_0: left promiscuous mode [ 101.313612][ T35] hsr_slave_1: left promiscuous mode [ 101.330317][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.341698][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.362194][ T53] Bluetooth: hci3: command tx timeout [ 101.369172][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.383521][ T5664] netlink: 217 bytes leftover after parsing attributes in process `syz.3.102'. [ 101.392421][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.485736][ T35] veth1_macvtap: left promiscuous mode [ 101.508087][ T35] veth0_macvtap: left promiscuous mode [ 101.513880][ T35] veth1_vlan: left promiscuous mode [ 101.519549][ T35] veth0_vlan: left promiscuous mode [ 102.070994][ T35] team0 (unregistering): Port device team_slave_1 removed [ 102.117364][ T35] team0 (unregistering): Port device team_slave_0 removed [ 102.690822][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.711482][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.743831][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.772686][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.779702][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.806851][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.821646][ T53] Bluetooth: hci1: command tx timeout [ 103.047110][ T5598] hsr_slave_0: entered promiscuous mode [ 103.062462][ T5598] hsr_slave_1: entered promiscuous mode [ 103.070157][ T5598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.087837][ T5598] Cannot create hsr debugfs directory [ 103.106851][ T5628] chnl_net:caif_netlink_parms(): no params data found [ 103.441618][ T53] Bluetooth: hci3: command tx timeout [ 103.511980][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.519149][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.577111][ T5628] bridge_slave_0: entered allmulticast mode [ 103.593310][ T5628] bridge_slave_0: entered promiscuous mode [ 103.604942][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.612353][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.619800][ T5628] bridge_slave_1: entered allmulticast mode [ 103.627874][ T5628] bridge_slave_1: entered promiscuous mode [ 103.888604][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.913915][ T5715] syz.3.112 uses obsolete (PF_INET,SOCK_PACKET) [ 103.964325][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.016164][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.235634][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.428756][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.486278][ T5628] team0: Port device team_slave_0 added [ 104.505913][ T5628] team0: Port device team_slave_1 added [ 104.605654][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.884187][ T53] Bluetooth: hci1: command tx timeout [ 104.931759][ T5748] coredump: 168(syz.3.119): written to core: VMAs: 1, size 4096; core: 2659 bytes, pos 8192 [ 104.968596][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.981255][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.031934][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.054636][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.071725][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.131368][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.521732][ T53] Bluetooth: hci3: command tx timeout [ 105.568835][ T5628] hsr_slave_0: entered promiscuous mode [ 105.605474][ T5628] hsr_slave_1: entered promiscuous mode [ 105.620028][ T5628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.640493][ T5628] Cannot create hsr debugfs directory [ 105.835022][ T35] bridge_slave_1: left allmulticast mode [ 105.854636][ T35] bridge_slave_1: left promiscuous mode [ 105.870600][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.903756][ T35] bridge_slave_0: left allmulticast mode [ 105.909472][ T35] bridge_slave_0: left promiscuous mode [ 105.922581][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.022498][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.051169][ T5801] ptrace attach of "./syz-executor exec"[5234] was attempted by "./syz-executor exec"[5801] [ 107.096879][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.110534][ T5803] ptrace attach of "./syz-executor exec"[5234] was attempted by "./syz-executor exec"[5803] [ 107.193537][ T35] bond0 (unregistering): Released all slaves [ 107.455226][ T5720] coredump: 159(syz.3.112): written to core: VMAs: 34, size 99442688; core: 62116873 bytes, pos 99459072 [ 107.602703][ T53] Bluetooth: hci3: command tx timeout [ 108.111168][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.213587][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.239156][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.434897][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.609514][ T35] hsr_slave_0: left promiscuous mode [ 108.631325][ T35] hsr_slave_1: left promiscuous mode [ 108.677599][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.691402][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.731086][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.738905][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.799100][ T35] veth1_macvtap: left promiscuous mode [ 108.805802][ T35] veth0_macvtap: left promiscuous mode [ 108.811468][ T35] veth1_vlan: left promiscuous mode [ 108.824402][ T35] veth0_vlan: left promiscuous mode [ 110.015606][ T35] team0 (unregistering): Port device team_slave_1 removed [ 110.106125][ T35] team0 (unregistering): Port device team_slave_0 removed [ 110.598599][ T5834] coredump: 190(syz.3.137): written to core: VMAs: 34, size 80703488; core: 60144310 bytes, pos 80711680 [ 110.978146][ T5794] coredump: 123(syz.1.128): written to core: VMAs: 36, size 80703488; core: 60142734 bytes, pos 80711680 [ 111.018595][ T5792] coredump: 121(syz.1.128): written to core: VMAs: 37, size 80703488; core: 60142878 bytes, pos 80711680 [ 112.168558][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.225770][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.267091][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.274297][ T5643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.364720][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.372093][ T5643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.575315][ T5866] coredump: 201(syz.3.143): written to core: VMAs: 5, size 4333568; core: 2235245 bytes, pos 4337664 [ 112.634581][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.756820][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.884872][ T5643] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.934639][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.961302][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.043560][ T5643] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.186293][ T5643] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.309284][ T5643] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.430482][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.639253][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.742393][ T5247] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.751469][ T5247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.771678][ T5247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.789571][ T5247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.798211][ T5247] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 113.805702][ T5247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.973475][ T5643] bridge_slave_1: left allmulticast mode [ 113.998078][ T5643] bridge_slave_1: left promiscuous mode [ 114.009310][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.033729][ T5643] bridge_slave_0: left allmulticast mode [ 114.040085][ T5643] bridge_slave_0: left promiscuous mode [ 114.061742][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.340288][ T5921] netlink: 65 bytes leftover after parsing attributes in process `syz.3.149'. [ 114.792377][ T5643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.822901][ T5643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.843743][ T5643] bond0 (unregistering): Released all slaves [ 114.880044][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.102469][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.109681][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.152356][ T5598] veth0_vlan: entered promiscuous mode [ 115.195245][ T5598] veth1_vlan: entered promiscuous mode [ 115.244392][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.251604][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.680463][ T5643] hsr_slave_0: left promiscuous mode [ 115.730451][ T5643] hsr_slave_1: left promiscuous mode [ 115.798441][ T5643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.808355][ T5643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.843934][ T5247] Bluetooth: hci0: command tx timeout [ 115.857098][ T5643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.871657][ T5643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.921161][ T5928] coredump: 223(syz.3.149): coredump has not been created, error -2 [ 115.995459][ T5643] veth1_macvtap: left promiscuous mode [ 116.001072][ T5643] veth0_macvtap: left promiscuous mode [ 116.026488][ T5643] veth1_vlan: left promiscuous mode [ 116.033301][ T5643] veth0_vlan: left promiscuous mode [ 117.063556][ T5643] team0 (unregistering): Port device team_slave_1 removed [ 117.143144][ T5643] team0 (unregistering): Port device team_slave_0 removed [ 117.182218][ T5924] coredump: 220(syz.3.149): written to core: VMAs: 35, size 97476608; core: 60031998 bytes, pos 97484800 [ 117.186323][ T5896] coredump: 213(syz.3.147): written to core: VMAs: 35, size 76767232; core: 56009726 bytes, pos 76775424 [ 117.925137][ T5247] Bluetooth: hci0: command tx timeout [ 118.194448][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 118.253702][ T5598] veth0_macvtap: entered promiscuous mode [ 118.322237][ T5598] veth1_macvtap: entered promiscuous mode [ 118.450011][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.473308][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.490809][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.508497][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.520166][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.549388][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.609336][ T5598] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.641975][ T5598] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.651071][ T5598] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.696597][ T5598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.719881][ T5904] chnl_net:caif_netlink_parms(): no params data found [ 118.850263][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.167707][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.183006][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.190248][ T5904] bridge_slave_0: entered allmulticast mode [ 119.209680][ T5904] bridge_slave_0: entered promiscuous mode [ 119.223884][ T5628] veth0_vlan: entered promiscuous mode [ 119.231366][ T5643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.244484][ T5643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.267002][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.285086][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.293254][ T5904] bridge_slave_1: entered allmulticast mode [ 119.300366][ T5904] bridge_slave_1: entered promiscuous mode [ 119.379230][ T5628] veth1_vlan: entered promiscuous mode [ 119.408848][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.420979][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.443722][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.457571][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.485337][ T5904] team0: Port device team_slave_0 added [ 119.495534][ T5904] team0: Port device team_slave_1 added [ 119.560739][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.569142][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.631391][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.658996][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.681897][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.751636][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.843373][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 120.007707][ T5247] Bluetooth: hci0: command tx timeout [ 120.109281][ T5904] hsr_slave_0: entered promiscuous mode [ 120.149552][ T5904] hsr_slave_1: entered promiscuous mode [ 120.192993][ T5628] veth0_macvtap: entered promiscuous mode [ 120.274057][ T5628] veth1_macvtap: entered promiscuous mode [ 120.353696][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.385322][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.421583][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.442256][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.463505][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.532680][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.569335][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.590092][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.610736][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.624862][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.662807][ T5628] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.703914][ T5628] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.751658][ T5628] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.760533][ T5628] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.108237][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.141838][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.197154][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.220594][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.629641][ T6079] svc: failed to register nfsdv3 RPC service (errno 111). [ 121.661999][ T6079] svc: failed to register nfsaclv3 RPC service (errno 111). [ 121.855161][ T5904] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.883859][ T5904] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 121.905173][ T5904] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.916994][ T5904] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 122.081655][ T5247] Bluetooth: hci0: command tx timeout [ 122.116443][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.190966][ T5904] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.239668][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.246876][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.263844][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.271039][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.136190][ T6102] netlink: 'syz.2.176': attribute type 2 has an invalid length. [ 123.167207][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.176958][ T6102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.176'. [ 123.438441][ T5904] veth0_vlan: entered promiscuous mode [ 123.507088][ T5904] veth1_vlan: entered promiscuous mode [ 123.567280][ T5904] veth0_macvtap: entered promiscuous mode [ 123.608612][ T5904] veth1_macvtap: entered promiscuous mode [ 123.709414][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.740540][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.769290][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.789628][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.821700][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.842428][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.873364][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.918269][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.955795][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.994667][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.029824][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.052429][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.063323][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.083671][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.107270][ T5904] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.126511][ T5904] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.151586][ T5904] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.177125][ T5904] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.421766][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.463837][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.558601][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.582024][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.790886][ T6118] coredump: 26(syz.0.179): interrupted: fatal signal pending [ 125.823067][ T6118] coredump: 26(syz.0.179): written to core: VMAs: 34, size 80834560; core: 48421514 bytes, pos 68988928 [ 126.332672][ T6187] nbd: couldn't find a device at index 8304 [ 126.342071][ T6187] nbd: couldn't find a device at index 8304 [ 127.972567][ T6228] process 'syz.1.190' launched '/dev/fd/0' with NULL argv: empty string added [ 128.545675][ T6235] netlink: 217 bytes leftover after parsing attributes in process `syz.1.192'. [ 129.254976][ T6250] Zero length message leads to an empty skb [ 130.176470][ T6209] coredump: 28(syz.0.185): interrupted: fatal signal pending [ 130.195972][ T6209] coredump: 28(syz.0.185): written to core: VMAs: 35, size 131035136; core: 61475566 bytes, pos 98811904 [ 130.446231][ T6282] coredump: 43(syz.1.207): written to core: VMAs: 2, size 8192; core: 6810 bytes, pos 12288 [ 130.615826][ T6285] netlink: 'syz.2.208': attribute type 11 has an invalid length. [ 131.629108][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 131.645340][ T6309] tc_dump_action: action bad kind [ 132.450615][ T6192] coredump: 29(syz.2.184): written to core: VMAs: 40, size 85024768; core: 64218390 bytes, pos 85032960 [ 132.476996][ T6322] tc_dump_action: action bad kind [ 132.881306][ T6192] delete_channel: no stack [ 133.515226][ T6361] syz.0.227 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 134.741184][ T6385] coredump: 78(syz.1.233): coredump has not been created, error -2 [ 135.194656][ T6092] coredump: 286(syz.3.175): written to core: VMAs: 37, size 114384896; core: 93701274 bytes, pos 114393088 [ 135.899271][ T6292] coredump: 49(syz.1.211): written to core: VMAs: 37, size 76898304; core: 56009838 bytes, pos 76906496 [ 137.288841][ T6278] coredump: 1(syz.2.204): written to core: VMAs: 34, size 97480704; core: 60150770 bytes, pos 97488896 [ 137.389317][ T6326] coredump: 44(syz.0.219): written to core: VMAs: 33, size 80568320; core: 60011406 bytes, pos 80576512 [ 137.966685][ T6372] coredump: 323(syz.3.229): interrupted: fatal signal pending [ 138.051648][ T6372] coredump: 323(syz.3.229): written to core: VMAs: 36, size 164593664; core: 24406907 bytes, pos 33169408 [ 138.247969][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.254927][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.967790][ T6416] coredump: 76(syz.2.240): written to core: VMAs: 4, size 135168; core: 11018 bytes, pos 139264 [ 139.964227][ T6443] coredump: 82(syz.0.248): written to core: VMAs: 3, size 24576; core: 11051 bytes, pos 28672 [ 139.966141][ T6445] coredump: 83(syz.0.248): written to core: VMAs: 3, size 24576; core: 19261 bytes, pos 36864 [ 140.120689][ T6393] coredump: 84(syz.1.237): interrupted: fatal signal pending [ 140.242029][ T6393] coredump: 84(syz.1.237): written to core: VMAs: 45, size 104034304; core: 6177182 bytes, pos 6938624 [ 140.795892][ T6465] Invalid ELF header magic: != ELF [ 140.914282][ T6359] coredump: 321(syz.3.226): written to core: VMAs: 33, size 97345536; core: 60011406 bytes, pos 97353728 [ 141.267679][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'. [ 142.828513][ T6379] coredump: 76(syz.1.233): written to core: VMAs: 35, size 80699392; core: 59937790 bytes, pos 80707584 [ 143.019561][ T6384] coredump: 77(syz.1.233): written to core: VMAs: 38, size 80830464; core: 60142846 bytes, pos 80838656 [ 144.396404][ T6456] coredump: 88(syz.0.250): written to core: VMAs: 36, size 76902400; core: 56144994 bytes, pos 76910592 [ 144.721045][ T6486] coredump: 91(syz.1.257): Error writing out the process memory [ 144.773974][ T6486] coredump: 91(syz.1.257): written to core: VMAs: 34, size 97611776; core: 24844938 bytes, pos 33615872 [ 145.014060][ T6520] tc_dump_action: action bad kind [ 145.546827][ T6519] delete_channel: no stack [ 146.794022][ T6555] netlink: 824 bytes leftover after parsing attributes in process `syz.0.276'. [ 148.153327][ T6598] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.186288][ T6619] svc: failed to register nfsdv3 RPC service (errno 111). [ 149.219922][ T6619] svc: failed to register nfsaclv3 RPC service (errno 111). [ 149.235849][ T6449] coredump: 91(syz.2.249): written to core: VMAs: 37, size 80703488; core: 60142878 bytes, pos 80711680 [ 150.098689][ T6453] coredump: 92(syz.2.249): written to core: VMAs: 37, size 80834560; core: 60150982 bytes, pos 80842752 [ 150.991062][ T6483] coredump: 97(syz.2.254): written to core: VMAs: 35, size 80834560; core: 60273662 bytes, pos 80842752 [ 151.033391][ T6652] netlink: 556 bytes leftover after parsing attributes in process `syz.3.305'. [ 151.107849][ T6652] openvswitch: netlink: Key 0 has unexpected len 152 expected 0 [ 151.188587][ T6654] svc: failed to register nfsdv3 RPC service (errno 111). [ 151.242897][ T6654] svc: failed to register nfsaclv3 RPC service (errno 111). [ 152.062316][ T6662] coredump: 142(syz.0.309): coredump has not been created, error -13 [ 152.468682][ T6607] coredump: 120(syz.1.292): written to core: VMAs: 33, size 80568320; core: 59929486 bytes, pos 80576512 [ 152.852569][ T6657] coredump: 138(syz.2.307): Core dump to core aborted: cannot preserve file permissions [ 152.862952][ T6657] coredump: 138(syz.2.307): coredump has not been created, error -1 [ 153.710030][ T6701] svc: failed to register nfsdv3 RPC service (errno 111). [ 153.786078][ T6701] svc: failed to register nfsaclv3 RPC service (errno 111). [ 156.322226][ T6730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.032587][ T6540] coredump: 363(syz.3.272): written to core: VMAs: 35, size 76767232; core: 56009726 bytes, pos 76775424 [ 157.204629][ T6746] coredump: 162(syz.0.327): written to core: VMAs: 1, size 4096; core: 2659 bytes, pos 8192 [ 157.488046][ T6543] coredump: 365(syz.3.272): written to core: VMAs: 35, size 76767232; core: 56009726 bytes, pos 76775424 [ 158.027232][ T6773] cgroup: fork rejected by pids controller in /syz1 [ 158.754808][ T6548] coredump: 366(syz.3.272): written to core: VMAs: 37, size 76898304; core: 56018030 bytes, pos 76906496 [ 158.783813][ T6617] coredump: 126(syz.0.293): written to core: VMAs: 36, size 80965632; core: 60286006 bytes, pos 80973824 [ 158.938199][ T6703] coredump: 139(syz.1.316): written to core: VMAs: 33, size 80568320; core: 60003214 bytes, pos 80576512 [ 159.914886][ T6731] coredump: 405(syz.3.323): interrupted: fatal signal pending [ 160.053224][ T6731] coredump: 405(syz.3.323): written to core: VMAs: 38, size 93749248; core: 15804658 bytes, pos 24879104 [ 160.933787][ T6630] coredump: 132(syz.0.298): written to core: VMAs: 33, size 80568320; core: 59933582 bytes, pos 80576512 [ 161.196969][ T6583] coredump: 372(syz.3.279): written to core: VMAs: 34, size 97480704; core: 60150770 bytes, pos 97488896 [ 161.968549][ T6684] coredump: 142(syz.2.307): written to core: VMAs: 4, size 33824768; core: 33700662 bytes, pos 33828864 [ 162.721799][ T6717] coredump: 147(syz.2.315): written to core: VMAs: 38, size 85028864; core: 64222374 bytes, pos 85037056 [ 165.319070][ T6682] coredump: 148(syz.0.310): written to core: VMAs: 36, size 97611776; core: 60154978 bytes, pos 97619968 [ 165.667618][ T6691] coredump: 149(syz.0.310): written to core: VMAs: 38, size 97619968; core: 60155090 bytes, pos 97628160 [ 165.687890][ T6923] coredump: 414(syz.3.341): interrupted: fatal signal pending [ 165.702763][ T6923] coredump: 414(syz.3.341): written to core: VMAs: 34, size 80642048; core: 44026506 bytes, pos 64659456 [ 166.478570][ T7108] delete_channel: no stack [ 166.931021][ T7136] coredump: 195(syz.2.358): written to core: VMAs: 1, size 4096; core: 2659 bytes, pos 8192 [ 168.951885][ T6947] coredump: 299(syz.1.345): written to core: VMAs: 36, size 93548544; core: 56018018 bytes, pos 93556736 [ 169.179830][ T7138] coredump: 420(syz.3.361): written to core: VMAs: 41, size 94146560; core: 56310170 bytes, pos 94158848 [ 170.998772][ T7210] netlink: 217 bytes leftover after parsing attributes in process `syz.0.385'. [ 172.136842][ T7253] openvswitch: netlink: Message has 4 unknown bytes. [ 172.487160][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 172.704018][ T7084] coredump: 188(syz.2.351): written to core: VMAs: 34, size 97349632; core: 60015558 bytes, pos 97357824 [ 175.149150][ T7202] coredump: 205(syz.0.380): interrupted: fatal signal pending [ 175.273326][ T7202] coredump: 205(syz.0.380): written to core: VMAs: 33, size 97345536; core: 51446670 bytes, pos 88776704 [ 175.666931][ T7385] coredump: 459(syz.3.404): written to core: VMAs: 35, size 97554432; core: 60162482 bytes, pos 97566720 [ 175.990614][ T7378] coredump: 583(syz.1.402): interrupted: fatal signal pending [ 176.045893][ T7378] coredump: 583(syz.1.402): Error writing out the process memory [ 176.079535][ T7214] coredump: 471(syz.1.383): written to core: VMAs: 35, size 80572416; core: 60007422 bytes, pos 80580608 [ 176.135495][ T7378] coredump: 583(syz.1.402): written to core: VMAs: 33, size 80568320; core: 47581778 bytes, pos 68153344 [ 176.156752][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.952462][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.484980][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.632552][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.642571][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.650531][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.661734][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.672349][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 177.679694][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.869394][ T7161] coredump: 204(syz.2.367): written to core: VMAs: 33, size 97345536; core: 62112672 bytes, pos 97361920 [ 177.905843][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.448826][ T12] bridge_slave_1: left allmulticast mode [ 178.461872][ T12] bridge_slave_1: left promiscuous mode [ 178.472297][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.554966][ T12] bridge_slave_0: left allmulticast mode [ 178.570485][ T7164] coredump: 206(syz.2.367): written to core: VMAs: 35, size 97476608; core: 62116862 bytes, pos 97484800 [ 178.582772][ T12] bridge_slave_0: left promiscuous mode [ 178.588570][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.294574][ T7469] raw_sendmsg: syz.3.424 forgot to set AF_INET. Fix it! [ 179.762304][ T53] Bluetooth: hci1: command tx timeout [ 180.182850][ T7419] coredump: 238(syz.2.414): interrupted: fatal signal pending [ 180.190678][ T7419] coredump: 238(syz.2.414): written to core: VMAs: 35, size 80699392; core: 14967174 bytes, pos 15482880 [ 180.878536][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.906088][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.968801][ T12] bond0 (unregistering): Released all slaves [ 181.036568][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 181.098842][ T7439] chnl_net:caif_netlink_parms(): no params data found [ 181.841753][ T53] Bluetooth: hci1: command tx timeout [ 182.053546][ T7439] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.061228][ T7439] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.081178][ T7439] bridge_slave_0: entered allmulticast mode [ 182.092272][ T7439] bridge_slave_0: entered promiscuous mode [ 182.108041][ T7439] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.121591][ T7439] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.134655][ T7439] bridge_slave_1: entered allmulticast mode [ 182.150669][ T7439] bridge_slave_1: entered promiscuous mode [ 182.445316][ T7446] coredump: 1(syz.3.421): written to core: VMAs: 36, size 80777216; core: 60150882 bytes, pos 80785408 [ 182.482740][ T7439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.520035][ T7439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.334307][ T7439] team0: Port device team_slave_0 added [ 183.570422][ T7392] coredump: 231(syz.2.405): written to core: VMAs: 36, size 97611776; core: 60154978 bytes, pos 97619968 [ 183.624067][ T12] hsr_slave_0: left promiscuous mode [ 183.670259][ T12] hsr_slave_1: left promiscuous mode [ 183.678622][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.689286][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.704836][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.716447][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.809301][ T12] veth1_macvtap: left promiscuous mode [ 183.825040][ T12] veth0_macvtap: left promiscuous mode [ 183.853411][ T12] veth1_vlan: left promiscuous mode [ 183.863909][ T12] veth0_vlan: left promiscuous mode [ 183.931618][ T53] Bluetooth: hci1: command tx timeout [ 184.762319][ T7493] coredump: 602(syz.1.430): written to core: VMAs: 37, size 76898304; core: 56013934 bytes, pos 76906496 [ 185.530603][ T12] team0 (unregistering): Port device team_slave_1 removed [ 185.615617][ T12] team0 (unregistering): Port device team_slave_0 removed [ 186.004031][ T53] Bluetooth: hci1: command tx timeout [ 186.466967][ T7439] team0: Port device team_slave_1 added [ 186.652591][ T7439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.659601][ T7439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.761567][ T7439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.786579][ T7439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.801538][ T7439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.837661][ T7439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.191145][ T7439] hsr_slave_0: entered promiscuous mode [ 187.242002][ T7439] hsr_slave_1: entered promiscuous mode [ 187.382388][ T7439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.390015][ T7439] Cannot create hsr debugfs directory [ 188.228664][ T7735] openvswitch: netlink: Message has 4 unknown bytes. [ 189.099298][ T7761] delete_channel: no stack [ 189.763643][ T7439] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 189.824493][ T7439] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 189.885730][ T7439] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 189.947585][ T7439] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.254213][ T7439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.325195][ T7439] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.354875][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.362072][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.415837][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.423009][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.248433][ T7439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.406230][ T7439] veth0_vlan: entered promiscuous mode [ 191.441457][ T7439] veth1_vlan: entered promiscuous mode [ 191.563149][ T7439] veth0_macvtap: entered promiscuous mode [ 191.598785][ T7439] veth1_macvtap: entered promiscuous mode [ 191.642554][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.672795][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.707226][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.741997][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.766747][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.804637][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.834033][ T7439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.856557][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.891965][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.931761][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.942861][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.983417][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.014064][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.045629][ T7439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.094997][ T7439] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.128902][ T7439] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.169767][ T7439] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.200372][ T7439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.663624][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.701531][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.770936][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.823337][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.877976][ T5247] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.893670][ T5247] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.905971][ T5247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.916653][ T5247] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.931983][ T5247] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 193.942277][ T5247] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.715378][ T7922] chnl_net:caif_netlink_parms(): no params data found [ 195.223811][ T7922] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.261811][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.277053][ T7922] bridge_slave_0: entered allmulticast mode [ 195.302904][ T7922] bridge_slave_0: entered promiscuous mode [ 195.313308][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.320461][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.371702][ T7922] bridge_slave_1: entered allmulticast mode [ 195.395733][ T7922] bridge_slave_1: entered promiscuous mode [ 195.701693][ T7922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.753638][ T7922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.001805][ T5247] Bluetooth: hci4: command tx timeout [ 196.108038][ T7922] team0: Port device team_slave_0 added [ 196.135643][ T7922] team0: Port device team_slave_1 added [ 196.473468][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.501949][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.591587][ T7922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.633659][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.651616][ T5247] Bluetooth: hci2: command 0x0406 tx timeout [ 196.688011][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.811557][ T7922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.335219][ T7922] hsr_slave_0: entered promiscuous mode [ 197.390751][ T7922] hsr_slave_1: entered promiscuous mode [ 197.427809][ T7922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.447636][ T7922] Cannot create hsr debugfs directory [ 198.081823][ T53] Bluetooth: hci4: command tx timeout [ 198.275376][ T7922] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.367402][ T7881] coredump: 582(syz.3.491): written to core: VMAs: 34, size 93487104; core: 56013766 bytes, pos 93495296 [ 198.755456][ T7922] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.250396][ T7874] coredump: 321(syz.2.488): written to core: VMAs: 38, size 76902400; core: 56018086 bytes, pos 76910592 [ 199.278133][ T7922] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.693783][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.700610][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.768257][ T7922] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.161769][ T53] Bluetooth: hci4: command tx timeout [ 200.204362][ T7922] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.365166][ T7922] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 200.473154][ T7922] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 200.540559][ T7922] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 200.785049][ T7889] coredump: 322(syz.2.488): written to core: VMAs: 38, size 81096704; core: 60216486 bytes, pos 81104896 [ 200.811254][ T7922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.887903][ T7922] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.970523][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.977704][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.015237][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.022438][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.166712][ T7922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.550534][ T7968] coredump: 17(syz.0.503): written to core: VMAs: 33, size 97345536; core: 62100366 bytes, pos 97353728 [ 201.737885][ T7922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.876353][ T7922] veth0_vlan: entered promiscuous mode [ 201.918615][ T7922] veth1_vlan: entered promiscuous mode [ 202.022575][ T7922] veth0_macvtap: entered promiscuous mode [ 202.033462][ T7922] veth1_macvtap: entered promiscuous mode [ 202.123289][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.154222][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.185187][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.203550][ T53] Bluetooth: hci4: command tx timeout [ 202.232220][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.283935][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.329287][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.368895][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.395733][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.428281][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.466031][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.496768][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.523599][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.552974][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.586811][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.630515][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.659673][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.687198][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.715846][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.746676][ T7922] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.760208][ T7922] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.783496][ T7922] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.800814][ T7922] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.146103][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.179357][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.232828][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.254862][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.418973][ T8051] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 204.838979][ T2929] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.352708][ T2929] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.506245][ T5247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.517588][ T5247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.527960][ T5247] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.554097][ T5247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.562176][ T5247] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 205.571222][ T5247] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.891492][ T2929] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.319376][ T2929] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.883628][ T8081] chnl_net:caif_netlink_parms(): no params data found [ 206.919474][ T2929] bridge_slave_1: left allmulticast mode [ 206.928999][ T2929] bridge_slave_1: left promiscuous mode [ 206.953161][ T2929] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.998851][ T2929] bridge_slave_0: left allmulticast mode [ 207.030282][ T2929] bridge_slave_0: left promiscuous mode [ 207.036114][ T2929] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.231078][ T8109] coredump: 645(syz.3.536): coredump has not been created, error -13 [ 207.590453][ T5247] Bluetooth: hci1: command tx timeout [ 208.172465][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.187011][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.195175][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.204348][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.224939][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 208.244913][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.270491][ T8124] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 208.658194][ T8053] coredump: 613(syz.3.522): written to core: VMAs: 35, size 80646144; core: 60019710 bytes, pos 80654336 [ 209.581718][ T2929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.629405][ T53] Bluetooth: hci1: command tx timeout [ 209.826054][ T2929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.982534][ T2929] bond0 (unregistering): Released all slaves [ 210.257781][ T53] Bluetooth: hci5: command tx timeout [ 210.918538][ T8081] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.925696][ T8081] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.966308][ T8081] bridge_slave_0: entered allmulticast mode [ 210.973561][ T8081] bridge_slave_0: entered promiscuous mode [ 211.086534][ T8081] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.113205][ T8081] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.120490][ T8081] bridge_slave_1: entered allmulticast mode [ 211.153737][ T8081] bridge_slave_1: entered promiscuous mode [ 211.677463][ T53] Bluetooth: hci1: command tx timeout [ 211.909834][ T8081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.960821][ T8081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.305181][ T53] Bluetooth: hci5: command tx timeout [ 212.843870][ T2929] hsr_slave_0: left promiscuous mode [ 212.915022][ T2929] hsr_slave_1: left promiscuous mode [ 212.926356][ T8144] coredump: 658(syz.3.546): written to core: VMAs: 35, size 97554432; core: 60160750 bytes, pos 97562624 [ 213.008316][ T2929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.033365][ T2929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.053365][ T2929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.081374][ T2929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.243562][ T2929] veth1_macvtap: left promiscuous mode [ 213.249152][ T2929] veth0_macvtap: left promiscuous mode [ 213.300445][ T2929] veth1_vlan: left promiscuous mode [ 213.305950][ T2929] veth0_vlan: left promiscuous mode [ 213.723389][ T53] Bluetooth: hci1: command tx timeout [ 214.239721][ T8184] coredump: 669(syz.3.554): written to core: VMAs: 1, size 4096; core: 2659 bytes, pos 8192 [ 214.271085][ T8185] coredump: 670(syz.3.554): written to core: VMAs: 1, size 4096; core: 2659 bytes, pos 8192 [ 214.355018][ T53] Bluetooth: hci5: command tx timeout [ 216.409388][ T53] Bluetooth: hci5: command tx timeout [ 216.481439][ T8095] coredump: 12(syz.1.531): written to core: VMAs: 36, size 84897792; core: 64209974 bytes, pos 84905984 [ 216.945405][ T2929] team0 (unregistering): Port device team_slave_1 removed [ 217.142237][ T2929] team0 (unregistering): Port device team_slave_0 removed [ 217.270829][ T8231] coredump: 70(syz.1.564): written to core: VMAs: 4, size 2232320; core: 2108219 bytes, pos 2236416 [ 219.068486][ T8081] team0: Port device team_slave_0 added [ 219.140978][ T8081] team0: Port device team_slave_1 added [ 219.343395][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.351129][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.407814][ T8081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.445671][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.477393][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.539718][ T8081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.771269][ T8081] hsr_slave_0: entered promiscuous mode [ 219.820889][ T8081] hsr_slave_1: entered promiscuous mode [ 219.865500][ T8081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.884523][ T8081] Cannot create hsr debugfs directory [ 220.153119][ T8120] chnl_net:caif_netlink_parms(): no params data found [ 220.606162][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 221.510088][ T8120] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.517258][ T8120] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.571032][ T8120] bridge_slave_0: entered allmulticast mode [ 221.594407][ T8120] bridge_slave_0: entered promiscuous mode [ 221.777187][ T8120] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.784344][ T8120] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.809820][ T8120] bridge_slave_1: entered allmulticast mode [ 221.824150][ T8120] bridge_slave_1: entered promiscuous mode [ 221.880328][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 222.832047][ T8120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.971695][ T8120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.895665][ T8120] team0: Port device team_slave_0 added [ 223.947599][ T8120] team0: Port device team_slave_1 added [ 224.364691][ T8266] coredump: 699(syz.3.570): written to core: VMAs: 34, size 97419264; core: 60031960 bytes, pos 97435648 [ 224.389594][ T8120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.406508][ T8120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.486048][ T8120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.519570][ T8120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.547055][ T8120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.625030][ T8120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.984418][ T8282] coredump: 84(syz.1.572): interrupted: fatal signal pending [ 225.032431][ T8282] coredump: 84(syz.1.572): written to core: VMAs: 33, size 80568320; core: 17934930 bytes, pos 18325504 [ 225.244398][ T8120] hsr_slave_0: entered promiscuous mode [ 225.289307][ T8120] hsr_slave_1: entered promiscuous mode [ 225.360146][ T8120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.380171][ T8120] Cannot create hsr debugfs directory [ 225.672878][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.159456][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.238098][ T8303] coredump: 709(syz.3.575): interrupted: fatal signal pending [ 226.260622][ T8303] coredump: 709(syz.3.575): written to core: VMAs: 38, size 93753344; core: 53412442 bytes, pos 91017216 [ 226.437493][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.523953][ T8081] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 226.733936][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.851874][ T8081] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 226.925262][ T8081] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 227.015167][ T8081] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 227.447660][ T12] bridge_slave_1: left allmulticast mode [ 227.453383][ T12] bridge_slave_1: left promiscuous mode [ 227.477693][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.579946][ T12] bridge_slave_0: left allmulticast mode [ 227.585661][ T12] bridge_slave_0: left promiscuous mode [ 227.616531][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.650592][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.785533][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.838437][ T12] bond0 (unregistering): Released all slaves [ 230.019051][ T8081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.074318][ T8081] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.117236][ T8344] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.124453][ T8344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.180441][ T8344] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.187652][ T8344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.431740][ T12] hsr_slave_0: left promiscuous mode [ 230.438116][ T12] hsr_slave_1: left promiscuous mode [ 230.467153][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.485290][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.526122][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.551548][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.720682][ T12] veth1_macvtap: left promiscuous mode [ 230.746019][ T12] veth0_macvtap: left promiscuous mode [ 230.769101][ T12] veth1_vlan: left promiscuous mode [ 230.781971][ T12] veth0_vlan: left promiscuous mode [ 231.575162][ T8354] coredump: 729(syz.3.585): written to core: VMAs: 42, size 98078720; core: 58163435 bytes, pos 98111488 [ 233.437020][ T12] team0 (unregistering): Port device team_slave_1 removed [ 233.458028][ T8426] openvswitch: netlink: Message has 4 unknown bytes. [ 233.749437][ T12] team0 (unregistering): Port device team_slave_0 removed [ 234.709915][ T8258] coredump: 80(syz.1.568): interrupted: fatal signal pending [ 234.745962][ T8258] coredump: 80(syz.1.568): written to core: VMAs: 34, size 131035136; core: 88785906 bytes, pos 126128128 [ 236.362511][ T8428] coredump: 746(syz.3.593): interrupted: fatal signal pending [ 236.455888][ T8428] coredump: 746(syz.3.593): written to core: VMAs: 34, size 97419264; core: 28818058 bytes, pos 66220032 [ 236.496290][ T8120] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 236.515287][ T8120] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 236.536488][ T8081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.553964][ T8120] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 236.621835][ T8120] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 236.891965][ T8120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.973204][ T8120] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.002458][ T8345] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.009645][ T8345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.084058][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.091224][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.156720][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 237.191901][ T8081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.730123][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.890898][ T8081] veth0_vlan: entered promiscuous mode [ 237.928798][ T8081] veth1_vlan: entered promiscuous mode [ 238.126185][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.290288][ T8120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.418534][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.481201][ T8081] veth0_macvtap: entered promiscuous mode [ 238.544908][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.576734][ T8081] veth1_macvtap: entered promiscuous mode [ 238.651854][ T8120] veth0_vlan: entered promiscuous mode [ 238.677621][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.700443][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.720583][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.737527][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.743684][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.755604][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.772084][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.780388][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.781961][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.788262][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 238.805595][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.821482][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.843056][ T8081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.855287][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.865929][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.878034][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.888651][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.898563][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.907350][ T8420] coredump: 741(syz.3.591): written to core: VMAs: 39, size 93753344; core: 56026334 bytes, pos 93761536 [ 238.909706][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.932390][ T8081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.973473][ T8424] coredump: 745(syz.3.591): written to core: VMAs: 41, size 93884416; core: 56042830 bytes, pos 93892608 [ 239.000829][ T8081] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.016273][ T8081] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.025361][ T8081] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.041581][ T8081] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.059265][ T8120] veth1_vlan: entered promiscuous mode [ 239.131414][ T12] bridge_slave_1: left allmulticast mode [ 239.137131][ T12] bridge_slave_1: left promiscuous mode [ 239.143327][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.171956][ T12] bridge_slave_0: left allmulticast mode [ 239.177660][ T12] bridge_slave_0: left promiscuous mode [ 239.189599][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.198713][ T8417] coredump: 738(syz.3.590): written to core: VMAs: 34, size 97419264; core: 60023750 bytes, pos 97427456 [ 239.919401][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.942082][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.962257][ T12] bond0 (unregistering): Released all slaves [ 240.275992][ T8120] veth0_macvtap: entered promiscuous mode [ 240.336306][ T8120] veth1_macvtap: entered promiscuous mode [ 240.345424][ T8344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.370130][ T8344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.446776][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.463731][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.474114][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.488534][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.498896][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.512727][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.523253][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.534142][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.545820][ T8120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.839929][ T53] Bluetooth: hci0: command tx timeout [ 240.919088][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.958476][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.974922][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.985748][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.997111][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.007615][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.017571][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.028078][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.039784][ T8120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.084866][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.106106][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.156002][ T12] hsr_slave_0: left promiscuous mode [ 241.162097][ T12] hsr_slave_1: left promiscuous mode [ 241.171762][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.183784][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.194675][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.211806][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.245989][ T12] veth1_macvtap: left promiscuous mode [ 241.251629][ T12] veth0_macvtap: left promiscuous mode [ 241.263414][ T12] veth1_vlan: left promiscuous mode [ 241.268906][ T12] veth0_vlan: left promiscuous mode [ 241.587948][ T5247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.600180][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.609499][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.620810][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.629970][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 241.640196][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.867660][ T12] team0 (unregistering): Port device team_slave_1 removed [ 241.913806][ T12] team0 (unregistering): Port device team_slave_0 removed [ 242.306199][ T8120] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.323153][ T8120] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.331913][ T8120] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.352716][ T8120] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.442974][ T8450] chnl_net:caif_netlink_parms(): no params data found [ 242.781174][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.795761][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.820136][ T8450] bridge_slave_0: entered allmulticast mode [ 242.833526][ T8450] bridge_slave_0: entered promiscuous mode [ 242.843369][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.850503][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.858494][ T8450] bridge_slave_1: entered allmulticast mode [ 242.867350][ T8450] bridge_slave_1: entered promiscuous mode [ 242.912116][ T5247] Bluetooth: hci0: command tx timeout [ 242.992986][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.000883][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.119288][ T8450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.152273][ T8450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.327720][ T8450] team0: Port device team_slave_0 added [ 243.358991][ T8345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.369418][ T8450] team0: Port device team_slave_1 added [ 243.397188][ T8345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.482230][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.489223][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.525210][ T8450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.560818][ T8477] chnl_net:caif_netlink_parms(): no params data found [ 243.658497][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.701261][ T5247] Bluetooth: hci2: command tx timeout [ 243.721842][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.739640][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.801669][ T8450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.933356][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.094671][ T8450] hsr_slave_0: entered promiscuous mode [ 244.114142][ T8450] hsr_slave_1: entered promiscuous mode [ 244.129509][ T8450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.137460][ T8450] Cannot create hsr debugfs directory [ 244.290591][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.511574][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.658135][ T8477] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.688889][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.696204][ T8477] bridge_slave_0: entered allmulticast mode [ 244.747305][ T8477] bridge_slave_0: entered promiscuous mode [ 244.860005][ T8477] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.867179][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.877176][ T8477] bridge_slave_1: entered allmulticast mode [ 244.893744][ T8477] bridge_slave_1: entered promiscuous mode [ 244.978285][ T5247] Bluetooth: hci0: command tx timeout [ 245.002677][ T8477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.111571][ T8477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.246072][ T8477] team0: Port device team_slave_0 added [ 245.331017][ T8477] team0: Port device team_slave_1 added [ 245.338992][ T11] bridge_slave_1: left allmulticast mode [ 245.345419][ T11] bridge_slave_1: left promiscuous mode [ 245.358691][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.389267][ T11] bridge_slave_0: left allmulticast mode [ 245.396229][ T11] bridge_slave_0: left promiscuous mode [ 245.411694][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.444397][ T11] bridge_slave_1: left allmulticast mode [ 245.458080][ T11] bridge_slave_1: left promiscuous mode [ 245.474999][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.508019][ T11] bridge_slave_0: left allmulticast mode [ 245.513747][ T11] bridge_slave_0: left promiscuous mode [ 245.541642][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.793923][ T5247] Bluetooth: hci2: command tx timeout [ 246.154715][ T8518] coredump: 3(syz.2.538): written to core: VMAs: 35, size 76767232; core: 56000902 bytes, pos 76779520 [ 247.064325][ T5247] Bluetooth: hci0: command tx timeout [ 247.511693][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.536381][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.556765][ T11] bond0 (unregistering): Released all slaves [ 247.830471][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.850057][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.863111][ T5247] Bluetooth: hci2: command tx timeout [ 247.878153][ T11] bond0 (unregistering): Released all slaves [ 247.895787][ T8516] coredump: 15(syz.0.604): written to core: VMAs: 40, size 85028864; core: 64222486 bytes, pos 85037056 [ 248.367833][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.395010][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.452163][ T8477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.473337][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.490300][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.544910][ T8477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.999728][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.014647][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.022924][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.041431][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.056496][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 249.064120][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.219016][ T8477] hsr_slave_0: entered promiscuous mode [ 249.226618][ T8477] hsr_slave_1: entered promiscuous mode [ 249.248214][ T8477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.256237][ T8477] Cannot create hsr debugfs directory [ 249.678282][ T11] hsr_slave_0: left promiscuous mode [ 249.687017][ T11] hsr_slave_1: left promiscuous mode [ 249.700260][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.717121][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.726983][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.740388][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.767620][ T11] hsr_slave_0: left promiscuous mode [ 249.784653][ T11] hsr_slave_1: left promiscuous mode [ 249.791415][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.798875][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.808352][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.827022][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.879697][ T11] veth1_macvtap: left promiscuous mode [ 249.886096][ T11] veth0_macvtap: left promiscuous mode [ 249.892170][ T11] veth1_vlan: left promiscuous mode [ 249.897481][ T11] veth0_vlan: left promiscuous mode [ 249.904184][ T11] veth1_macvtap: left promiscuous mode [ 249.909825][ T11] veth0_macvtap: left promiscuous mode [ 249.915580][ T11] veth1_vlan: left promiscuous mode [ 249.921075][ T11] veth0_vlan: left promiscuous mode [ 249.930253][ T5247] Bluetooth: hci2: command tx timeout [ 250.468429][ T11] team0 (unregistering): Port device team_slave_1 removed [ 250.513185][ T11] team0 (unregistering): Port device team_slave_0 removed [ 251.128717][ T5247] Bluetooth: hci3: command tx timeout [ 251.287902][ T11] team0 (unregistering): Port device team_slave_1 removed [ 251.326581][ T11] team0 (unregistering): Port device team_slave_0 removed [ 251.823570][ T8450] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 251.843944][ T8450] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 251.979908][ T8450] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 252.024267][ T8450] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 252.192028][ T8604] chnl_net:caif_netlink_parms(): no params data found [ 252.481081][ T8604] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.502818][ T8604] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.516039][ T8604] bridge_slave_0: entered allmulticast mode [ 252.531138][ T8604] bridge_slave_0: entered promiscuous mode [ 252.557366][ T8604] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.570400][ T8604] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.581654][ T8604] bridge_slave_1: entered allmulticast mode [ 252.599384][ T8604] bridge_slave_1: entered promiscuous mode [ 252.715517][ T8604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.759021][ T8450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.798313][ T8604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.902784][ T8450] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.981911][ T8604] team0: Port device team_slave_0 added [ 253.009585][ T8604] team0: Port device team_slave_1 added [ 253.055794][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.063004][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.094010][ T8477] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 253.111631][ T8477] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 253.148960][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.156104][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.178939][ T8604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.186056][ T8604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.214925][ T8604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.225686][ T5247] Bluetooth: hci3: command tx timeout [ 253.234969][ T8477] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 253.254267][ T8604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.263421][ T8604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.297496][ T8604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.319996][ T8477] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 253.390467][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.420804][ T8604] hsr_slave_0: entered promiscuous mode [ 253.427692][ T8604] hsr_slave_1: entered promiscuous mode [ 253.499612][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.546657][ T8450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.592075][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.693814][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.810614][ T8477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.934018][ T11] bridge_slave_1: left allmulticast mode [ 253.956273][ T11] bridge_slave_1: left promiscuous mode [ 253.963948][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.984899][ T11] bridge_slave_0: left allmulticast mode [ 253.995644][ T11] bridge_slave_0: left promiscuous mode [ 254.011636][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.758141][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.776131][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.791274][ T11] bond0 (unregistering): Released all slaves [ 254.865558][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 254.998896][ T8477] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.117346][ T8450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.147472][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.154645][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.286196][ T5247] Bluetooth: hci3: command tx timeout [ 255.347729][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.354921][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.452711][ T11] hsr_slave_0: left promiscuous mode [ 255.473400][ T11] hsr_slave_1: left promiscuous mode [ 255.480468][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.488849][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.498695][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.508872][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.537159][ T11] veth1_macvtap: left promiscuous mode [ 255.542812][ T11] veth0_macvtap: left promiscuous mode [ 255.549444][ T11] veth1_vlan: left promiscuous mode [ 255.554976][ T11] veth0_vlan: left promiscuous mode [ 256.334776][ T11] team0 (unregistering): Port device team_slave_1 removed [ 256.410310][ T11] team0 (unregistering): Port device team_slave_0 removed [ 257.178390][ T8450] veth0_vlan: entered promiscuous mode [ 257.201471][ T8450] veth1_vlan: entered promiscuous mode [ 257.373072][ T5247] Bluetooth: hci3: command tx timeout [ 257.475224][ T8604] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 257.555359][ T8604] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 257.597223][ T8604] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 257.617598][ T8450] veth0_macvtap: entered promiscuous mode [ 257.634554][ T8450] veth1_macvtap: entered promiscuous mode [ 257.652868][ T8604] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 257.715889][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.742964][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.760759][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.818900][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.851933][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.876345][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.929548][ T8450] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.940547][ T8450] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.950224][ T8450] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.959561][ T8450] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.976258][ T8477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.139177][ T8604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.186327][ T8604] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.203235][ T8477] veth0_vlan: entered promiscuous mode [ 258.210616][ T8345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.230617][ T8345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.253741][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.260899][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.274443][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.281620][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.327367][ T8477] veth1_vlan: entered promiscuous mode [ 258.364517][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.381883][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.421715][ T8788] delete_channel: no stack [ 258.479223][ T8477] veth0_macvtap: entered promiscuous mode [ 258.496843][ T8477] veth1_macvtap: entered promiscuous mode [ 258.532741][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.581507][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.607283][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.619184][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.633863][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.647696][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.668921][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.690232][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.701504][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.713291][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.744564][ T8477] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.763642][ T8477] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.788212][ T8477] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.811186][ T8477] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.992736][ T8604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.178453][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.201924][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.223255][ T8604] veth0_vlan: entered promiscuous mode [ 259.248596][ T8604] veth1_vlan: entered promiscuous mode [ 259.292241][ T8345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.324433][ T8345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.351246][ T8604] veth0_macvtap: entered promiscuous mode [ 259.398973][ T8604] veth1_macvtap: entered promiscuous mode [ 259.482424][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.508599][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.528227][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.546741][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.559655][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.580840][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.611684][ T8604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.637540][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.659757][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.690914][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.720476][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.750505][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.790459][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.808035][ T8604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.852791][ T8604] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.890352][ T8604] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.915095][ T8604] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.940536][ T8604] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.301272][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.309151][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.347150][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.372383][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.643199][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.649558][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.036565][ T8879] coredump: 10(syz.2.658): coredump has not been created, error -13 [ 263.999499][ T8823] coredump: 131(syz.0.646): written to core: VMAs: 34, size 80703488; core: 60142578 bytes, pos 80711680 [ 264.914700][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 265.105514][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 266.206491][ T8844] coredump: 15(syz.3.650): written to core: VMAs: 37, size 84897792; core: 64214126 bytes, pos 84905984 [ 266.680166][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'. [ 266.753940][ T8890] coredump: 24(syz.1.660): interrupted: fatal signal pending [ 266.882227][ T8890] coredump: 24(syz.1.660): written to core: VMAs: 33, size 97345536; core: 12761682 bytes, pos 13148160 [ 268.866675][ T8986] netlink: del zone limit has 4 unknown bytes [ 271.176184][ T8907] coredump: 20(syz.2.666): written to core: VMAs: 34, size 97480704; core: 60142578 bytes, pos 97488896 [ 271.220916][ T9013] coredump: 65(syz.3.693): written to core: VMAs: 1, size 4096; core: 2659 bytes, pos 8192 [ 271.516262][ T8812] coredump: 10(syz.1.598): written to core: VMAs: 34, size 76771328; core: 56009670 bytes, pos 76779520 [ 271.632890][ T8804] coredump: 6(syz.1.598): written to core: VMAs: 34, size 76640256; core: 56001478 bytes, pos 76648448 [ 271.669618][ T9008] could not allocate digest TFM handle [ 271.737589][ T8808] coredump: 7(syz.1.598): written to core: VMAs: 36, size 76771328; core: 56009782 bytes, pos 76779520 [ 273.668647][ T8839] coredump: 19(syz.1.647): written to core: VMAs: 36, size 76902400; core: 56144994 bytes, pos 76910592 [ 274.912101][ T8843] coredump: 20(syz.1.647): written to core: VMAs: 36, size 76902400; core: 56144994 bytes, pos 76910592 [ 275.437063][ T9075] cgroup: fork rejected by pids controller in /syz3 [ 276.341599][ T8959] coredump: 40(syz.2.680): written to core: VMAs: 33, size 76636160; core: 55997326 bytes, pos 76644352 [ 277.250955][ T9049] coredump: 37(syz.1.702): interrupted: fatal signal pending [ 277.309606][ T9049] coredump: 37(syz.1.702): written to core: VMAs: 36, size 80965632; core: 15176126 bytes, pos 15683584 [ 278.246355][ T9142] delete_channel: no stack [ 279.522936][ T8968] coredump: 44(syz.3.682): written to core: VMAs: 33, size 97345536; core: 60015502 bytes, pos 97353728 [ 279.617508][ T8979] coredump: 1(syz.3.683): written to core: VMAs: 37, size 97742848; core: 60286106 bytes, pos 97751040 [ 279.927420][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.725'. [ 279.978624][ T8972] coredump: 45(syz.2.681): written to core: VMAs: 36, size 80965632; core: 60277814 bytes, pos 80973824 [ 281.138439][ T8976] coredump: 46(syz.2.681): written to core: VMAs: 38, size 97742848; core: 60286162 bytes, pos 97751040 [ 283.105104][ T9297] coredump: 160(syz.3.736): written to core: VMAs: 2, size 139264; core: 137926 bytes, pos 143360 [ 283.153509][ T9298] coredump: 161(syz.3.736): written to core: VMAs: 2, size 139264; core: 137926 bytes, pos 143360 [ 284.616568][ T9257] coredump: 230(syz.0.733): interrupted: fatal signal pending [ 284.644952][ T9270] coredump: 231(syz.0.733): interrupted: fatal signal pending [ 284.751810][ T9270] coredump: 231(syz.0.733): written to core: VMAs: 37, size 97611776; core: 11011226 bytes, pos 11517952 [ 284.821688][ T9257] coredump: 230(syz.0.733): written to core: VMAs: 36, size 97480704; core: 16553014 bytes, pos 17059840 [ 284.829780][ T9021] coredump: 60(syz.2.692): written to core: VMAs: 38, size 93810688; core: 56157394 bytes, pos 93818880 [ 284.919490][ T9325] netlink: 16 bytes leftover after parsing attributes in process `syz.3.751'. [ 284.975865][ T9328] coredump: 174(syz.3.751): written to core: VMAs: 1, size 4096; core: 2659 bytes, pos 8192 [ 286.990197][ T9268] coredump: 76(syz.1.738): written to core: VMAs: 34, size 84766720; core: 64213976 bytes, pos 84783104 [ 287.310687][ T9246] coredump: 151(syz.3.731): written to core: VMAs: 34, size 80568320; core: 60007366 bytes, pos 80576512 [ 288.388353][ T9236] coredump: 226(syz.0.728): written to core: VMAs: 36, size 97480704; core: 60027958 bytes, pos 97488896 [ 288.472611][ T9381] delete_channel: no stack [ 290.621807][ T9068] coredump: 67(syz.2.704): coredump has not been created, error -2 [ 290.739376][ T9427] -+^‡]: entered promiscuous mode [ 291.621960][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 291.640331][ T9452] nbd: must specify a device to reconfigure [ 292.643890][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'. [ 292.802945][ T9479] netlink: 'syz.2.792': attribute type 11 has an invalid length. [ 292.830839][ T9479] netlink: 5 bytes leftover after parsing attributes in process `syz.2.792'. [ 292.839701][ T9479] netlink: 'syz.2.792': attribute type 11 has an invalid length. [ 293.613577][ T9359] coredump: 236(syz.0.753): written to core: VMAs: 40, size 101806080; core: 64226582 bytes, pos 101814272 [ 293.754427][ T9496] can: request_module (can-proto-4) failed. [ 294.897662][ T9520] coredump: 139(syz.2.799): written to core: VMAs: 6, size 4460544; core: 4213626 bytes, pos 4464640 [ 294.968482][ T9521] coredump: 140(syz.2.799): written to core: VMAs: 6, size 4460544; core: 4213626 bytes, pos 4464640 [ 297.274348][ T9571] svc: failed to register nfsdv3 RPC service (errno 111). [ 297.293877][ T9571] svc: failed to register nfsaclv3 RPC service (errno 512). [ 299.219327][ T9635] netlink: zone id is out of range [ 299.255210][ T9635] netlink: zone id is out of range [ 299.269277][ T9635] netlink: zone id is out of range [ 299.309619][ T9635] netlink: set zone limit has 4 unknown bytes [ 299.604197][ T9647] netlink: zone id is out of range [ 299.674668][ T9647] netlink: zone id is out of range [ 299.679857][ T9647] netlink: zone id is out of range [ 299.879985][ T9647] netlink: zone id is out of range [ 299.940318][ T9647] netlink: zone id is out of range [ 299.945502][ T9647] netlink: zone id is out of range [ 299.961169][ T9659] delete_channel: no stack [ 299.973626][ T9660] coredump: 190(syz.2.834): coredump has not been created, error -13 [ 301.891349][ T9494] coredump: 267(syz.0.790): written to core: VMAs: 38, size 101806080; core: 64238758 bytes, pos 101814272 [ 302.235366][ T9635] coredump: 176(syz.1.828): interrupted: fatal signal pending [ 302.260275][ T9635] coredump: 176(syz.1.828): written to core: VMAs: 39, size 101806080; core: 48949595 bytes, pos 86523904 [ 302.729287][ T9663] coredump: 191(syz.2.835): written to core: VMAs: 36, size 97611776; core: 60154346 bytes, pos 97624064 [ 303.846411][ T9691] syz.2.840(9691): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 303.985566][ T9693] netlink: 217 bytes leftover after parsing attributes in process `syz.1.844'. [ 304.946886][ T9200] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.418170][ T9200] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.643882][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.653305][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.669785][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.679102][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 305.689273][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 305.698175][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.056328][ T9200] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.353226][ T9200] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.577755][ T9706] chnl_net:caif_netlink_parms(): no params data found [ 306.840574][ T9200] bridge_slave_1: left allmulticast mode [ 306.846283][ T9200] bridge_slave_1: left promiscuous mode [ 306.889207][ T9200] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.027868][ T9200] bridge_slave_0: left allmulticast mode [ 307.035635][ T9200] bridge_slave_0: left promiscuous mode [ 307.056277][ T9200] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.401487][ T9696] coredump: 189(syz.1.846): interrupted: fatal signal pending [ 307.414912][ T9696] coredump: 189(syz.1.846): written to core: VMAs: 39, size 101806080; core: 15853866 bytes, pos 16478208 [ 307.450415][ T9696] syz.1.846 (9696) used greatest stack depth: 19584 bytes left [ 307.713642][ T9587] coredump: 290(syz.0.816): written to core: VMAs: 33, size 97345536; core: 60011406 bytes, pos 97353728 [ 307.750314][ T53] Bluetooth: hci3: command tx timeout [ 308.366131][ T9633] coredump: 303(syz.0.826): written to core: VMAs: 47, size 94334976; core: 56202954 bytes, pos 94343168 [ 308.396076][ T9737] netlink: 'syz.1.858': attribute type 11 has an invalid length. [ 308.664887][ T9200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.851919][ T9200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.885696][ T9200] bond0 (unregistering): Released all slaves [ 309.188415][ T9706] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.202314][ T9706] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.209847][ T9706] bridge_slave_0: entered allmulticast mode [ 309.228149][ T9706] bridge_slave_0: entered promiscuous mode [ 309.397228][ T9706] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.413011][ T9706] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.443087][ T9706] bridge_slave_1: entered allmulticast mode [ 309.456695][ T9706] bridge_slave_1: entered promiscuous mode [ 309.830967][ T53] Bluetooth: hci3: command tx timeout [ 310.016036][ T9706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.047677][ T9706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.462323][ T9706] team0: Port device team_slave_0 added [ 310.488796][ T9706] team0: Port device team_slave_1 added [ 310.808530][ T9200] hsr_slave_0: left promiscuous mode [ 310.820846][ T9200] hsr_slave_1: left promiscuous mode [ 310.827075][ T9200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.840995][ T9200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.863466][ T9200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.879962][ T9200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.942822][ T9200] veth1_macvtap: left promiscuous mode [ 310.948428][ T9200] veth0_macvtap: left promiscuous mode [ 310.956497][ T9200] veth1_vlan: left promiscuous mode [ 310.980308][ T9200] veth0_vlan: left promiscuous mode [ 311.095650][ T9679] coredump: 317(syz.0.838): written to core: VMAs: 35, size 97476608; core: 62116862 bytes, pos 97484800 [ 311.684088][ T9752] syz.1.862 (9752) used greatest stack depth: 19136 bytes left [ 311.910246][ T53] Bluetooth: hci3: command tx timeout [ 312.481271][ T9200] team0 (unregistering): Port device team_slave_1 removed [ 312.575383][ T9200] team0 (unregistering): Port device team_slave_0 removed [ 313.929061][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.964499][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.000651][ T53] Bluetooth: hci3: command tx timeout [ 314.030971][ T9706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.221394][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.228416][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.324837][ T9706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.473119][ T9706] hsr_slave_0: entered promiscuous mode [ 314.530250][ T9706] hsr_slave_1: entered promiscuous mode [ 315.811327][ T9706] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 315.837627][ T9706] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 315.872201][ T9706] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 315.914841][ T9706] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 316.185450][ T9706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.253327][ T9706] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.286861][ T9200] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.294079][ T9200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.335320][ T9197] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.342477][ T9197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.478014][ T9706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 316.529832][ T9706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.798831][ T9804] could not allocate digest TFM handle [ 317.158525][ T9706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.291980][ T9706] veth0_vlan: entered promiscuous mode [ 317.325562][ T9706] veth1_vlan: entered promiscuous mode [ 317.449505][ T9706] veth0_macvtap: entered promiscuous mode [ 317.480683][ T9706] veth1_macvtap: entered promiscuous mode [ 317.531642][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.569815][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.611235][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.644494][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.670033][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.699987][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.748592][ T9706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.788736][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.864602][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.879968][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.911278][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.941427][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.974885][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.002377][ T9706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.043766][ T9706] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.074594][ T9706] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.097845][ T9706] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.135015][ T9706] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.368460][ T9194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.397540][ T9194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.454487][ T9194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.480120][ T9194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.988360][ T9885] ptrace attach of ""[9706] was attempted by "./syz-executor exec"[9885] [ 320.939136][ T5247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.951781][ T5247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.961559][ T5247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.972997][ T9160] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.987827][ T5247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.998561][ T5247] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 321.008747][ T5247] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 321.565205][ T9160] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.945263][ T9160] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.082130][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.088701][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.495920][ T9898] coredump: 359(syz.0.879): interrupted: fatal signal pending [ 322.512325][ T9160] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.546134][ T9898] coredump: 359(syz.0.879): written to core: VMAs: 37, size 93675520; core: 41128438 bytes, pos 78794752 [ 322.774777][ T9917] chnl_net:caif_netlink_parms(): no params data found [ 323.076245][ T9808] coredump: 343(syz.0.869): written to core: VMAs: 34, size 80703488; core: 60142578 bytes, pos 80711680 [ 323.119940][ T5247] Bluetooth: hci3: command tx timeout [ 323.510694][ T9160] bridge_slave_1: left allmulticast mode [ 323.516404][ T9160] bridge_slave_1: left promiscuous mode [ 323.529771][ T9160] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.567661][ T9160] bridge_slave_0: left allmulticast mode [ 323.579723][ T9160] bridge_slave_0: left promiscuous mode [ 323.585522][ T9160] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.276668][ T9812] coredump: 222(syz.1.870): written to core: VMAs: 33, size 80568320; core: 60007310 bytes, pos 80576512 [ 324.284504][ T9815] coredump: 223(syz.1.870): written to core: VMAs: 34, size 97345536; core: 60019672 bytes, pos 97361920 [ 325.200304][ T5247] Bluetooth: hci3: command tx timeout [ 325.814629][ T9160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.839604][ T9160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.902582][ T9160] bond0 (unregistering): Released all slaves [ 325.948325][ T9917] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.964545][ T9917] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.985866][ T9917] bridge_slave_0: entered allmulticast mode [ 326.001067][ T9917] bridge_slave_0: entered promiscuous mode [ 326.056689][ T9917] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.084531][ T9917] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.099958][ T9917] bridge_slave_1: entered allmulticast mode [ 326.109949][ T9917] bridge_slave_1: entered promiscuous mode [ 326.485276][ T9917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.536648][ T9917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.613978][ T9976] __kmem_cache_create_args(nfsd_file) failed with error -22 [ 326.639838][ T9976] CPU: 1 UID: 0 PID: 9976 Comm: syz.0.896 Not tainted 6.11.0-syzkaller-05778-g176000734ee2 #0 [ 326.650246][ T9976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.660346][ T9976] Call Trace: [ 326.663659][ T9976] [ 326.666633][ T9976] dump_stack_lvl+0x16c/0x1f0 [ 326.671409][ T9976] __kmem_cache_create_args+0x130/0x3c0 [ 326.677104][ T9976] nfsd_file_cache_init+0x126/0x4d0 [ 326.682384][ T9976] ? net_generic+0xf4/0x2a0 [ 326.686940][ T9976] nfsd_svc+0x542/0x970 [ 326.691157][ T9976] nfsd_nl_threads_set_doit+0x52c/0xbc0 [ 326.696769][ T9976] genl_family_rcv_msg_doit+0x202/0x2f0 [ 326.702387][ T9976] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 326.708627][ T9976] ? bpf_lsm_capable+0x9/0x10 [ 326.713371][ T9976] ? security_capable+0x7e/0x260 [ 326.718369][ T9976] genl_rcv_msg+0x565/0x800 [ 326.722939][ T9976] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.728026][ T9976] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 326.734171][ T9976] netlink_rcv_skb+0x165/0x410 [ 326.738971][ T9976] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.744053][ T9976] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.749400][ T9976] ? down_read+0xc9/0x330 [ 326.753769][ T9976] ? __pfx_down_read+0x10/0x10 [ 326.758581][ T9976] ? netlink_deliver_tap+0x1ae/0xcf0 [ 326.763902][ T9976] genl_rcv+0x28/0x40 [ 326.767919][ T9976] netlink_unicast+0x53c/0x7f0 [ 326.772835][ T9976] ? __pfx_netlink_unicast+0x10/0x10 [ 326.778152][ T9976] ? __phys_addr_symbol+0x30/0x80 [ 326.783207][ T9976] ? __check_object_size+0x497/0x720 [ 326.788525][ T9976] netlink_sendmsg+0x8b8/0xd70 [ 326.793327][ T9976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.798657][ T9976] ____sys_sendmsg+0x9ae/0xb40 [ 326.803453][ T9976] ? copy_msghdr_from_user+0x10b/0x160 [ 326.808961][ T9976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.814300][ T9976] ? __pfx___lock_acquire+0x10/0x10 [ 326.819531][ T9976] ? try_to_wake_up+0xc08/0x13e0 [ 326.824527][ T9976] ___sys_sendmsg+0x135/0x1e0 [ 326.829233][ T9976] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.834460][ T9976] ? find_held_lock+0x2d/0x110 [ 326.839261][ T9976] ? __pfx_futex_wake+0x10/0x10 [ 326.844147][ T9976] ? __pfx___lock_acquire+0x10/0x10 [ 326.849425][ T9976] ? __fget_light+0x173/0x210 [ 326.854141][ T9976] __sys_sendmsg+0x117/0x1f0 [ 326.858758][ T9976] ? __pfx___sys_sendmsg+0x10/0x10 [ 326.863981][ T9976] ? __x64_sys_futex+0x1e1/0x4c0 [ 326.868971][ T9976] do_syscall_64+0xcd/0x250 [ 326.873512][ T9976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.879431][ T9976] RIP: 0033:0x7f48a3d7def9 [ 326.883871][ T9976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.903497][ T9976] RSP: 002b:00007f48a4b67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.911935][ T9976] RAX: ffffffffffffffda RBX: 00007f48a3f35f80 RCX: 00007f48a3d7def9 [ 326.919919][ T9976] RDX: 0000000000000004 RSI: 0000000020000280 RDI: 0000000000000003 [ 326.927905][ T9976] RBP: 00007f48a3df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 326.935899][ T9976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.943891][ T9976] R13: 0000000000000000 R14: 00007f48a3f35f80 R15: 00007ffc8ae307b8 [ 326.951909][ T9976] [ 327.051799][ T9976] nfsd: unable to create nfsd_file_slab [ 327.102447][ T9917] team0: Port device team_slave_0 added [ 327.112541][ T9917] team0: Port device team_slave_1 added [ 327.269917][ T53] Bluetooth: hci3: command tx timeout [ 327.411760][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.418770][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.478291][ T9917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.521161][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.534687][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.575423][ T9917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.853316][ T9917] hsr_slave_0: entered promiscuous mode [ 327.960163][ T9917] hsr_slave_1: entered promiscuous mode [ 328.029916][ T9917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.046950][ T9917] Cannot create hsr debugfs directory [ 328.197514][ T9160] hsr_slave_0: left promiscuous mode [ 328.308215][ T9160] hsr_slave_1: left promiscuous mode [ 328.446997][ T9160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.468275][ T9160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.528295][ T9160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.547661][ T9160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.747506][ T9160] veth1_macvtap: left promiscuous mode [ 328.762962][ T9160] veth0_macvtap: left promiscuous mode [ 328.780583][ T9160] veth1_vlan: left promiscuous mode [ 328.791087][ T9160] veth0_vlan: left promiscuous mode [ 329.028697][ T9368] syz.3.761 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 329.173695][ T9368] CPU: 0 UID: 0 PID: 9368 Comm: syz.3.761 Not tainted 6.11.0-syzkaller-05778-g176000734ee2 #0 [ 329.184027][ T9368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 329.194125][ T9368] Call Trace: [ 329.197440][ T9368] [ 329.200412][ T9368] dump_stack_lvl+0x16c/0x1f0 [ 329.205157][ T9368] dump_header+0x101/0x900 [ 329.209746][ T9368] oom_kill_process+0x270/0xa60 [ 329.214666][ T9368] out_of_memory+0x343/0x16b0 [ 329.219406][ T9368] ? mutex_trylock+0x100/0x140 [ 329.224239][ T9368] ? __pfx_out_of_memory+0x10/0x10 [ 329.229414][ T9368] ? find_held_lock+0x2d/0x110 [ 329.234241][ T9368] mem_cgroup_out_of_memory+0x207/0x270 [ 329.239861][ T9368] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 329.246000][ T9368] ? do_raw_spin_unlock+0x172/0x230 [ 329.251259][ T9368] try_charge_memcg+0x5b9/0xaf0 [ 329.256170][ T9368] ? __pfx_try_charge_memcg+0x10/0x10 [ 329.261718][ T9368] ? get_mem_cgroup_from_mm+0x129/0x5f0 [ 329.267345][ T9368] __mem_cgroup_charge+0x99/0x270 [ 329.272451][ T9368] shmem_alloc_and_add_folio+0x214/0xce0 [ 329.278146][ T9368] ? filemap_get_entry+0x1b2/0x3c0 [ 329.281052][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 329.283301][ T9368] ? __pfx_filemap_get_entry+0x10/0x10 [ 329.294784][ T9368] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 329.301014][ T9368] ? shmem_allowable_huge_orders+0x2c9/0x340 [ 329.307140][ T9368] shmem_get_folio_gfp+0xa62/0x15e0 [ 329.312392][ T9368] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 329.318088][ T9368] ? filemap_map_pages+0xeb0/0x1440 [ 329.323355][ T9368] shmem_fault+0x1ff/0xae0 [ 329.327829][ T9368] ? __pfx_shmem_fault+0x10/0x10 [ 329.333000][ T9368] ? __handle_mm_fault+0x3a8e/0x5470 [ 329.338331][ T9368] ? __pfx_lock_release+0x10/0x10 [ 329.343422][ T9368] __do_fault+0x10a/0x490 [ 329.347897][ T9368] __handle_mm_fault+0x3b47/0x5470 [ 329.353172][ T9368] ? __pfx___handle_mm_fault+0x10/0x10 [ 329.358695][ T9368] ? follow_page_pte+0x3dc/0x1cf0 [ 329.363812][ T9368] handle_mm_fault+0x498/0xa60 [ 329.368660][ T9368] __get_user_pages+0x475/0x15c0 [ 329.373701][ T9368] ? __pfx___get_user_pages+0x10/0x10 [ 329.379146][ T9368] ? down_read_killable+0xcc/0x380 [ 329.379994][ T53] Bluetooth: hci3: command tx timeout [ 329.384305][ T9368] ? __pfx_down_read_killable+0x10/0x10 [ 329.395294][ T9368] ? shmem_file_write_iter+0xcf/0x140 [ 329.400731][ T9368] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 329.406602][ T9368] ? __kernel_write_iter+0x59f/0xa80 [ 329.411993][ T9368] get_dump_page+0xfb/0x220 [ 329.416571][ T9368] ? __pfx_get_dump_page+0x10/0x10 [ 329.421758][ T9368] ? __pfx_dump_interrupted+0x10/0x10 [ 329.427211][ T9368] ? copy_mc_enhanced_fast_string+0xc/0x13 [ 329.433079][ T9368] dump_user_range+0x135/0x8a0 [ 329.437885][ T9368] ? __pfx_dump_user_range+0x10/0x10 [ 329.443213][ T9368] ? elf_coredump_extra_notes_write+0xba/0x4f0 [ 329.449444][ T9368] ? __pfx_writenote+0x10/0x10 [ 329.454275][ T9368] elf_core_dump+0x2837/0x3db0 [ 329.459109][ T9368] ? __pfx_elf_core_dump+0x10/0x10 [ 329.464275][ T9368] ? kasan_save_stack+0x42/0x60 [ 329.469179][ T9368] ? kasan_save_stack+0x33/0x60 [ 329.474082][ T9368] ? __kvmalloc_node_noprof+0x9d/0x1a0 [ 329.479595][ T9368] ? do_coredump+0x20c8/0x46e0 [ 329.484392][ T9368] ? get_signal+0x2393/0x27a0 [ 329.489114][ T9368] ? arch_do_signal_or_restart+0x90/0x7e0 [ 329.494896][ T9368] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 329.500861][ T9368] ? hlock_class+0x4e/0x130 [ 329.505418][ T9368] ? __lock_acquire+0x163e/0x3ce0 [ 329.510548][ T9368] ? __pfx_lock_acquire+0x10/0x10 [ 329.515640][ T9368] ? __pfx_sort+0x10/0x10 [ 329.520030][ T9368] ? do_coredump+0x2c04/0x46e0 [ 329.524928][ T9368] do_coredump+0x2c04/0x46e0 [ 329.529583][ T9368] ? __pfx_do_coredump+0x10/0x10 [ 329.534568][ T9368] ? kmem_cache_free+0x15e/0x4b0 [ 329.539561][ T9368] ? get_signal+0xd77/0x27a0 [ 329.544280][ T9368] ? arch_do_signal_or_restart+0x90/0x7e0 [ 329.550149][ T9368] get_signal+0x2393/0x27a0 [ 329.554814][ T9368] ? __pfx_get_signal+0x10/0x10 [ 329.559761][ T9368] ? force_sig_fault+0xad/0xf0 [ 329.564573][ T9368] ? __pfx_force_sig_fault+0x10/0x10 [ 329.569912][ T9368] arch_do_signal_or_restart+0x90/0x7e0 [ 329.575528][ T9368] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 329.581760][ T9368] ? spurious_kernel_fault+0x2f4/0x3c0 [ 329.587397][ T9368] irqentry_exit_to_user_mode+0x13f/0x280 [ 329.593184][ T9368] asm_exc_page_fault+0x26/0x30 [ 329.598105][ T9368] RIP: 0033:0x7fe144f7df01 [ 329.602563][ T9368] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 329.622233][ T9368] RSP: 002b:fffffffeffffffff EFLAGS: 00010217 [ 329.628357][ T9368] RAX: 0000000000000000 RBX: 00007fe145136058 RCX: 00007fe144f7def9 [ 329.636376][ T9368] RDX: 0000000000000000 RSI: fffffffeffffffff RDI: 0000000000002434 [ 329.644392][ T9368] RBP: 00007fe144ff0b76 R08: 0000000000000005 R09: 0000000000000000 [ 329.652401][ T9368] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 329.660448][ T9368] R13: 0000000000000000 R14: 00007fe145136058 R15: 00007ffdb5f4ac98 [ 329.668509][ T9368] [ 329.727736][ T9368] memory: usage 307200kB, limit 307200kB, failcnt 15501 [ 329.772605][ T9368] memory+swap: usage 427736kB, limit 9007199254740988kB, failcnt 0 [ 329.787682][ T9368] kmem: usage 4584kB, limit 9007199254740988kB, failcnt 0 [ 329.795413][ T9368] Memory cgroup stats for /syz3: [ 329.795855][ T9368] cache 309305344 [ 329.813759][ T9368] rss 331776 [ 329.817072][ T9368] rss_huge 0 [ 329.821089][ T9368] shmem 309092352 [ 329.824778][ T9368] mapped_file 23736320 [ 329.828878][ T9368] dirty 212992 [ 329.839764][ T9368] writeback 0 [ 329.843097][ T9368] workingset_refault_anon 3034 [ 329.848085][ T9368] workingset_refault_file 236 [ 329.869867][ T9368] swap 123428864 [ 329.873667][ T9368] swapcached 241664 [ 329.877539][ T9368] pgpgin 638151 [ 329.889725][ T9368] pgpgout 566074 [ 329.893332][ T9368] pgfault 141803 [ 329.896921][ T9368] pgmajfault 497 [ 329.908184][ T9368] inactive_anon 55087104 [ 329.919777][ T9368] active_anon 254578688 [ 329.923996][ T9368] inactive_file 212992 [ 329.928158][ T9368] active_file 0 [ 329.943771][ T9368] unevictable 0 [ 329.950034][ T9368] hierarchical_memory_limit 314572800 [ 329.959955][ T9368] hierarchical_memsw_limit 9223372036854771712 [ 329.981383][ T9368] total_cache 309305344 [ 329.985591][ T9368] total_rss 331776 [ 329.989340][ T9368] total_rss_huge 0 [ 330.008999][ T9368] total_shmem 309092352 [ 330.021589][T10048] delete_channel: no stack [ 330.026108][ T9368] total_mapped_file 23736320 [ 330.036353][ T9368] total_dirty 212992 [ 330.050838][ T9368] total_writeback 0 [ 330.054698][ T9368] total_workingset_refault_anon 3034 [ 330.070053][ T9368] total_workingset_refault_file 236 [ 330.085656][ T9368] total_swap 123428864 [ 330.104566][ T9368] total_swapcached 241664 [ 330.108963][ T9368] total_pgpgin 638151 [ 330.124555][ T9368] total_pgpgout 566074 [ 330.128671][ T9368] total_pgfault 141803 [ 330.149512][ T9368] total_pgmajfault 497 [ 330.157396][ T9368] total_inactive_anon 55087104 [ 330.180047][ T9368] total_active_anon 254578688 [ 330.184799][ T9368] total_inactive_file 212992 [ 330.189422][ T9368] total_active_file 0 [ 330.212129][ T9368] total_unevictable 0 [ 330.229714][ T9368] anon_cost 0 [ 330.233052][ T9368] file_cost 0 [ 330.245760][ T9368] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.761,pid=9368,uid=0 [ 330.288400][ T9368] Memory cgroup out of memory: Killed process 9368 (syz.3.761) total-vm:124432kB, anon-rss:628kB, file-rss:32652kB, shmem-rss:22816kB, UID:0 pgtables:240kB oom_score_adj:1000 [ 330.808546][ T9368] coredump: 190(syz.3.761): interrupted: fatal signal pending [ 330.913294][ T9368] coredump: 190(syz.3.761): written to core: VMAs: 39, size 127365120; core: 79541558 bytes, pos 117202944 [ 331.460980][T10058] svc: failed to register nfsdv3 RPC service (errno 111). [ 331.495095][T10058] svc: failed to register nfsaclv3 RPC service (errno 111). [ 331.535312][T10058] ================================================================== [ 331.543430][T10058] BUG: KASAN: slab-use-after-free in shrinker_free+0x3b7/0x430 [ 331.551039][T10058] Read of size 4 at addr ffff8880312c0e1c by task syz.0.916/10058 [ 331.558970][T10058] [ 331.561328][T10058] CPU: 0 UID: 0 PID: 10058 Comm: syz.0.916 Not tainted 6.11.0-syzkaller-05778-g176000734ee2 #0 [ 331.571702][T10058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 331.581801][T10058] Call Trace: [ 331.585113][T10058] [ 331.588083][T10058] dump_stack_lvl+0x116/0x1f0 [ 331.592838][T10058] print_report+0xc3/0x620 [ 331.597322][T10058] ? __virt_addr_valid+0x5e/0x590 [ 331.602415][T10058] ? __phys_addr+0xc6/0x150 [ 331.606974][T10058] kasan_report+0xd9/0x110 [ 331.611457][T10058] ? shrinker_free+0x3b7/0x430 [ 331.616289][T10058] ? shrinker_free+0x3b7/0x430 [ 331.621115][T10058] shrinker_free+0x3b7/0x430 [ 331.625782][T10058] nfsd_file_cache_shutdown+0xbc/0x480 [ 331.631323][T10058] nfsd_svc+0x6d4/0x970 [ 331.635533][T10058] nfsd_nl_threads_set_doit+0x52c/0xbc0 [ 331.641146][T10058] genl_family_rcv_msg_doit+0x202/0x2f0 [ 331.646760][T10058] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 331.652902][T10058] ? bpf_lsm_capable+0x9/0x10 [ 331.657645][T10058] ? security_capable+0x7e/0x260 [ 331.662638][T10058] genl_rcv_msg+0x565/0x800 [ 331.667203][T10058] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.672287][T10058] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 331.678416][T10058] netlink_rcv_skb+0x165/0x410 [ 331.683233][T10058] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.688312][T10058] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.693666][T10058] ? down_read+0xc9/0x330 [ 331.698056][T10058] ? __pfx_down_read+0x10/0x10 [ 331.702919][T10058] ? netlink_deliver_tap+0x1ae/0xcf0 [ 331.708258][T10058] genl_rcv+0x28/0x40 [ 331.712309][T10058] netlink_unicast+0x53c/0x7f0 [ 331.717139][T10058] ? __pfx_netlink_unicast+0x10/0x10 [ 331.722485][T10058] ? __phys_addr_symbol+0x30/0x80 [ 331.727560][T10058] ? __check_object_size+0x497/0x720 [ 331.732903][T10058] netlink_sendmsg+0x8b8/0xd70 [ 331.737738][T10058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.743077][T10058] ____sys_sendmsg+0x9ae/0xb40 [ 331.747896][T10058] ? copy_msghdr_from_user+0x10b/0x160 [ 331.753433][T10058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.758804][T10058] ? try_to_wake_up+0xc08/0x13e0 [ 331.763827][T10058] ___sys_sendmsg+0x135/0x1e0 [ 331.768556][T10058] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.773809][T10058] ? __pfx_futex_wake+0x10/0x10 [ 331.778734][T10058] ? __fget_light+0x173/0x210 [ 331.783483][T10058] __sys_sendmsg+0x117/0x1f0 [ 331.788112][T10058] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.793271][T10058] ? __x64_sys_futex+0x1e1/0x4c0 [ 331.798632][T10058] do_syscall_64+0xcd/0x250 [ 331.803200][T10058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.809144][T10058] RIP: 0033:0x7f48a3d7def9 [ 331.813683][T10058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.833341][T10058] RSP: 002b:00007f48a4b46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.841828][T10058] RAX: ffffffffffffffda RBX: 00007f48a3f36058 RCX: 00007f48a3d7def9 [ 331.849837][T10058] RDX: 0000000000000004 RSI: 0000000020000280 RDI: 0000000000000000 [ 331.857841][T10058] RBP: 00007f48a3df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 331.865850][T10058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.873871][T10058] R13: 0000000000000000 R14: 00007f48a3f36058 R15: 00007ffc8ae307b8 [ 331.881904][T10058] [ 331.884956][T10058] [ 331.887309][T10058] Allocated by task 9197: [ 331.891664][T10058] kasan_save_stack+0x33/0x60 [ 331.896431][T10058] kasan_save_track+0x14/0x30 [ 331.901169][T10058] __kasan_kmalloc+0xaa/0xb0 [ 331.905835][T10058] addr_event.part.0+0x7b/0x4f0 [ 331.910736][T10058] inet6addr_event+0x165/0x1e0 [ 331.915547][T10058] notifier_call_chain+0xb9/0x410 [ 331.920625][T10058] atomic_notifier_call_chain+0x71/0x1c0 [ 331.926311][T10058] ipv6_add_addr+0x13f5/0x2060 [ 331.931122][T10058] addrconf_add_linklocal+0x2a6/0x620 [ 331.936543][T10058] addrconf_addr_gen+0x37b/0x3d0 [ 331.941539][T10058] addrconf_init_auto_addrs+0x446/0x820 [ 331.947147][T10058] addrconf_notify+0x6e2/0x19c0 [ 331.952052][T10058] notifier_call_chain+0xb9/0x410 [ 331.957210][T10058] call_netdevice_notifiers_info+0xbe/0x140 [ 331.963152][T10058] netdev_state_change+0x115/0x150 [ 331.968309][T10058] linkwatch_do_dev+0x12b/0x160 [ 331.973203][T10058] __linkwatch_run_queue+0x233/0x690 [ 331.978530][T10058] linkwatch_event+0x8f/0xc0 [ 331.983169][T10058] process_one_work+0x958/0x1b30 [ 331.988159][T10058] worker_thread+0x6c8/0xf00 [ 331.992825][T10058] kthread+0x2c1/0x3a0 [ 331.996936][T10058] ret_from_fork+0x45/0x80 [ 332.001860][T10058] ret_from_fork_asm+0x1a/0x30 [ 332.006686][T10058] [ 332.009124][T10058] Freed by task 9194: [ 332.013143][T10058] kasan_save_stack+0x33/0x60 [ 332.017876][T10058] kasan_save_track+0x14/0x30 [ 332.022602][T10058] kasan_save_free_info+0x3b/0x60 [ 332.027689][T10058] __kasan_slab_free+0x51/0x70 [ 332.032506][T10058] kfree+0x158/0x4b0 [ 332.036452][T10058] process_one_work+0x958/0x1b30 [ 332.041480][T10058] worker_thread+0x6c8/0xf00 [ 332.046133][T10058] kthread+0x2c1/0x3a0 [ 332.050277][T10058] ret_from_fork+0x45/0x80 [ 332.054752][T10058] ret_from_fork_asm+0x1a/0x30 [ 332.059573][T10058] [ 332.061919][T10058] Last potentially related work creation: [ 332.067654][T10058] kasan_save_stack+0x33/0x60 [ 332.072381][T10058] __kasan_record_aux_stack+0xba/0xd0 [ 332.077843][T10058] insert_work+0x36/0x230 [ 332.082313][T10058] __queue_work+0x3f8/0x1070 [ 332.086958][T10058] queue_work_on+0x11a/0x140 [ 332.091614][T10058] addr_event.part.0+0x341/0x4f0 [ 332.096601][T10058] inet6addr_event+0x165/0x1e0 [ 332.101414][T10058] notifier_call_chain+0xb9/0x410 [ 332.106486][T10058] atomic_notifier_call_chain+0x71/0x1c0 [ 332.112173][T10058] ipv6_add_addr+0x13f5/0x2060 [ 332.117070][T10058] addrconf_add_linklocal+0x2a6/0x620 [ 332.122498][T10058] addrconf_addr_gen+0x37b/0x3d0 [ 332.127502][T10058] addrconf_init_auto_addrs+0x446/0x820 [ 332.133117][T10058] addrconf_notify+0x6e2/0x19c0 [ 332.138023][T10058] notifier_call_chain+0xb9/0x410 [ 332.143093][T10058] call_netdevice_notifiers_info+0xbe/0x140 [ 332.149039][T10058] netdev_state_change+0x115/0x150 [ 332.154288][T10058] linkwatch_do_dev+0x12b/0x160 [ 332.159197][T10058] __linkwatch_run_queue+0x233/0x690 [ 332.164539][T10058] linkwatch_event+0x8f/0xc0 [ 332.169175][T10058] process_one_work+0x958/0x1b30 [ 332.174174][T10058] worker_thread+0x6c8/0xf00 [ 332.178817][T10058] kthread+0x2c1/0x3a0 [ 332.182923][T10058] ret_from_fork+0x45/0x80 [ 332.187406][T10058] ret_from_fork_asm+0x1a/0x30 [ 332.192227][T10058] [ 332.194582][T10058] The buggy address belongs to the object at ffff8880312c0e00 [ 332.194582][T10058] which belongs to the cache kmalloc-192 of size 192 [ 332.208673][T10058] The buggy address is located 28 bytes inside of [ 332.208673][T10058] freed 192-byte region [ffff8880312c0e00, ffff8880312c0ec0) [ 332.222423][T10058] [ 332.224773][T10058] The buggy address belongs to the physical page: [ 332.231307][T10058] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880312c0e00 pfn:0x312c0 [ 332.241418][T10058] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 332.249523][T10058] page_type: 0xfdffffff(slab) [ 332.254346][T10058] raw: 00fff00000000200 ffff88801ac413c0 ffffea00008aa1d0 ffffea0001e45b90 [ 332.262971][T10058] raw: ffff8880312c0e00 000000000010000b 00000001fdffffff 0000000000000000 [ 332.271580][T10058] page dumped because: kasan: bad access detected [ 332.278022][T10058] page_owner tracks the page as allocated [ 332.283769][T10058] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 25410804200, free_ts 25401482999 [ 332.302322][T10058] post_alloc_hook+0x2d1/0x350 [ 332.307181][T10058] get_page_from_freelist+0x1351/0x2e50 [ 332.312878][T10058] __alloc_pages_noprof+0x22b/0x23f0 [ 332.318215][T10058] alloc_pages_mpol_noprof+0x275/0x610 [ 332.323819][T10058] new_slab+0x28c/0x3f0 [ 332.328036][T10058] ___slab_alloc+0xc4d/0x1570 [ 332.332754][T10058] __slab_alloc.constprop.0+0x56/0xb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 332.338167][T10058] __kmalloc_cache_noprof+0x2c5/0x310 [ 332.343582][T10058] call_usermodehelper_setup+0x9a/0x340 [ 332.349188][T10058] kobject_uevent_env+0xde3/0x1670 [ 332.354345][T10058] param_sysfs_builtin_init+0x2b0/0x3c0 [ 332.359949][T10058] do_one_initcall+0x128/0x630 [ 332.364876][T10058] kernel_init_freeable+0x660/0xc50 [ 332.370121][T10058] kernel_init+0x1c/0x2b0 [ 332.374507][T10058] ret_from_fork+0x45/0x80 [ 332.378992][T10058] ret_from_fork_asm+0x1a/0x30 [ 332.383809][T10058] page last free pid 25 tgid 25 stack trace: [ 332.389816][T10058] free_unref_page+0x64a/0xe40 [ 332.394636][T10058] vfree+0x181/0x7a0 [ 332.398598][T10058] delayed_vfree_work+0x56/0x70 [ 332.403509][T10058] process_one_work+0x958/0x1b30 [ 332.408506][T10058] worker_thread+0x6c8/0xf00 [ 332.413147][T10058] kthread+0x2c1/0x3a0 [ 332.417258][T10058] ret_from_fork+0x45/0x80 [ 332.421746][T10058] ret_from_fork_asm+0x1a/0x30 [ 332.426572][T10058] [ 332.428919][T10058] Memory state around the buggy address: [ 332.434576][T10058] ffff8880312c0d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.442679][T10058] ffff8880312c0d80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 332.450769][T10058] >ffff8880312c0e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.458853][T10058] ^ [ 332.463745][T10058] ffff8880312c0e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 332.471842][T10058] ffff8880312c0f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.479947][T10058] ================================================================== [ 332.668407][T10046] coredump: 283(syz.1.913): interrupted: fatal signal pending [ 332.689869][T10046] coredump: 283(syz.1.913): written to core: VMAs: 33, size 80568320; core: 59980370 bytes, pos 80547840 [ 332.706599][T10058] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 332.713836][T10058] CPU: 1 UID: 0 PID: 10058 Comm: syz.0.916 Not tainted 6.11.0-syzkaller-05778-g176000734ee2 #0 [ 332.724203][T10058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 332.734290][T10058] Call Trace: [ 332.737587][T10058] [ 332.740539][T10058] dump_stack_lvl+0x3d/0x1f0 [ 332.745179][T10058] panic+0x70f/0x7f0 [ 332.749123][T10058] ? __pfx_panic+0x10/0x10 [ 332.753589][T10058] ? preempt_schedule_thunk+0x1a/0x30 [ 332.758996][T10058] ? preempt_schedule_common+0x44/0xc0 [ 332.764503][T10058] check_panic_on_warn+0xab/0xb0 [ 332.769496][T10058] end_report+0x117/0x180 [ 332.773961][T10058] kasan_report+0xe9/0x110 [ 332.778530][T10058] ? shrinker_free+0x3b7/0x430 [ 332.783341][T10058] ? shrinker_free+0x3b7/0x430 [ 332.788153][T10058] shrinker_free+0x3b7/0x430 [ 332.792967][T10058] nfsd_file_cache_shutdown+0xbc/0x480 [ 332.798485][T10058] nfsd_svc+0x6d4/0x970 [ 332.802679][T10058] nfsd_nl_threads_set_doit+0x52c/0xbc0 [ 332.808274][T10058] genl_family_rcv_msg_doit+0x202/0x2f0 [ 332.813881][T10058] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 332.820011][T10058] ? bpf_lsm_capable+0x9/0x10 [ 332.824753][T10058] ? security_capable+0x7e/0x260 [ 332.829741][T10058] genl_rcv_msg+0x565/0x800 [ 332.834297][T10058] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.839391][T10058] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 332.845514][T10058] netlink_rcv_skb+0x165/0x410 [ 332.850324][T10058] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.855409][T10058] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.860751][T10058] ? down_read+0xc9/0x330 [ 332.865135][T10058] ? __pfx_down_read+0x10/0x10 [ 332.869940][T10058] ? netlink_deliver_tap+0x1ae/0xcf0 [ 332.875356][T10058] genl_rcv+0x28/0x40 [ 332.879382][T10058] netlink_unicast+0x53c/0x7f0 [ 332.884205][T10058] ? __pfx_netlink_unicast+0x10/0x10 [ 332.889556][T10058] ? __phys_addr_symbol+0x30/0x80 [ 332.894628][T10058] ? __check_object_size+0x497/0x720 [ 332.899963][T10058] netlink_sendmsg+0x8b8/0xd70 [ 332.904781][T10058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.910121][T10058] ____sys_sendmsg+0x9ae/0xb40 [ 332.914942][T10058] ? copy_msghdr_from_user+0x10b/0x160 [ 332.920446][T10058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.925786][T10058] ? try_to_wake_up+0xc08/0x13e0 [ 332.930773][T10058] ___sys_sendmsg+0x135/0x1e0 [ 332.935490][T10058] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.940742][T10058] ? __pfx_futex_wake+0x10/0x10 [ 332.945655][T10058] ? __fget_light+0x173/0x210 [ 332.950404][T10058] __sys_sendmsg+0x117/0x1f0 [ 332.955050][T10058] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.960293][T10058] ? __x64_sys_futex+0x1e1/0x4c0 [ 332.965289][T10058] do_syscall_64+0xcd/0x250 [ 332.969843][T10058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.975778][T10058] RIP: 0033:0x7f48a3d7def9 [ 332.980224][T10058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.000060][T10058] RSP: 002b:00007f48a4b46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.008519][T10058] RAX: ffffffffffffffda RBX: 00007f48a3f36058 RCX: 00007f48a3d7def9 [ 333.016648][T10058] RDX: 0000000000000004 RSI: 0000000020000280 RDI: 0000000000000000 [ 333.024708][T10058] RBP: 00007f48a3df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 333.032719][T10058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.040895][T10058] R13: 0000000000000000 R14: 00007f48a3f36058 R15: 00007ffc8ae307b8 [ 333.048920][T10058] [ 333.052306][T10058] Kernel Offset: disabled [ 333.056662][T10058] Rebooting in 86400 seconds..