last executing test programs: 44.385848s ago: executing program 3 (id=3433): socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) shmget$auto(0xffffffffffffffff, 0xb0d, 0xa7db6ba) socket(0x2, 0x6, 0x7) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x541b, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f0000000300)={0x0, 0xe, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000076d8d0322660e46a", @ANYRES16=r1, @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x9, &(0x7f0000000100)=@prog_bind_map={0x7, 0x0, 0x8}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) open(0x0, 0x109001, 0x121) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) connect$auto(0x3, 0x0, 0x55) fchown$auto(0x0, 0x8000000000000000, 0x0) semctl$auto(0x0, 0x2, 0x8, 0x5) socket(0x2b, 0x5, 0x1004) socket(0xa, 0x3, 0x6) socket(0xa, 0x2, 0x0) socket(0x11, 0x2, 0x300) 41.266804239s ago: executing program 3 (id=3435): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_HSR(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\b\x00\x00', @ANYRES16=r2, @ANYRESOCT=r1, @ANYRES8=r3, @ANYBLOB], 0x28}}, 0x4000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) getsockopt$auto(0xe, 0x5, 0xdc10, &(0x7f0000000180)='\xa7,\x00', &(0x7f0000000280)=0x8) (async, rerun: 64) mmap$auto(0x9, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) clone$auto(0xfffffffefffffffd, 0x80000000009, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) kill$auto(0x1, 0x21) (async) read$auto(0x3, 0x0, 0x4c0) (async) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000400f95ac3e5fed80f1c79fcbb14959ef7ff6dc1f8c3dceb90b99d3c44346251fc1de9815848eb3290c92c07b7ff6f74f18b2c027b4b6a6a62fa389d48c3ab5b0af443bd50b4090425ff4069ffa3e3376c14d6fc61e2d7f800b24b", @ANYRES16=r4, @ANYBLOB="010329bd7000ffdbdf250a00000008000a0001000100"], 0x1c}, 0x1, 0x0, 0x0, 0xe0db2389416cc6ce}, 0xc040810) pidfd_open$auto(0x1, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (async) close_range$auto(0x7, 0xffffffffbffffff8, 0x2) (async) read$auto(0x25, &(0x7f0000000040)='\x00', 0x101) (async) r5 = open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x10c) (async) fallocate$auto(0x8000000000000003, 0x0, 0x1000, 0x1) socket(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket(0x1e, 0x1, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap$auto(0x80000000000800, 0x9, 0xe2, 0x17, 0xffffffffffffffff, 0x7fff) (async) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) (async) r6 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_ECHOREQ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r5, @ANYRES16=r6], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x401) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) 40.028549932s ago: executing program 1 (id=3385): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) madvise$auto(0x9, 0xffffffffffff0003, 0x9) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 39.925666592s ago: executing program 3 (id=3438): mount$auto(&(0x7f0000000000)='\x00', &(0x7f0000000040)='.{\x00', &(0x7f0000000080)='\'@-\x00', 0x7, &(0x7f00000000c0)="86205259e581da09a5db057ea79a40343f93a30d72e04de058d67aa641a7f63f") chdir$auto(&(0x7f0000000100)='\'@-\x00') mount$auto(&(0x7f0000000140)='!\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='h&%:\\/$-/$$\x00', 0xfffffffffffffffe, &(0x7f0000000200)="d64da4062d7bd0a819ae8f80f4b40a76424c117b43426788266494ed0c2f3ec80c7e19499532991e8ece32c756e955533ebdb1a635c68753bd4e8aa5cac0f136f77995d9de13727ccf2336acf3fd55f347b054548c0a5ae08a74284317d132abdecdc2803c6b868386c398b11f329820c1b7788f13a79bede03a7a0e6a12394bd71e5a2f6e462cc57f9f8f787a4b91f1f85365efbf64b1edf23a3f4834aec3639046f348e08fe6bdbdafa93c371aa444fe15161c0faa9f065129ad5a02976897dd96880ab4db36f98e6d2842f0c4b0b258899c579598") chdir$auto(&(0x7f0000000300)='h&%:\\/$-/$$\x00') chdir$auto(&(0x7f0000000340)='\x00') mbind$auto(0x9, 0xfff, 0x9, &(0x7f0000000380)=0x2, 0x4, 0x4) quotactl_fd$auto(0x6a4c, 0x7fffffff, 0xf, &(0x7f00000003c0)="1d769d76cb0daf5cbe9d28ec16b356d44ca34c10ffc0a3cdc6bbf34934b6472032fd5938a3f33a129208965b438992ccce50a35babcdfe0ebb039932d111b4aeb4211f1d89f06886ccb081ec03916994415f2aff3e50959a77f2cc6cf932f54cf52fb186c2f7804e2756636920c75d35e46d11423b93bb9295ba8c31299c37f253c77ee1a0c30d4e5c7b68307e47e6dbbc16a8affc03a2e71980b5e28e598b55685e6512e8daa58cf00ee219476abdf2378e0918") prctl$auto(0xc, 0xffffffffffffffff, 0x8, 0x1, 0x1) futex_waitv$auto(&(0x7f0000000480)={0x3fb, 0x85e, 0x4, 0x401}, 0x9, 0xff, &(0x7f00000004c0)={0x6, 0x5}, 0x2) getsockopt$auto(0x2, 0xcbe9e4, 0x1, &(0x7f0000000500)='\x00', &(0x7f0000000540)=0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0xebd}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0xb}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x2}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) timer_delete$auto(0x7ff) chdir$auto(&(0x7f00000006c0)='IOAM6\x00') mmap$auto(0x2, 0x5, 0x1700, 0xfffffffffffffffd, 0x7fffffff, 0x4) getsockopt$auto(0x2, 0x0, 0xfff, &(0x7f0000000700)='\x00', &(0x7f0000000740)=0x6) getsockopt$auto(0x4, 0x505c, 0x4, &(0x7f0000000780)=',]\\^#.-\\+[\x00', &(0x7f00000007c0)=0x5) prctl$auto(0xf, 0x7, 0x8, 0x8, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) quotactl_fd$auto(0x3, 0x1000, 0x8, &(0x7f0000000800)) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000880), r2) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xdc, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_SSID={0xb, 0x34, "ed819eb4b08a2f"}, @NL80211_ATTR_MAC_ADDRS={0x46, 0xa6, "e797bbfc1727f9ff923b2f19492140b93b2052a3010a1638c4e5980adafe1ab5fb8604056da66291d7e4135c53d9da2487b18a1d8d87a423643d15eff1006a5e9ee7"}, @NL80211_ATTR_PMK={0x23, 0xfe, "7a8b0201ca9757b6c9396f8c03e9abfd78ffe73b63ac3a923e4eeb2d938e1c"}, @NL80211_ATTR_KEY={0x48, 0x50, "07461861db1488d7ce1aeff43667590f659e9711868b8396f47fce25cef2dd84cdcff2d5983797ccc1cde4594357307067be2cbdd6f5a22b185dfc252432b08292de2f45"}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}]}, 0xdc}}, 0x880) r4 = syz_genetlink_get_family_id$auto_NLBL_CALIPSO(&(0x7f0000000a80), r0) sendmsg$auto_NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) writev$auto(0x8001, &(0x7f0000000c00)={&(0x7f0000000b80)="257fbaea9dee309acd7c6474a1f22a676541007c282229109a430d0295e7a1daecc7cf1b41c6f02ce639267a726869b92839e95ab66f98b7c7b8123f6e202cf03caf7e1e788e6b5d57e4a77e2b", 0x100000000}, 0x0) sendmmsg$auto(0x80000001, &(0x7f0000000ec0)={{&(0x7f0000000c40)="0dac7d11573747b46dbc78c3d706b29c4f1e608d8738a5123e637d67331053469909c9c0b12d08e576b9ebf210c037a39a1fcd39e549650883f8c443ee394677c0c7123cdfb88348a2f5378a2ec67b6fed2df1e493a1e563ea8d3b7fffd5fdb81a15f5fa9419d69ba7c933aca82f01afd30b697447cbb230c5d82416e7775b194f40f78f6c8936aaf325138c5d990085e64c58d6e239562c9125e370b40384c338fb38d3f0afe0cc692585b3ee60b47996ddcd273edcae25f593ec5925ce7e737616a4c7c44ace3d9db9da617b2eaf67d73dde1826e6cc61a98bb1", 0x800, &(0x7f0000000e40)={&(0x7f0000000d40)="007cf7d778fb2a0bf2aa05237dfc11c0e8bb8b918805b205a4bf29fb287cac0c3906d152036b3e0a20003e4734cd368eab26c23f70be435a2ebd7bd5bfab647632351d11269ee0146ea2919584375d4fcd7e53e9587e30fa57d8987eaea7a40700385a3feb51d4a88dd157fd4c4aa9315e86a81795d3bc57feb9500725c4bea661863ea742beabe7be01bb8e0fb82113f216fcc0d979b63e875e46a14179a9009a9c3573fdb41bb33713b17d72466ddef41b67a51b41d96ac259aef8912702260f1637f705747eb1f9010d3ba3"}, 0x463, &(0x7f0000000e80)="646640983ec6b901e56f16b7b6e3d09221d59e9ce5127298613c61df9ba40cfb776b1e935fc215c3756d2de34d108b0d26fb77a3a7563d7d13", 0x8, 0x1}, 0x4}, 0x10001, 0x3) epoll_create$auto(0x1) r5 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000f40), r0) sendmsg$auto_IPVS_CMD_GET_INFO(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 35.760971403s ago: executing program 3 (id=3445): mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) process_vm_readv$auto(0xd49, &(0x7f0000000340)={&(0x7f0000001480)="662959b07a6ab692d9559204427bc599e41e8d89819ce78b0c5876e6d659f6664799593f6f5332816f805118d112f30dde9c4254330ded545c05ee3661267d897a5a7ea656d97dce1fce8a503c74db89d55ba746a82cb440a2f3bcab43e31927016495b128be84b6", 0x3}, 0x61, &(0x7f00000015c0)={&(0x7f0000001500)="e2b52375ae0a6b04ba9d9c397154c61530f50177e9d3e3e60e17344043bce4f5cd97a4c929a5c5dc6fea46fdfa98743f0b00e4e4fd2b8b1d1d48a78839fa8690a7c18bd0aa1b6aeb1b64a3ef6fb9fe06876d7f42f9cc658eecc41ceeee315a2559db95ed66a13ff1ce2949208cd49e2bcfdc7641d3f5869cab9e6f627fc6c0f14d99b1510b47", 0x4}, 0xe, 0x3) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) select$auto(0x8, &(0x7f0000000240)={[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x8000, 0x4, 0x5, 0xd3b, 0x34, 0x5, 0x0, 0x5, 0x5, 0x3, 0x5]}, 0x0, 0x0, 0x0) dup2$auto(0x0, 0x4) ftruncate$auto(0x3, 0x700) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x5, 0x0, 0x3) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x1f, 0xa, 0x5) r3 = syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f00000000c0), r0) sendmsg$auto_IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0xf6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x10001) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x804) r5 = socket(0x6, 0x6, 0x8) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r2) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x1054, r6, 0xe02095bf95dc0b8a, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x5}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x9}, @NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x6}, @NL80211_ATTR_TID_CONFIG={0x11, 0x11d, "6cb62c198ad2392a81c84651a5"}, @NL80211_ATTR_MAX_NUM_AKM_SUITES={0x1004, 0x13c, "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"}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x1054}, 0x1, 0x0, 0x0, 0x4}, 0x40480c0) 35.347989728s ago: executing program 1 (id=3447): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x6, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f00000002c0), r2) sendmsg$auto_VDPA_CMD_DEV_CONFIG_GET(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x21000004}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@VDPA_ATTR_DEV_NET_CFG_MTU={0x6, 0xd, 0x7}, @VDPA_ATTR_MGMTDEV_BUS_NAME={0x5, 0x1, '\x00'}]}, 0x24}}, 0x20040004) sendmsg$auto_VDPA_CMD_DEV_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@VDPA_ATTR_DEV_QUEUE_INDEX={0x8, 0x11, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24000040) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="f51b26bd7000fedbdf2507"], 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_EEPROM_BANK={0x5, 0x5, 0x2}, @ETHTOOL_A_MODULE_EEPROM_BANK={0x5, 0x5, 0xfd}]}, 0x24}}, 0x4044045) 35.126731675s ago: executing program 1 (id=3448): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x8, &(0x7f0000000000)=@bpf_attr_7={@link_id=0x3ff, 0x2, 0x5000}, 0xc63) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x1, 0x1, 0x25, &(0x7f0000000000)='\x00', 0xbb) keyctl$auto(0x4, 0x0, 0x2, 0x8, 0xd882) 34.948978104s ago: executing program 1 (id=3450): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000180)={0xa, @sockaddr_1_1={"098976d76b8292280cd4ad8a2f184752e1f6813eb4e06e46c8951fcb6361d932f4d3839fc3b7c31d9500b7e07c0ed435befd197235db797a2fe28d5f5e571fa5e6eb4d6af0678f634676c9ad733bbab6df9288a931a3f21ee203737e7b064b58df52e9a5cb4da04e3c3f5d09a1d4e7b505fcec3a478d4167ea8ce8daa76733d68795c17dad9018ee3d233d5aa2ffa2146f25d678223b0e74e8aa469725129660de3fd9ee0b56790e79f52d6c473855ce8d2e696e2f58f6f75abb3ece"}}, 0x55) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(0x1, &(0x7f0000000080)={{0x0, 0x3ff, &(0x7f0000000040)={0x0, 0x34000}, 0x4, 0x0, 0x400000001}, 0xed7138c}, 0x4, 0x9) write$auto(0x3, 0x0, 0x81) 34.057449599s ago: executing program 2 (id=3454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01035a0000000000000002"], 0x14}, 0x1, 0x0, 0x0, 0x6004832}, 0x4010) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x3, 0x5, 0x4) mincore$auto(0x0, 0x8000000000005a, 0x0) mkdir$auto(0x0, 0x40) rmdir$auto(0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x17) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) ioctl$auto(0xc8, 0x400454d1, 0x5c8d) 34.053210433s ago: executing program 3 (id=3455): close_range$auto(0x0, 0xfffffffffffff000, 0x5) fanotify_init$auto(0x7a, 0x80000000000) rseq$auto(&(0x7f0000000000)={0xe, 0x405, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x7, 0x3, 0x930d) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x2010000000000) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') socket(0x2, 0x1, 0x106) socket(0x26, 0x80805, 0x0) fanotify_mark$auto(0x0, 0x401, 0xa, 0x4, 0x0) fanotify_mark$auto(0x0, 0x25, 0x3, 0x4, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioperm$auto(0x7, 0x6, 0x2) syncfs$auto(0x2aa60000000000) bpf$auto(0x0, 0x0, 0x331) socket(0x11, 0x80003, 0x300) ioctl$auto(0x3, 0x5411, 0xfffffffffffff4e0) arch_prctl$auto(0x1004, 0xe735) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mq_getsetattr$auto(0xfffffff2, 0x0, &(0x7f00000001c0)={0xd, 0x8, 0xff, 0x6, [0x582a, 0x7, 0x2, 0x3]}) madvise$auto(0x7, 0xcd, 0x10001) 33.885502432s ago: executing program 1 (id=3457): tkill$auto(0x80000000000001, 0x7) keyctl$auto(0x2000000000000012, 0x7fff, 0x5069, 0x1, 0x65c) (async) keyctl$auto(0x2000000000000012, 0x7fff, 0x5069, 0x1, 0x65c) tkill$auto(0x3, 0x6) 33.12163613s ago: executing program 1 (id=3461): close_range$auto(0x0, 0xffffefff, 0x6) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) open(&(0x7f0000004080)='./file0\x00', 0x40, 0x23) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mq_open$auto(0x0, 0x3, 0xc0, &(0x7f0000000040)={0xe10, 0x15af, 0x9, 0x1b, [0xe, 0xbd, 0x9, 0x8]}) quotactl$auto(0x0, &(0x7f0000000080)='$:\x00', 0x58d6, &(0x7f00000000c0)="e3d99d3caeb40510be34787a6c17cfd131f2fa01042d2c08b175f328af1a10afcd7db52759c3c767def7168893b3a6758f455882e35957a6b826fc69745fb6567f63992ebbae11c75c49d245639b4eb65216d2d5ca3b4981d7b46b866c94") close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f0000000040)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000010000c1728d2af766"}, 0x55) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) getpeername$auto(0x3, 0x0, 0x0) bpf$auto(0x4, &(0x7f0000000100)=@query={@target_ifindex, 0x6, 0xb21, 0xc, 0xffffffffffffffff, @prog_cnt=0x1, 0x0, 0xffffffffeae75901, 0x7fffffffffffffff, 0xffffffffffff7fff, 0x1}, 0xa5) getdents64$auto(0x0, 0x0, 0x2000) 32.17101299s ago: executing program 2 (id=3466): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) ioctl$auto(0x1, 0x5421, 0xa) getsockopt$auto(0x3, 0x6, 0x9, &(0x7f0000000200)=':\x00', &(0x7f0000000240)=0x9) ftruncate$auto(0x80, 0x4) 31.657079516s ago: executing program 2 (id=3469): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001200)='ns/pid\x00') open(&(0x7f0000000000)='./file0\x00', 0xa4a302, 0x1c4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000cc0), r1) sendmsg$auto_HANDSHAKE_CMD_DONE(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000640)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@HANDSHAKE_A_DONE_SOCKFD={0x8, 0x2, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 31.264001981s ago: executing program 2 (id=3470): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1c, 0x0, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x2, 0x3, &(0x7f0000000040)=0x80, 0xc3e0) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000c40), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf2503000000060009000900000006000900e92e0000120001004f1980af25430d91ee91098bd96e000004000300c1000200bd"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x80000) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000040), 0xffffffffffffffff) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) syz_open_procfs$namespace(0x0, &(0x7f00000022c0)='ns/time_for_children\x00') madvise$auto(0x1ffff000, 0x5510, 0x8) 30.148729575s ago: executing program 3 (id=3473): setresgid$auto(0x81, 0x800000a0, 0x8) socket(0x2, 0x2, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) exit$auto(0x7) unshare$auto(0x40000080) exit$auto(0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mknod$auto(&(0x7f0000000180)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e', 0x1, 0x4) acct$auto(&(0x7f0000000380)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') acct$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0xa, 0x3, 0x6) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) socket(0x15, 0x5, 0x0) bpf$auto(0x0, 0x0, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x0) bind$auto(0x7, &(0x7f0000000000)={0x2, @sa_data_min="590eac1414349774a263b19050fe"}, 0x6f) getsockopt$auto(0x3, 0xff, 0x99, 0xfffffffffffffffe, 0xfffffffffffffffd) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) socket(0x22, 0x2, 0x2) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x1e81, 0x1c003, 0x3) prctl$auto(0x9, 0x200, 0x0, 0x3, 0xc) open(0x0, 0x22240, 0x155) open(0x0, 0xa240, 0x1de) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 30.130251184s ago: executing program 2 (id=3474): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000000), r0) r1 = socket(0x22, 0x2, 0x24) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1) (async) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1) syz_genetlink_get_family_id$auto_NLBL_MGMT(&(0x7f00000014c0), r0) (async) r3 = syz_genetlink_get_family_id$auto_NLBL_MGMT(&(0x7f00000014c0), r0) sendmsg$auto_NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r2, @ANYRES8=r3, @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20008014}, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x0, 0x20, 0xfffffffffffffffe, 0x6) clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) readv$auto(0x2677e0a4, &(0x7f0000000200)={&(0x7f0000000180)="741373345845cfd23a949dd6c5ced8570a008c2cfb70e49e253ebcea2a5a7453f5bb45842cf42d8b7cf8f501af77775b99b2356bc3a89914af1d5defa41db054e6920b58b5f2551f1ef335477cf73abb426cb6ca8cabd43b046e0137124f68655bbf6278f410ea8aef6867d39fc27759a5012eeed6", 0xffffffffffff8000}, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'nr0\x00'}) clock_settime$auto(0x5, 0xfffffffffffffffd) (async) clock_settime$auto(0x5, 0xfffffffffffffffd) madvise$auto(0xec46, 0xc60, 0x9) (async) madvise$auto(0xec46, 0xc60, 0x9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x200000000010006, 0x300000000000) semctl$auto(0x1ff, 0x2, 0x13, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x0) (async) socket(0x2, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) socket(0x15, 0x5, 0x300) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) bind$auto(0x7, 0x0, 0x3e) (async) bind$auto(0x7, 0x0, 0x3e) 29.361628863s ago: executing program 2 (id=3475): socket(0x1, 0x2, 0x0) socket(0x2, 0x5, 0xa) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0xb) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x10000000000004) mmap$auto(0x0, 0x80000200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) prctl$auto(0x1000000001e, 0x80004, 0xff, 0xc, 0x7fffffffffffffff) mmap$auto(0x0, 0x8, 0x10000dd, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x8000, 0xc) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) 12.751145053s ago: executing program 0 (id=3482): mmap$auto(0x6, 0xe982, 0xe52, 0x1000000000000eb1, 0x7, 0x8000) socket(0xa, 0x3, 0x4) socket(0xa, 0x2, 0x88) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x81, 0x2, 0x5, 0x9, 0x1, 0x6, 0x5852}, 0x18) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) socket(0xa, 0x2, 0x88) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x20000c, 0x0, 0x2, 0x9, 0xd, 0x3, 0x6, 0x2, 0x9, 0x6, 0x0, 0xa, 0x3, 0x1fc, 0x8, 0x6]}, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c180) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mount_setattr$auto(0x101, 0xffffffffffffffff, 0x4, 0x0, 0x0) capget$auto(0x0, 0xfffffffffffffffe) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) syz_open_procfs$namespace(0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) accept4$auto(0x401, &(0x7f0000000000)={0x8, @sa_data_min="f8a30a78967a8fdb4db045af1689"}, &(0x7f00000000c0)=0x40, 0x2) mmap$auto(0x4, 0x20009, 0xdf, 0x40000000eb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0x4a, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) r0 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x4, 0xfffffffffffffffd, 0x0) 10.680098037s ago: executing program 0 (id=3483): futex$auto(0x0, 0x81, 0x8, 0x0, 0x0, 0xfffffe01) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x6, 0x8000000000000006, 0x2, 0x0, 0x7ffffc) syslog$auto(0x2, &(0x7f0000000000)='V/\x00', 0x41) syslog$auto(0x2, &(0x7f0000000100)=']j{\x00', 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) set_mempolicy_home_node$auto(0x8000, 0x10001, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x4) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x8, 0xf, 0x66b, 0x0, 0x5}, 0x6f4) socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, 0x3, 0x0, 0xc01) splice$auto(0x0, 0x0, 0x2, 0x0, 0x1000, 0xc) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x3, 0x8000) ioperm$auto(0x3, 0xe, 0x2000000000000149) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IEEE802154_LIST_IFACE(0xffffffffffffffff, 0x0, 0x81) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf25010000003b44d14317b321a933a3d35b5c9f4ada84851b899abaf8b92cde49c3f6b5ef2d0876a1f4f383a857dac360414529573b062605fbe9b911b4a9cbfc8e29683c1227dc0d463845103b780a652553d9cf0a9e1a8844f08bc949edde7f00d1e00a0d1a970b1099c8da5b291f2ad86f6de1bc3146a10eaaf92853817f0958cff5a64a5d76348f73f0d5e97528da66da0425865c62e83c851350ba"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x28044004) clone$auto(0x40083b42, 0x5c84, 0xfffffffffffffffe, 0x0, 0x100000000000f) setresuid$auto(0x3a, 0x7, 0x9) set_mempolicy$auto(0x2, 0x0, 0x4) mmap$auto(0x4, 0x376a, 0x200000000000002, 0x17, 0x1, 0xffffffffffffffbf) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) settimeofday$auto(&(0x7f0000000180)={0x1ed5d7403, 0x1}, 0x0) socket(0x2a, 0x2, 0x6) 1.277376306s ago: executing program 0 (id=3484): r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) adjtimex$auto(0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/pid_for_children\x00') socket(0xa, 0x3, 0x3a) mknod$auto(&(0x7f00000001c0)='\\[)-!\xe1)%.[@(&-&\x00', 0x90, 0xf) ioctl$auto(0x1, 0x890b, 0x3) setsockopt$auto(0x3, 0x29, 0x14, 0xffffffffffffffff, 0x3) setsockopt$auto(0x1, 0x780b0d0f, 0x7, &(0x7f00000000c0)='\\[)-!\xe1)%.[@(&-&\x00', 0x0) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) mknod$auto(&(0x7f0000000040)='Vq\xf4\xc4z6\xb9\x00', 0x2, 0x401) mmap$auto(0x0, 0x20009, 0x10000000000dc, 0xeb2, 0x401, 0x8000) pidfd_send_signal$auto(0x64d, 0x80000001, &(0x7f0000000100)={@siginfo_0_0={0x9, 0x5, 0x2, @_sigchld={0xd, 0x7, 0x2, 0xffffffffffffff01, 0x6}}}, 0xffff48e5) r1 = socket(0x23, 0x80805, 0x0) setsockopt$auto(0x3, 0x29, 0x7, 0xffffffffffffffff, 0x3) socket(0x28, 0x5, 0x0) r2 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000280), r1) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x240400c5) vmsplice$auto(0x10000, 0xfffffffffffffffe, 0x100, 0x8000) settimeofday$auto(&(0x7f0000000180)={0x1ed5d7403, 0x1}, 0x0) connect$auto(0x3, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) close_range$auto(0x2, 0x8000, 0x0) 904.995333ms ago: executing program 0 (id=3485): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) shutdown$auto(0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) tkill$auto(0x1, 0x9) 493.65267ms ago: executing program 0 (id=3486): ioctl$auto(0xc7, 0x400454ce, 0x5c8d) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x4, 0xfffff084, 0x6) fanotify_init$auto(0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) semctl$auto(0x204, 0x5, 0x52dd, 0x4) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) fcntl$auto(0x0, 0x24, 0x2) mmap$auto(0x2000, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) pidfd_open$auto(0x1, 0x0) pidfd_send_signal$auto(0x2, 0x4, 0x0, 0x8000006) ioctl$auto(0xfffffffe, 0xffff0074, 0xfffffffffffffffe) ioperm$auto(0x7, 0x6, 0x3) setsockopt$auto(0x2, 0x2, 0x2, &(0x7f0000000180)='\xaf\x91\xe4Y\x0fF\x00\xe8Z9\xebi\x81\xd1=\x150\xe9\x8d2\xbc.\xea\x80:\x8aU\x16\xa4=\xa2\xdfo=\a\xe7\x0ez\x8d\xb0Ko\x88\xb2\xc2R\x16\xc3\xebz\xdd\x9bN\x03G\x97!\x98\nSJ\x87\x7f@=\xdezg*\xa4\xa0\x9b\xf1;\x7f?\\\xb9\x8eI\x8e\x99\xa1\x1c\xcb\xb3\x8a\xd92b\xc9xR\xebd\xd0n&\xafj\xe4y\x1c\xad\x9aM\xbb\a>\xe9<\x11\xc9\x8a\xafI\x8fRSjT)\xe7\xfd\xc1\xcc\x96\xcc\xe7\v\x03\x95\t4g\xee\xaf\x8ff\x10\xaf?VZ!\x1f\x03\xec\x99\x88+\xadQ\x15\xa5\xb7J\x1f\xd5]\xdd\x15+H;ab;\xca\x1eY\xbe4Q\r\xe8\xd6\xb5 \xbe\x80\xddB\xd6\x91-e\x8c;i\xb5\x82L\xd4?\xa1VA5`\x05Mr\xe91\x00', 0x6) socket(0x25, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) prctl$auto(0xd, 0x5, 0x8, 0x9, 0x4fe40bc5) setreuid$auto(0x15, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x40086602, &(0x7f0000000000)={'macvtap0\x00'}) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) fchdir$auto(0xf4400000000) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x401, 0xdf, 0x9b72, 0x2, 0x8000) 0s ago: executing program 0 (id=3487): r0 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f0000000080)='./file0\x00', 0x22000, 0x50) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x6, 0x5, 0x7) r1 = socket(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8932, &(0x7f0000000280)={'ip_vti0\x00'}) sendfile$auto(0x6, 0x3, 0x0, 0x8000) exit$auto(0x5f97) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) open(0x0, 0x161342, 0x100) unshare$auto(0x40000080) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={&(0x7f0000000140), 0x400000000000fdef}, 0x1) vmsplice$auto(0x3, &(0x7f0000000080)={0x0, 0x6}, 0x9, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ustat$auto(0x6, 0xfffffffffffffffd) ioctl$auto(0x3, 0x40085400, 0x5) madvise$auto(0x0, 0x20200, 0x15) syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f00000000c0), r0) socket(0x2, 0x5, 0x0) fcntl$auto(0x0, 0x407, 0x100000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x9, 0x7, 0xffffffffffffc667, 0x16, 0x3, 0xb4de) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) syz_genetlink_get_family_id$auto_ovs_vport(0x0, r0) socket(0xa, 0x2, 0x3a) kernel console output (not intermixed with test programs): ve_0): Enslaving as an active interface with an up link [ 580.654071][T15658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.852812][T15658] team0: Port device team_slave_0 added [ 580.877243][T15658] team0: Port device team_slave_1 added [ 581.485216][T13930] Bluetooth: hci3: command tx timeout [ 581.557771][ T6663] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.645428][T15658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.652420][T15658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.699139][T15658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.747169][T15658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.754148][T15658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.855450][T15658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.110569][ T6663] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.483937][ T6663] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.958114][ T6663] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.098646][T15658] hsr_slave_0: entered promiscuous mode [ 583.205799][T15658] hsr_slave_1: entered promiscuous mode [ 583.355571][T15658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.363174][T15658] Cannot create hsr debugfs directory [ 583.565478][T13930] Bluetooth: hci3: command tx timeout [ 584.126923][ T6663] bridge_slave_1: left allmulticast mode [ 584.132618][ T6663] bridge_slave_1: left promiscuous mode [ 584.138944][ T6663] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.275920][ T6663] bridge_slave_0: left allmulticast mode [ 584.296243][ T6663] bridge_slave_0: left promiscuous mode [ 584.301999][ T6663] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.645167][T13930] Bluetooth: hci3: command tx timeout [ 586.238601][ T6663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.295121][ T6663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.361007][ T6663] bond0 (unregistering): Released all slaves [ 587.725233][T13930] Bluetooth: hci3: command tx timeout [ 588.173094][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 588.183094][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 588.197799][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 588.212079][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 588.219755][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 588.227166][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 589.136011][T15658] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 589.256241][T15658] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 589.433979][T15658] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 589.548452][T15658] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 590.285724][ T54] Bluetooth: hci4: command tx timeout [ 591.220861][T15758] chnl_net:caif_netlink_parms(): no params data found [ 591.704462][T15658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.994566][T15658] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.170399][T14936] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.177588][T14936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.233785][T14936] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.240996][T14936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.365664][ T54] Bluetooth: hci4: command tx timeout [ 592.567099][T15758] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.574349][T15758] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.603469][T15758] bridge_slave_0: entered allmulticast mode [ 592.626347][T15758] bridge_slave_0: entered promiscuous mode [ 592.791429][T15658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 592.864047][T15758] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.905615][T15758] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.912856][T15758] bridge_slave_1: entered allmulticast mode [ 592.956506][T15758] bridge_slave_1: entered promiscuous mode [ 593.838216][T15758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.867853][T15758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.054875][ T6663] hsr_slave_0: left promiscuous mode [ 594.089220][ T6663] hsr_slave_1: left promiscuous mode [ 594.101505][ T6663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.110724][ T6663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.134468][ T6663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.145180][ T6663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.177701][ T6663] veth1_macvtap: left promiscuous mode [ 594.183266][ T6663] veth0_macvtap: left promiscuous mode [ 594.195694][ T6663] veth1_vlan: left promiscuous mode [ 594.201024][ T6663] veth0_vlan: left promiscuous mode [ 594.445597][ T54] Bluetooth: hci4: command tx timeout [ 595.308293][ T6663] team0 (unregistering): Port device team_slave_1 removed [ 595.381966][ T6663] team0 (unregistering): Port device team_slave_0 removed [ 595.966583][T15758] team0: Port device team_slave_0 added [ 595.984234][T15758] team0: Port device team_slave_1 added [ 596.050012][T15658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.058820][T15758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.066055][T15758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.092615][T15758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.105986][T15758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.112953][T15758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.139070][T15758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.399264][T15758] hsr_slave_0: entered promiscuous mode [ 596.406049][T15758] hsr_slave_1: entered promiscuous mode [ 596.413265][T15758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 596.426253][T15758] Cannot create hsr debugfs directory [ 596.527052][ T54] Bluetooth: hci4: command tx timeout [ 596.640247][T15658] veth0_vlan: entered promiscuous mode [ 596.714058][T15658] veth1_vlan: entered promiscuous mode [ 596.901404][T15758] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.952238][T15658] veth0_macvtap: entered promiscuous mode [ 596.972062][T15658] veth1_macvtap: entered promiscuous mode [ 597.002428][T15658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.035235][T15658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.055203][T15658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.081395][T15658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.093437][T15658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.123823][T15658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.137984][T15658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.179080][T15758] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.233119][T15658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.265921][T15658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.291858][T15658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.304336][T15658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.315355][T15658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.335590][T15658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.347294][T15658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.395447][T15758] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.436685][T15817] kexec: Could not allocate control_code_buffer [ 597.452837][T15658] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.462686][T15658] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.471575][T15658] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.480343][T15658] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.570698][T15758] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.622076][ T5412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.633301][ T5412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.679820][ T6663] bridge_slave_1: left allmulticast mode [ 597.703915][ T6663] bridge_slave_1: left promiscuous mode [ 597.715264][ T6663] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.731719][ T6663] bridge_slave_0: left allmulticast mode [ 597.745113][ T6663] bridge_slave_0: left promiscuous mode [ 597.761042][ T6663] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.816293][ T6663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.065630][ T6663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.101350][ T6663] bond0 (unregistering): Released all slaves [ 600.215361][T15758] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 600.439416][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.446985][T15758] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 600.473811][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.474200][T15758] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 600.601331][T15889] nbd: must specify a device to reconfigure [ 601.140471][T15758] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 602.216053][ T6663] hsr_slave_0: left promiscuous mode [ 602.310785][ T6663] hsr_slave_1: left promiscuous mode [ 602.355791][ T6663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.375517][ T6663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.395946][ T6663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.415187][ T6663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.450702][ T6663] veth1_macvtap: left promiscuous mode [ 602.464270][ T6663] veth0_macvtap: left promiscuous mode [ 602.470450][ T6663] veth1_vlan: left promiscuous mode [ 602.475952][ T6663] veth0_vlan: left promiscuous mode [ 604.152768][ T6663] team0 (unregistering): Port device team_slave_1 removed [ 604.230074][ T6663] team0 (unregistering): Port device team_slave_0 removed [ 605.752692][T15758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.858087][T15758] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.978777][ T5411] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.985951][ T5411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.021394][ T5411] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.028585][ T5411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.610753][T15758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.723180][T15950] netlink: 'syz.2.2222': attribute type 3 has an invalid length. [ 606.982742][T15758] veth0_vlan: entered promiscuous mode [ 607.051215][T15758] veth1_vlan: entered promiscuous mode [ 607.160067][T15758] veth0_macvtap: entered promiscuous mode [ 607.187156][T15758] veth1_macvtap: entered promiscuous mode [ 607.261810][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.286479][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.305632][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.320029][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.350906][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.375167][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.397584][T15758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.427900][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.455955][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.477546][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.508198][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.535198][T15758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.566205][T15758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.596758][T15758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.622469][T15758] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.645215][T15758] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.665159][T15758] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.673894][T15758] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.888411][ T5411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.916975][ T5411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.965473][ T6674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.993708][ T6674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.321619][T16018] )zV: entered promiscuous mode [ 613.455656][T16109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2258'. [ 613.502961][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2259'. [ 615.029087][T16157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2258'. [ 617.500211][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'. [ 621.610358][T16338] svc: failed to register nfsdv3 RPC service (errno 111). [ 621.637646][T16338] svc: failed to register nfsaclv3 RPC service (errno 512). [ 623.613372][ T29] audit: type=1326 audit(8277292041.200:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16370 comm="syz.1.2322" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f4617dff9 code=0x0 [ 624.768497][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.774832][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.896506][ T29] audit: type=1326 audit(8277292047.480:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.3.2350" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c29b7dff9 code=0x0 [ 630.190096][T16516] svc: failed to register nfsdv3 RPC service (errno 111). [ 630.238341][T16516] svc: failed to register nfsaclv3 RPC service (errno 111). [ 635.656053][T16680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2393'. [ 636.789838][T16717] tmpfs: Unknown parameter 'nwZW U܃ܓ+``Sfq?P02$as-ҞmHpb@TcblY64 [ 636.789838][T16717] NtyA+m"իj2m4Е+-Nx>%!M淐+10g+#6?ࠏr+CY EAÄþ(DQjt6Ł&tʊ PPNr7 ' [ 638.195751][T13930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 638.204981][T13930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 638.217623][T13930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 638.225726][T16761] raw_sendmsg: syz.3.2416 forgot to set AF_INET. Fix it! [ 638.233237][T13930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 638.242077][T13930] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 638.250336][T13930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 638.374584][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'. [ 638.687729][T16758] chnl_net:caif_netlink_parms(): no params data found [ 638.989051][T14932] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.229076][T14932] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.259891][T16758] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.269740][T16758] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.285736][T16758] bridge_slave_0: entered allmulticast mode [ 639.296592][T16758] bridge_slave_0: entered promiscuous mode [ 639.315304][T16758] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.322593][T16758] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.336050][T16758] bridge_slave_1: entered allmulticast mode [ 639.353544][T16758] bridge_slave_1: entered promiscuous mode [ 639.483375][T14932] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.676741][T14932] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.725464][T16811] Invalid ELF header magic: != ELF [ 639.727710][T16758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.812553][T16758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.863119][T16758] team0: Port device team_slave_0 added [ 639.949249][T16758] team0: Port device team_slave_1 added [ 640.032712][T16758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.040727][T16758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.085003][T16758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.098027][T14932] bridge_slave_1: left allmulticast mode [ 640.104269][T14932] bridge_slave_1: left promiscuous mode [ 640.111490][T14932] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.134668][T14932] bridge_slave_0: left allmulticast mode [ 640.165681][T14932] bridge_slave_0: left promiscuous mode [ 640.175635][T14932] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.285512][T13930] Bluetooth: hci0: command tx timeout [ 640.462086][T16832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2432'. [ 641.012068][T14932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.071395][T14932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.084989][T14932] bond0 (unregistering): Released all slaves [ 641.115916][T16758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.123493][T16758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.192439][T16758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.337290][T14932] )zV: left promiscuous mode [ 641.619766][T16758] hsr_slave_0: entered promiscuous mode [ 641.662503][T16758] hsr_slave_1: entered promiscuous mode [ 641.991549][ T29] audit: type=1326 audit(8277292059.580:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16858 comm="syz.2.2438" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2cafd7dff9 code=0x0 [ 642.205958][T13930] Bluetooth: hci1: command 0x0406 tx timeout [ 642.367604][ T54] Bluetooth: hci0: command tx timeout [ 642.394528][T14932] hsr_slave_0: left promiscuous mode [ 642.476817][T14932] hsr_slave_1: left promiscuous mode [ 642.505614][T14932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.523698][T14932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.565967][T14932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.595239][T14932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.657373][T14932] veth1_macvtap: left promiscuous mode [ 642.695171][T14932] veth0_macvtap: left promiscuous mode [ 642.700830][T14932] veth1_vlan: left promiscuous mode [ 642.732015][T14932] veth0_vlan: left promiscuous mode [ 644.445712][ T54] Bluetooth: hci0: command tx timeout [ 645.183357][T14932] team0 (unregistering): Port device team_slave_1 removed [ 645.412437][T14932] team0 (unregistering): Port device team_slave_0 removed [ 646.526181][ T54] Bluetooth: hci0: command tx timeout [ 646.606627][T16758] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 646.684436][T16758] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 646.781688][T16758] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 646.820593][T16758] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 647.100190][T16758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.195771][T16758] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.233618][T14945] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.240813][T14945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.297353][T14945] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.304521][T14945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.794886][T16758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.892445][T16758] veth0_vlan: entered promiscuous mode [ 647.938337][T16758] veth1_vlan: entered promiscuous mode [ 648.046750][T16758] veth0_macvtap: entered promiscuous mode [ 648.101429][T16758] veth1_macvtap: entered promiscuous mode [ 648.167582][T16758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.213189][T16758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.255382][T16758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.293127][T16758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.335171][T16758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.365097][T16758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.404384][T16758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.434659][T16758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.474483][T16758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.495111][T16758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.516052][T16758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.536359][T16758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.560859][T16758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.586537][T16758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.638561][T16758] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.657642][T16758] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.677059][T16758] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.698290][T16758] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.834522][T14932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.847261][T14932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.921907][ T6678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.961976][ T6678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.604224][T17045] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 651.614566][T17082] Dead loop on virtual device ip6_vti0, fix it urgently! [ 651.635783][T17082] Dead loop on virtual device ip6_vti0, fix it urgently! [ 651.643238][T17082] Dead loop on virtual device ip6_vti0, fix it urgently! [ 651.661895][T17082] Dead loop on virtual device ip6_vti0, fix it urgently! [ 651.685810][T17082] Dead loop on virtual device ip6_vti0, fix it urgently! [ 651.756092][T17082] Dead loop on virtual device ip6_vti0, fix it urgently! [ 663.190789][T17267] netlink: zone id is out of range [ 663.211660][T17267] netlink: zone id is out of range [ 663.235122][T17267] netlink: zone id is out of range [ 663.240284][T17267] netlink: zone id is out of range [ 663.270325][T17267] netlink: del zone limit has 4 unknown bytes [ 665.926263][T17310] netlink: 'syz.2.2544': attribute type 11 has an invalid length. [ 668.859983][T17422] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2573'. [ 670.993530][T17475] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2588'. [ 672.228764][T17489] Process accounting resumed [ 672.506004][T17501] netlink: 4128 bytes leftover after parsing attributes in process `syz.0.2593'. [ 673.280827][T17513] Process accounting resumed [ 676.330754][T17612] netlink: get zone limit has 4 unknown bytes [ 676.362991][T17612] netlink: 'syz.0.2622': attribute type 3 has an invalid length. [ 677.756523][T17651] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2635'. [ 681.505515][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2657'. [ 685.138354][T17819] delete_channel: no stack [ 685.917811][T17827] netlink: 468 bytes leftover after parsing attributes in process `syz.1.2680'. [ 686.208307][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.214650][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.865356][T17876] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2689'. [ 686.987013][T17876] netlink: zone id is out of range [ 687.023003][T17876] netlink: zone id is out of range [ 687.065183][T17872] openvswitch: netlink: Flow key attribute not present in set flow. [ 687.439516][T17883] netlink: 'syz.2.2693': attribute type 11 has an invalid length. [ 691.086918][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2700'. [ 691.967931][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2708'. [ 694.193389][ T6667] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.282275][T13930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 694.310324][T13930] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 694.324385][T13930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 694.334344][T13930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 694.342131][T13930] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 694.350401][T13930] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 694.635888][ T6667] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.777942][T18030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2729'. [ 695.044951][ T6667] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.466521][ T6667] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.983014][T18017] chnl_net:caif_netlink_parms(): no params data found [ 696.370030][ T29] audit: type=1326 audit(8277292036.820:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18073 comm="syz.1.2740" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab8317dff9 code=0x0 [ 696.396472][ T6667] bridge_slave_1: left allmulticast mode [ 696.425328][ T6667] bridge_slave_1: left promiscuous mode [ 696.436125][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.460228][T13930] Bluetooth: hci2: command tx timeout [ 696.569074][ T6667] bridge_slave_0: left allmulticast mode [ 696.574769][ T6667] bridge_slave_0: left promiscuous mode [ 696.607998][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.179013][ T6667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.202414][ T6667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.214966][ T6667] bond0 (unregistering): Released all slaves [ 698.506848][T18017] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.515015][T18017] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.522306][T18017] bridge_slave_0: entered allmulticast mode [ 698.525176][T13930] Bluetooth: hci2: command tx timeout [ 698.542104][T18017] bridge_slave_0: entered promiscuous mode [ 698.562653][T18017] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.601041][T18017] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.609824][T18017] bridge_slave_1: entered allmulticast mode [ 698.635289][T18017] bridge_slave_1: entered promiscuous mode [ 699.004415][T18017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.027699][T18017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.287969][T18017] team0: Port device team_slave_0 added [ 699.313552][T18017] team0: Port device team_slave_1 added [ 699.712380][T18017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.733814][T18017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.775135][T18017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.004494][T18017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.023699][T18017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.065156][T18017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.363187][T18017] hsr_slave_0: entered promiscuous mode [ 700.399080][T18017] hsr_slave_1: entered promiscuous mode [ 700.429661][T18017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.445157][T18017] Cannot create hsr debugfs directory [ 700.610943][T13930] Bluetooth: hci2: command tx timeout [ 701.068940][ T6667] hsr_slave_0: left promiscuous mode [ 701.111015][ T6667] hsr_slave_1: left promiscuous mode [ 701.129318][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.145406][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.169648][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.185175][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.348209][ T6667] veth1_macvtap: left promiscuous mode [ 701.377450][ T6667] veth0_macvtap: left promiscuous mode [ 701.383111][ T6667] veth1_vlan: left promiscuous mode [ 701.415848][ T6667] veth0_vlan: left promiscuous mode [ 702.692100][T13930] Bluetooth: hci2: command tx timeout [ 704.016201][ T6667] team0 (unregistering): Port device team_slave_1 removed [ 704.281884][ T6667] team0 (unregistering): Port device team_slave_0 removed [ 707.364950][T18017] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 707.419475][T18017] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 707.461174][T18017] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 707.484498][T18017] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 707.646113][T18017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.678803][T18017] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.751485][T14949] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.758670][T14949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.818401][T14949] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.825680][T14949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.930103][T18256] delete_channel: no stack [ 708.287400][T18017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.387593][T18017] veth0_vlan: entered promiscuous mode [ 708.439566][T18017] veth1_vlan: entered promiscuous mode [ 708.529616][T18017] veth0_macvtap: entered promiscuous mode [ 708.562663][T18017] veth1_macvtap: entered promiscuous mode [ 708.627003][T18017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.665243][T18017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.692072][T18017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.733103][T18017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.767269][T18017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.794209][T18017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.820481][T18017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.857792][T18017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.885169][T18017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.905431][T18017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.935102][T18017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.961864][T18017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.989208][T18017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.011008][T18017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.042937][T18017] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.062089][T18017] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.082556][T18017] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.105113][T18017] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.291844][ T6674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.331858][ T6674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.416715][T14932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.457516][T14932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.219622][T18372] svc: failed to register nfsdv3 RPC service (errno 111). [ 712.232826][T18372] svc: failed to register nfsaclv3 RPC service (errno 111). [ 713.741422][T18438] svc: failed to register nfsdv3 RPC service (errno 101). [ 713.766006][T18438] svc: failed to register nfsaclv3 RPC service (errno 101). [ 713.885276][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 714.019221][T18464] netlink: 'syz.0.2805': attribute type 1 has an invalid length. [ 714.111012][T18470] FAULT_INJECTION: forcing a failure. [ 714.111012][T18470] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 714.131341][T18470] CPU: 0 UID: 0 PID: 18470 Comm: syz.2.2807 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 714.142157][T18470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 714.152429][T18470] Call Trace: [ 714.155726][T18470] [ 714.158675][T18470] dump_stack_lvl+0x16c/0x1f0 [ 714.163451][T18470] should_fail_ex+0x497/0x5b0 [ 714.168168][T18470] ? fs_reclaim_acquire+0xae/0x160 [ 714.173318][T18470] should_fail_alloc_page+0xe7/0x130 [ 714.178636][T18470] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 714.184810][T18470] __alloc_pages_noprof+0x190/0x25c0 [ 714.190129][T18470] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 714.195880][T18470] ? rcu_is_watching+0x12/0xc0 [ 714.200655][T18470] ? trace_kmalloc+0x2d/0xe0 [ 714.205270][T18470] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 714.211876][T18470] ? __alloc_skb+0x164/0x380 [ 714.216479][T18470] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 714.222392][T18470] ? policy_nodemask+0xea/0x4e0 [ 714.227262][T18470] alloc_pages_mpol_noprof+0x2c9/0x610 [ 714.232740][T18470] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 714.238736][T18470] ? mark_lock+0xb5/0xc60 [ 714.243076][T18470] ? is_bpf_text_address+0x30/0x1a0 [ 714.248286][T18470] ? bpf_ksym_find+0xe0/0x1c0 [ 714.252982][T18470] ? __pfx_mark_lock+0x10/0x10 [ 714.257757][T18470] ? is_bpf_text_address+0x94/0x1a0 [ 714.262967][T18470] alloc_skb_with_frags+0x24b/0x850 [ 714.268182][T18470] sock_alloc_send_pskb+0x7f1/0x980 [ 714.273410][T18470] ? __lock_acquire+0xbdd/0x3ce0 [ 714.278369][T18470] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 714.284109][T18470] ? hlock_class+0x4e/0x130 [ 714.288623][T18470] ? __lock_acquire+0xbdd/0x3ce0 [ 714.293585][T18470] tun_get_user+0xd3d/0x3d70 [ 714.298196][T18470] ? aa_file_perm+0x4c6/0xfe0 [ 714.302898][T18470] ? __pfx_tun_get_user+0x10/0x10 [ 714.307934][T18470] ? find_held_lock+0x2d/0x110 [ 714.312710][T18470] ? __pfx_lock_release+0x10/0x10 [ 714.317761][T18470] tun_chr_write_iter+0xdc/0x210 [ 714.322711][T18470] do_iter_readv_writev+0x532/0x7f0 [ 714.328020][T18470] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 714.333758][T18470] ? bpf_lsm_file_permission+0x9/0x10 [ 714.339141][T18470] ? security_file_permission+0x71/0x210 [ 714.344795][T18470] vfs_writev+0x363/0xdd0 [ 714.349132][T18470] ? find_held_lock+0x2d/0x110 [ 714.353913][T18470] ? __pfx_vfs_writev+0x10/0x10 [ 714.358767][T18470] ? find_held_lock+0x2d/0x110 [ 714.363544][T18470] ? __pfx_lock_release+0x10/0x10 [ 714.368583][T18470] ? trace_lock_acquire+0x14a/0x1d0 [ 714.373811][T18470] ? __fget_files+0x244/0x3f0 [ 714.378591][T18470] ? do_writev+0x137/0x370 [ 714.383010][T18470] do_writev+0x137/0x370 [ 714.387275][T18470] ? __pfx_do_writev+0x10/0x10 [ 714.392072][T18470] do_syscall_64+0xcd/0x250 [ 714.396611][T18470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.402533][T18470] RIP: 0033:0x7fcc78d7dff9 [ 714.406964][T18470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.426595][T18470] RSP: 002b:00007fcc79b48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 714.435022][T18470] RAX: ffffffffffffffda RBX: 00007fcc78f35f80 RCX: 00007fcc78d7dff9 [ 714.443002][T18470] RDX: 0000000000000009 RSI: 00000000200028c0 RDI: 00000000000000c8 [ 714.450983][T18470] RBP: 00007fcc79b48090 R08: 0000000000000000 R09: 0000000000000000 [ 714.459044][T18470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.467016][T18470] R13: 0000000000000000 R14: 00007fcc78f35f80 R15: 00007ffd28068f58 [ 714.475010][T18470] [ 714.743454][T18479] netlink: zone id is out of range [ 714.757503][T18479] netlink: zone id is out of range [ 714.762735][T18479] netlink: zone id is out of range [ 714.776627][T18479] netlink: zone id is out of range [ 714.824013][T18479] netlink: zone id is out of range [ 714.831747][T18479] netlink: zone id is out of range [ 714.846959][T18479] netlink: zone id is out of range [ 714.872166][T18479] netlink: zone id is out of range [ 717.886552][T18567] Process accounting resumed [ 720.813143][T18644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2851'. [ 724.296910][T18722] FAULT_INJECTION: forcing a failure. [ 724.296910][T18722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.379632][T18722] CPU: 0 UID: 0 PID: 18722 Comm: syz.1.2868 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 724.390468][T18722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 724.400552][T18722] Call Trace: [ 724.403858][T18722] [ 724.406811][T18722] dump_stack_lvl+0x16c/0x1f0 [ 724.411518][T18722] should_fail_ex+0x497/0x5b0 [ 724.416235][T18722] _copy_from_iter+0x48b/0x13e0 [ 724.421096][T18722] ? __pfx__copy_from_iter+0x10/0x10 [ 724.426387][T18722] ? __pfx__copy_from_iter+0x10/0x10 [ 724.431695][T18722] ? __virt_addr_valid+0x1a4/0x590 [ 724.436833][T18722] copy_page_from_iter+0xa5/0x120 [ 724.441875][T18722] skb_copy_datagram_from_iter+0x29b/0x710 [ 724.447708][T18722] tun_get_user+0x1964/0x3d70 [ 724.452414][T18722] ? aa_file_perm+0x4c6/0xfe0 [ 724.457115][T18722] ? __pfx_tun_get_user+0x10/0x10 [ 724.462150][T18722] ? find_held_lock+0x2d/0x110 [ 724.466976][T18722] ? __pfx_lock_release+0x10/0x10 [ 724.472028][T18722] tun_chr_write_iter+0xdc/0x210 [ 724.476977][T18722] do_iter_readv_writev+0x532/0x7f0 [ 724.482194][T18722] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 724.487933][T18722] ? bpf_lsm_file_permission+0x9/0x10 [ 724.493316][T18722] ? security_file_permission+0x71/0x210 [ 724.498970][T18722] vfs_writev+0x363/0xdd0 [ 724.503303][T18722] ? find_held_lock+0x2d/0x110 [ 724.508083][T18722] ? __pfx_vfs_writev+0x10/0x10 [ 724.512936][T18722] ? find_held_lock+0x2d/0x110 [ 724.517713][T18722] ? __pfx_lock_release+0x10/0x10 [ 724.522749][T18722] ? trace_lock_acquire+0x14a/0x1d0 [ 724.527965][T18722] ? __fget_files+0x244/0x3f0 [ 724.532652][T18722] ? do_writev+0x137/0x370 [ 724.537068][T18722] do_writev+0x137/0x370 [ 724.541313][T18722] ? __pfx_do_writev+0x10/0x10 [ 724.546182][T18722] do_syscall_64+0xcd/0x250 [ 724.550698][T18722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.556596][T18722] RIP: 0033:0x7fab8317dff9 [ 724.561167][T18722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.580796][T18722] RSP: 002b:00007fab83f99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 724.589224][T18722] RAX: ffffffffffffffda RBX: 00007fab83335f80 RCX: 00007fab8317dff9 [ 724.597204][T18722] RDX: 0000000000000009 RSI: 00000000200028c0 RDI: 00000000000000c8 [ 724.605177][T18722] RBP: 00007fab83f99090 R08: 0000000000000000 R09: 0000000000000000 [ 724.613153][T18722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 724.621128][T18722] R13: 0000000000000000 R14: 00007fab83335f80 R15: 00007fffd94a9018 [ 724.629120][T18722] [ 730.195445][ T6678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.679283][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 730.693716][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 730.702993][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 730.730608][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 730.746244][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 730.753768][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 731.007006][ T6678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.053002][T18843] nbd: couldn't find device at index 914048202 [ 731.707206][ T6678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.948616][T18835] chnl_net:caif_netlink_parms(): no params data found [ 732.128153][ T6678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.535655][T18835] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.542883][T18835] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.564048][T18835] bridge_slave_0: entered allmulticast mode [ 732.594950][T18835] bridge_slave_0: entered promiscuous mode [ 732.617482][T18835] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.631385][T18835] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.649447][T18835] bridge_slave_1: entered allmulticast mode [ 732.666904][T18835] bridge_slave_1: entered promiscuous mode [ 732.846832][T13930] Bluetooth: hci3: command tx timeout [ 733.108546][T18835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.279638][T18835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.521922][T18835] team0: Port device team_slave_0 added [ 733.557852][T18835] team0: Port device team_slave_1 added [ 733.769980][ T6678] bridge_slave_1: left allmulticast mode [ 733.776604][ T6678] bridge_slave_1: left promiscuous mode [ 733.784621][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.873447][ T6678] bridge_slave_0: left allmulticast mode [ 733.882770][ T6678] bridge_slave_0: left promiscuous mode [ 733.905430][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.925205][T13930] Bluetooth: hci3: command tx timeout [ 735.316111][ T6678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.408312][ T6678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.485321][ T6678] bond0 (unregistering): Released all slaves [ 735.919684][T18835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.955152][T18835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.012880][T18835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.122248][T18835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.136046][T18835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.185183][T18835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.394645][T18835] hsr_slave_0: entered promiscuous mode [ 736.445753][T18835] hsr_slave_1: entered promiscuous mode [ 736.472989][T18835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 736.491040][T18835] Cannot create hsr debugfs directory [ 737.008840][T13930] Bluetooth: hci3: command tx timeout [ 738.137782][ T6678] hsr_slave_0: left promiscuous mode [ 738.152038][ T6678] hsr_slave_1: left promiscuous mode [ 738.180607][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.198425][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.222567][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.237533][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.279643][ T6678] veth1_macvtap: left promiscuous mode [ 738.293618][ T6678] veth0_macvtap: left promiscuous mode [ 738.307777][ T6678] veth1_vlan: left promiscuous mode [ 738.313106][ T6678] veth0_vlan: left promiscuous mode [ 739.105467][T13930] Bluetooth: hci3: command tx timeout [ 739.772427][ T6678] team0 (unregistering): Port device team_slave_1 removed [ 739.888332][ T6678] team0 (unregistering): Port device team_slave_0 removed [ 741.844794][T18835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 741.880491][T18835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 741.961305][T18835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 742.027676][T18835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 742.279746][T18835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.323272][T18835] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.378425][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.385587][ T6667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.427423][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.434562][ T6667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.925498][T18835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.047517][T18835] veth0_vlan: entered promiscuous mode [ 743.080161][T18835] veth1_vlan: entered promiscuous mode [ 743.178634][T18835] veth0_macvtap: entered promiscuous mode [ 743.428629][T18835] veth1_macvtap: entered promiscuous mode [ 743.444247][T18835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.519594][T18835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.603443][T18835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.683826][T18835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.735188][T18835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.787663][T18835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.826591][T18835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.871915][T18835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.898285][T18835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.914245][T18835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.955132][T18835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.980630][T18835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.008894][T18835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.044460][T18835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.119838][T18835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.164979][T18835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.200034][T18835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.211387][T18835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.392095][T19074] tmpfs: Unknown parameter ':s0'T,6' [ 744.786594][T14945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.794477][T14945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.075536][T14945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.105422][T14945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.788835][T19117] FAULT_INJECTION: forcing a failure. [ 745.788835][T19117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.842763][T19117] CPU: 1 UID: 0 PID: 19117 Comm: syz.3.2931 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 745.853591][T19117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 745.863677][T19117] Call Trace: [ 745.867002][T19117] [ 745.869955][T19117] dump_stack_lvl+0x16c/0x1f0 [ 745.874670][T19117] should_fail_ex+0x497/0x5b0 [ 745.879391][T19117] _copy_from_iter+0x48b/0x13e0 [ 745.884279][T19117] ? __pfx__copy_from_iter+0x10/0x10 [ 745.889600][T19117] ? __pfx__copy_from_iter+0x10/0x10 [ 745.894914][T19117] ? __virt_addr_valid+0x1a4/0x590 [ 745.900067][T19117] copy_page_from_iter+0xa5/0x120 [ 745.905122][T19117] skb_copy_datagram_from_iter+0x29b/0x710 [ 745.910971][T19117] tun_get_user+0x1964/0x3d70 [ 745.915697][T19117] ? aa_file_perm+0x4c6/0xfe0 [ 745.920428][T19117] ? __pfx_tun_get_user+0x10/0x10 [ 745.925499][T19117] ? find_held_lock+0x2d/0x110 [ 745.930299][T19117] ? __pfx_lock_release+0x10/0x10 [ 745.935377][T19117] tun_chr_write_iter+0xdc/0x210 [ 745.940348][T19117] do_iter_readv_writev+0x532/0x7f0 [ 745.945592][T19117] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 745.951358][T19117] ? bpf_lsm_file_permission+0x9/0x10 [ 745.956758][T19117] ? security_file_permission+0x71/0x210 [ 745.962433][T19117] vfs_writev+0x363/0xdd0 [ 745.966791][T19117] ? find_held_lock+0x2d/0x110 [ 745.971593][T19117] ? __pfx_vfs_writev+0x10/0x10 [ 745.976467][T19117] ? find_held_lock+0x2d/0x110 [ 745.981268][T19117] ? __pfx_lock_release+0x10/0x10 [ 745.986326][T19117] ? trace_lock_acquire+0x14a/0x1d0 [ 745.991564][T19117] ? __fget_files+0x244/0x3f0 [ 745.996271][T19117] ? do_writev+0x137/0x370 [ 746.000705][T19117] do_writev+0x137/0x370 [ 746.004972][T19117] ? __pfx_do_writev+0x10/0x10 [ 746.009770][T19117] do_syscall_64+0xcd/0x250 [ 746.014306][T19117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.020244][T19117] RIP: 0033:0x7f3c29b7dff9 [ 746.024686][T19117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.044320][T19117] RSP: 002b:00007f3c2a907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 746.052767][T19117] RAX: ffffffffffffffda RBX: 00007f3c29d35f80 RCX: 00007f3c29b7dff9 [ 746.060766][T19117] RDX: 0000000000000009 RSI: 00000000200028c0 RDI: 00000000000000c8 [ 746.068766][T19117] RBP: 00007f3c2a907090 R08: 0000000000000000 R09: 0000000000000000 [ 746.076762][T19117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 746.084760][T19117] R13: 0000000000000000 R14: 00007f3c29d35f80 R15: 00007ffeab2b8018 [ 746.092773][T19117] [ 747.033849][T14949] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.156220][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 747.178553][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 747.195609][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 747.382300][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 747.658755][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.665178][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.760816][T14949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.773204][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 747.784773][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 748.300592][T14949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.385776][T19145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2938'. [ 748.461333][T14949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.005558][T19129] chnl_net:caif_netlink_parms(): no params data found [ 749.239581][T14949] bridge_slave_1: left allmulticast mode [ 749.246299][T14949] bridge_slave_1: left promiscuous mode [ 749.263509][T14949] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.458259][T14949] bridge_slave_0: left allmulticast mode [ 749.465091][T14949] bridge_slave_0: left promiscuous mode [ 749.485234][T14949] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.886857][ T54] Bluetooth: hci3: command tx timeout [ 751.741291][T14949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.849656][T14949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.891953][T14949] bond0 (unregistering): Released all slaves [ 751.971256][ T54] Bluetooth: hci3: command tx timeout [ 752.144152][T19129] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.182788][T19129] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.206401][T19129] bridge_slave_0: entered allmulticast mode [ 752.233848][T19129] bridge_slave_0: entered promiscuous mode [ 752.422356][T19129] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.445285][T19129] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.474735][T19129] bridge_slave_1: entered allmulticast mode [ 752.499995][T19129] bridge_slave_1: entered promiscuous mode [ 752.761377][T19129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.788279][T19129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.914802][T14949] hsr_slave_0: left promiscuous mode [ 752.936097][T14949] hsr_slave_1: left promiscuous mode [ 753.024827][T14949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.033149][T14949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.114891][T14949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.137555][T14949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.312557][T14949] veth1_macvtap: left promiscuous mode [ 753.344167][T14949] veth0_macvtap: left promiscuous mode [ 753.363894][T14949] veth1_vlan: left promiscuous mode [ 753.373219][T14949] veth0_vlan: left promiscuous mode [ 754.050352][ T54] Bluetooth: hci3: command tx timeout [ 755.713430][T14949] team0 (unregistering): Port device team_slave_1 removed [ 755.840411][T14949] team0 (unregistering): Port device team_slave_0 removed [ 756.125418][ T54] Bluetooth: hci3: command tx timeout [ 757.114776][T19129] team0: Port device team_slave_0 added [ 757.276524][T19129] team0: Port device team_slave_1 added [ 757.566363][T19129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.598961][T19129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.666467][T19129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.701898][T19129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.731675][T19129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.797260][T19129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.540304][T19129] hsr_slave_0: entered promiscuous mode [ 758.636504][T19129] hsr_slave_1: entered promiscuous mode [ 758.661911][T19129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 758.681047][T19129] Cannot create hsr debugfs directory [ 760.385603][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2966'. [ 762.264357][T19129] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 762.473900][T19129] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 762.588501][T19129] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 762.708731][T19129] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 762.945347][T19129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.013369][T19129] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.046083][T14949] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.053214][T14949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.126451][T14949] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.133619][T14949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.582675][T19129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.711823][T19129] veth0_vlan: entered promiscuous mode [ 763.751531][T19129] veth1_vlan: entered promiscuous mode [ 763.825547][T19129] veth0_macvtap: entered promiscuous mode [ 763.843725][T19129] veth1_macvtap: entered promiscuous mode [ 763.871026][T19129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.900816][T19129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.931808][T19129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.960160][T19129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.986516][T19129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.010717][T19129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.050374][T19129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.094449][T19129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.130545][T19129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.160818][T19129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.189422][T19129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.229887][T19129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.263764][T19129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.296751][T19129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.360153][T19129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.398223][T19129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.420772][T19129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.450246][T19129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.132137][T13930] Bluetooth: hci0: command 0x0406 tx timeout [ 765.210989][T14949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.233155][T14932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.265940][T14949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.315152][T14932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.910540][T19569] Process accounting resumed [ 768.941700][T19569] RDS: rds_bind could not find a transport for ::ffff:172.20.20.52, load rds_tcp or rds_rdma? [ 773.219119][T13930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 773.228815][T13930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 773.237500][T13930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 773.249812][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 773.266141][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 773.273638][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 773.298544][ T6678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.618348][ T6678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.909474][ T6678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.250191][ T6678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.424216][T19668] chnl_net:caif_netlink_parms(): no params data found [ 774.885625][T19668] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.892769][T19668] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.925573][T19668] bridge_slave_0: entered allmulticast mode [ 774.932667][T19668] bridge_slave_0: entered promiscuous mode [ 774.947214][T19668] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.954340][T19668] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.961665][T19668] bridge_slave_1: entered allmulticast mode [ 774.969203][T19668] bridge_slave_1: entered promiscuous mode [ 775.333365][ T5240] Bluetooth: hci3: command tx timeout [ 775.707795][ T6678] bridge_slave_1: left allmulticast mode [ 775.713482][ T6678] bridge_slave_1: left promiscuous mode [ 775.720258][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.950481][ T6678] bridge_slave_0: left allmulticast mode [ 775.963544][ T6678] bridge_slave_0: left promiscuous mode [ 775.981008][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.405374][ T5240] Bluetooth: hci3: command tx timeout [ 778.243253][ T6678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.260987][ T6678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.327444][ T6678] bond0 (unregistering): Released all slaves [ 778.389783][T19668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.401916][T19668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.728321][T19668] team0: Port device team_slave_0 added [ 778.922449][T19668] team0: Port device team_slave_1 added [ 778.989909][T19668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.005102][T19668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.075765][T19668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.097174][T19668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.104161][T19668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.175259][T19668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.349634][ T6678] hsr_slave_0: left promiscuous mode [ 779.355944][ T6678] hsr_slave_1: left promiscuous mode [ 779.447547][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.455014][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.472244][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.485377][ T5240] Bluetooth: hci3: command tx timeout [ 779.491472][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.544352][ T6678] veth1_macvtap: left promiscuous mode [ 779.549998][ T6678] veth0_macvtap: left promiscuous mode [ 779.565393][ T6678] veth1_vlan: left promiscuous mode [ 779.571168][ T6678] veth0_vlan: left promiscuous mode [ 779.692346][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 779.715241][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 779.735825][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 779.745992][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 779.763303][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 779.772812][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 780.990275][ T6678] team0 (unregistering): Port device team_slave_1 removed [ 781.137699][ T6678] team0 (unregistering): Port device team_slave_0 removed [ 781.566043][ T54] Bluetooth: hci3: command tx timeout [ 781.805418][ T54] Bluetooth: hci2: command tx timeout [ 782.061165][T19668] hsr_slave_0: entered promiscuous mode [ 782.105513][T19668] hsr_slave_1: entered promiscuous mode [ 782.111768][T19668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 782.125181][T19668] Cannot create hsr debugfs directory [ 782.902911][ T5219] syz-executor invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_NOFAIL|__GFP_ZERO|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 782.916914][ T5219] CPU: 1 UID: 0 PID: 5219 Comm: syz-executor Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 782.927822][ T5219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 782.937919][ T5219] Call Trace: [ 782.941226][ T5219] [ 782.944182][ T5219] dump_stack_lvl+0x16c/0x1f0 [ 782.948907][ T5219] dump_header+0x101/0x900 [ 782.953371][ T5219] oom_kill_process+0x270/0xa60 [ 782.958272][ T5219] out_of_memory+0x351/0x1700 [ 782.962998][ T5219] ? __pfx___mutex_lock+0x10/0x10 [ 782.968078][ T5219] ? __pfx_out_of_memory+0x10/0x10 [ 782.973233][ T5219] ? rcu_read_unlock+0x17/0x60 [ 782.978044][ T5219] ? find_held_lock+0x2d/0x110 [ 782.982859][ T5219] mem_cgroup_out_of_memory+0x207/0x270 [ 782.988445][ T5219] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 782.994563][ T5219] ? do_raw_spin_unlock+0x172/0x230 [ 782.999806][ T5219] try_charge_memcg+0x5b9/0xaf0 [ 783.004700][ T5219] ? __pfx_try_charge_memcg+0x10/0x10 [ 783.010114][ T5219] ? lock_acquire+0x2f/0xb0 [ 783.014666][ T5219] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 783.020423][ T5219] obj_cgroup_charge+0x179/0x4d0 [ 783.025398][ T5219] __memcg_slab_post_alloc_hook+0x1b6/0x9b0 [ 783.031337][ T5219] ? kasan_save_track+0x14/0x30 [ 783.036215][ T5219] kmem_cache_alloc_noprof+0x2cd/0x2f0 [ 783.041694][ T5219] ? alloc_buffer_head+0x21/0x160 [ 783.046742][ T5219] alloc_buffer_head+0x21/0x160 [ 783.051613][ T5219] folio_alloc_buffers+0x2bd/0x830 [ 783.056755][ T5219] create_empty_buffers+0x36/0x480 [ 783.061891][ T5219] folio_create_buffers+0x109/0x150 [ 783.067113][ T5219] __block_write_begin_int+0x321/0x16e0 [ 783.072675][ T5219] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 783.078587][ T5219] ? __pfx___block_write_begin_int+0x10/0x10 [ 783.084583][ T5219] ? __pfx___might_resched+0x10/0x10 [ 783.089880][ T5219] ? down_read+0xc9/0x330 [ 783.094231][ T5219] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 783.100137][ T5219] block_page_mkwrite+0x3d9/0x4c0 [ 783.105178][ T5219] ext4_page_mkwrite+0x8e2/0x1760 [ 783.110227][ T5219] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 783.115703][ T5219] ? lock_acquire+0x2f/0xb0 [ 783.120223][ T5219] ? __pte_offset_map+0x42/0x540 [ 783.125181][ T5219] do_page_mkwrite+0x177/0x380 [ 783.129966][ T5219] do_pte_missing+0x29e/0x3e50 [ 783.134749][ T5219] ? lock_vma_under_rcu+0x13e/0x980 [ 783.139969][ T5219] __handle_mm_fault+0x100a/0x2a10 [ 783.145105][ T5219] ? __pfx_lock_release+0x10/0x10 [ 783.150144][ T5219] ? lock_vma_under_rcu+0x13e/0x980 [ 783.155359][ T5219] ? __pfx___handle_mm_fault+0x10/0x10 [ 783.160860][ T5219] handle_mm_fault+0x3fa/0xaa0 [ 783.165657][ T5219] do_user_addr_fault+0x60d/0x13f0 [ 783.170796][ T5219] exc_page_fault+0x5c/0xc0 [ 783.175314][ T5219] asm_exc_page_fault+0x26/0x30 [ 783.180177][ T5219] RIP: 0033:0x7f71fca563d5 [ 783.184596][ T5219] Code: 85 a0 03 00 00 be 04 00 00 00 48 89 df e8 43 1d ff ff 48 8b 43 38 83 43 28 04 48 89 df be 08 00 00 00 48 8d 50 fc 48 89 53 38 <89> 68 fc 8b 6b 28 e8 20 1d ff ff 48 8b 43 40 be 06 00 00 00 89 28 [ 783.204212][ T5219] RSP: 002b:00007ffe182b4ac0 EFLAGS: 00010202 [ 783.210288][ T5219] RAX: 00007f71f6600000 RBX: 00007ffe182b4bc0 RCX: 00007f71f6200210 [ 783.218266][ T5219] RDX: 00007f71f65ffffc RSI: 0000000000000008 RDI: 00007ffe182b4bc0 [ 783.226251][ T5219] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 783.234399][ T5219] R10: 00007ffe182b4ba0 R11: 0000000000000000 R12: 0000000000000000 [ 783.242376][ T5219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 783.250381][ T5219] [ 783.384445][ T5219] memory: usage 307200kB, limit 307200kB, failcnt 27083 [ 783.405134][ T5219] memory+swap: usage 431704kB, limit 9007199254740988kB, failcnt 0 [ 783.413972][ T5219] kmem: usage 4280kB, limit 9007199254740988kB, failcnt 0 [ 783.435125][ T5219] Memory cgroup stats for /syz3: [ 783.435442][ T5219] cache 308826112 [ 783.444040][ T5219] rss 4096 [ 783.464577][ T5219] rss_huge 0 [ 783.467902][ T5219] shmem 308736000 [ 783.471544][ T5219] mapped_file 22003712 [ 783.475693][ T5219] dirty 0 [ 783.478648][ T5219] writeback 0 [ 783.481943][ T5219] workingset_refault_anon 18826 [ 783.487918][ T5219] workingset_refault_file 1489 [ 783.492705][ T5219] swap 127991808 [ 783.496821][ T5219] swapcached 4096 [ 783.500478][ T5219] pgpgin 1983432 [ 783.504032][ T5219] pgpgout 1919758 [ 783.507737][ T5219] pgfault 657151 [ 783.511296][ T5219] pgmajfault 3844 [ 783.514938][ T5219] inactive_anon 160391168 [ 783.519333][ T5219] active_anon 147968000 [ 783.523500][ T5219] inactive_file 0 [ 783.527603][ T5219] active_file 90112 [ 783.531426][ T5219] unevictable 0 [ 783.534917][ T5219] hierarchical_memory_limit 314572800 [ 783.540676][ T5219] hierarchical_memsw_limit 9223372036854771712 [ 783.547090][ T5219] total_cache 308826112 [ 783.551262][ T5219] total_rss 4096 [ 783.554824][ T5219] total_rss_huge 0 [ 783.558820][ T5219] total_shmem 308736000 [ 783.565262][ T5219] total_mapped_file 22003712 [ 783.569884][ T5219] total_dirty 0 [ 783.573361][ T5219] total_writeback 0 [ 783.577787][ T5219] total_workingset_refault_anon 18826 [ 783.583188][ T5219] total_workingset_refault_file 1489 [ 783.588757][ T5219] total_swap 127991808 [ 783.592847][ T5219] total_swapcached 4096 [ 783.597672][ T5219] total_pgpgin 1983432 [ 783.601762][ T5219] total_pgpgout 1919758 [ 783.606573][ T5219] total_pgfault 657151 [ 783.610664][ T5219] total_pgmajfault 3844 [ 783.614839][ T5219] total_inactive_anon 160391168 [ 783.620035][ T5219] total_active_anon 147968000 [ 783.624728][ T5219] total_inactive_file 0 [ 783.628989][ T5219] total_active_file 90112 [ 783.633330][ T5219] total_unevictable 0 [ 783.637379][ T5219] anon_cost 0 [ 783.640676][ T5219] file_cost 0 [ 783.643977][ T5219] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2967,pid=19362,uid=0 [ 783.660232][ T5219] Memory cgroup out of memory: Killed process 19362 (syz.3.2967) total-vm:124300kB, anon-rss:620kB, file-rss:39612kB, shmem-rss:11072kB, UID:0 pgtables:224kB oom_score_adj:1000 [ 783.885293][ T54] Bluetooth: hci2: command tx timeout [ 783.960190][T19721] chnl_net:caif_netlink_parms(): no params data found [ 784.256719][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 784.266717][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 784.274721][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 784.286497][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 784.294147][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 784.306244][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 785.861453][T19721] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.895259][T19721] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.902515][T19721] bridge_slave_0: entered allmulticast mode [ 785.924016][T19721] bridge_slave_0: entered promiscuous mode [ 785.932657][T19721] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.955307][T19721] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.962541][T19721] bridge_slave_1: entered allmulticast mode [ 785.969727][ T54] Bluetooth: hci2: command tx timeout [ 785.981262][T19721] bridge_slave_1: entered promiscuous mode [ 786.369727][ T54] Bluetooth: hci4: command tx timeout [ 786.399236][ T6678] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.505796][T19721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.679836][ T6678] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.800276][T19721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.939078][ T6678] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.061441][T19721] team0: Port device team_slave_0 added [ 787.094226][T19721] team0: Port device team_slave_1 added [ 787.146941][ T6678] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.325148][T19799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3029'. [ 787.417542][T19721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.424702][T19721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.520959][T19721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.550834][T19721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.570643][T19721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.630918][T19721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.710073][T19668] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 787.756253][T19668] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 787.912815][T19668] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 787.954635][T19721] hsr_slave_0: entered promiscuous mode [ 787.985509][T19721] hsr_slave_1: entered promiscuous mode [ 787.998038][T19721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 788.025126][T19721] Cannot create hsr debugfs directory [ 788.045270][ T54] Bluetooth: hci2: command tx timeout [ 788.073547][T19668] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 788.342059][T19762] chnl_net:caif_netlink_parms(): no params data found [ 788.446400][ T54] Bluetooth: hci4: command tx timeout [ 788.602895][ T6678] bridge_slave_1: left allmulticast mode [ 788.625800][ T6678] bridge_slave_1: left promiscuous mode [ 788.631592][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.707123][ T6678] bridge_slave_0: left allmulticast mode [ 788.713347][ T6678] bridge_slave_0: left promiscuous mode [ 788.720414][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.625553][ T6678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.650694][ T6678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.673038][ T6678] bond0 (unregistering): Released all slaves [ 789.737617][T19668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.152604][T19762] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.165349][T19762] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.176070][T19762] bridge_slave_0: entered allmulticast mode [ 790.187278][T19762] bridge_slave_0: entered promiscuous mode [ 790.205842][T19762] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.212946][T19762] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.240704][T19762] bridge_slave_1: entered allmulticast mode [ 790.256336][T19762] bridge_slave_1: entered promiscuous mode [ 790.342959][T19668] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.429878][ T6666] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.437038][ T6666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.525216][ T54] Bluetooth: hci4: command tx timeout [ 790.538505][T19762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.577970][ T6666] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.585168][ T6666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.678017][T19762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.034297][ T6678] hsr_slave_0: left promiscuous mode [ 791.056403][ T6678] hsr_slave_1: left promiscuous mode [ 791.105488][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.113009][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.125919][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.133361][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.164458][ T6678] veth1_macvtap: left promiscuous mode [ 791.175527][ T6678] veth0_macvtap: left promiscuous mode [ 791.191341][ T6678] veth1_vlan: left promiscuous mode [ 791.205517][ T6678] veth0_vlan: left promiscuous mode [ 792.178020][ T6678] team0 (unregistering): Port device team_slave_1 removed [ 792.260940][ T6678] team0 (unregistering): Port device team_slave_0 removed [ 792.503147][T19895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3036'. [ 792.609248][ T54] Bluetooth: hci4: command tx timeout [ 793.197613][T19762] team0: Port device team_slave_0 added [ 793.212508][T19762] team0: Port device team_slave_1 added [ 793.422037][T19762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.435123][T19762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.481549][T19762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.513878][T19762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.526682][T19762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.563606][T19762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.740656][T19762] hsr_slave_0: entered promiscuous mode [ 793.758161][T19762] hsr_slave_1: entered promiscuous mode [ 793.764532][T19762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 793.783030][T19762] Cannot create hsr debugfs directory [ 793.891998][T19721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 793.911339][T19721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 793.961018][T19721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 794.035005][T19721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 794.221955][T19668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.331847][T19762] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.503367][T19762] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.641347][T19762] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.671563][T19668] veth0_vlan: entered promiscuous mode [ 794.691288][T19668] veth1_vlan: entered promiscuous mode [ 794.716618][T19721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.748174][T19762] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.797493][T19721] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.836455][T14938] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.843606][T14938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.892565][T14938] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.899841][T14938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.916352][ T6678] bridge_slave_1: left allmulticast mode [ 794.922033][ T6678] bridge_slave_1: left promiscuous mode [ 794.935230][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.951952][ T6678] bridge_slave_0: left allmulticast mode [ 794.965262][ T6678] bridge_slave_0: left promiscuous mode [ 794.971182][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.479056][ T6678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.490993][ T6678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.502684][ T6678] bond0 (unregistering): Released all slaves [ 795.520884][T19668] veth0_macvtap: entered promiscuous mode [ 795.554643][T19668] veth1_macvtap: entered promiscuous mode [ 795.587828][ T6678] HSR: left promiscuous mode [ 795.640348][T19668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.668608][T19668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.691567][T19668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.705274][T19668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.736139][T19668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.773567][T19762] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 795.800057][T19668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.823475][T19668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.835270][T19668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.851543][T19668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.862667][T19668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.876631][T19721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 795.888438][T19762] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 795.907869][T19668] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.917522][T19668] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.929438][T19668] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.941385][T19668] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.960749][T19762] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 796.052699][T19762] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 796.281972][ T6678] hsr_slave_0: left promiscuous mode [ 796.290847][ T6678] hsr_slave_1: left promiscuous mode [ 796.309435][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.317057][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.325622][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.333043][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.360316][ T6678] veth1_macvtap: left promiscuous mode [ 796.366583][ T6678] veth0_macvtap: left promiscuous mode [ 796.372224][ T6678] veth1_vlan: left promiscuous mode [ 796.377705][ T6678] veth0_vlan: left promiscuous mode [ 796.878406][ T6678] team0 (unregistering): Port device team_slave_1 removed [ 796.938414][ T6678] team0 (unregistering): Port device team_slave_0 removed [ 797.416605][T14938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.424452][T14938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.488845][T19721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.576463][T14949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.592138][T14949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.639643][T19762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.704344][T19762] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.739200][T19721] veth0_vlan: entered promiscuous mode [ 797.753973][T14938] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.761183][T14938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.803594][T19721] veth1_vlan: entered promiscuous mode [ 797.875109][T14938] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.882339][T14938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.928497][T19721] veth0_macvtap: entered promiscuous mode [ 797.963780][T19721] veth1_macvtap: entered promiscuous mode [ 798.067623][T19721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.087453][T19721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.109844][T19721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.130659][T19721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.151872][T19721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.175801][T19721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.211150][T19721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.245191][T19721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.264989][T19721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.291849][T19721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.331928][T19721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.353722][T19721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.364617][T19721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.378577][T19721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.529855][T14938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.555597][T14938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.637638][T19762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.650199][T14929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.668467][T14929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.768266][T19762] veth0_vlan: entered promiscuous mode [ 798.808861][T19762] veth1_vlan: entered promiscuous mode [ 798.875728][T19762] veth0_macvtap: entered promiscuous mode [ 798.898215][T19762] veth1_macvtap: entered promiscuous mode [ 798.943432][T19762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.965353][T19762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.985129][T19762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.015159][T19762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.036174][T19762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.055170][T19762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.076988][T19762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.110328][T19762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.145967][T19762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.166236][T19762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.195185][T19762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.215182][T19762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.235397][T19762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.257648][T19762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.296064][T19762] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.315219][T19762] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.324149][T19762] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.363791][T19762] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.533086][T14949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.567007][T14949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.637098][T14929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.656752][T14929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.379700][T19972] kexec: Could not allocate control_code_buffer [ 801.556969][T19977] ptrace attach of "./syz-executor exec"[19762] was attempted by "./syz-executor exec"[19977] [ 803.659518][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 803.673742][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 803.681688][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 803.691784][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 803.701459][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 803.709676][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 805.182217][T20026] chnl_net:caif_netlink_parms(): no params data found [ 805.522384][T20026] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.537137][T20026] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.544533][T20026] bridge_slave_0: entered allmulticast mode [ 805.593737][T20026] bridge_slave_0: entered promiscuous mode [ 805.627560][T20026] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.634694][T20026] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.683017][T20026] bridge_slave_1: entered allmulticast mode [ 805.702443][T20026] bridge_slave_1: entered promiscuous mode [ 805.822772][ T54] Bluetooth: hci1: command tx timeout [ 805.832830][T20026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.893409][T20026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.042314][T20026] team0: Port device team_slave_0 added [ 806.083585][T20026] team0: Port device team_slave_1 added [ 806.145261][T20026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.162456][T20026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.220635][T20026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.244152][T20026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.276189][T20026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.346975][T20026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.438032][T20026] hsr_slave_0: entered promiscuous mode [ 806.447380][T20026] hsr_slave_1: entered promiscuous mode [ 806.470807][T20026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 806.493129][T20026] Cannot create hsr debugfs directory [ 806.788770][T20026] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.951244][T20026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.083435][T20026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.187107][T20118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3079'. [ 807.347637][T20026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.614304][T20026] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 807.685544][T20026] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 807.707147][T20026] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 807.740297][T20026] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 807.885282][ T54] Bluetooth: hci1: command tx timeout [ 808.037264][T20026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.072691][T20026] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.141915][ T6666] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.149112][ T6666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.196522][ T6666] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.203666][ T6666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.677679][T20026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.784930][T20026] veth0_vlan: entered promiscuous mode [ 808.813697][T20026] veth1_vlan: entered promiscuous mode [ 808.891121][T20026] veth0_macvtap: entered promiscuous mode [ 808.898463][T20177] futex_wake_op: syz.3.3096 tries to shift op by 64; fix this program [ 808.931943][T20026] veth1_macvtap: entered promiscuous mode [ 808.991780][T20026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.025115][T20026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.063195][T20026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.087835][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.094283][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.105289][T20026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.163448][T20026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.213370][T20026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.235137][T20026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.265150][T20026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.297754][T20026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.328116][T20026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.365131][T20026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.385801][T20026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.416106][T20026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.447557][T20026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.485343][T20026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.515840][T20026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.554620][T20026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.586725][T20026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.639934][T20026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.685152][T20026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.694085][T20026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.739692][T20026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.965567][ T54] Bluetooth: hci1: command tx timeout [ 809.966557][T14929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.025489][ T6678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.026248][T14929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.036250][ T6678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.312864][T20210] ptrace attach of "./syz-executor exec"[19762] was attempted by "./syz-executor exec"[20210] [ 811.753438][T20248] netlink: 'syz.3.3114': attribute type 3 has an invalid length. [ 812.048862][ T54] Bluetooth: hci1: command tx timeout [ 815.112340][T20337] ptrace attach of "./syz-executor exec"[19668] was attempted by "./syz-executor exec"[20337] [ 815.233522][T20343] Process accounting resumed [ 815.383961][T20346] Invalid ELF header magic: != ELF [ 817.712495][T20408] ptrace attach of "./syz-executor exec"[19721] was attempted by "./syz-executor exec"[20408] [ 821.347584][T20469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3172'. [ 823.853043][T20523] ptrace attach of "./syz-executor exec"[19668] was attempted by "./syz-executor exec"[20523] [ 827.349863][T20572] ptrace attach of "./syz-executor exec"[19668] was attempted by "./syz-executor exec"[20572] [ 830.029388][ T54] Bluetooth: hci2: Malformed HCI Event [ 831.216991][T20673] nbd: must specify a device to reconfigure [ 831.246800][T20672] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 839.628129][T20757] ptrace attach of "./syz-executor exec"[19668] was attempted by "./syz-executor exec"[20757] [ 842.638305][T20803] netlink: 229 bytes leftover after parsing attributes in process `syz.0.3243'. [ 842.765340][T20805] svc: failed to register nfsdv3 RPC service (errno 101). [ 842.778941][T20805] svc: failed to register nfsaclv3 RPC service (errno 101). [ 843.314931][T20826] svc: failed to register nfsdv3 RPC service (errno 111). [ 843.360718][T20826] svc: failed to register nfsaclv3 RPC service (errno 111). [ 845.607798][T20880] ptrace attach of "./syz-executor exec"[19762] was attempted by "./syz-executor exec"[20880] [ 845.706490][T20873] netlink: 91 bytes leftover after parsing attributes in process `syz.1.3259'. [ 854.044946][T21060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3301'. [ 854.864560][T21089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3310'. [ 855.114696][T21097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3310'. [ 855.869577][T21114] HSR: entered promiscuous mode [ 857.585255][T21142] svc: failed to register nfsdv3 RPC service (errno 111). [ 857.695265][T21142] svc: failed to register nfsaclv3 RPC service (errno 111). [ 861.646713][T21187] netlink: 'syz.2.3335': attribute type 1 has an invalid length. [ 861.690616][T21187] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3335'. [ 862.506446][T21187] could not allocate digest TFM handle Linux [ 865.046844][T21139] delete_channel: no stack [ 867.218084][T21287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3352'. [ 869.321825][T21314] openvswitch: HSR: Dropping previously announced user features [ 870.220366][T21338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3365'. [ 870.545702][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.552241][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.665601][T21395] cgroup: fork rejected by pids controller in /syz3 [ 875.806455][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 875.816522][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 875.824617][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 875.833291][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 875.846563][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 875.854277][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 876.609448][T21475] chnl_net:caif_netlink_parms(): no params data found [ 877.145497][T21475] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.152632][T21475] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.160111][T21475] bridge_slave_0: entered allmulticast mode [ 877.167666][T21475] bridge_slave_0: entered promiscuous mode [ 877.255408][T21475] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.262558][T21475] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.272490][T21475] bridge_slave_1: entered allmulticast mode [ 877.279663][T21475] bridge_slave_1: entered promiscuous mode [ 877.517271][T21475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.530134][T21475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.972279][ T5240] Bluetooth: hci1: command tx timeout [ 878.186763][ T762] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.305551][ T29] audit: type=1107 audit(8277292058.990:13): pid=21504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 878.700774][T21475] team0: Port device team_slave_0 added [ 878.888102][T21475] team0: Port device team_slave_1 added [ 878.970254][T21525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3394'. [ 879.178656][T21475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.237356][T21475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.442843][T21475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.587885][T21475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.645287][T21475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.815735][T21475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 880.055282][ T5240] Bluetooth: hci1: command tx timeout [ 880.101240][T21475] hsr_slave_0: entered promiscuous mode [ 880.161854][T21475] hsr_slave_1: entered promiscuous mode [ 880.208303][T21475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 880.255406][T21475] Cannot create hsr debugfs directory [ 881.940522][T21571] ptrace attach of "./syz-executor exec"[19721] was attempted by "./syz-executor exec"[21571] [ 882.125533][ T5240] Bluetooth: hci1: command tx timeout [ 882.303921][T21573] netlink: zone id is out of range [ 882.325863][T21573] netlink: zone id is out of range [ 882.351818][T21573] netlink: zone id is out of range [ 882.358333][T21573] netlink: zone id is out of range [ 882.382866][T21573] netlink: zone id is out of range [ 882.391556][T21573] netlink: zone id is out of range [ 882.415375][T21573] netlink: zone id is out of range [ 882.425225][T21573] netlink: zone id is out of range [ 882.445224][T21573] netlink: zone id is out of range [ 882.453645][T21573] netlink: zone id is out of range [ 883.487216][ T762] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.870657][ T762] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.984397][ T762] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.205210][ T5240] Bluetooth: hci1: command tx timeout [ 884.314693][ T762] bridge_slave_1: left allmulticast mode [ 884.328423][ T762] bridge_slave_1: left promiscuous mode [ 884.339407][ T762] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.416012][ T762] bridge_slave_0: left allmulticast mode [ 884.421975][ T762] bridge_slave_0: left promiscuous mode [ 884.428436][ T762] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.601163][ T762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 885.620393][ T762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 885.643788][ T762] bond0 (unregistering): Released all slaves [ 885.791957][ T762] HSR: left promiscuous mode [ 886.731601][T21475] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 886.865001][T21475] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 887.079461][T21475] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 887.166653][T21475] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 887.501827][ T762] hsr_slave_0: left promiscuous mode [ 887.546751][ T762] hsr_slave_1: left promiscuous mode [ 887.635392][ T762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.643157][ T762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.703463][ T762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 887.733611][ T762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.924581][ T762] veth1_macvtap: left promiscuous mode [ 887.953491][ T762] veth0_macvtap: left promiscuous mode [ 887.969420][ T762] veth1_vlan: left promiscuous mode [ 888.002730][ T762] veth0_vlan: left promiscuous mode [ 890.322906][ T762] team0 (unregistering): Port device team_slave_1 removed [ 890.471157][ T762] team0 (unregistering): Port device team_slave_0 removed [ 892.552114][T21475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.597342][T21475] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.612395][T11166] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.619568][T11166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.706131][ T5420] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.713341][ T5420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.476938][T21475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.699260][T21475] veth0_vlan: entered promiscuous mode [ 893.775511][T21475] veth1_vlan: entered promiscuous mode [ 893.888189][T21475] veth0_macvtap: entered promiscuous mode [ 893.938674][T21475] veth1_macvtap: entered promiscuous mode [ 894.018567][T21475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.055110][T21475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.109368][T21475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.185124][T21475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.216948][T21475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.285156][T21475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.344115][T21475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.387325][T21475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.429181][T21475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 894.518158][T21475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.584692][T21475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.613288][T21475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.655242][T21475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.703885][T21475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.742274][T21475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.793436][T21475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.831689][T21475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.872597][T21475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 894.944215][T21475] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.002573][T21475] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.045404][T21475] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.093413][T21475] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.106921][ T5425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.114781][ T5425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.316981][ T5411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.354460][ T5411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.226930][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 903.327241][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 904.076290][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 904.096344][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 904.115276][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 904.135182][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 904.157159][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 904.169558][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 904.280796][ T5420] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.752825][ T5420] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.296522][ T5420] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.717892][ T5420] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.794510][T21870] chnl_net:caif_netlink_parms(): no params data found [ 906.112255][T21896] net_ratelimit: 1 callbacks suppressed [ 906.112275][T21896] openvswitch: netlink: Key 0 has unexpected len 185 expected 0 [ 906.212041][ T5240] Bluetooth: hci1: command tx timeout [ 906.260248][T21870] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.302329][T21870] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.332379][T21870] bridge_slave_0: entered allmulticast mode [ 906.373068][T21870] bridge_slave_0: entered promiscuous mode [ 906.394816][ T5420] bridge_slave_1: left allmulticast mode [ 906.402314][ T5420] bridge_slave_1: left promiscuous mode [ 906.446370][ T5420] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.550979][ T5420] bridge_slave_0: left allmulticast mode [ 906.556775][ T5420] bridge_slave_0: left promiscuous mode [ 906.562527][ T5420] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.287602][T21912] delete_channel: no stack [ 907.697776][T21920] Process accounting resumed [ 908.285368][ T5240] Bluetooth: hci1: command tx timeout [ 908.446680][ T5240] Bluetooth: hci4: command 0x0406 tx timeout [ 909.640702][ T5420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.662383][ T5420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.687465][ T5420] bond0 (unregistering): Released all slaves [ 909.835368][T21870] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.842501][T21870] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.866628][T21870] bridge_slave_1: entered allmulticast mode [ 909.898427][T21870] bridge_slave_1: entered promiscuous mode [ 910.209206][T21870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.260017][T21870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.366744][ T54] Bluetooth: hci1: command tx timeout [ 910.646546][T21870] team0: Port device team_slave_0 added [ 910.733281][ T5420] hsr_slave_0: left promiscuous mode [ 910.772862][ T5420] hsr_slave_1: left promiscuous mode [ 911.445480][ T5420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.452931][ T5420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.006251][ T5420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 912.013684][ T5420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.115158][ T5420] veth1_macvtap: left promiscuous mode [ 912.120719][ T5420] veth0_macvtap: left promiscuous mode [ 912.154517][ T5420] veth1_vlan: left promiscuous mode [ 912.172326][ T5420] veth0_vlan: left promiscuous mode [ 912.445443][ T54] Bluetooth: hci1: command tx timeout [ 916.258320][ T5420] team0 (unregistering): Port device team_slave_1 removed [ 916.518724][ T5420] team0 (unregistering): Port device team_slave_0 removed [ 917.931094][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 917.940639][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 917.950876][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 917.960264][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 917.968605][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 917.976230][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 918.808012][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 918.822948][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 918.833238][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 919.246877][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 919.257131][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 919.265990][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 919.697003][T21870] team0: Port device team_slave_1 added [ 919.756015][T21870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.763560][T21870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.045273][ T54] Bluetooth: hci5: command tx timeout [ 920.175212][T21870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.394166][T21870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.409340][T21870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.585140][T21870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.724718][T21870] hsr_slave_0: entered promiscuous mode [ 920.765844][T21870] hsr_slave_1: entered promiscuous mode [ 920.774118][T21870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 920.795713][T21870] Cannot create hsr debugfs directory [ 921.325384][ T54] Bluetooth: hci6: command tx timeout [ 922.125236][ T54] Bluetooth: hci5: command tx timeout [ 922.506496][ T5420] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.767273][T21959] chnl_net:caif_netlink_parms(): no params data found [ 922.922172][T21953] chnl_net:caif_netlink_parms(): no params data found [ 923.413481][ T54] Bluetooth: hci6: command tx timeout [ 923.494745][ T5420] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.569460][T21959] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.589189][T21959] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.613544][T21959] bridge_slave_0: entered allmulticast mode [ 923.644471][T21959] bridge_slave_0: entered promiscuous mode [ 923.731141][ T5420] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.843633][T21959] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.866523][T21959] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.884999][T21959] bridge_slave_1: entered allmulticast mode [ 923.945011][T21959] bridge_slave_1: entered promiscuous mode [ 924.147208][ T5420] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.205376][ T54] Bluetooth: hci5: command tx timeout [ 924.225809][T21953] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.233552][T21953] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.294188][T21953] bridge_slave_0: entered allmulticast mode [ 924.326564][T21953] bridge_slave_0: entered promiscuous mode [ 924.366444][T21953] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.401158][T21953] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.435415][T21953] bridge_slave_1: entered allmulticast mode [ 924.468662][T21953] bridge_slave_1: entered promiscuous mode [ 924.769780][T21959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.004117][T21959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.149630][T21953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.263123][T21959] team0: Port device team_slave_0 added [ 925.408923][T21953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.491932][ T54] Bluetooth: hci6: command tx timeout [ 925.581810][T21959] team0: Port device team_slave_1 added [ 926.108443][T21953] team0: Port device team_slave_0 added [ 926.121957][T21953] team0: Port device team_slave_1 added [ 926.244629][T21959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.274779][T21959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.356566][ T54] Bluetooth: hci5: command tx timeout [ 926.915236][T21959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.016289][ T5420] bridge_slave_1: left allmulticast mode [ 927.023660][ T5420] bridge_slave_1: left promiscuous mode [ 927.030729][ T5420] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.074552][ T5420] bridge_slave_0: left allmulticast mode [ 927.101682][ T5420] bridge_slave_0: left promiscuous mode [ 927.132484][ T5420] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.585382][ T54] Bluetooth: hci6: command tx timeout [ 928.664951][ T5420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 928.708154][ T5420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 928.740555][ T5420] bond0 (unregistering): Released all slaves [ 928.794447][T21953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.815220][T21953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.913858][T21953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.994442][T21959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.003084][T21959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.100191][T21959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.265477][T21870] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 929.297657][T21870] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 929.325567][T21953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.332720][T21953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.412933][T21953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.562084][T21959] hsr_slave_0: entered promiscuous mode [ 929.634013][T21959] hsr_slave_1: entered promiscuous mode [ 929.642950][T21959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 929.679671][T21959] Cannot create hsr debugfs directory [ 929.707296][T21870] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 929.735537][T21870] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 929.909871][T21953] hsr_slave_0: entered promiscuous mode [ 929.953888][T21953] hsr_slave_1: entered promiscuous mode [ 929.976477][T21953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 929.984080][T21953] Cannot create hsr debugfs directory [ 930.405866][ T5420] hsr_slave_0: left promiscuous mode [ 930.412194][ T5420] hsr_slave_1: left promiscuous mode [ 930.475947][ T5420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.514140][ T5420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.555929][ T5420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.563405][ T5420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.643859][ T5420] veth1_macvtap: left promiscuous mode [ 930.693675][ T5420] veth0_macvtap: left promiscuous mode [ 930.706990][ T5420] veth1_vlan: left promiscuous mode [ 930.712313][ T5420] veth0_vlan: left promiscuous mode [ 931.985100][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.992594][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.467663][ T5420] team0 (unregistering): Port device team_slave_1 removed [ 932.635597][ T5420] team0 (unregistering): Port device team_slave_0 removed [ 934.767589][T21959] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.316213][T21959] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.493681][T21870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.530011][T21870] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.564021][T21870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 935.574535][T21870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 935.594596][T11166] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.601855][T11166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.613204][T11166] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.620349][T11166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.840713][T21959] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.137626][T21959] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.753549][T21870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.839483][T21959] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 936.989124][T21959] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 937.078172][T21959] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 937.232666][T21959] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 937.725625][ T30] INFO: task syz.1.3039:19906 blocked for more than 143 seconds. [ 937.733484][ T30] Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 937.785090][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 937.793820][ T30] task:syz.1.3039 state:D stack:26736 pid:19906 tgid:19904 ppid:16758 flags:0x00000004 [ 937.926092][ T30] Call Trace: [ 937.929425][ T30] [ 937.932379][ T30] __schedule+0xef5/0x5750 [ 937.986004][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 938.015342][ T30] ? __pfx___schedule+0x10/0x10 [ 938.020266][ T30] ? schedule+0x298/0x350 [ 938.024630][ T30] ? __pfx_lock_release+0x10/0x10 [ 938.086567][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 938.135315][ T30] ? lock_acquire+0x2f/0xb0 [ 938.145099][ T30] ? schedule+0x1fd/0x350 [ 938.149475][ T30] schedule+0xe7/0x350 [ 938.153566][ T30] schedule_timeout+0x258/0x2a0 [ 938.225340][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 938.230791][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 938.275369][ T30] __wait_for_common+0x3e1/0x600 [ 938.280371][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 938.342884][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 938.375939][ T30] ? __pfx_try_to_wake_up+0x10/0x10 [ 938.381230][ T30] wait_for_completion_state+0x1c/0x40 [ 938.446002][ T30] do_coredump+0x82f/0x4160 [ 938.450573][ T30] ? hlock_class+0x4e/0x130 [ 938.498542][ T30] ? stack_depot_save_flags+0x28/0x900 [ 938.504098][ T30] ? __pfx_do_coredump+0x10/0x10 [ 938.569604][ T30] ? kmem_cache_free+0x152/0x4b0 [ 938.574624][ T30] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 938.622170][ T30] ? do_syscall_64+0xda/0x250 [ 938.695658][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.701882][ T30] get_signal+0x237c/0x26d0 [ 938.772614][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 938.816344][ T30] ? __pfx_get_signal+0x10/0x10 [ 938.821253][ T30] ? force_sig_info_to_task+0x3a0/0x660 [ 938.845375][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 938.850986][ T30] ? __pfx_force_exit_sig+0x10/0x10 [ 938.888463][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 938.894737][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 938.945159][ T30] do_syscall_64+0xda/0x250 [ 938.949739][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.983144][ T30] RIP: 0033:0x7fab8317dff9 [ 938.996271][ T30] RSP: 002b:00007fab83f780e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 939.004727][ T30] RAX: ffffffffffffffda RBX: 00007fab83336060 RCX: 00007fab8317dff9 [ 939.075109][ T30] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fab83336064 [ 939.111888][ T30] RBP: 00007fab83336058 R08: 00007fab83f9a080 R09: 0000000000000000 [ 939.146045][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fab83336064 [ 939.154155][ T30] R13: 0000000000000000 R14: 00007fffd94a8f30 R15: 00007fffd94a9018 [ 939.215676][ T30] [ 939.218946][ T30] [ 939.218946][ T30] Showing all locks held in the system: [ 939.282453][ T30] 1 lock held by khungtaskd/30: [ 939.333219][ T30] #0: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 939.372371][ T30] 2 locks held by dhcpcd/4901: [ 939.386811][ T30] #0: ffff8880273fe6c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x154/0x980 [ 939.452732][ T30] #1: ffff8880b863ee98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 939.525111][ T30] 2 locks held by getty/4984: [ 939.529949][ T30] #0: ffff88802e5290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 939.583341][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 939.625297][ T30] 3 locks held by kworker/0:4/5291: [ 939.630545][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 939.696479][ T30] #1: ffffc90003dcfd80 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 939.750274][ T30] #2: ffff888028d55240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1ce/0x3190 [ 939.792462][ T30] 2 locks held by kworker/u8:25/5420: [ 939.825951][ T30] #0: ffff8880b863ee98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 939.875128][ T30] #1: ffffc90004917d80 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 939.925460][ T30] 1 lock held by syz.1.3039/19905: [ 939.930622][ T30] 1 lock held by syz-executor/21870: [ 939.975196][ T30] #0: ffffffff8ddc30f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 940.012483][ T30] 1 lock held by syz.2.3475/21927: [ 940.041786][ T30] 7 locks held by syz-executor/21953: [ 940.074532][ T30] #0: ffff8880323ca420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 940.115108][ T30] #1: ffff88807834d088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 940.124946][ T30] #2: ffff8881443d51e8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 940.232105][ T30] #3: ffffffff8f069228 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 940.280181][ T30] #4: ffff8880311ec0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 [ 940.322403][ T30] #5: ffff8880311eb250 (&devlink->lock_key#28){+.+.}-{3:3}, at: nsim_drv_remove+0x4a/0x1d0 [ 940.345999][ T30] #6: ffffffff8ddc30f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 940.385272][ T30] 1 lock held by syz.0.3487/22093: [ 940.390443][ T30] #0: ffffffff8faad510 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 940.425133][ T30] 1 lock held by rm/22111: [ 940.450025][ T30] [ 940.452426][ T30] ============================================= [ 940.452426][ T30] [ 940.495618][ T30] NMI backtrace for cpu 0 [ 940.499997][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 940.510517][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 940.520641][ T30] Call Trace: [ 940.523943][ T30] [ 940.526898][ T30] dump_stack_lvl+0x116/0x1f0 [ 940.531623][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 940.536601][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 940.542635][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 940.548719][ T30] watchdog+0xf0c/0x1240 [ 940.553013][ T30] ? __pfx_watchdog+0x10/0x10 [ 940.557719][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 940.562967][ T30] ? __kthread_parkme+0x148/0x220 [ 940.568039][ T30] ? __pfx_watchdog+0x10/0x10 [ 940.572763][ T30] kthread+0x2c1/0x3a0 [ 940.576863][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 940.582092][ T30] ? __pfx_kthread+0x10/0x10 [ 940.586724][ T30] ret_from_fork+0x45/0x80 [ 940.591170][ T30] ? __pfx_kthread+0x10/0x10 [ 940.595786][ T30] ret_from_fork_asm+0x1a/0x30 [ 940.600612][ T30] [ 940.604372][ T30] Sending NMI from CPU 0 to CPUs 1: [ 940.610117][ C1] NMI backtrace for cpu 1 [ 940.610131][ C1] CPU: 1 UID: 0 PID: 5412 Comm: kworker/u8:19 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 940.610160][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 940.610175][ C1] Workqueue: bat_events batadv_nc_worker [ 940.610204][ C1] RIP: 0010:hlock_class+0x0/0x130 [ 940.610235][ C1] Code: df e8 64 b3 84 00 e9 c9 fe ff ff e8 5a b3 84 00 e9 95 fe ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> b8 00 00 00 00 00 fc ff df 53 48 89 fb 48 83 c7 20 48 89 fa 48 [ 940.610257][ C1] RSP: 0018:ffffc90004697958 EFLAGS: 00000002 [ 940.610275][ C1] RAX: 0000000000000007 RBX: 2ce4822c53ec0be5 RCX: ffffffff8169f018 [ 940.610292][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880257ac708 [ 940.610306][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff2d31588 [ 940.610321][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: dffffc0000000000 [ 940.610335][ C1] R13: ffff8880257ac730 R14: 0000000000000004 R15: ffff8880257abc00 [ 940.610351][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 940.610375][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.610391][ C1] CR2: 0000558003abe131 CR3: 000000000db7c000 CR4: 00000000003526f0 [ 940.610407][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 940.610421][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 940.610436][ C1] Call Trace: [ 940.610443][ C1] [ 940.610451][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 940.610478][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 940.610513][ C1] ? nmi_handle+0x1a9/0x5c0 [ 940.610538][ C1] ? __pfx_hlock_class+0x10/0x10 [ 940.610564][ C1] ? default_do_nmi+0x6a/0x160 [ 940.610586][ C1] ? exc_nmi+0x170/0x1e0 [ 940.610606][ C1] ? end_repeat_nmi+0xf/0x53 [ 940.610637][ C1] ? __lock_acquire+0xe58/0x3ce0 [ 940.610671][ C1] ? __pfx_hlock_class+0x10/0x10 [ 940.610698][ C1] ? __pfx_hlock_class+0x10/0x10 [ 940.610726][ C1] ? __pfx_hlock_class+0x10/0x10 [ 940.610752][ C1] [ 940.610759][ C1] [ 940.610766][ C1] __lock_acquire+0x1443/0x3ce0 [ 940.610810][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 940.610843][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 940.610877][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 940.610910][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 940.610943][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 940.610969][ C1] lock_acquire.part.0+0x11b/0x380 [ 940.611002][ C1] ? batadv_nc_worker+0x164/0x1060 [ 940.611029][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 940.611064][ C1] ? rcu_is_watching+0x12/0xc0 [ 940.611089][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 940.611116][ C1] ? batadv_nc_worker+0x164/0x1060 [ 940.611142][ C1] ? lock_acquire+0x2f/0xb0 [ 940.611175][ C1] ? batadv_nc_worker+0x164/0x1060 [ 940.611202][ C1] batadv_nc_worker+0x16a/0x1060 [ 940.611227][ C1] ? batadv_nc_worker+0x164/0x1060 [ 940.611256][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 940.611282][ C1] ? rcu_is_watching+0x12/0xc0 [ 940.611307][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 940.611333][ C1] ? process_one_work+0x8bb/0x1b30 [ 940.611368][ C1] ? lock_acquire+0x2f/0xb0 [ 940.611400][ C1] ? process_one_work+0x8bb/0x1b30 [ 940.611434][ C1] process_one_work+0x958/0x1b30 [ 940.611471][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 940.611503][ C1] ? __pfx_process_one_work+0x10/0x10 [ 940.611541][ C1] ? assign_work+0x1a0/0x250 [ 940.611573][ C1] worker_thread+0x6c8/0xf00 [ 940.611612][ C1] ? __pfx_worker_thread+0x10/0x10 [ 940.611644][ C1] kthread+0x2c1/0x3a0 [ 940.611668][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 940.611694][ C1] ? __pfx_kthread+0x10/0x10 [ 940.611719][ C1] ret_from_fork+0x45/0x80 [ 940.611740][ C1] ? __pfx_kthread+0x10/0x10 [ 940.611765][ C1] ret_from_fork_asm+0x1a/0x30 [ 940.611808][ C1] [ 941.215176][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 941.222067][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 941.232588][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 941.242651][ T30] Call Trace: [ 941.245984][ T30] [ 941.248931][ T30] dump_stack_lvl+0x3d/0x1f0 [ 941.253546][ T30] panic+0x71d/0x800 [ 941.257493][ T30] ? __pfx_panic+0x10/0x10 [ 941.261928][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 941.267319][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 941.273320][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 941.278751][ T30] ? watchdog+0xd76/0x1240 [ 941.283286][ T30] ? watchdog+0xd69/0x1240 [ 941.287722][ T30] watchdog+0xd87/0x1240 [ 941.291989][ T30] ? __pfx_watchdog+0x10/0x10 [ 941.296682][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 941.301900][ T30] ? __kthread_parkme+0x148/0x220 [ 941.306940][ T30] ? __pfx_watchdog+0x10/0x10 [ 941.311633][ T30] kthread+0x2c1/0x3a0 [ 941.315713][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 941.320923][ T30] ? __pfx_kthread+0x10/0x10 [ 941.325530][ T30] ret_from_fork+0x45/0x80 [ 941.329967][ T30] ? __pfx_kthread+0x10/0x10 [ 941.334662][ T30] ret_from_fork_asm+0x1a/0x30 [ 941.339476][ T30] [ 941.342856][ T30] Kernel Offset: disabled [ 941.347170][ T30] Rebooting in 86400 seconds..