last executing test programs: 5.948776093s ago: executing program 0 (id=2997): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x4, &(0x7f0000000000)={0x77, 0x7, 0x0, 0x5d0e, 0xdc2d, 0x63, 0x80000000, [0x80, 0xc, 0x4418], {0x401, 0x8, 0xfffffff7, 0x1, 0x3, 0x7c7, 0x40, 0x1, 0x80}, {0x6, 0x8001, 0xffffffff, 0x7fff, 0x4, 0xffff, 0x1, 0x4, 0x6}}) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0x3f, 0x0, 0xf2) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0x400, 0x0, 0xdd0, 0x697b}, 0xed7138c}, 0x9a6, 0x9) setfsuid$auto(0xffff) 5.786918793s ago: executing program 0 (id=2999): adjtimex$auto(&(0x7f0000002280)={0xfffffffd, 0x0, 0x8902, 0x8000, 0x8, 0x1, 0x6, 0x0, 0x401, 0x81, 0x4, {0x3, 0x3b9ac9ff}, 0xfffffffffffffc00, 0x2, 0x9, 0x6, 0x0, 0x5, 0x7fffffffffffffff, 0x7fff, 0x8000000000000000, 0x1, 0x12}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) ioperm$auto(0x7, 0x6, 0x2) statfs$auto(&(0x7f0000002880)='/\x00', &(0x7f00000028c0)={0x5, 0x9, 0x240000000000, 0xffffffffffff83f4, 0xfffffffeffffffff, 0x1, 0x19, {[0x4, 0x18000]}, 0x6, 0x7, 0x0, [0x817d, 0x1, 0x4, 0x7]}) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5e}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) 5.113525576s ago: executing program 0 (id=3004): r0 = socket(0x11, 0x80003, 0x300) socket(0x1e, 0x2, 0x0) getsockopt$auto(0x4, 0x6, 0x7, 0xfffffffffffffffc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x9, 0x8000000000000001, 0x4) socket(0x1, 0x5, 0x0) connect$auto(0x3, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = getpid() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/pid\x00') sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xf5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$NS_GET_PARENT(r2, 0x5460, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') ioctl$NS_GET_PARENT(r3, 0xb701, 0x0) socket(0x2b, 0x2, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) madvise$auto(0x0, 0x2000000080000001, 0x3) readahead$auto(0x6, 0x6, 0xa90) socket(0x2c, 0x3, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x3a) getsockopt$auto(0x6, 0x0, 0x9, 0xfffffffffffffffe, 0x0) syz_genetlink_get_family_id$auto_NLBL_MGMT(&(0x7f0000000040), 0xffffffffffffffff) 4.342831234s ago: executing program 0 (id=3007): mmap$auto(0x0, 0x400008, 0x20000000000000df, 0x9b72, 0x2, 0x7ffc) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) socket(0x2, 0xa, 0x0) exit$auto(0x2) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfd, 0x0, 0xfffffffffffffffd) mprotect$auto(0x0, 0x7fffffffffffffff, 0x2) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x1, 0x0, 0xa) 3.703012922s ago: executing program 1 (id=3010): syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000001dc0), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mq_notify$auto(0x3, &(0x7f0000000100)={@sival_int=0x9, 0x312, 0x2, @_sigev_thread={0x0, 0x0}}) mbind$auto(0x0, 0x8, 0x6, &(0x7f0000000280)=0xff, 0xf8, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x40005}, 0x6, 0x8) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000001dc0), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mq_notify$auto(0x3, &(0x7f0000000100)={@sival_int=0x9, 0x312, 0x2, @_sigev_thread={0x0, 0x0}}) (async) mbind$auto(0x0, 0x8, 0x6, &(0x7f0000000280)=0xff, 0xf8, 0x2) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x40005}, 0x6, 0x8) (async) 3.345429936s ago: executing program 0 (id=3012): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) read$auto(0x16d, &(0x7f0000000000)=')-:\xcb)+\x00', 0x4) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) chown$auto(0xfffffffffffffffd, 0x1ff, 0x2) 2.935116618s ago: executing program 1 (id=3015): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setrlimit$auto(0x9, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) mmap$auto(0xdb, 0xd, 0xfffffffffffffffa, 0x18, 0x3, 0x3ff) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) setsockopt$auto(0x3, 0x6, 0x4, 0x0, 0xfb3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x18, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_CIPHER_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x1, 0x3, 0x4) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x8, 0x0, 0x4) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000328bd7000fedbdf250200000005001300b900000008000c000900000008001800030000000c001000010000000000000006001a004e20000041001f007736242d3ab4d17d2a9b90921c67c2436e68c2f334722c7a58f943c21bffe1783f7104b61d15f697bafb3982aba607f25377325f15af578a942ac970970000003508000056cf1415fd73a60e88e51fdfd4b08ae5695f63550bf5738faac7d2f460fcbbd3d72727c42547e6377d2d1cdc434a8e879800000014001f00682436cb3f4092b3bffe11acd3b47cc1"], 0xd0}, 0x1, 0x0, 0x0, 0x20004000}, 0x20) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) setrlimit$auto(0x9, 0x0) (async) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) (async) socket(0xa, 0x801, 0x106) (async) mmap$auto(0xdb, 0xd, 0xfffffffffffffffa, 0x18, 0x3, 0x3ff) (async) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async) setsockopt$auto(0x3, 0x6, 0x4, 0x0, 0xfb3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x18, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_CIPHER_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) close_range$auto(0x1, 0x3, 0x4) (async) io_uring_setup$auto(0x6, 0x0) (async) socket(0xa, 0x2, 0x0) (async) setsockopt$auto(0x3, 0x0, 0x8, 0x0, 0x4) (async) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000328bd7000fedbdf250200000005001300b900000008000c000900000008001800030000000c001000010000000000000006001a004e20000041001f007736242d3ab4d17d2a9b90921c67c2436e68c2f334722c7a58f943c21bffe1783f7104b61d15f697bafb3982aba607f25377325f15af578a942ac970970000003508000056cf1415fd73a60e88e51fdfd4b08ae5695f63550bf5738faac7d2f460fcbbd3d72727c42547e6377d2d1cdc434a8e879800000014001f00682436cb3f4092b3bffe11acd3b47cc1"], 0xd0}, 0x1, 0x0, 0x0, 0x20004000}, 0x20) (async) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) (async) 2.440661849s ago: executing program 2 (id=3017): r0 = socket(0x29, 0x2, 0x0) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040025bd7025e900fbdbdf250f00000057f54d97d7d6e2afa481e26e34a807eb2bb40f0000f3ce33cb6509bbc86f9fe644fe192c169e8e16c09b757fc1"], 0x14}, 0x1, 0x0, 0x0, 0x8000001}, 0x8040) (async) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) (async) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0x22240, 0x154) (async) open(0x0, 0xa240, 0x15e) 2.315240866s ago: executing program 1 (id=3018): madvise$auto(0x0, 0x2000040080000004, 0xe) setsockopt$auto(0x3, 0x0, 0x19, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002240), 0xffffffffffffffff) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) socket(0xa, 0x6, 0x0) setsockopt$auto(0x3, 0x10d, 0xd, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x10006, 0x40000000029, 0x3d, 0xfffffffffffffffe, 0x0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c0080c2}, 0x480d0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) mbind$auto(0x1ffff000, 0x8000000000000001, 0x100000000, 0x0, 0x1, 0x2) mmap$auto(0x7, 0x2, 0x914, 0x12, 0x3, 0x5) open(&(0x7f0000000800)='./file0\x00', 0x503f40, 0x50) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x7, 0x100000028004) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x2b, 0x1, 0x1) getsockopt$auto(0x4, 0x6, 0x25, 0xfffffffffffffffc, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) ioctl$auto(0x3, 0x5411, 0x26) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00'}) socket(0x2, 0x801, 0x100) socket(0x1a, 0x4, 0x2) getsockopt$auto(0x5fb0, 0x6, 0xd, 0xffffffffffffffff, 0xffffffffffffffff) clock_gettime$auto(0xdc, &(0x7f0000000000)={0x9, 0xfe}) setpriority$auto(0xc100000000000000, 0x0, 0x9) 2.304720817s ago: executing program 0 (id=3019): mmap$auto(0xfffffffffffffff9, 0x10001, 0x5, 0xebe, 0x2, 0x4) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0xa) prctl$auto(0x8, 0x4, 0x10001, 0x1, 0x90) (async) r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) semctl$auto(0x1ff, 0x2, 0x13, 0x1) setrlimit$auto(0x2, &(0x7f0000000000)={0x2, 0x100}) (async) close_range$auto(0x0, 0xe903, 0x2) (async) socket(0x2, 0x1, 0x0) socket(0x28, 0x5, 0x0) (async) getpeername$auto(0x3, 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f00000000c0), 0xffffffffffffffff) ioperm$auto(0x3, 0x6, 0x3) (async) fchmod$auto(0x0, 0x9b9a) (async) sendmsg$auto_SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001780)={0x14, r2, 0x101, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008000) socket(0xa, 0x5, 0x0) (async) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) io_setup$auto(0x1, 0x0) (async) getsockopt$auto(0x6, 0x40000000084, 0x75, 0xfffffffffffffffe, 0x0) semctl$auto(0x3, 0x8, 0x4, 0x3) setreuid$auto(0x5, 0x8) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (rerun: 64) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$auto(0x1, 0x894c, 0x8) 1.911884023s ago: executing program 3 (id=3020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00'}) r2 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus/file0\x00', 0x115402, 0x98) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r3) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c001600", @ANYRES64, @ANYRESOCT=r4], 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x8) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x5c, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0xf8}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_PAUSE_HEADER={0x7, 0x1, "07efd9"}, @ETHTOOL_A_PAUSE_HEADER={0x7, 0x1, "74d46c"}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_PAUSE_HEADER={0x7, 0x1, "592997"}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x89}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0xdc}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048804}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00'}) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r1, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_SCOPE={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 1.78024584s ago: executing program 3 (id=3021): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x8000000000000001, 0x400005, 0xdf, 0x9b72, 0x3, 0x8000) mincore$auto(0x0, 0x8000000000005a, 0x0) mkdir$auto(0x0, 0x40) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x155) open(&(0x7f0000000000)='./file0\x00', 0xa240, 0x1de) ioperm$auto(0x7, 0x6, 0x20002) syncfs$auto(0x2aa60000000000) setreuid$auto(0x0, 0x20000000004) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x205, 0xdf, 0x18, 0x40000000000402, 0x8000) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x40b4ff743f22ed04}, 0x2) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x6, 0xb0, 0x6) timerfd_create$auto(0x2, 0x4) socket(0x21, 0x86de384189b421be, 0x658) io_uring_register$auto(0x2, 0x0, &(0x7f0000001040), 0x7f) 1.753661009s ago: executing program 1 (id=3022): setpriority$auto(0x2, 0x8000000000000000, 0x4) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) (async) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) dup2$auto(0x0, 0x4) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r0, 0x0, 0x14080) (async) ioctl$auto(0x1, 0x541b, 0x8) (async) io_uring_setup$auto(0x6, 0x0) (async) listen$auto(0x7fff, 0x83) (async) socket(0xa, 0x2, 0x0) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x0, &(0x7f0000000380)={0x0, 0xbe}) shutdown$auto(0x200000003, 0x2) setresgid$auto(0xa, 0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_NLBL_UNLBL(&(0x7f0000000080), r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400026}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ILA_ATTR_IFINDEX={0x8}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0xfffffffffffffffe}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x400}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x81) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_NFC_CMD_GET_SE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000500}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x44) 1.533035568s ago: executing program 3 (id=3023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000005c0), r1) (async) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8537}, @NL80211_ATTR_PEER_MEASUREMENTS={0x9, 0x111, "af893d750d"}, @NL80211_ATTR_MLD_ADDR={0x4}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x40}}, 0x4040000) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000840), r1) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x5a540e03ab5a5ff3}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r2, 0x20, 0x50, 0x25dfdbfe, {}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x30008040) (async) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000980), r1) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0xb1, 0x2f, "aed11b9a4201beab10a9b60de50b90a1d0fd508ea196bec5691198a03aa95a9aa3bb77e779066d8c7cd609478d29731af7e7d870c4935f784073b957463d433800760949e8197f9125de31ebea6226023c68fb730c40dbf782ee977974bb1492d01b2738a0cd3eea2474dc86df28fa1d8db0f14c123aa6b677aa72803b7b0a348d6954acebd2e25f71ef2b114010a65e7fc7b0e9c16458cc39088f67cc0f87386078251baba4fdffc20ba484dd"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x44084}, 0x4008000) (async) sendmsg$auto_NL80211_CMD_REMOVE_LINK(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00042bbd7000fddbdf2595000000"], 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x64044051) (async) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40040008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x40}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x7849e3d3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x4, 0x2, 0x5, 0x4) ioperm$auto(0x800, 0x5, 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x65, 0x2) (async) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x6, 0x1ff, 0x5d76febf) (async) io_uring_setup$auto(0x3ff, 0x0) io_uring_register$auto(0x2, 0xf, 0x0, 0x20) (async) io_uring_setup$auto(0x48, 0x0) (async) io_uring_register$auto(0x100000001, 0x16, 0xffffffffffffffff, 0x4) (async) rt_tgsigqueueinfo$auto(0x2, 0x400, 0x9dc, 0xfffffffffffffffd) (async) faccessat$auto(0xc0, &(0x7f0000000000)='/\x00', 0x6) 1.471277087s ago: executing program 2 (id=3024): madvise$auto(0x0, 0x2000040080000004, 0xe) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002240), 0xffffffffffffffff) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) setreuid$auto(0x3, 0x7) setfsuid$auto(0x1) pipe$auto(0x0) fcntl$auto(0x4, 0x4, 0xa553) read$auto(0x3, 0x0, 0x80) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1.454615292s ago: executing program 1 (id=3025): mmap$auto(0x0, 0xe985, 0xdf, 0xeb1, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) timer_create$auto(0x7, 0x0, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="00000000f5ffffffffffffff00"}, 0x55) sendmmsg$auto(0x8, 0x0, 0x5, 0x0) mmap$auto(0x0, 0x800, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x101002, 0x80) ioperm$auto(0x7, 0x6, 0x800043) listmount$auto(0xfffffffffffffffe, 0xfffffffffffffffc, 0x40420f00, 0x1) set_robust_list$auto(0xfffffffffffffffe, 0x18) write$auto(0x3, 0x0, 0x81) 1.377823115s ago: executing program 3 (id=3026): madvise$auto(0x0, 0x2000040080000004, 0xe) setsockopt$auto(0x3, 0x0, 0x19, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002240), 0xffffffffffffffff) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) socket(0xa, 0x6, 0x0) setsockopt$auto(0x3, 0x10d, 0xd, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x6, 0x40000000029, 0x1f, 0xfffffffffffffffe, 0x0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x480d0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) mbind$auto(0x1ffff000, 0x8000000000000001, 0x100000000, 0x0, 0x1, 0x2) madvise$auto(0x300, 0xffffffffffff0001, 0x15) 1.101752807s ago: executing program 3 (id=3027): mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) set_mempolicy$auto(0x3, &(0x7f00000001c0)=0xfffffffffffffffd, 0xe4b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1e, 0x1, 0x10000006) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0xa) fchown$auto(0x0, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x4, 0x1) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x6, &(0x7f0000000400)={{0x0, 0x3, 0x0, 0x1, &(0x7f0000000300), 0x20, 0x8000000}, 0xed7138c}, 0x6, 0x0) socket(0x1d, 0x3, 0x1) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) inotify_add_watch$auto(0x200007, 0xfffffffffffffffc, 0x8000000000000000) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x0, 0x0) io_uring_enter$auto(0x0, 0x0, 0x6, 0x9, 0xfffffffffffffffe, 0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000040)='gtp\x00', 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) faccessat$auto(0x69, &(0x7f0000000040)='/\x00', 0x7) 878.080899ms ago: executing program 1 (id=3028): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) futex$auto(&(0x7f0000000000)=0xf0fe, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x1000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) kcmp$auto(0x1, 0x1, 0x40400000000000, 0x4, 0x92) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto(0x1, 0x5421, 0x7fffffffffffffff) mmap$auto(0x0, 0x3, 0xe2, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0401, 0x19) madvise$auto(0x0, 0x10001, 0x100000003) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x10, 0x20089, 0x0, 0xeb2, 0x401, 0xffffffffffffffff) close_range$auto(0x0, 0x1, 0x3) fanotify_init$auto(0x8000000000000000, 0x1) fanotify_mark$auto(0x400000000000, 0x102, 0x9, 0x0, 0x0) mremap$auto(0x0, 0x2, 0x8, 0x3, 0x7effffffb000) socket$nl_generic(0x10, 0x3, 0x10) setrlimit$auto(0x1000000007, 0x0) mmap$auto(0x1, 0x6, 0x100000001, 0x13, 0xc3a8, 0xbb) mmap$auto(0x8, 0x7, 0x1, 0x14, 0x5, 0x200) ioperm$auto(0x3, 0x6, 0x5) timer_create$auto(0x4f, &(0x7f0000000140)={@sival_int=0x81, 0x3, 0x51, @_tid}, &(0x7f0000000180)=0x401) bpf$auto(0x5, &(0x7f0000000000)=@test={0x8, 0x1, 0x1, 0x1, 0x8, 0x63a, 0x10001, 0x8, 0xc511, 0x7, 0xff, 0x49, 0xff, 0x4, 0x9f2e}, 0x779) mmap$auto(0xc68e, 0x30000000000000, 0x2, 0xc41b, 0x2, 0x8000) close$auto(0xffffffffffffffff) socket(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x2) 552.990553ms ago: executing program 2 (id=3029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) mmap$auto(0x0, 0x200000000400008, 0xdf, 0x9b73, 0x2, 0x8000) sysinfo$auto(0x0) bpf$auto(0x8000000000000024, 0xfffffffffffffffc, 0x0) seccomp$auto(0x1, 0x8, 0x0) 406.583844ms ago: executing program 3 (id=3030): madvise$auto(0x0, 0x2000040080000004, 0xe) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (rerun: 32) socket(0x2, 0x1, 0x0) (async) socket(0x29, 0x2, 0x0) (async) writev$auto(0x1, &(0x7f0000000100)={&(0x7f0000000140), 0x400000000000fdef}, 0x1) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 399.715134ms ago: executing program 2 (id=3031): madvise$auto(0xa, 0x4080000021, 0x200012) signalfd4$auto(0x10, &(0x7f0000000000)={0x2}, 0x8, 0x300) setresgid$auto(0x4000009, 0x8, 0x7fffffffffffffff) 274.449304ms ago: executing program 2 (id=3032): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x8000000000000001, 0x400005, 0xdf, 0x9b72, 0x3, 0x8000) mincore$auto(0x0, 0x8000000000005a, 0x0) mkdir$auto(0x0, 0x40) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x155) open(&(0x7f0000000000)='./file0\x00', 0xa240, 0x1de) ioperm$auto(0x7, 0x6, 0x20002) syncfs$auto(0x2aa60000000000) setreuid$auto(0x0, 0x20000000004) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x205, 0xdf, 0x18, 0x40000000000402, 0x8000) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x40b4ff743f22ed04}, 0x2) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x6, 0xb0, 0x6) timerfd_create$auto(0x2, 0x4) io_uring_register$auto(0x2, 0x0, &(0x7f0000001040), 0x7f) 0s ago: executing program 2 (id=3033): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x3, 0x8, 0xb, 0x2e, 0x0, 0x3}, 0x6f4) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x9c55901, 0x8ea2, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x5) mmap$auto(0x0, 0x6, 0xa, 0x80000011, 0x101, 0x7) mmap$auto(0x400, 0x4, 0x4000000000df, 0x40ebd, 0x401, 0x300000000000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) ioctl$auto(0x3, 0x89e0, 0xfffffffffffff4e0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) remap_file_pages$auto(0xfffffffffffffffd, 0x10000, 0x5, 0x5, 0xfffffffffffffff7) kernel console output (not intermixed with test programs): 522.606666][T12874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.636952][T12874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.655213][T12874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.835398][ T8320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.861905][ T8320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.966579][ T8323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.974466][ T8323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.957597][T13217] svc: failed to register nfsdv3 RPC service (errno 111). [ 524.988513][T13217] svc: failed to register nfsaclv3 RPC service (errno 111). [ 526.634466][T13283] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 526.704037][T13283] svc: failed to register nfsdv3 RPC service (errno 111). [ 526.729111][T13283] svc: failed to register nfsaclv3 RPC service (errno 111). [ 526.748989][T13278] delete_channel: no stack [ 527.353516][T13312] ptrace attach of "./syz-executor exec"[9217] was attempted by "./syz-executor exec"[13312] [ 533.655852][ T29] audit: type=1800 audit(8277292035.190:15): pid=13446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1895" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 534.127839][T13458] openvswitch: netlink: Flow actions attr not present in new flow. [ 539.926691][T13522] delete_channel: no stack [ 544.648352][T13602] openvswitch: netlink: Flow actions attr not present in new flow. [ 547.349063][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1946'. [ 550.755558][T13722] Invalid ELF header magic: != ELF [ 551.057499][T13725] netlink: 'syz.2.1965': attribute type 11 has an invalid length. [ 551.635803][T13713] delete_channel: no stack [ 554.017726][T13757] kexec: Could not allocate control_code_buffer [ 554.107296][T13773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1980'. [ 554.573401][ T8320] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.803589][ T8320] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.038907][ T8320] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.309226][ T8320] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.526820][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 555.544085][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 555.552577][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 555.565363][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 555.586328][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 555.593927][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 555.811362][T13794] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 555.823490][ T8320] bridge_slave_1: left allmulticast mode [ 555.835414][ T8320] bridge_slave_1: left promiscuous mode [ 555.841357][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.936470][ T8320] bridge_slave_0: left allmulticast mode [ 555.956793][ T8320] bridge_slave_0: left promiscuous mode [ 555.975905][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.147709][ T8320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.172647][ T8320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.194788][ T8320] bond0 (unregistering): Released all slaves [ 557.715349][ T5239] Bluetooth: hci2: command tx timeout [ 558.121267][T13796] chnl_net:caif_netlink_parms(): no params data found [ 558.720133][T13841] ptrace attach of "./syz-executor exec"[8080] was attempted by "./syz-executor exec"[13841] [ 558.805284][T13796] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.812484][T13796] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.822030][T13796] bridge_slave_0: entered allmulticast mode [ 558.829342][T13796] bridge_slave_0: entered promiscuous mode [ 558.837732][T13796] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.844898][T13796] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.852991][T13796] bridge_slave_1: entered allmulticast mode [ 558.860335][T13796] bridge_slave_1: entered promiscuous mode [ 559.034440][T13796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.059689][T13796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.269369][T13796] team0: Port device team_slave_0 added [ 559.289178][T13796] team0: Port device team_slave_1 added [ 559.517348][T13796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.534768][T13796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.586246][T13796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.618167][T13796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.635451][T13796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.689206][T13796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.799513][ T5239] Bluetooth: hci2: command tx timeout [ 560.066027][T13796] hsr_slave_0: entered promiscuous mode [ 560.110828][T13796] hsr_slave_1: entered promiscuous mode [ 560.163427][T13796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.188793][T13796] Cannot create hsr debugfs directory [ 560.502093][ T8320] hsr_slave_0: left promiscuous mode [ 560.545460][ T8320] hsr_slave_1: left promiscuous mode [ 560.607241][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.614750][ T8320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.676026][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.703946][ T8320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.791108][ T8320] veth1_macvtap: left promiscuous mode [ 560.817530][ T8320] veth0_macvtap: left promiscuous mode [ 560.823249][ T8320] veth1_vlan: left promiscuous mode [ 560.846443][ T8320] veth0_vlan: left promiscuous mode [ 561.875388][ T5239] Bluetooth: hci2: command tx timeout [ 562.241852][ T8320] team0 (unregistering): Port device team_slave_1 removed [ 562.401268][ T8320] team0 (unregistering): Port device team_slave_0 removed [ 563.955514][ T5239] Bluetooth: hci2: command tx timeout [ 565.901436][T13796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 565.973463][T13796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 566.022412][T13796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 566.204224][T13796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 566.500683][T13796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.524687][T13796] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.538360][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.545545][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.632451][ T8323] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.639704][ T8323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.222514][T13796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.291961][T13796] veth0_vlan: entered promiscuous mode [ 567.339215][T13796] veth1_vlan: entered promiscuous mode [ 567.437262][T13796] veth0_macvtap: entered promiscuous mode [ 567.469400][T13796] veth1_macvtap: entered promiscuous mode [ 567.529518][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.590716][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.615221][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.655159][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.681657][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.710348][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.743776][T13796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.797282][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.834543][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.905313][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.935917][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.980882][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.019589][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.091450][T13796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.113976][T13796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.145849][T13796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.207043][T13796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.255191][T13796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.525913][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.532270][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.562470][ T8323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.596575][ T8323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.690456][ T8320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.719866][ T8320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.058359][T14139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2039'. [ 576.916345][T14218] kernel read not supported for file /ÿ)-\&[} (pid: 14218 comm: syz.0.2054) [ 577.086880][ T29] audit: type=1800 audit(8277292047.710:16): pid=14218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2054" name=FF292D5C265B7D dev="mqueue" ino=46583 res=0 errno=0 [ 577.533557][T14213] kexec: Could not allocate control_code_buffer [ 578.362336][T14230] svc: failed to register nfsdv3 RPC service (errno 111). [ 578.399721][T14230] svc: failed to register nfsaclv3 RPC service (errno 111). [ 579.959545][ T9893] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.340121][ T9893] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.841581][ T9893] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.293497][ T9893] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.367343][T14263] nbd: must specify at least one socket [ 581.706906][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 581.717562][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 581.726961][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 581.735558][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 581.745040][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 581.753490][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 581.761384][ T9893] bridge_slave_1: left allmulticast mode [ 581.767998][ T9893] bridge_slave_1: left promiscuous mode [ 581.773797][ T9893] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.910837][ T9893] bridge_slave_0: left allmulticast mode [ 581.917317][ T9893] bridge_slave_0: left promiscuous mode [ 581.925534][ T9893] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.881441][ T5239] Bluetooth: hci0: command tx timeout [ 584.129778][ T9893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.184556][ T9893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.246735][ T9893] bond0 (unregistering): Released all slaves [ 585.496226][T14265] chnl_net:caif_netlink_parms(): no params data found [ 585.955241][ T5239] Bluetooth: hci0: command tx timeout [ 586.299804][ T9893] hsr_slave_0: left promiscuous mode [ 586.316599][ T9893] hsr_slave_1: left promiscuous mode [ 586.322837][ T9893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.333160][ T9893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.346358][ T9893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.357289][ T9893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.414496][ T9893] veth1_macvtap: left promiscuous mode [ 586.420241][ T9893] veth0_macvtap: left promiscuous mode [ 586.433273][ T9893] veth1_vlan: left promiscuous mode [ 586.441451][ T9893] veth0_vlan: left promiscuous mode [ 587.542824][ T9893] team0 (unregistering): Port device team_slave_1 removed [ 587.739480][ T9893] team0 (unregistering): Port device team_slave_0 removed [ 588.036221][ T5239] Bluetooth: hci0: command tx timeout [ 588.674686][T14265] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.695551][T14265] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.702884][T14265] bridge_slave_0: entered allmulticast mode [ 588.731860][T14265] bridge_slave_0: entered promiscuous mode [ 588.780364][T14265] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.805654][T14265] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.812997][T14265] bridge_slave_1: entered allmulticast mode [ 588.864021][T14265] bridge_slave_1: entered promiscuous mode [ 589.112853][T14265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.138516][T14265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.234709][T14265] team0: Port device team_slave_0 added [ 589.276758][T14265] team0: Port device team_slave_1 added [ 589.346506][T14265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.372445][T14265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.409286][T14265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.442722][T14265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.478785][T14265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.562345][T14265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.795279][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2088'. [ 589.818421][T14397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.859142][T14265] hsr_slave_0: entered promiscuous mode [ 589.885593][T14265] hsr_slave_1: entered promiscuous mode [ 589.914567][T14265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.930207][T14265] Cannot create hsr debugfs directory [ 590.119750][ T5239] Bluetooth: hci0: command tx timeout [ 590.690698][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2093'. [ 591.439251][T14265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 591.485802][T14265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 591.507481][T14265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 591.528116][T14265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 591.760517][T14265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.827597][T14265] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.864690][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.871972][ T8328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.921495][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.928739][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.079438][T14265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 592.486578][T14265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.585143][T14265] veth0_vlan: entered promiscuous mode [ 592.630032][T14265] veth1_vlan: entered promiscuous mode [ 592.713250][T14265] veth0_macvtap: entered promiscuous mode [ 592.740020][T14265] veth1_macvtap: entered promiscuous mode [ 592.792929][T14265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.848549][T14265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.890648][T14265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.915999][T14265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.938006][T14265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.962860][T14265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.988885][T14265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.009137][T14265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.036229][T14265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.053666][T14265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.075707][T14265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.105194][T14265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.139899][T14265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.166666][T14265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.217392][T14265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.226664][T14265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.235870][T14265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.244645][T14265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.394329][ T8320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.415941][ T8320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.532332][ T8320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.567100][ T8320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.171530][T14580] sctp: [Deprecated]: syz.0.2119 (pid 14580) Use of struct sctp_assoc_value in delayed_ack socket option. [ 596.171530][T14580] Use struct sctp_sack_info instead [ 599.044047][T14644] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2132'. [ 599.051825][ T9893] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.354360][ T9893] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.848498][ T9893] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.399281][ T9893] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.430683][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 600.454743][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 600.471577][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 600.485840][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 600.495871][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 600.513305][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 600.858277][ T9893] bridge_slave_1: left allmulticast mode [ 600.864521][ T9893] bridge_slave_1: left promiscuous mode [ 600.890775][ T9893] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.037997][ T9893] bridge_slave_0: left allmulticast mode [ 601.052389][ T9893] bridge_slave_0: left promiscuous mode [ 601.068559][ T9893] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.595366][ T5239] Bluetooth: hci1: command tx timeout [ 602.974738][ T9893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.039296][ T9893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.187716][ T9893] bond0 (unregistering): Released all slaves [ 603.766698][T14657] chnl_net:caif_netlink_parms(): no params data found [ 604.316075][T14657] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.323901][T14657] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.367425][T14657] bridge_slave_0: entered allmulticast mode [ 604.378328][T14657] bridge_slave_0: entered promiscuous mode [ 604.397024][T14657] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.404215][T14657] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.411721][T14657] bridge_slave_1: entered allmulticast mode [ 604.419216][T14657] bridge_slave_1: entered promiscuous mode [ 604.675290][ T5239] Bluetooth: hci1: command tx timeout [ 604.941535][T14657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.115620][T14657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.373562][T14657] team0: Port device team_slave_0 added [ 605.388667][T14657] team0: Port device team_slave_1 added [ 605.909965][T14657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.931993][T14657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.030466][T14657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.335786][T14657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.363341][T14657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.435310][T14657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.765376][ T5239] Bluetooth: hci1: command tx timeout [ 607.865704][T14657] hsr_slave_0: entered promiscuous mode [ 607.932533][T14657] hsr_slave_1: entered promiscuous mode [ 607.988770][T14657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 608.009797][T14657] Cannot create hsr debugfs directory [ 608.554480][ T9893] hsr_slave_0: left promiscuous mode [ 608.583349][ T9893] hsr_slave_1: left promiscuous mode [ 608.742215][ T9893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.750344][ T9893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.813202][T14812] Invalid ELF header magic: != ELF [ 608.822537][ T9893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.835833][ T5239] Bluetooth: hci1: command tx timeout [ 608.865261][ T9893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.934268][ T9893] veth1_macvtap: left promiscuous mode [ 608.991122][ T9893] veth0_macvtap: left promiscuous mode [ 609.001329][ T9893] veth1_vlan: left promiscuous mode [ 609.017908][ T9893] veth0_vlan: left promiscuous mode [ 609.443909][T14827] svc: failed to register nfsdv3 RPC service (errno 111). [ 609.482939][T14827] svc: failed to register nfsaclv3 RPC service (errno 111). [ 610.662491][ T9893] team0 (unregistering): Port device team_slave_1 removed [ 610.792439][ T9893] team0 (unregistering): Port device team_slave_0 removed [ 613.413007][T14657] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 613.431428][T14657] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 613.460110][T14657] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 613.481199][T14657] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 613.720847][T14657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.748054][T14657] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.881042][ T8320] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.888279][ T8320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.932763][ T8320] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.940023][ T8320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.011640][T14657] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 614.069143][T14657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 614.387202][T14657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.481085][T14657] veth0_vlan: entered promiscuous mode [ 614.518566][T14657] veth1_vlan: entered promiscuous mode [ 614.617146][T14657] veth0_macvtap: entered promiscuous mode [ 614.649856][T14657] veth1_macvtap: entered promiscuous mode [ 614.714073][T14657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.739241][T14657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.782057][T14657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.805153][T14657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.831431][T14657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.863417][T14657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.893258][T14657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.948245][T14657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.983858][T14657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.997034][T14657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.013396][T14657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.063946][T14657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.089863][T14657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.112385][T14657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.162857][T14657] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.189200][T14657] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.216376][T14657] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.242644][T14657] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.488191][ T9893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.500262][ T9893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.546631][ T9893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.565743][ T9893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.934953][T15004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2195'. [ 617.313943][T15015] nbd: couldn't find device at index 0 [ 618.425409][T15052] ======================================================= [ 618.425409][T15052] WARNING: The mand mount option has been deprecated and [ 618.425409][T15052] and is ignored by this kernel. Remove the mand [ 618.425409][T15052] option from the mount to silence this warning. [ 618.425409][T15052] ======================================================= [ 625.325475][T15228] svc: failed to register nfsdv3 RPC service (errno 111). [ 625.344935][T15228] svc: failed to register nfsaclv3 RPC service (errno 111). [ 626.564290][T15232] kexec: Could not allocate control_code_buffer [ 627.437063][T15283] openvswitch: netlink: Key type 8590 is out of range max 32 [ 627.922832][ T8328] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.210909][ T8328] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.593062][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 628.603895][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 628.615889][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 628.625947][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 628.634709][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 628.642872][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 628.669241][ T8328] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.012818][T15293] kexec: Could not allocate control_code_buffer [ 629.036538][ T8328] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.724505][T15304] chnl_net:caif_netlink_parms(): no params data found [ 629.773404][ T8328] bridge_slave_1: left allmulticast mode [ 629.785943][ T8328] bridge_slave_1: left promiscuous mode [ 629.816423][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.909156][ T8328] bridge_slave_0: left allmulticast mode [ 629.939555][ T8328] bridge_slave_0: left promiscuous mode [ 629.961490][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.965718][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.969377][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.765302][ T5239] Bluetooth: hci1: command tx timeout [ 632.461795][ T8328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.565842][ T8328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.609696][ T8328] bond0 (unregistering): Released all slaves [ 632.840275][ T5239] Bluetooth: hci1: command tx timeout [ 633.617152][T15304] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.624577][T15304] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.644923][T15304] bridge_slave_0: entered allmulticast mode [ 633.654142][T15304] bridge_slave_0: entered promiscuous mode [ 633.683860][T15304] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.705218][T15304] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.733521][T15304] bridge_slave_1: entered allmulticast mode [ 633.746435][T15304] bridge_slave_1: entered promiscuous mode [ 634.322020][T15372] kexec: Could not allocate control_code_buffer [ 634.730060][T15304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.768461][T15304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.922122][ T5239] Bluetooth: hci1: command tx timeout [ 635.919062][T15304] team0: Port device team_slave_0 added [ 635.962465][T15304] team0: Port device team_slave_1 added [ 636.251233][T15304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.267874][T15304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.345257][T15304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.995996][ T5244] Bluetooth: hci1: command tx timeout [ 637.535290][ T8328] hsr_slave_0: left promiscuous mode [ 638.185352][ T8328] hsr_slave_1: left promiscuous mode [ 638.717712][ T8328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.735252][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.996275][ T8328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.003774][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.369153][ T8328] veth1_macvtap: left promiscuous mode [ 639.374786][ T8328] veth0_macvtap: left promiscuous mode [ 639.404508][ T8328] veth1_vlan: left promiscuous mode [ 639.427255][ T8328] veth0_vlan: left promiscuous mode [ 642.105033][T15694] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2295'. [ 645.853354][T15707] kexec: Could not allocate control_code_buffer [ 648.774907][ T8328] team0 (unregistering): Port device team_slave_1 removed [ 649.389232][ T8328] team0 (unregistering): Port device team_slave_0 removed [ 653.463055][T15304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.485158][T15304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.575187][T15304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.978891][T15304] hsr_slave_0: entered promiscuous mode [ 654.077291][T15304] hsr_slave_1: entered promiscuous mode [ 659.032888][T15304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 659.098074][T15304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 659.112126][T15304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 659.157525][T15304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 659.430150][T15304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.500472][T15304] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.535667][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.542840][ T8328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.594298][ T8325] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.601504][ T8325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.737731][T15304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 660.331843][T15304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.490508][T15304] veth0_vlan: entered promiscuous mode [ 660.548366][T15304] veth1_vlan: entered promiscuous mode [ 660.637049][T15304] veth0_macvtap: entered promiscuous mode [ 660.692787][T15304] veth1_macvtap: entered promiscuous mode [ 660.751916][T15304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.799607][T15304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.836037][T15304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.859354][T15304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.895980][T15304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.936806][T15304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.956835][T15304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.993950][T15304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.042933][T15304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.062737][T15304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.085529][T15304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.102889][T15304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.126263][T15304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.149779][T15304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.210489][T15304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.243546][T15304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.275986][T15304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.284773][T15304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.599639][ T8328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.626721][ T8328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.748397][T15691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.766208][T15691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.731090][ T8320] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.939009][ T8320] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.101076][ T8320] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.279688][ T8320] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.567852][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 665.577506][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 665.589151][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 665.599706][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 665.608444][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 665.617739][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 665.663131][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 665.684900][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 665.696500][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 665.714708][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 665.739731][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 665.755546][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 665.905598][ T8320] bridge_slave_1: left allmulticast mode [ 665.911328][ T8320] bridge_slave_1: left promiscuous mode [ 665.935446][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.952364][ T8320] bridge_slave_0: left allmulticast mode [ 665.982008][ T8320] bridge_slave_0: left promiscuous mode [ 665.995535][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.923446][ T8320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.965938][ T8320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.990833][ T8320] bond0 (unregistering): Released all slaves [ 667.719396][ T5239] Bluetooth: hci3: command tx timeout [ 667.812039][ T5244] Bluetooth: hci4: command tx timeout [ 668.250414][T15955] chnl_net:caif_netlink_parms(): no params data found [ 668.291338][T15952] chnl_net:caif_netlink_parms(): no params data found [ 668.409347][T15970] kexec: Could not allocate control_code_buffer [ 669.646953][T15952] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.660595][T15952] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.675298][T15952] bridge_slave_0: entered allmulticast mode [ 669.683711][T15952] bridge_slave_0: entered promiscuous mode [ 669.710875][T15955] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.722650][T15955] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.740672][T15955] bridge_slave_0: entered allmulticast mode [ 669.756478][T15955] bridge_slave_0: entered promiscuous mode [ 669.795245][ T5244] Bluetooth: hci3: command tx timeout [ 669.885245][ T5244] Bluetooth: hci4: command tx timeout [ 670.591700][T15952] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.605893][T15952] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.613313][T15952] bridge_slave_1: entered allmulticast mode [ 670.638990][T15952] bridge_slave_1: entered promiscuous mode [ 670.940488][T15955] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.976830][T15955] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.984182][T15955] bridge_slave_1: entered allmulticast mode [ 670.996337][T15955] bridge_slave_1: entered promiscuous mode [ 671.660298][ T8320] hsr_slave_0: left promiscuous mode [ 671.883091][ T5244] Bluetooth: hci3: command tx timeout [ 671.955244][ T5244] Bluetooth: hci4: command tx timeout [ 672.065583][ T8320] hsr_slave_1: left promiscuous mode [ 672.255267][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.262777][ T8320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.336177][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.353554][ T8320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.444338][ T8320] veth1_macvtap: left promiscuous mode [ 672.471164][ T8320] veth0_macvtap: left promiscuous mode [ 672.485307][ T8320] veth1_vlan: left promiscuous mode [ 672.490729][ T8320] veth0_vlan: left promiscuous mode [ 673.955186][ T5244] Bluetooth: hci3: command tx timeout [ 674.035245][ T5244] Bluetooth: hci4: command tx timeout [ 674.771508][T16065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.820697][ T8320] team0 (unregistering): Port device team_slave_1 removed [ 675.903581][ T8320] team0 (unregistering): Port device team_slave_0 removed [ 677.105461][T15952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.200299][T15955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.410812][T15952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.453739][T15955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.713073][T15955] team0: Port device team_slave_0 added [ 677.751956][T15952] team0: Port device team_slave_0 added [ 677.770720][T15952] team0: Port device team_slave_1 added [ 677.853305][T15955] team0: Port device team_slave_1 added [ 678.054833][T15955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.075439][T15955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.135425][T15955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.159541][T15952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.177256][T15952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.221370][T15952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.278449][T15955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.295191][T15955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.345182][T15955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.410420][T15952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.425151][T15952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.482950][T15952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.563567][T15955] hsr_slave_0: entered promiscuous mode [ 678.616000][T15955] hsr_slave_1: entered promiscuous mode [ 678.655569][T15955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 678.663210][T15955] Cannot create hsr debugfs directory [ 679.100703][T15952] hsr_slave_0: entered promiscuous mode [ 679.126726][T15952] hsr_slave_1: entered promiscuous mode [ 679.166630][T15952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 679.174278][T15952] Cannot create hsr debugfs directory [ 679.248109][ T8320] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.653660][ T8320] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.897157][ T8320] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.058139][ T8320] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.819040][ T8320] bridge_slave_1: left allmulticast mode [ 680.829364][ T8320] bridge_slave_1: left promiscuous mode [ 680.844070][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.921403][ T8320] bridge_slave_0: left allmulticast mode [ 680.935300][ T8320] bridge_slave_0: left promiscuous mode [ 680.946966][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.657705][T16128] kexec: Could not allocate control_code_buffer [ 681.883110][ T8320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.908766][ T8320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.930033][ T8320] bond0 (unregistering): Released all slaves [ 682.365788][T15955] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 682.390830][T15955] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 682.481511][T15955] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 682.534574][ T8320] hsr_slave_0: left promiscuous mode [ 682.548895][ T8320] hsr_slave_1: left promiscuous mode [ 682.569133][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.580295][ T8320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.598607][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.610554][ T8320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.663027][ T8320] veth1_macvtap: left promiscuous mode [ 682.681706][ T8320] veth0_macvtap: left promiscuous mode [ 682.692090][ T8320] veth1_vlan: left promiscuous mode [ 682.700445][ T8320] veth0_vlan: left promiscuous mode [ 683.668057][ T8320] team0 (unregistering): Port device team_slave_1 removed [ 683.732739][ T8320] team0 (unregistering): Port device team_slave_0 removed [ 684.383421][T15955] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 684.897734][T15955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.121040][T15952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 685.179312][T15955] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.287640][T15952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 685.306685][ T8325] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.313915][ T8325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.357804][ T8325] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.365024][ T8325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.410085][T15952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 685.427291][T15952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 685.960560][T15952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.009856][T15955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.061237][T15955] veth0_vlan: entered promiscuous mode [ 686.073845][T15955] veth1_vlan: entered promiscuous mode [ 686.101744][T15955] veth0_macvtap: entered promiscuous mode [ 686.111398][T15955] veth1_macvtap: entered promiscuous mode [ 686.151486][T15952] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.188173][T15955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.206709][T15955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.231561][T15955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.255807][T15955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.286738][T15955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.321884][T15681] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.329063][T15681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.396856][T15955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.445086][T15955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.486116][T15955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.511298][T15955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.571497][T15955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.583395][T15681] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.590654][T15681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.635964][T15955] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.655370][T15955] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.664287][T15955] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.725393][T15955] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.963411][T15679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.001352][T15679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.114402][T15679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.143993][T15679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.404293][T15952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.542903][T15952] veth0_vlan: entered promiscuous mode [ 687.588710][T15952] veth1_vlan: entered promiscuous mode [ 687.652000][T15952] veth0_macvtap: entered promiscuous mode [ 687.672849][T15952] veth1_macvtap: entered promiscuous mode [ 687.732002][T15952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.756075][T15952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.775604][T15952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.797516][T15952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.818047][T15952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.838925][T15952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.857299][T15952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.903371][T15952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.919559][T15952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.930944][T15952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.942702][T15952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.965143][T15952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.986729][T15952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.998710][T15952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.047600][T15952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.057907][T15952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.076772][T15952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.096947][T15952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.272330][ T8328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.305525][ T8328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.387454][T15680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.410099][T15680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.927161][T16265] kexec: Could not allocate control_code_buffer [ 690.420109][T16323] FAULT_INJECTION: forcing a failure. [ 690.420109][T16323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.443426][T16323] CPU: 1 UID: 0 PID: 16323 Comm: syz.3.2392 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 690.454025][T16323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 690.464107][T16323] Call Trace: [ 690.467408][T16323] [ 690.470367][T16323] dump_stack_lvl+0x16c/0x1f0 [ 690.475098][T16323] should_fail_ex+0x497/0x5b0 [ 690.479824][T16323] _copy_to_user+0x30/0xc0 [ 690.484292][T16323] simple_read_from_buffer+0xd0/0x160 [ 690.489709][T16323] proc_fail_nth_read+0x198/0x270 [ 690.494770][T16323] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 690.500360][T16323] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 690.506126][T16323] vfs_read+0x1ce/0xbd0 [ 690.510314][T16323] ? __fget_files+0x23a/0x3f0 [ 690.515020][T16323] ? fdget_pos+0x24c/0x360 [ 690.519483][T16323] ? __pfx_lock_release+0x10/0x10 [ 690.524555][T16323] ? trace_lock_acquire+0x14a/0x1d0 [ 690.529784][T16323] ? __pfx_vfs_read+0x10/0x10 [ 690.534499][T16323] ? __pfx___mutex_lock+0x10/0x10 [ 690.539575][T16323] ? __fget_files+0x244/0x3f0 [ 690.544289][T16323] ksys_read+0x12f/0x260 [ 690.548563][T16323] ? __pfx_ksys_read+0x10/0x10 [ 690.553370][T16323] do_syscall_64+0xcd/0x250 [ 690.557920][T16323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.563846][T16323] RIP: 0033:0x7f273af7ca3c [ 690.568286][T16323] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 690.587925][T16323] RSP: 002b:00007f273be12030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 690.596378][T16323] RAX: ffffffffffffffda RBX: 00007f273b135f80 RCX: 00007f273af7ca3c [ 690.604380][T16323] RDX: 000000000000000f RSI: 00007f273be120a0 RDI: 0000000000000006 [ 690.612561][T16323] RBP: 00007f273be12090 R08: 0000000000000000 R09: 0000000000000000 [ 690.620558][T16323] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 690.628552][T16323] R13: 0000000000000000 R14: 00007f273b135f80 R15: 00007ffc4d97f588 [ 690.636566][T16323] [ 691.408181][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.421180][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.199641][T16436] Invalid ELF header magic: != ELF [ 694.633530][T16432] kexec: Could not allocate control_code_buffer [ 696.260847][ T29] audit: type=1326 audit(8277292130.010:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16483 comm="syz.2.2429" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e28b7dff9 code=0x0 [ 697.318337][T16507] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 697.925278][T16517] netlink: 'syz.1.2434': attribute type 11 has an invalid length. [ 706.231487][T16696] nbd: couldn't find device at index 0 [ 708.843344][ T5244] Bluetooth: hci0: command 0x0406 tx timeout [ 709.867987][T16723] kernel read not supported for file /#)-\&[} (pid: 16723 comm: syz.3.2493) [ 709.925275][ T29] audit: type=1800 audit(8277292143.660:18): pid=16723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2493" name="#)-\&[}" dev="mqueue" ino=55762 res=0 errno=0 [ 711.025382][T16753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2500'. [ 711.088160][T16751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2500'. [ 712.371870][T16795] netlink: 'syz.1.2509': attribute type 11 has an invalid length. [ 714.866588][T16845] kexec: Could not allocate control_code_buffer [ 715.577408][T16861] delete_channel: no stack [ 719.241756][T16924] FAULT_INJECTION: forcing a failure. [ 719.241756][T16924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.365403][T16924] CPU: 0 UID: 0 PID: 16924 Comm: syz.0.2542 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 719.375911][T16924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 719.386017][T16924] Call Trace: [ 719.389351][T16924] [ 719.392317][T16924] dump_stack_lvl+0x16c/0x1f0 [ 719.397065][T16924] should_fail_ex+0x497/0x5b0 [ 719.401823][T16924] _copy_from_user+0x30/0xf0 [ 719.406484][T16924] move_addr_to_kernel+0x68/0x160 [ 719.411652][T16924] __sys_connect+0xb4/0x180 [ 719.416216][T16924] ? __pfx___sys_connect+0x10/0x10 [ 719.421490][T16924] ? __pfx_ksys_write+0x10/0x10 [ 719.426410][T16924] __x64_sys_connect+0x72/0xb0 [ 719.431246][T16924] ? lockdep_hardirqs_on+0x7c/0x110 [ 719.436536][T16924] do_syscall_64+0xcd/0x250 [ 719.441107][T16924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.447062][T16924] RIP: 0033:0x7f252e77dff9 [ 719.451529][T16924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.471206][T16924] RSP: 002b:00007f252f62b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 719.479676][T16924] RAX: ffffffffffffffda RBX: 00007f252e935f80 RCX: 00007f252e77dff9 [ 719.487792][T16924] RDX: 0000000000000055 RSI: 0000000020000140 RDI: 0000000000000003 [ 719.496157][T16924] RBP: 00007f252f62b090 R08: 0000000000000000 R09: 0000000000000000 [ 719.504171][T16924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.512189][T16924] R13: 0000000000000000 R14: 00007f252e935f80 R15: 00007fffc952f0d8 [ 719.520227][T16924] [ 720.971979][T16797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.872529][T16968] FAULT_INJECTION: forcing a failure. [ 721.872529][T16968] name failslab, interval 1, probability 0, space 0, times 0 [ 721.885652][T16968] CPU: 1 UID: 0 PID: 16968 Comm: syz.2.2555 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 721.896137][T16968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 721.906240][T16968] Call Trace: [ 721.909555][T16968] [ 721.912505][T16968] dump_stack_lvl+0x16c/0x1f0 [ 721.917229][T16968] should_fail_ex+0x497/0x5b0 [ 721.921954][T16968] should_failslab+0xc2/0x120 [ 721.926672][T16968] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 721.932172][T16968] ? rcu_is_watching+0x12/0xc0 [ 721.936984][T16968] ? dst_alloc+0x99/0x1a0 [ 721.941358][T16968] ? __pfx_ip6_dst_gc+0x10/0x10 [ 721.946256][T16968] dst_alloc+0x99/0x1a0 [ 721.950451][T16968] ip6_dst_alloc+0x2c/0xa0 [ 721.954921][T16968] ip6_pol_route+0x956/0x1120 [ 721.960073][T16968] ? __pfx_ip6_pol_route+0x10/0x10 [ 721.965236][T16968] ? __pfx___lock_acquire+0x10/0x10 [ 721.970490][T16968] ? string+0x202/0x3d0 [ 721.974677][T16968] ? format_decode+0x2d4/0xba0 [ 721.979499][T16968] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 721.985270][T16968] fib6_rule_lookup+0x386/0x720 [ 721.990165][T16968] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 721.995573][T16968] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 722.001251][T16968] ? rcu_is_watching+0x12/0xc0 [ 722.006049][T16968] ? trace_lock_acquire+0x14a/0x1d0 [ 722.011307][T16968] ? __pfx_vsnprintf+0x10/0x10 [ 722.016110][T16968] ? ip6_route_output_flags+0x45/0x640 [ 722.021601][T16968] ? lock_acquire+0x2f/0xb0 [ 722.026146][T16968] ? ip6_route_output_flags+0x45/0x640 [ 722.031646][T16968] ip6_route_output_flags+0x1d0/0x640 [ 722.037058][T16968] ip6_dst_lookup_tail.constprop.0+0x56e/0x19e0 [ 722.043461][T16968] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 722.050178][T16968] ? hlock_class+0x4e/0x130 [ 722.054734][T16968] ? mark_lock+0xb5/0xc60 [ 722.059106][T16968] ? hlock_class+0x4e/0x130 [ 722.063644][T16968] ? mark_lock+0xb5/0xc60 [ 722.068020][T16968] ? find_held_lock+0x2d/0x110 [ 722.072934][T16968] ip6_dst_lookup_flow+0x99/0x1d0 [ 722.078087][T16968] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 722.083768][T16968] ip6_datagram_dst_update+0x63d/0xde0 [ 722.089270][T16968] ? __pfx_ip6_datagram_dst_update+0x10/0x10 [ 722.095304][T16968] ? __pfx_mark_lock+0x10/0x10 [ 722.100112][T16968] ? lock_acquire.part.0+0x11b/0x380 [ 722.105453][T16968] ? __ip6_datagram_connect+0x7b9/0x1480 [ 722.111120][T16968] __ip6_datagram_connect+0x7b9/0x1480 [ 722.116629][T16968] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 722.122583][T16968] ? mark_held_locks+0x9f/0xe0 [ 722.127399][T16968] ? ip6_datagram_connect_v6_only+0x65/0xa0 [ 722.133519][T16968] ? ip6_datagram_connect_v6_only+0x73/0xa0 [ 722.139460][T16968] ip6_datagram_connect_v6_only+0x73/0xa0 [ 722.145249][T16968] inet_dgram_connect+0x15b/0x2f0 [ 722.150375][T16968] ? __pfx_inet_dgram_connect+0x10/0x10 [ 722.156068][T16968] __sys_connect_file+0x14d/0x190 [ 722.161137][T16968] __sys_connect+0x147/0x180 [ 722.165765][T16968] ? __pfx___sys_connect+0x10/0x10 [ 722.170946][T16968] ? __pfx_ksys_write+0x10/0x10 [ 722.175836][T16968] __x64_sys_connect+0x72/0xb0 [ 722.180637][T16968] ? lockdep_hardirqs_on+0x7c/0x110 [ 722.185873][T16968] do_syscall_64+0xcd/0x250 [ 722.190417][T16968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.196350][T16968] RIP: 0033:0x7f4e28b7dff9 [ 722.200788][T16968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.220426][T16968] RSP: 002b:00007f4e29a0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 722.228877][T16968] RAX: ffffffffffffffda RBX: 00007f4e28d35f80 RCX: 00007f4e28b7dff9 [ 722.236925][T16968] RDX: 0000000000000055 RSI: 0000000020000140 RDI: 0000000000000003 [ 722.244936][T16968] RBP: 00007f4e29a0e090 R08: 0000000000000000 R09: 0000000000000000 [ 722.253034][T16968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.261141][T16968] R13: 0000000000000000 R14: 00007f4e28d35f80 R15: 00007ffc040c8e68 [ 722.269158][T16968] [ 722.365990][ T29] audit: type=1326 audit(8277292156.100:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16965 comm="syz.3.2554" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f273af7dff9 code=0x0 [ 723.299863][T17002] FAULT_INJECTION: forcing a failure. [ 723.299863][T17002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.366072][T17002] CPU: 0 UID: 0 PID: 17002 Comm: syz.1.2565 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 723.376582][T17002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 723.386694][T17002] Call Trace: [ 723.390101][T17002] [ 723.393077][T17002] dump_stack_lvl+0x16c/0x1f0 [ 723.397832][T17002] should_fail_ex+0x497/0x5b0 [ 723.402586][T17002] _copy_from_user+0x30/0xf0 [ 723.407249][T17002] kstrtouint_from_user+0xd7/0x1c0 [ 723.412424][T17002] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 723.418222][T17002] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 723.423932][T17002] proc_fail_nth_write+0x84/0x250 [ 723.429033][T17002] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 723.434747][T17002] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 723.440457][T17002] vfs_write+0x28e/0x1140 [ 723.444849][T17002] ? __fget_files+0x23a/0x3f0 [ 723.449584][T17002] ? fdget_pos+0x24c/0x360 [ 723.454061][T17002] ? __pfx_lock_release+0x10/0x10 [ 723.459158][T17002] ? trace_lock_acquire+0x14a/0x1d0 [ 723.464419][T17002] ? __pfx_vfs_write+0x10/0x10 [ 723.469240][T17002] ? __pfx___mutex_lock+0x10/0x10 [ 723.474432][T17002] ? __fget_files+0x244/0x3f0 [ 723.479184][T17002] ksys_write+0x12f/0x260 [ 723.483576][T17002] ? __pfx_ksys_write+0x10/0x10 [ 723.488508][T17002] do_syscall_64+0xcd/0x250 [ 723.493086][T17002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.499044][T17002] RIP: 0033:0x7f651057cadf [ 723.503509][T17002] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 723.523271][T17002] RSP: 002b:00007f6511399030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 723.531759][T17002] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f651057cadf [ 723.539787][T17002] RDX: 0000000000000001 RSI: 00007f65113990a0 RDI: 0000000000000004 [ 723.547813][T17002] RBP: 00007f6511399090 R08: 0000000000000000 R09: 0000000000000000 [ 723.555836][T17002] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 723.563951][T17002] R13: 0000000000000000 R14: 00007f6510735f80 R15: 00007ffc3f7cc298 [ 723.572000][T17002] [ 726.289895][T15680] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.537673][T15680] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.909294][T15680] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.328694][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 727.344660][T15680] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.362686][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 727.373297][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 727.387838][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 727.405767][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 727.413204][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 728.175402][T15680] bridge_slave_1: left allmulticast mode [ 728.181124][T15680] bridge_slave_1: left promiscuous mode [ 728.207875][T15680] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.316379][T15680] bridge_slave_0: left allmulticast mode [ 728.322099][T15680] bridge_slave_0: left promiscuous mode [ 728.346982][T15680] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.490349][ T5244] Bluetooth: hci2: command tx timeout [ 730.865862][T15680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.988586][T15680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.073719][T15680] bond0 (unregistering): Released all slaves [ 731.148195][T17089] chnl_net:caif_netlink_parms(): no params data found [ 731.555190][ T5244] Bluetooth: hci2: command tx timeout [ 732.437029][T17089] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.444204][T17089] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.465390][T17089] bridge_slave_0: entered allmulticast mode [ 732.485231][T17089] bridge_slave_0: entered promiscuous mode [ 732.853438][T17089] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.875380][T17089] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.892637][T17089] bridge_slave_1: entered allmulticast mode [ 732.911116][T17089] bridge_slave_1: entered promiscuous mode [ 733.418401][T17089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.577500][T17089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.642238][ T5244] Bluetooth: hci2: command tx timeout [ 733.693857][T17089] team0: Port device team_slave_0 added [ 733.748283][T17089] team0: Port device team_slave_1 added [ 733.786802][T15680] hsr_slave_0: left promiscuous mode [ 733.852314][T15680] hsr_slave_1: left promiscuous mode [ 733.860645][T15680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.882125][T15680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.909246][T15680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.930615][T15680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.006785][T15680] veth1_macvtap: left promiscuous mode [ 734.022720][T15680] veth0_macvtap: left promiscuous mode [ 734.036593][T15680] veth1_vlan: left promiscuous mode [ 734.051040][T15680] veth0_vlan: left promiscuous mode [ 734.713219][T17201] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2609'. [ 735.045365][T17201] nbd: couldn't find device at index 16711686 [ 735.722449][ T5244] Bluetooth: hci2: command tx timeout [ 736.602833][T15680] team0 (unregistering): Port device team_slave_1 removed [ 736.876238][T15680] team0 (unregistering): Port device team_slave_0 removed [ 738.400864][T17248] delete_channel: no stack [ 739.554744][T17089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.570583][T17089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.597829][T17089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.610874][T17089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.618325][T17089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.645149][T17089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.969397][T17089] hsr_slave_0: entered promiscuous mode [ 740.051987][T17089] hsr_slave_1: entered promiscuous mode [ 740.180189][T17089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 740.201008][T17089] Cannot create hsr debugfs directory [ 741.816430][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2636'. [ 743.119903][T17089] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 743.168287][T17089] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 743.206877][T17089] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 743.238622][T17089] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 743.334399][T17089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.353881][T17089] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.368213][ T8325] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.375402][ T8325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.414193][T15679] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.421394][T15679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.042731][T17089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.143800][T17343] Invalid ELF header magic: != ELF [ 744.188882][T17089] veth0_vlan: entered promiscuous mode [ 744.238753][T17089] veth1_vlan: entered promiscuous mode [ 744.338650][T17089] veth0_macvtap: entered promiscuous mode [ 744.391387][T17089] veth1_macvtap: entered promiscuous mode [ 744.440197][T17089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.484177][T17089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.503262][T17089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.525246][T17089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.547008][T17089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.566383][T17089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.588286][T17089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.612206][T17089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.623216][T17089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.637898][T17089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.667167][T17089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.707648][T17089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.723152][T17089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.749904][T17089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.802660][T17089] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.831172][T17089] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.864449][T17089] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.887625][T17089] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.267635][T15681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.305374][T15681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.381781][T15680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.411695][T15680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.458967][T17396] netlink: 229 bytes leftover after parsing attributes in process `syz.2.2644'. [ 749.460326][ T29] audit: type=1326 audit(8277292183.210:20): auid=4294967295 uid=0 gid=9 ses=4294967295 subj=unconfined pid=17477 comm="syz.2.2657" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e28b7dff9 code=0x0 [ 750.934956][T17516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2663'. [ 752.837266][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.843742][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.915250][ T5239] Bluetooth: hci1: command 0x0406 tx timeout [ 758.025794][T17651] nbd: illegal input index 50331648 [ 761.196585][T15679] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.654065][T15679] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.147053][T15679] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.401392][T15679] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.532349][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 762.546150][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 762.556168][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 762.566031][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 762.574951][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 762.583336][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 763.081137][T15679] bridge_slave_1: left allmulticast mode [ 763.112248][T15679] bridge_slave_1: left promiscuous mode [ 763.128305][T15679] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.236717][T15679] bridge_slave_0: left allmulticast mode [ 763.242524][T15679] bridge_slave_0: left promiscuous mode [ 763.273659][T15679] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.675457][ T5244] Bluetooth: hci0: command tx timeout [ 765.693761][T15679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.722990][T15679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.750780][T15679] bond0 (unregistering): Released all slaves [ 765.880883][T17712] chnl_net:caif_netlink_parms(): no params data found [ 766.418023][T17712] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.427439][T17712] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.434736][T17712] bridge_slave_0: entered allmulticast mode [ 766.459891][T17712] bridge_slave_0: entered promiscuous mode [ 766.469398][T17712] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.479507][T17712] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.487602][T17712] bridge_slave_1: entered allmulticast mode [ 766.494807][T17712] bridge_slave_1: entered promiscuous mode [ 766.755375][ T5244] Bluetooth: hci0: command tx timeout [ 767.029418][T17712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.100413][T17712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.608067][T17712] team0: Port device team_slave_0 added [ 767.664355][T17712] team0: Port device team_slave_1 added [ 768.029497][T17712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.054462][T17712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.125138][T17712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.457142][T15679] hsr_slave_0: left promiscuous mode [ 768.464513][T15679] hsr_slave_1: left promiscuous mode [ 768.524188][T15679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.544234][T15679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.562682][T15679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.585273][T15679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.611593][T17839] svc: failed to register nfsdv3 RPC service (errno 111). [ 768.660526][T17839] svc: failed to register nfsaclv3 RPC service (errno 111). [ 768.719094][T15679] veth1_macvtap: left promiscuous mode [ 768.741110][T15679] veth0_macvtap: left promiscuous mode [ 768.761493][T15679] veth1_vlan: left promiscuous mode [ 768.776911][T15679] veth0_vlan: left promiscuous mode [ 768.835272][ T5244] Bluetooth: hci0: command tx timeout [ 770.491396][T15679] team0 (unregistering): Port device team_slave_1 removed [ 770.664380][T15679] team0 (unregistering): Port device team_slave_0 removed [ 770.941697][ T5244] Bluetooth: hci0: command tx timeout [ 772.057803][T17712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.064938][T17712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.100479][T17712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.347122][T17712] hsr_slave_0: entered promiscuous mode [ 772.353853][T17712] hsr_slave_1: entered promiscuous mode [ 772.385363][T17712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 772.393010][T17712] Cannot create hsr debugfs directory [ 774.092383][T17712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 774.120497][T17712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 774.152713][T17712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 774.191253][T17712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 774.431468][T17712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.511429][T17712] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.538694][T15689] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.545908][T15689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.608193][T15680] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.615446][T15680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.752550][T17712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 775.189022][T17712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.323497][T17712] veth0_vlan: entered promiscuous mode [ 775.359488][T17712] veth1_vlan: entered promiscuous mode [ 775.447121][T17712] veth0_macvtap: entered promiscuous mode [ 775.506713][T17712] veth1_macvtap: entered promiscuous mode [ 775.547503][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.575228][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.595149][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.625205][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.655143][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.675125][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.696869][T17712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.752306][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.786826][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.805247][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.830054][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.865203][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.901642][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.936649][T17712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.982569][T17712] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.016026][T17712] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.024869][T17712] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.064491][T17712] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.082511][T17992] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2765'. [ 776.304840][T15680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.340374][T15680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.380077][T15681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.415776][T15681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.650348][T15679] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.804531][T15679] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.006841][T15679] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.219070][T15679] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.625662][T15679] bridge_slave_1: left allmulticast mode [ 782.632233][T15679] bridge_slave_1: left promiscuous mode [ 782.648645][T15679] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.766166][T15679] bridge_slave_0: left allmulticast mode [ 782.788079][T15679] bridge_slave_0: left promiscuous mode [ 782.821796][T15679] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.075668][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 783.085533][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 783.140262][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 783.162449][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 783.174383][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 783.182237][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 784.502543][T15679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.610395][T15679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.644290][T15679] bond0 (unregistering): Released all slaves [ 784.981259][T18206] chnl_net:caif_netlink_parms(): no params data found [ 785.235838][ T5244] Bluetooth: hci3: command tx timeout [ 785.708778][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 785.743041][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 785.758345][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 785.772833][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 785.784038][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 785.791652][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 786.032947][T18206] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.042431][T18206] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.058318][T18206] bridge_slave_0: entered allmulticast mode [ 786.073731][T18206] bridge_slave_0: entered promiscuous mode [ 786.157480][T18206] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.185982][T18206] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.193296][T18206] bridge_slave_1: entered allmulticast mode [ 786.212206][T18206] bridge_slave_1: entered promiscuous mode [ 786.392252][T15679] hsr_slave_0: left promiscuous mode [ 786.424065][T15679] hsr_slave_1: left promiscuous mode [ 786.447991][T15679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.475313][T15679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.498155][T15679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.521714][T15679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.573171][T15679] veth1_macvtap: left promiscuous mode [ 786.583012][T15679] veth0_macvtap: left promiscuous mode [ 786.591938][T15679] veth1_vlan: left promiscuous mode [ 786.604196][T15679] veth0_vlan: left promiscuous mode [ 787.315239][ T5244] Bluetooth: hci3: command tx timeout [ 787.763889][T15679] team0 (unregistering): Port device team_slave_1 removed [ 787.831842][T15679] team0 (unregistering): Port device team_slave_0 removed [ 787.880203][ T5244] Bluetooth: hci0: command tx timeout [ 788.310181][T18206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.336131][T18206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.547707][T18206] team0: Port device team_slave_0 added [ 788.563890][T18206] team0: Port device team_slave_1 added [ 788.709732][T18206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.727772][T18206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.763507][T18206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.810000][T18268] chnl_net:caif_netlink_parms(): no params data found [ 788.842327][T18206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.856366][T18206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.920740][T18206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.170405][T18206] hsr_slave_0: entered promiscuous mode [ 789.195726][T18206] hsr_slave_1: entered promiscuous mode [ 789.216524][T18206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 789.228216][T18206] Cannot create hsr debugfs directory [ 789.406272][ T5244] Bluetooth: hci3: command tx timeout [ 789.527178][T18268] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.565193][T18268] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.593892][T18268] bridge_slave_0: entered allmulticast mode [ 789.621702][T18268] bridge_slave_0: entered promiscuous mode [ 789.786112][T15679] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.839134][T18268] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.846577][T18268] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.853855][T18268] bridge_slave_1: entered allmulticast mode [ 789.868102][T18268] bridge_slave_1: entered promiscuous mode [ 789.960745][ T5244] Bluetooth: hci0: command tx timeout [ 789.981842][T18268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.096891][T15679] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.130544][T18268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.296662][T15679] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.422079][T18268] team0: Port device team_slave_0 added [ 790.433934][T18268] team0: Port device team_slave_1 added [ 790.487637][T15679] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.624157][T18268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.634152][T18268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.698172][T18268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.143867][T18268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.150992][T18268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.177848][T18268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.468675][T18268] hsr_slave_0: entered promiscuous mode [ 791.476733][T18268] hsr_slave_1: entered promiscuous mode [ 791.477097][ T5244] Bluetooth: hci3: command tx timeout [ 791.489172][T18268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 791.506252][T18268] Cannot create hsr debugfs directory [ 792.045109][ T5244] Bluetooth: hci0: command tx timeout [ 792.090901][T18206] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 792.261090][T15679] bridge_slave_1: left allmulticast mode [ 792.267850][T15679] bridge_slave_1: left promiscuous mode [ 792.273646][T15679] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.357373][T15679] bridge_slave_0: left allmulticast mode [ 792.375569][T15679] bridge_slave_0: left promiscuous mode [ 792.381421][T15679] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.121128][ T5244] Bluetooth: hci0: command tx timeout [ 794.498704][T18460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2850'. [ 795.602083][T15679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.735189][T15679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.755442][T15679] bond0 (unregistering): Released all slaves [ 795.777564][T18206] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 795.828927][T18206] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 795.862020][T18206] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 797.908522][T15679] hsr_slave_0: left promiscuous mode [ 797.921755][T15679] hsr_slave_1: left promiscuous mode [ 797.966985][T15679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.984705][T15679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.056000][T15679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.080211][T15679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.259758][T15679] veth1_macvtap: left promiscuous mode [ 798.301543][T15679] veth0_macvtap: left promiscuous mode [ 798.307427][T15679] veth1_vlan: left promiscuous mode [ 798.312768][T15679] veth0_vlan: left promiscuous mode [ 800.697263][T15679] team0 (unregistering): Port device team_slave_1 removed [ 800.968066][T15679] team0 (unregistering): Port device team_slave_0 removed [ 802.947090][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 802.965372][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 802.974348][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 803.015517][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 803.024261][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 803.032696][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 804.284754][T18206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.520462][T18206] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.800308][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.807624][ T8328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.837115][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.844291][ T8328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.937601][T18268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 805.028162][T18268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 805.075164][ T5244] Bluetooth: hci4: command tx timeout [ 805.365104][T18268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 805.478028][T18268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 805.573154][T18524] chnl_net:caif_netlink_parms(): no params data found [ 806.066729][T18268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.085278][T18268] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.102713][T15683] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.109903][T15683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.146971][T15683] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.154162][T15683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.295400][T18524] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.302576][T18524] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.336836][T18524] bridge_slave_0: entered allmulticast mode [ 806.344106][T18524] bridge_slave_0: entered promiscuous mode [ 806.367855][T18524] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.385544][T18524] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.392854][T18524] bridge_slave_1: entered allmulticast mode [ 806.416370][T18524] bridge_slave_1: entered promiscuous mode [ 806.452454][T18206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.733971][T18268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 806.803135][T18524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.866813][T18524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.114674][T18524] team0: Port device team_slave_0 added [ 807.157101][ T5244] Bluetooth: hci4: command tx timeout [ 807.302629][T18206] veth0_vlan: entered promiscuous mode [ 807.325919][T18524] team0: Port device team_slave_1 added [ 807.382684][T18206] veth1_vlan: entered promiscuous mode [ 807.999657][T18524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.027553][T18524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.061231][T18524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.110464][T18524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.138985][T18524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.166202][T18524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.272166][T18268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.288136][T18206] veth0_macvtap: entered promiscuous mode [ 808.300340][T18206] veth1_macvtap: entered promiscuous mode [ 808.382404][T18524] hsr_slave_0: entered promiscuous mode [ 808.461114][T18524] hsr_slave_1: entered promiscuous mode [ 808.473744][T18524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 808.493104][T18524] Cannot create hsr debugfs directory [ 808.627293][T15679] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.694742][T18206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.725697][T18206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.746140][T18206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.766985][T18206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.789422][T18206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.823874][T18206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.845401][T18206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.865058][T18206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.885118][T18206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.906911][T18206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.973254][T15679] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.063356][T18206] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.085111][T18206] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.093899][T18206] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.104776][T18206] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.140133][T15679] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.236944][ T5244] Bluetooth: hci4: command tx timeout [ 809.250126][T15679] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.310330][T18268] veth0_vlan: entered promiscuous mode [ 809.371309][T18268] veth1_vlan: entered promiscuous mode [ 809.506458][T18268] veth0_macvtap: entered promiscuous mode [ 809.530824][T18268] veth1_macvtap: entered promiscuous mode [ 809.581642][T18268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.611183][T18268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.631669][T18268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.645592][T18268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.663430][T18268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.674531][T18268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.693419][T18268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.707416][T18268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.718777][T18268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.730134][T18268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.741482][T18268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.753786][T18268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.765152][T18268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.778671][T18268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.855801][T15679] bridge_slave_1: left allmulticast mode [ 809.861529][T15679] bridge_slave_1: left promiscuous mode [ 809.876214][T15679] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.886759][T15679] bridge_slave_0: left allmulticast mode [ 809.892473][T15679] bridge_slave_0: left promiscuous mode [ 809.906516][T15679] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.520154][T15679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.542943][T15679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.566543][T15679] bond0 (unregistering): Released all slaves [ 810.680416][T18268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.689556][T18268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.698800][T18268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.711489][T18268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.771903][ T8328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.791815][ T8328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.019257][T15680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.043128][T15680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.149700][T15680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.185119][T15680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.274696][T15679] hsr_slave_0: left promiscuous mode [ 811.283491][T15679] hsr_slave_1: left promiscuous mode [ 811.297739][T15679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 811.316726][ T5244] Bluetooth: hci4: command tx timeout [ 811.326202][T15679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.342919][T15679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.362379][T15679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.421615][T15679] veth1_macvtap: left promiscuous mode [ 811.438412][T15679] veth0_macvtap: left promiscuous mode [ 811.444097][T15679] veth1_vlan: left promiscuous mode [ 811.468861][T15679] veth0_vlan: left promiscuous mode [ 812.468582][T15679] team0 (unregistering): Port device team_slave_1 removed [ 812.538948][T15679] team0 (unregistering): Port device team_slave_0 removed [ 813.416425][T15689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.447865][T15689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.554876][T18524] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 813.580185][T18524] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 813.653728][T18524] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 813.701523][T18524] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 813.993013][T18524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.058803][T18524] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.101100][T15683] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.108317][T15683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.152285][T15683] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.159516][T15683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.277875][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.289895][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.379309][T18524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 814.971831][T18524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.090446][T18524] veth0_vlan: entered promiscuous mode [ 815.123090][T18524] veth1_vlan: entered promiscuous mode [ 815.211770][T18524] veth0_macvtap: entered promiscuous mode [ 815.299702][T18524] veth1_macvtap: entered promiscuous mode [ 815.317550][T18524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.328289][T18524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.338389][T18524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.348946][T18524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.359053][T18524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.369706][T18524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.381295][T18524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.391368][T18524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.402002][T18524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.412031][T18524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.423312][T18524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.433713][T18524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.444645][T18524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.456742][T18524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.467431][T18524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.476584][T18524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.485653][T18524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.494384][T18524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.683791][ T8325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.700491][T15683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.711000][T15683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.732549][ T8325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.957929][T18691] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 817.343365][T18700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2882'. [ 817.634329][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2883'. [ 817.940786][T18715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2888'. [ 818.356603][T18731] sctp: [Deprecated]: syz.1.2890 (pid 18731) Use of struct sctp_assoc_value in delayed_ack socket option. [ 818.356603][T18731] Use struct sctp_sack_info instead [ 819.090061][T15679] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.269420][T15679] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.481818][T15679] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.738989][T15679] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.022755][T15679] bridge_slave_1: left allmulticast mode [ 820.055275][T15679] bridge_slave_1: left promiscuous mode [ 820.061088][T15679] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.110994][T15679] bridge_slave_0: left allmulticast mode [ 820.129771][T15679] bridge_slave_0: left promiscuous mode [ 820.149082][T15679] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.952596][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 820.990634][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 821.001468][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 821.037868][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 821.065834][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 821.074284][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 821.206648][T15679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.219158][T15679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 821.244924][T15679] bond0 (unregistering): Released all slaves [ 822.310363][T15679] hsr_slave_0: left promiscuous mode [ 822.325927][T15679] hsr_slave_1: left promiscuous mode [ 822.354816][T15679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 822.379686][T15679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.445895][T15679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 822.453398][T15679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.561291][T15679] veth1_macvtap: left promiscuous mode [ 822.570455][T18783] delete_channel: no stack [ 822.575304][T15679] veth0_macvtap: left promiscuous mode [ 822.575507][T15679] veth1_vlan: left promiscuous mode [ 822.605184][T15679] veth0_vlan: left promiscuous mode [ 823.166271][ T5244] Bluetooth: hci0: command tx timeout [ 824.238179][T15679] team0 (unregistering): Port device team_slave_1 removed [ 824.423579][T15679] team0 (unregistering): Port device team_slave_0 removed [ 825.235510][ T5244] Bluetooth: hci0: command tx timeout [ 826.020529][T18777] chnl_net:caif_netlink_parms(): no params data found [ 826.342214][T18777] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.375164][T18777] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.382557][T18777] bridge_slave_0: entered allmulticast mode [ 826.406392][T18777] bridge_slave_0: entered promiscuous mode [ 826.422483][T18777] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.486492][T18777] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.494368][T18777] bridge_slave_1: entered allmulticast mode [ 826.514472][T18777] bridge_slave_1: entered promiscuous mode [ 826.638819][T18777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.684736][T18777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.028755][T18777] team0: Port device team_slave_0 added [ 827.094822][T18777] team0: Port device team_slave_1 added [ 827.164896][T18777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.172426][T18777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.210126][T18777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.251532][T18777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.270781][T18777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.318054][ T5244] Bluetooth: hci0: command tx timeout [ 827.345164][T18777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.600480][T18777] hsr_slave_0: entered promiscuous mode [ 827.633244][T18777] hsr_slave_1: entered promiscuous mode [ 827.654709][T18888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.643392][T18913] delete_channel: no stack [ 829.142721][T18777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 829.212161][T18777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 829.269162][T18777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 829.321988][T18777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 829.405858][ T5244] Bluetooth: hci0: command tx timeout [ 829.609853][T18777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.662243][T18777] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.699686][T15689] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.706901][T15689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.753765][T15689] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.761029][T15689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.917562][T18777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 830.410203][T18777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.522183][T18777] veth0_vlan: entered promiscuous mode [ 830.552235][T18777] veth1_vlan: entered promiscuous mode [ 830.841530][T18777] veth0_macvtap: entered promiscuous mode [ 830.877726][T18777] veth1_macvtap: entered promiscuous mode [ 830.990511][T18777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.001418][T18777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.011710][T18777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.022250][T18777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.032228][T18777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.042836][T18777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.054360][T18777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.111786][T18777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.123493][T18777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.145087][T18777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.165021][T18777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.174892][T18777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.180406][T19001] FAULT_INJECTION: forcing a failure. [ 831.180406][T19001] name failslab, interval 1, probability 0, space 0, times 0 [ 831.200674][T18777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.217758][T18777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.228418][T18777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.237433][T18777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.246345][T18777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.255189][T18777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.335411][T19001] CPU: 1 UID: 0 PID: 19001 Comm: syz.2.2942 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 831.345913][T19001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 831.356016][T19001] Call Trace: [ 831.359330][T19001] [ 831.362330][T19001] dump_stack_lvl+0x16c/0x1f0 [ 831.367114][T19001] should_fail_ex+0x497/0x5b0 [ 831.371977][T19001] should_failslab+0xc2/0x120 [ 831.376721][T19001] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 831.382161][T19001] ? skb_clone+0x190/0x3f0 [ 831.386651][T19001] skb_clone+0x190/0x3f0 [ 831.390970][T19001] netlink_deliver_tap+0xb26/0xcf0 [ 831.396160][T19001] netlink_unicast+0x6b4/0x7f0 [ 831.400996][T19001] ? __pfx_netlink_unicast+0x10/0x10 [ 831.406337][T19001] ? genl_rcv_msg+0x4bd/0x800 [ 831.411091][T19001] netlink_ack+0x6a5/0xb20 [ 831.415573][T19001] netlink_rcv_skb+0x327/0x410 [ 831.420410][T19001] ? __pfx_genl_rcv_msg+0x10/0x10 [ 831.425499][T19001] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 831.430863][T19001] ? down_read+0xc9/0x330 [ 831.435254][T19001] ? __pfx_down_read+0x10/0x10 [ 831.440077][T19001] ? netlink_deliver_tap+0x1ae/0xcf0 [ 831.445424][T19001] genl_rcv+0x28/0x40 [ 831.449463][T19001] netlink_unicast+0x53c/0x7f0 [ 831.454294][T19001] ? __pfx_netlink_unicast+0x10/0x10 [ 831.459647][T19001] ? __phys_addr_symbol+0x30/0x80 [ 831.464731][T19001] ? __check_object_size+0x488/0x710 [ 831.470086][T19001] netlink_sendmsg+0x8b8/0xd70 [ 831.474927][T19001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.480307][T19001] ____sys_sendmsg+0x9ae/0xb40 [ 831.485143][T19001] ? copy_msghdr_from_user+0x10b/0x160 [ 831.490786][T19001] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.496244][T19001] ? __pfx___lock_acquire+0x10/0x10 [ 831.501525][T19001] ___sys_sendmsg+0x135/0x1e0 [ 831.506289][T19001] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.511596][T19001] ? lock_acquire+0x2f/0xb0 [ 831.516165][T19001] ? __fget_files+0x40/0x3f0 [ 831.520828][T19001] ? fdget+0x176/0x210 [ 831.524954][T19001] __sys_sendmsg+0x117/0x1f0 [ 831.529621][T19001] ? __pfx___sys_sendmsg+0x10/0x10 [ 831.534843][T19001] ? __fget_files+0x244/0x3f0 [ 831.539606][T19001] do_syscall_64+0xcd/0x250 [ 831.544181][T19001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.550138][T19001] RIP: 0033:0x7fc14957dff9 [ 831.554604][T19001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.574269][T19001] RSP: 002b:00007fc14a3ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.582749][T19001] RAX: ffffffffffffffda RBX: 00007fc149735f80 RCX: 00007fc14957dff9 [ 831.590770][T19001] RDX: 0000000000000002 RSI: 0000000020000640 RDI: 0000000000000003 [ 831.598917][T19001] RBP: 00007fc14a3ef090 R08: 0000000000000000 R09: 0000000000000000 [ 831.607029][T19001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.615045][T19001] R13: 0000000000000000 R14: 00007fc149735f80 R15: 00007ffdaad6bd68 [ 831.623088][T19001] [ 831.885316][ T8325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.893285][ T8325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.000540][ T8325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.045280][ T8325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.132125][T19027] FAULT_INJECTION: forcing a failure. [ 832.132125][T19027] name failslab, interval 1, probability 0, space 0, times 0 [ 832.169612][T19027] CPU: 0 UID: 0 PID: 19027 Comm: syz.2.2945 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 832.180239][T19027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 832.190524][T19027] Call Trace: [ 832.193840][T19027] [ 832.196813][T19027] dump_stack_lvl+0x16c/0x1f0 [ 832.201571][T19027] should_fail_ex+0x497/0x5b0 [ 832.206307][T19027] ? fs_reclaim_acquire+0xae/0x160 [ 832.211471][T19027] should_failslab+0xc2/0x120 [ 832.216206][T19027] kmem_cache_alloc_node_noprof+0x71/0x310 [ 832.222077][T19027] ? __alloc_skb+0x2b3/0x380 [ 832.226733][T19027] __alloc_skb+0x2b3/0x380 [ 832.231211][T19027] ? __pfx___alloc_skb+0x10/0x10 [ 832.236219][T19027] ? hlock_class+0x4e/0x130 [ 832.240792][T19027] ? mark_lock+0xb5/0xc60 [ 832.245195][T19027] ? __pfx_mark_lock+0x10/0x10 [ 832.250215][T19027] alloc_skb_with_frags+0xe4/0x850 [ 832.255408][T19027] ? __pfx_lock_release+0x10/0x10 [ 832.260515][T19027] sock_alloc_send_pskb+0x7f1/0x980 [ 832.265800][T19027] ? __lock_acquire+0xbdd/0x3ce0 [ 832.270827][T19027] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 832.276628][T19027] ? __pfx_mark_lock+0x10/0x10 [ 832.281462][T19027] ? __pfx___lock_acquire+0x10/0x10 [ 832.286733][T19027] __ip6_append_data.isra.0+0x2a33/0x4540 [ 832.292538][T19027] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 832.298160][T19027] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 832.304280][T19027] ? ip6_mtu+0x231/0x4a0 [ 832.308569][T19027] ? ip6_setup_cork+0xc1b/0x1360 [ 832.313563][T19027] ip6_make_skb+0x30b/0x4e0 [ 832.318134][T19027] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 832.323758][T19027] ? __pfx_ip6_make_skb+0x10/0x10 [ 832.328863][T19027] ? sk_dst_check+0x1da/0x540 [ 832.333611][T19027] ? udpv6_sendmsg+0x2500/0x3030 [ 832.338612][T19027] udpv6_sendmsg+0x2500/0x3030 [ 832.343448][T19027] ? hlock_class+0x4e/0x130 [ 832.348039][T19027] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 832.353667][T19027] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 832.358816][T19027] ? __pfx___lock_acquire+0x10/0x10 [ 832.364101][T19027] ? __pfx_lock_release+0x10/0x10 [ 832.369183][T19027] ? trace_lock_acquire+0x14a/0x1d0 [ 832.374428][T19027] ? __pfx_aa_sk_perm+0x10/0x10 [ 832.379342][T19027] ? find_held_lock+0x2d/0x110 [ 832.384138][T19027] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 832.389296][T19027] ? inet6_sendmsg+0x105/0x140 [ 832.394100][T19027] inet6_sendmsg+0x105/0x140 [ 832.398736][T19027] sock_write_iter+0x3e8/0x5b0 [ 832.403532][T19027] ? __pfx_sock_write_iter+0x10/0x10 [ 832.408858][T19027] ? bpf_lsm_file_permission+0x9/0x10 [ 832.414264][T19027] ? security_file_permission+0x71/0x210 [ 832.419939][T19027] vfs_write+0x6b5/0x1140 [ 832.424305][T19027] ? __pfx_sock_write_iter+0x10/0x10 [ 832.429620][T19027] ? trace_lock_acquire+0x14a/0x1d0 [ 832.434848][T19027] ? __pfx_vfs_write+0x10/0x10 [ 832.439648][T19027] ? __fget_files+0x40/0x3f0 [ 832.444281][T19027] ksys_write+0x1fa/0x260 [ 832.448638][T19027] ? __pfx_ksys_write+0x10/0x10 [ 832.453543][T19027] do_syscall_64+0xcd/0x250 [ 832.458081][T19027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.464003][T19027] RIP: 0033:0x7fc14957dff9 [ 832.468442][T19027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.488080][T19027] RSP: 002b:00007fc14a3ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 832.496526][T19027] RAX: ffffffffffffffda RBX: 00007fc149736130 RCX: 00007fc14957dff9 [ 832.504519][T19027] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 832.512525][T19027] RBP: 00007fc14a3ad090 R08: 0000000000000000 R09: 0000000000000000 [ 832.520689][T19027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.528700][T19027] R13: 0000000000000000 R14: 00007fc149736130 R15: 00007ffdaad6bd68 [ 832.536709][T19027] [ 832.977473][T19055] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 833.015542][T19055] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 836.164029][T19180] FAULT_INJECTION: forcing a failure. [ 836.164029][T19180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.231637][T19180] CPU: 1 UID: 0 PID: 19180 Comm: syz.3.2971 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 836.242137][T19180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 836.252411][T19180] Call Trace: [ 836.255725][T19180] [ 836.258702][T19180] dump_stack_lvl+0x16c/0x1f0 [ 836.263448][T19180] should_fail_ex+0x497/0x5b0 [ 836.268194][T19180] _copy_from_user+0x30/0xf0 [ 836.272855][T19180] csum_and_copy_from_iter_full+0x218/0x1eb0 [ 836.278904][T19180] ? skb_set_owner_w+0x2a2/0x460 [ 836.283904][T19180] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 836.290550][T19180] ? sock_alloc_send_pskb+0x750/0x980 [ 836.295989][T19180] ? hlock_class+0x4e/0x130 [ 836.300554][T19180] ? __lock_acquire+0xbdd/0x3ce0 [ 836.305572][T19180] ip_generic_getfrag+0x175/0x260 [ 836.310662][T19180] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 836.316247][T19180] ? __pfx___lock_acquire+0x10/0x10 [ 836.321660][T19180] __ip6_append_data.isra.0+0x2d27/0x4540 [ 836.327425][T19180] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 836.333019][T19180] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 836.339119][T19180] ? ip6_mtu+0x231/0x4a0 [ 836.343389][T19180] ? ip6_setup_cork+0xc1b/0x1360 [ 836.348366][T19180] ip6_make_skb+0x30b/0x4e0 [ 836.352904][T19180] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 836.358580][T19180] ? __pfx_ip6_make_skb+0x10/0x10 [ 836.363656][T19180] ? sk_dst_check+0x1da/0x540 [ 836.368377][T19180] ? udpv6_sendmsg+0x2500/0x3030 [ 836.373351][T19180] udpv6_sendmsg+0x2500/0x3030 [ 836.378154][T19180] ? hlock_class+0x4e/0x130 [ 836.382687][T19180] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 836.388276][T19180] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 836.393436][T19180] ? __pfx___lock_acquire+0x10/0x10 [ 836.398715][T19180] ? __pfx_lock_release+0x10/0x10 [ 836.403778][T19180] ? trace_lock_acquire+0x14a/0x1d0 [ 836.409019][T19180] ? __pfx_aa_sk_perm+0x10/0x10 [ 836.413909][T19180] ? find_held_lock+0x2d/0x110 [ 836.418710][T19180] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 836.423867][T19180] ? inet6_sendmsg+0x105/0x140 [ 836.428689][T19180] inet6_sendmsg+0x105/0x140 [ 836.433414][T19180] sock_write_iter+0x3e8/0x5b0 [ 836.438211][T19180] ? __pfx_sock_write_iter+0x10/0x10 [ 836.443540][T19180] ? bpf_lsm_file_permission+0x9/0x10 [ 836.448980][T19180] ? security_file_permission+0x71/0x210 [ 836.454680][T19180] vfs_write+0x6b5/0x1140 [ 836.459035][T19180] ? __pfx_sock_write_iter+0x10/0x10 [ 836.464356][T19180] ? trace_lock_acquire+0x14a/0x1d0 [ 836.469618][T19180] ? __pfx_vfs_write+0x10/0x10 [ 836.474410][T19180] ? __fget_files+0x40/0x3f0 [ 836.479036][T19180] ksys_write+0x1fa/0x260 [ 836.483479][T19180] ? __pfx_ksys_write+0x10/0x10 [ 836.488368][T19180] do_syscall_64+0xcd/0x250 [ 836.492927][T19180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.498886][T19180] RIP: 0033:0x7f18b557dff9 [ 836.503323][T19180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.522955][T19180] RSP: 002b:00007f18b645a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 836.531409][T19180] RAX: ffffffffffffffda RBX: 00007f18b5735f80 RCX: 00007f18b557dff9 [ 836.539403][T19180] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 836.547396][T19180] RBP: 00007f18b645a090 R08: 0000000000000000 R09: 0000000000000000 [ 836.555391][T19180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.563382][T19180] R13: 0000000000000000 R14: 00007f18b5735f80 R15: 00007ffea6850f48 [ 836.571386][T19180] [ 840.602204][T19260] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2992'. [ 841.131394][T19282] svc: failed to register nfsdv3 RPC service (errno 111). [ 841.148995][T19282] svc: failed to register nfsaclv3 RPC service (errno 111). [ 842.733179][ T29] audit: type=1326 audit(8277292276.482:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19308 comm="syz.2.3008" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc14957dff9 code=0x0 [ 843.361561][T19316] sctp: [Deprecated]: syz.3.3011 (pid 19316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 843.361561][T19316] Use struct sctp_sack_info instead [ 846.990754][T19381] ------------[ cut here ]------------ [ 846.997416][T19381] WARNING: CPU: 1 PID: 19381 at mm/huge_memory.c:1602 copy_huge_pmd+0x16dd/0x2500 [ 847.006892][T19381] Modules linked in: [ 847.010845][T19381] CPU: 1 UID: 0 PID: 19381 Comm: syz.3.3030 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 847.021421][T19381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 847.031611][T19381] RIP: 0010:copy_huge_pmd+0x16dd/0x2500 [ 847.037292][T19381] Code: 01 e9 dd f5 ff ff e8 52 bd 9a ff 4c 89 e3 31 ff 83 e3 02 48 89 de e8 b2 bf 9a ff 48 85 db 0f 84 a0 07 00 00 e8 34 bd 9a ff 90 <0f> 0b 90 e9 88 ef ff ff e8 26 bd 9a ff 49 89 ec 31 ff 41 81 e4 ff [ 847.057151][T19381] RSP: 0000:ffffc9000456f640 EFLAGS: 00010293 [ 847.063277][T19381] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff81f17cfe [ 847.071982][T19381] RDX: ffff88802d381e00 RSI: ffffffff81f17d0c RDI: 0000000000000007 [ 847.080678][T19381] RBP: ffffea0001f05580 R08: 0000000000000007 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 847.088822][T19381] R10: 0000000000000002 R11: 0000000000000000 R12: c7f0000000000e02 [ 847.096937][T19381] R13: c7ffe7ffeeb7fe02 R14: 0000000000000200 R15: ffff88806df686c8 [ 847.105035][T19381] FS: 00007f18b645a6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 847.114061][T19381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 847.121054][T19381] CR2: 0000000000339000 CR3: 000000003677a000 CR4: 00000000003506f0 [ 847.129172][T19381] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 847.137364][T19381] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 847.145443][T19381] Call Trace: [ 847.148754][T19381] [ 847.151718][T19381] ? __warn+0xea/0x3d0 [ 847.156055][T19381] ? copy_huge_pmd+0x16dd/0x2500 [ 847.161062][T19381] ? report_bug+0x3c0/0x580 [ 847.165748][T19381] ? handle_bug+0x54/0xa0 [ 847.170163][T19381] ? exc_invalid_op+0x17/0x50 [ 847.175421][T19381] ? asm_exc_invalid_op+0x1a/0x20 [ 847.181060][T19381] ? copy_huge_pmd+0x16ce/0x2500 [ 847.186218][T19381] ? copy_huge_pmd+0x16dc/0x2500 [ 847.191211][T19381] ? copy_huge_pmd+0x16dd/0x2500 [ 847.196300][T19381] ? __pfx_lock_release+0x10/0x10 [ 847.201402][T19381] ? __pfx_copy_huge_pmd+0x10/0x10 [ 847.206696][T19381] copy_page_range+0xa6b/0x5a50 [ 847.211645][T19381] ? mas_wr_store_entry+0x4e5/0x31a0 [ 847.217072][T19381] ? __pfx_copy_page_range+0x10/0x10 [ 847.222431][T19381] ? mas_store+0x53b/0xad0 [ 847.226994][T19381] ? __pfx_mas_store+0x10/0x10 [ 847.231832][T19381] ? lock_acquire+0x2f/0xb0 [ 847.236654][T19381] ? copy_mm+0x1063/0x2550 [ 847.241151][T19381] ? up_write+0x1b2/0x520 [ 847.245606][T19381] copy_mm+0x134f/0x2550 [ 847.249939][T19381] ? __pfx_copy_mm+0x10/0x10 [ 847.254596][T19381] ? copy_process+0x38ef/0x6f00 [ 847.259612][T19381] ? __raw_spin_lock_init+0x3a/0x110 [ 847.265055][T19381] copy_process+0x3ab9/0x6f00 [ 847.269794][T19381] ? __pfx_mark_lock+0x10/0x10 [ 847.274648][T19381] ? __pfx_copy_process+0x10/0x10 [ 847.280315][T19381] kernel_clone+0xfd/0x960 [ 847.284800][T19381] ? __pfx_kernel_clone+0x10/0x10 [ 847.290521][T19381] ? find_held_lock+0x59/0x110 [ 847.295463][T19381] ? find_held_lock+0x2d/0x110 [ 847.300288][T19381] ? 0xffffffff81000000 [ 847.304502][T19381] ? 0xffffffff81000000 [ 847.308778][T19381] __do_sys_clone+0xba/0x100 [ 847.313434][T19381] ? __pfx___do_sys_clone+0x10/0x10 [ 847.318922][T19381] ? trace_lock_acquire+0x14a/0x1d0 [ 847.324189][T19381] ? 0xffffffff81000000 [ 847.328471][T19381] ? 0xffffffff81000000 [ 847.332681][T19381] ? 0xffffffff81000000 [ 847.337033][T19381] ? do_user_addr_fault+0x83d/0x13f0 [ 847.342405][T19381] do_syscall_64+0xcd/0x250 [ 847.347044][T19381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.353021][T19381] RIP: 0033:0x7f18b557dff9 [ 847.357584][T19381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 847.377363][T19381] RSP: 002b:00007f18b645a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 847.386506][T19381] RAX: ffffffffffffffda RBX: 00007f18b5735f80 RCX: 00007f18b557dff9 [ 847.394534][T19381] RDX: ffffffff81000000 RSI: 0000000000000006 RDI: 000000000000000f [ 847.403191][T19381] RBP: 00007f18b55f0296 R08: 000000000000c0c9 R09: 0000000000000000 [ 847.411315][T19381] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.419384][T19381] R13: 0000000000000000 R14: 00007f18b5735f80 R15: 00007ffea6850f48 [ 847.427486][T19381] ? 0xffffffff81000000 [ 847.431704][T19381] ? 0xffffffff81000000 [ 847.435987][T19381] [ 847.439058][T19381] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 847.446385][T19381] CPU: 1 UID: 0 PID: 19381 Comm: syz.3.3030 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 847.456841][T19381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 847.466939][T19381] Call Trace: [ 847.470251][T19381] [ 847.473218][T19381] dump_stack_lvl+0x3d/0x1f0 [ 847.477881][T19381] panic+0x71d/0x800 [ 847.481839][T19381] ? __pfx_panic+0x10/0x10 [ 847.486324][T19381] ? show_trace_log_lvl+0x29d/0x3d0 [ 847.491603][T19381] ? check_panic_on_warn+0x1f/0xb0 [ 847.496784][T19381] ? copy_huge_pmd+0x16dd/0x2500 [ 847.501771][T19381] check_panic_on_warn+0xab/0xb0 [ 847.506748][T19381] __warn+0xf6/0x3d0 [ 847.510678][T19381] ? copy_huge_pmd+0x16dd/0x2500 [ 847.515639][T19381] report_bug+0x3c0/0x580 [ 847.520006][T19381] handle_bug+0x54/0xa0 [ 847.524197][T19381] exc_invalid_op+0x17/0x50 [ 847.528735][T19381] asm_exc_invalid_op+0x1a/0x20 [ 847.533630][T19381] RIP: 0010:copy_huge_pmd+0x16dd/0x2500 [ 847.539200][T19381] Code: 01 e9 dd f5 ff ff e8 52 bd 9a ff 4c 89 e3 31 ff 83 e3 02 48 89 de e8 b2 bf 9a ff 48 85 db 0f 84 a0 07 00 00 e8 34 bd 9a ff 90 <0f> 0b 90 e9 88 ef ff ff e8 26 bd 9a ff 49 89 ec 31 ff 41 81 e4 ff [ 847.558831][T19381] RSP: 0000:ffffc9000456f640 EFLAGS: 00010293 [ 847.564947][T19381] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff81f17cfe [ 847.572939][T19381] RDX: ffff88802d381e00 RSI: ffffffff81f17d0c RDI: 0000000000000007 [ 847.580928][T19381] RBP: ffffea0001f05580 R08: 0000000000000007 R09: 0000000000000000 [ 847.588939][T19381] R10: 0000000000000002 R11: 0000000000000000 R12: c7f0000000000e02 [ 847.596932][T19381] R13: c7ffe7ffeeb7fe02 R14: 0000000000000200 R15: ffff88806df686c8 [ 847.604928][T19381] ? copy_huge_pmd+0x16ce/0x2500 [ 847.609894][T19381] ? copy_huge_pmd+0x16dc/0x2500 [ 847.614880][T19381] ? __pfx_lock_release+0x10/0x10 [ 847.619938][T19381] ? __pfx_copy_huge_pmd+0x10/0x10 [ 847.625085][T19381] copy_page_range+0xa6b/0x5a50 [ 847.629992][T19381] ? mas_wr_store_entry+0x4e5/0x31a0 [ 847.635325][T19381] ? __pfx_copy_page_range+0x10/0x10 [ 847.640644][T19381] ? mas_store+0x53b/0xad0 [ 847.645109][T19381] ? __pfx_mas_store+0x10/0x10 [ 847.649922][T19381] ? lock_acquire+0x2f/0xb0 [ 847.654460][T19381] ? copy_mm+0x1063/0x2550 [ 847.658932][T19381] ? up_write+0x1b2/0x520 [ 847.663286][T19381] copy_mm+0x134f/0x2550 [ 847.667565][T19381] ? __pfx_copy_mm+0x10/0x10 [ 847.672183][T19381] ? copy_process+0x38ef/0x6f00 [ 847.677067][T19381] ? __raw_spin_lock_init+0x3a/0x110 [ 847.682388][T19381] copy_process+0x3ab9/0x6f00 [ 847.687088][T19381] ? __pfx_mark_lock+0x10/0x10 [ 847.691900][T19381] ? __pfx_copy_process+0x10/0x10 [ 847.697010][T19381] kernel_clone+0xfd/0x960 [ 847.701461][T19381] ? __pfx_kernel_clone+0x10/0x10 [ 847.706524][T19381] ? find_held_lock+0x59/0x110 [ 847.711344][T19381] ? find_held_lock+0x2d/0x110 [ 847.716140][T19381] ? 0xffffffff81000000 [ 847.720347][T19381] ? 0xffffffff81000000 [ 847.724517][T19381] __do_sys_clone+0xba/0x100 [ 847.729138][T19381] ? __pfx___do_sys_clone+0x10/0x10 [ 847.734366][T19381] ? trace_lock_acquire+0x14a/0x1d0 [ 847.739628][T19381] ? 0xffffffff81000000 [ 847.743801][T19381] ? 0xffffffff81000000 [ 847.748031][T19381] ? 0xffffffff81000000 [ 847.752237][T19381] ? do_user_addr_fault+0x83d/0x13f0 [ 847.757593][T19381] do_syscall_64+0xcd/0x250 [ 847.762143][T19381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.768064][T19381] RIP: 0033:0x7f18b557dff9 [ 847.772497][T19381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 847.792234][T19381] RSP: 002b:00007f18b645a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 847.800706][T19381] RAX: ffffffffffffffda RBX: 00007f18b5735f80 RCX: 00007f18b557dff9 [ 847.808706][T19381] RDX: ffffffff81000000 RSI: 0000000000000006 RDI: 000000000000000f [ 847.816696][T19381] RBP: 00007f18b55f0296 R08: 000000000000c0c9 R09: 0000000000000000 [ 847.824681][T19381] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.832667][T19381] R13: 0000000000000000 R14: 00007f18b5735f80 R15: 00007ffea6850f48 [ 847.840665][T19381] ? 0xffffffff81000000 [ 847.844847][T19381] ? 0xffffffff81000000 [ 847.849024][T19381] [ 847.852366][T19381] Kernel Offset: disabled [ 847.857030][T19381] Rebooting in 86400 seconds..