last executing test programs: 13.940081161s ago: executing program 0 (id=1584): waitid$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd, 0x9, 0xfffffffffffffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x1, 0xdf, 0x9b70, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x1, 0x1000, 0xfffffffffffffffa, 0x7fffffff, 0x8000000000000001, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x20001000, 0x2000000c) madvise$auto(0x8f3, 0x9, 0x6) r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x29, 0x8000000001e, 0xfffffffffffffffd, 0x40000000003) clone$auto(0x3, 0x400, 0xfffffffffffffffe, 0xfffffffffffffffc, 0xd1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x4, 0x5, 0x9) socket(0x2a, 0x2, 0x0) socket(0x11, 0x80003, 0x300) mremap$auto(0x4, 0x401, 0x0, 0xfffffffffffffff7, 0x1) ioctl$auto(0x3, 0x5411, 0x10000000000402) getgroups$auto(0x7ff, &(0x7f0000000040)=0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mincore$auto(0x1000, 0x6, 0x0) socket(0x10, 0x3, 0xfffffffc) socket(0x29, 0x3, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000080)='.k\xec|E:o\x8a\\~@\'g\xdd>\xdd\xaf\xa0\x8a\x89\x0e\x05\xc1\xab)\xa1\xc5k\xab\xcd\x1b\x06\"\xbed:\x1c\x1b\xb6\x9f\x81O^\xf0\xc0\xe0\x1f\x87S+\x89`\x8d\xf2*h\x19!\xc3\x81y;\xd7T\xe78I\xc0\xb8\xab7\xa6\x98y@\x12\xe3&e\xd5\xe7\xb9B\xaa\xe7f\xbf\x14\x92\xfaq]\xe4\xf2\xc8\xf8\xd7\xe4\xc4\xa91{', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), r0) 9.639049403s ago: executing program 0 (id=1603): r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x6db, 0x2, 0x8000) lsm_get_self_attr$auto(0x4, 0x0, 0x0, 0xf0000000) futex_waitv$auto(&(0x7f00000000c0)={0x7fffffffffffffff, 0x9, 0x80006, 0x2000004}, 0x0, 0x0, 0x0, 0x62c0) setreuid$auto(0x1, 0x5) open_by_handle_at$auto(0xffffff9c, 0x0, 0xffffffffffff8001) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x7ea, &(0x7f0000000000)={0x6, 0x6c53, 0x10000400, 0x7, 0x1005, 0x7, 0x7, [0x4, 0x2e9, 0x30], {0x2, 0x1, 0x8, 0x7, 0xce60, 0x100005, 0x800001, 0xf5c, 0x2000007}, {0x4, 0x1003, 0xffff7ffe, 0x2, 0x8, 0x200, 0x2003, 0x0, 0x3}}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x9, 0x1, 0x9, 0x10, 0x8001, 0x1) setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0) r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f00000007c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) clock_getres$auto(0x8, 0x0) sendmsg$auto_IPVS_CMD_GET_INFO(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES16=r3, @ANYBLOB="010426bd7000ffdbdf250f000000", @ANYRESDEC=r4, @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="04009cb4ae000004000100a5da40aa38297fadacaab17f0fb99c47606a79cd1ee66edcd5e82775e6587cf4d49800000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4004804) socket(0x2, 0x3, 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) select$auto(0x3aee, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x9, 0x800454df, 0xace) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) 9.269796783s ago: executing program 3 (id=1606): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="00010000", @ANYRES64=r0, @ANYBLOB="00042bbd7000ffdbdf250e00000008000d00830d000008000300", @ANYRES32=r0, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x220400c1}, 0x48000) mmap$auto(0x4, 0x400008, 0x100000df, 0x9b72, 0x2, 0x8000) arch_prctl$auto(0x1021, 0x3) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') bpf$auto(0x426f, 0x0, 0x0) get_mempolicy$auto(0xfffffffffffffffe, 0xfffffffffffffffd, 0x2, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="030327bd7000fcdbdfc1000000006f70621fc97f7f3192214db4c40a5eb87d8831deda017ad0799e24627c2824bb0720ad9183d1b28c61546a977bdd1e9fed3171cb27a8015d140f5edf46e41f9d7cb26fb1bc22a1786aaf53"], 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x73) socket(0xa, 0x2, 0x73) connect$auto(0x5, &(0x7f0000000240)={0x402, @sockaddr_1_1}, 0x7) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') socket(0x2, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mbind$auto(0x3, 0x81, 0x7fc, &(0x7f00000012c0), 0x5709, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) open(&(0x7f0000000000)='./cgroup\x00', 0x101000, 0xe3) mmap$auto(0x2, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0xa, 0x2, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 8.63004694s ago: executing program 0 (id=1609): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x2010000000000) socket(0x26, 0x80805, 0x0) (async) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) (async) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) open(&(0x7f0000000000)='./file1\x00', 0x10677d, 0x37e5c9853cd1b999) fanotify_mark$auto(0x400000000000, 0x101, 0x8040, 0x4, 0x0) (async) fanotify_mark$auto(0x400000000000, 0x101, 0x8040, 0x4, 0x0) fanotify_init$auto(0x80, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 8.450724818s ago: executing program 3 (id=1611): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x29, 0x4d, 0xffffffffffffffff, 0x3) socket(0x2, 0x1, 0x106) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) setsockopt$auto(0x2, 0x2, 0xa, 0x0, 0x1) listen$auto(0x3, 0x9) 8.261535525s ago: executing program 3 (id=1613): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x9, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x4000000000000000, 0xf, 0x3, 0x1ff, 0xfffffffffffffffc, 0xc]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f0000000040)={0x2, @sockaddr_1_1={"1a0abd"}}, 0x55) futex_waitv$auto(&(0x7f0000000000)={0xffffffffffffffff, 0xf4, 0x1, 0x4}, 0x77, 0x0, 0x0, 0x42bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file1\x00', 0xe00, 0x0) ioperm$auto(0x3b, 0xf99b, 0x6) close_range$auto(0x0, 0xffffffffffffefff, 0x4000000000002) fanotify_init$auto(0x5, 0x2) r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010326bd7000fedbdf0001"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x10c) pwritev$auto(0x1, 0x0, 0x0, 0x9, 0x2) r2 = socket(0xa, 0x2, 0x3a) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmsg$auto_NL80211_CMD_DEL_PMK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80"], 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x40044) write$auto(0x3, 0x0, 0x81) 8.059253417s ago: executing program 2 (id=1614): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) madvise$auto(0x0, 0x3, 0x15) (async, rerun: 32) r0 = socket(0x1d, 0x2, 0x2) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20040821}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NET_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x4004000) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), r0) (async, rerun: 64) msgrcv$auto(0x7fffffff, 0xffffffffffffffff, 0x100000000, 0x8000000000000000, 0x40003) (rerun: 64) 7.636102797s ago: executing program 0 (id=1615): socket(0x1, 0x1, 0x1) eventfd2$auto(0x8000, 0x6) semget$auto(0x6, 0x10, 0x7fffffffffffffff) semget$auto(0x6, 0x4, 0x2) msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x22, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setresgid$auto(0x8, 0x7, 0x5) bind$auto(0x3, &(0x7f0000000040)={0x1, @sockaddr_1_1}, 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x0) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x23) mmap$auto(0x9, 0x7, 0x0, 0x11, 0x2, 0x2) getdents64$auto(0x0, &(0x7f0000000440)={0x6, 0x4, 0x5, 0x1}, 0x18) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getdents$auto(0x0, 0x0, 0x100) 7.297411548s ago: executing program 3 (id=1617): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x80000000000000b, 0xc, 0x9, 0xf4, 0x6, 0x1, 0x40009, 0x5e582972, 0x4000000000000000, 0x14, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) symlink$auto(&(0x7f0000000300)='\\\':.\x00', &(0x7f0000000340)='\xfb\x00') readlink$auto(&(0x7f0000000b00)='\xfb\x00', 0x0, 0x800) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) connect$auto(0x3, &(0x7f00000001c0)={0x2, @sa_data_min="9aceb6b47600d1e75e60707d94e2"}, 0x55) write$auto(0x3, 0x0, 0xfdef) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) remap_file_pages$auto(0x4, 0x200000000000002, 0x0, 0x58, 0x5) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd77dcb7fcdf2503000000100000000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x10000000) mq_timedsend$auto(0x3, &(0x7f0000000080)='ns/mnt\x00', 0xffff, 0x3, &(0x7f00000000c0)={0x7, 0x5}) 7.151838568s ago: executing program 2 (id=1618): r0 = socket(0x1a, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_get_self_attr$auto(0x4, 0x0, 0x0, 0xf0000000) futex_waitv$auto(&(0x7f0000000000)={0xfffffffffffffffc, 0x5d98, 0x6, 0x4}, 0x200bf50, 0x0, 0x0, 0x62c0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mq_open$auto(&(0x7f0000000200)='s.\x00', 0x17, 0xeb, &(0x7f0000000240)={0x5, 0x5, 0x9, 0xd91, [0x40, 0x9, 0x2, 0x3]}) io_uring_setup$auto(0x3, &(0x7f0000000000)={0x6, 0x7ff, 0x10000400, 0x7, 0x1005, 0x7, 0x7, [0x4, 0x2e9, 0x30], {0x2, 0x1, 0x8, 0x7, 0xce60, 0x100005, 0x800001, 0xf5c, 0x2000007}, {0x14, 0x1003, 0xffff7ffe, 0x2, 0x8, 0x200, 0x2003, 0x0, 0x3}}) mmap$auto(0x0, 0x20009, 0x2000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x9, 0x1, 0x9, 0x10, 0x8001, 0x1) setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff}) mmap$auto(0x4, 0x4, 0x4000000000df, 0x93e, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0xff) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f00000007c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_GET_INFO(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000140)=ANY=[@ANYBLOB="1419abfe6520b9cb3dfc59676bc7a21100"/31, @ANYRES16=r1, @ANYBLOB="010426bd7000ffdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000004511adad1d89b19bd55fb17204cb683fd288fcb6e7ef76cf95ce8eaf17af5d2060", @ANYRES16=r1, @ANYBLOB="04002abd7000ffdbdf250a00000004000100"], 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x54}, 0x4004804) capget$auto(0x0, 0xfffffffffffffffe) socket(0x2, 0x3, 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0xfffffffffffffffd, 0x2020008, 0x200003, 0xeb1, 0xfffffffffffffffa, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 6.802126937s ago: executing program 0 (id=1619): r0 = syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0xf4}, @SMC_PNETID_ETHNAME={0x12, 0x2, '-)8::!/%+*{3%\x00'}, @SMC_PNETID_NAME={0xc, 0x1, 'nl80211\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040810) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000005c0), r1) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8537}, @NL80211_ATTR_PEER_MEASUREMENTS={0x9, 0x111, "af893d750d"}, @NL80211_ATTR_MLD_ADDR={0x4}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x40}}, 0x4040000) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000840), r1) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x5a540e03ab5a5ff3}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r2, 0x20, 0x50, 0x25dfdbfe, {}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x30008040) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001400)={&(0x7f00000012c0)={0x130, r2, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x92}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0xf7}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x103, 0xcd, "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"}]}, 0x130}, 0x1, 0x0, 0x0, 0x4810}, 0x8081) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) close_range$auto(0x7, 0x9, 0x3ff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r3) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf2502000000080003005e"], 0x24}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002ac0), r5) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000001200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="831f2a0704623700d9035af066bd51c24f2e092a4f6258aa55cf0acb237ab8ee286e4c0000000000000030686e1d1de5dda932a5364ecb73ec070087b45456c531f1c5dd19d655c90e384e0b97f9"], 0x14}, 0x1, 0x0, 0x0, 0x20004041}, 0x40004) (async) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000011c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001180)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c2dc69f", @ANYRES16=r6, @ANYBLOB="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"], 0x10c4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) setuid$auto(0x800000000008) (async) iopl$auto(0x3) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) (async) semctl$auto(0x4000001ff, 0xffffffffffffffff, 0x13, 0x3) (async) sysfs$auto(0x2, 0x4, 0x0) (async) write$auto(0xc8, 0x0, 0xe80) (async) socket(0xa, 0x3, 0x7) (async) socket(0x15, 0x5, 0x0) (async) mincore$auto(0x0, 0x8000000000005a, 0x0) ioctl$auto(0xc8, 0x400454da, 0x5c8d) (async) ioctl$auto(0x1, 0x890c, 0x6) 6.44061206s ago: executing program 3 (id=1620): tkill$auto(0x1, 0x7) get_robust_list$auto(0x1, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0xfef4) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) getrlimit$auto(0x2, &(0x7f00000002c0)={0x4, 0x3}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x65, 0x2) fchmodat2$auto(0x401, &(0x7f0000000000)='\x00', 0xff, 0x7) io_uring_setup$auto(0x2, 0x0) io_uring_register$auto(0x1, 0x5, 0xffffffffffffffff, 0x8) remap_file_pages$auto(0x6a27, 0x2001000, 0x0, 0xdc, 0x100000) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) 6.050904931s ago: executing program 2 (id=1622): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_NLBL_MGMT(&(0x7f0000000080), r0) sendmsg$auto_NLBL_MGMT_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x2c, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x4}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x7f}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x80000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100c4}, 0x805) shutdown$auto(0xa5, 0xffff745b) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) socket(0x2, 0x5, 0x0) (async) r3 = socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_802_15_4_MAC(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r4) (async) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r4) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) (async) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') (async) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r7, 0xb701, 0x0) (async) ioctl$NS_GET_PARENT(r7, 0xb701, 0x0) sendmsg$auto_NL80211_CMD_DEL_KEY(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r6, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0x3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x3}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2404c000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) bind$auto(0x7, &(0x7f0000000000)={0x11, @sockaddr_1_1}, 0x3e) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)={0x1c, r2, 0x305, 0x70bd23, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000040) 5.296761119s ago: executing program 3 (id=1627): mmap$auto(0x0, 0x8, 0x72, 0x8b72, 0x8f1, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0xfffffffffffffffe, 0x203000c, 0x5, 0x8000eb5, 0x2, 0x8000002fd00) (async) statfs$auto(0x0, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x2) connect$auto(0x5, 0x0, 0x9) (async) madvise$auto(0x2, 0xe, 0xdcf) (async, rerun: 32) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf25030000000a000500a9085797e76b0000060006000300000008000200", @ANYRES32=0x0, @ANYBLOB='\b'], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async, rerun: 32) socket(0xb, 0x2, 0xffffffff) socket(0x2b, 0x1, 0x1) (async) socket(0x1, 0x2, 0x0) (async) socket(0x2, 0x1, 0x0) (async, rerun: 64) getsockopt$auto(0x5, 0x0, 0x7, &(0x7f0000000100)='ns/cgroup\x00', &(0x7f0000000140)=0x7) (rerun: 64) fchmod$auto(0x0, 0x9b9a) 3.807814582s ago: executing program 0 (id=1629): close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') connect$auto(0xf4, &(0x7f00000001c0)={0x9cb4, @sockaddr_1_1={"0f8ad5c5cfec07f2286d2c26806158bc6e3df45661fe921529ae9e0a4803ba1ce13ed515c99beda5ec72c01b8dbd8cb272b6ac9dbe6e0ab07bcd54adac2b0f6455feb59ca492aabc766cc957d23bde8bdc4e6b9523a4165a95ab500c1934cc6e3ac450520afaf896ece9d28284a4bc4094e7b5bb4e15d8a8a866e03d3928c105d70328ff7e154bd803056e23ab19bf3e824ab0cf9574af9aa76c0fb4cd24e8a05aae9a277778b40e38e843387c32490b2eaa2bc9a348ab92dfb9bf80b2108257e83d663c13a114980e5f6e8322837a0744cee47adf9afbb027da11a68c837716a341a1aeab37cd1fbc4bdd001cfe23070bbcecbbb8de95edf9634f734ca8ce97aee3a0f1b3d4a8a7af6e7dcc13d5ba5e4cd4ef1709bb5807bd20b5245331e9f9c69624ef4207433a1e9f235e548f03f7393f5f4a44c462a9257aad86428e2da855171eb02e692deb3101b6122407bedf8e339ffa856d1bf82e9888169b869157b58c2ec915b83e808fe1929393e88f3c01b46fe2b330412aa67be5ab81e40820ced49c87a75501fe56b412ae834bb3b0be06764ea56dbd4272193dac6cc33642f6853fb19ce71cfd86481a49e5ea2abbf1a9c668e3e3272151cc31a81ea7feb6230eb55671e7152ca873173e9f0d32cb37b0842b84d2db1bc26b4f0cf813df1e9ebe2d8b4524fa873cf74338a2d7de3f8e635fbcc516d6332f6ed2e86a166e05a7d8f15c263d39963e1bb49527f9ae7faca16079c570082f88198d2c917064d4b515629a986bb070b857b6db46f6d4413f38d4a659e0532afaefeb7cbc2842690a4cf4c2b85fe5be4b7a98e408749d64673968ecfae049a7eab03631646789ce6963f86ee68d5f43665bbe0877f3430094aae38fc7a8cd682e2decdb974d05707ad7c9387da1d52e9c669772680d967bd77b725bf6b2057dcbaa61beda92af09af73a31ae04f2933ae3c7010e84b4e1390611b6255b241b2a8d655347db159647f41fbd162dc7a140a234fb54ddbe7939ed9c9036b498fbe9289b0506760130acf60b00241cfaadf20308ffa25b85262684e8dc200f5bea1f44cab105d8a7838ee298bd7347a250e1b73a64e1ab3229cafd2a295a4d2d01950fd9b67a6aa5096bd13de741ad908178ef69cafb00c77a8a399904235931bd84acafe435ebd0d7883e1e680de26001075d8f0077adf2f4d26f607aca04e4dde229beee48cd70c4b48082b1cc0a287f816677d49061fc6d5a3597a01293e941d641c80113a60ed0997b99925970be2ec08528b416a9b453eafda220efddf4afaa949edda0195b5ec92f62ba1c4249d367e82bd85c698713d3c4e6d2888fc4858cc37520b977aa2049fbe2b311a9432d0943a6ae81c0ced5a19ee24af01a4062090f0ced09a55fcb5673a6171586d48e572a537349b1b11d11045ae556ffe121df85dddfbbd5cfa48e7a7ff29aa1df245ea0f9590fa884569e2b5926fba5c9b76da4d1bc5f6196a46ab6528137cbafe798d673c3a74d9758846413e6246f6f4cb83dd0395c3902a1666d125d5662f1b58d08e03a01a3dfd9cdce29dac96b4592f7e47c15a1ee9e4d62518532deadae58bfad63115dd3a57b8eca981f18dc9d21011a3940fba6af47beb05f4136ddaae4d751af8c6080fa22c426c60f206ea35dddcf3cf4769ac054f8ba49cda6de29e9674412ef54e9efa1d26fbe225810dcb88e7b5b322ed5066dba135bd54b5e73fafb38a40caffda7b37ae824ef2d9e8fc61fd80160136227d6832e227a251d7d2a387276337dd31d1d330da9658235eea1490d36312c64b24c144b3608fa59931c15a686ec5460c6f8baa030a55dceccf9a1b4043134253edc5abdd86f54c3571a699290269a0ddad081f7469945d0b7991023eb8a49b87e445e9f6438031f1d515fc12d8294d16f29264f49325ca24d10fa57b9e612b9276ecc668bad226bcc275a22596dc0e408694a9c8adf8ffbaf43588953dd7c02ed114cbca1d9cca96e06107ae53441b321397157b4729a689b2f917735e57841688260e28ec3e1906faabb6ccfb4a2798f92b4592503d29bac1c0316325bacd5aea42255117a3c80806e2ef64ffba41b4250a341b37e7924a04a3cc339c7a2aede412f047a8e5febbd504b489c1809c7c612c4354f024829cd17cec740164cc931e63c95c7b5a7cc19468964d592aaa38886110b2dce88bedf2fdf8ad740540e9100f4ad53424e90fbd63d58529602030ae06b3cf8d889a5255019668fa9dbf9d92154381e6c101a6f1eb363a7254bfac58f58a974cb37e440fce72d90d9585485eda3a641d3e42bd69bc1e3a0c99e970fc58a158d7742fc1329dc2beeb8cf5788631f9d2dc29b2fe33819dc5d0b1b136b618550a2c6492bf61643f0a4317d5454879683a51ae59c2e182871b14789481b26508abd583f2723679f2772619330b6f1f4399c03b170e46bb97637903f52413d6eba642a46d9b1818868473b9253630110f282fa4c1419779bec4faa58acd1a267f503aaed03399b1f883d12b2da1cbecd1df2f5e06203246bd1a6a5002c6b0445eac82fc6848497b1e4a6f477a11132a97cd0692cfcb9da588387773e0bb20be9298c80d0de570bbe4eb875f829d98e1e9db72df606cf5dc28f99fd8ce9070c3efd9d9091febba81bf9a4c399fe46e9da9eb27f14daf056a36e19f54a1f5d309dd44b9fa2a125785fc614e4eecd735a736284d23aaa068ccc7c4288b69a380a6a562663a352b8f36bf55696b39957b9f0f988a5e5568d45d761734912dc7d8ac6efc5f1cd22bd186fe267c3f0b0b6d78cdc27efb3fb5e7d99e8953355ab9a018e8f191c0f50b43ce50d43a3931c738dfa109430d3a4efc20c6d9c98feb38cd458c5752d52d743bafed1d1b7ebb12f3284f6b8e53b5cade4f7df3cdf8c427cd117e211c5819c7e164aae3d537aaec09d596754f4b056f2b39df1d04b1fba01b4846ceb499dcd46f69d825b3a260c5ce11063a7dc6c9e2ea2544a66c24dbe3cadc36d9fff47b31e9e2512a5e6c6becf33a206a3356cbb45450ce19c4f77128467e5085d3b3df3fadfe17abe7e03db1041ddf1169a209e7762d0b25c16e7e9bdde977c4b0e776ffa2ff34c261e729fcb8c3278b2468e02617c57031a92918928a06375b4c09a26536473783acb9d98ca113108b3aa2d93ce7efc10abf66b007630fd0a537aebd7152a9978a1649ade1ea9aeac41a43be298ce0942186eb6fe8df8de9ce6dd6cd9cb23b2a0af19ed433b2367fde05ab970ff6c2cb0295b0006e78fcd324ee81c6eb44d1c7a40d0004334711aa3f5c34675f8378c723e7cb5bbdc3f57cd91abde61e87b1be53d72ae72bb12b70757376da744e2e2dd3cb3d6f7aec4d6240e94dfa6393e3a916d19ac5a7cf9bbb65380615ae78a6fcbb7a60331b3151e7a2679c9f142f739a3e613f088552dd4c5617a37f7ce435368e1ec79b5e6f96b6a71f768879a25a189285440c177cc6c5e9a310546cdccbf8d49a307799c0a79d019544549aa7d75fbd6a480e862f33f15f4d99b9a8cf6d29d7d74eaead967f57ca8565b431c1e3510f59ac3ee6ae9a371ec8e14e253e1a6ec01680ec2e8790fd51fe4f6f4d604b36fe8dbf81eb88ef26742dc33ea2f928535e9b1f65ade02033dffad8d66996f5e84842a0bb6ee645bf52202d36aec4e35a1ad968baa44b2f023bff523faa2ed44d025c1992949c65fec0e6550be23e4d8b87e2c263b5713e83c34ba1ea15243c4b4951875062a33cb8f1949e18d8b310d7760f95c193b84ebdd8be51cef613228ad2f3254d3cf1c7c737ee6c0bca4e0f909ff05ddf24cd98ab01f0f477eee6bd5bea317f8d696f75d0346ee859739fe70085b66127d6f3b2a0c4dd1f423d4e2df55640051d6bd4e012d15860f9a9ea76f124b4dc71540580b8c4122dd866a6e61810b71500b2cb7591c16d8e4c2b5ecc09137ed8471cd0255ee7063fe1f12473dcd0a73f7ca4f2af1b22b9de758713d17ddf28a5510bf1bf4a737dd02875ea31acff1875ab07c0f1ac6e82d415be595700a8aff2a71f7db7eaf600dd9f88575c6d71648749a43f36f31d7fbe7ccc8bc2f5d4eecc01722286346b96b4f1bd1e69577c25b7f615ecf01c896ee3b0e1d8ef3ee1f952f5c85f7661a7725b8a5daa7ab5e47713c908a4638d1a0c25b1516fda46719d4ee211316ea0e2f4d48a927c0c6367c9d78890503e0d1f77ca69c61d14902628a0fa79b6d1b6ba82684bec5648fdd21f7c08f672af18d9cbf2cdbbe44be970b773214ebdbb83796df875281c85b45263bd62c33251d7d06791aabd9cdd7537d752737049811db037f508ee85765f8f578af0c4e2950e02f85babbebc1d4776001fd83d4c8fb1b1670e791d5f728ee728362c813ee31e980c3678f8e21308844ec622428717bb32d33705d7a2aa675954edd956b9b5d6b3d84f03dea3c61c83f150b5d1343c87f26def0bdc18c1c182936fb78a6148fa612fd556ebe571c8f39b8b64d6361fd01662454c47d6c1388081b5c1dc0e1ec981d5a8094f4005958f4d31b81537a69e8d6c4bd0df25bddda28a30e37f77302f8737ffb6c9e00793452a2c8dfaced40159c061e08d02685de2ad79039db56fc24b599a41fefd2dbf0c67e00fc1452f87d62b99e9e0de6e1ddc9505b0121585f271e679c3c438ad24a5af42e22f5cde52c7c5df80907af7c7a6b764bce2e61ab58b999068a8d685fc15f07e61e377835aec213b99faecb174877c1e8aad1e5e60091260b76493509743c49a8b3101f7a731c5e49d1edffa23c0994e79edb718d928c11f6263a4abbde6329c09a97b179dddf2ba4028518096c4c26df5a881505e41d1e3761fad95a1e928e57ba949acbb7832584a401c9271e068479324c8e38e52eb7703a59fd669e77329d43f94f915c95f753161acad76f91697d6f74b2bc31d4be8185ba21b91cb6f8ca20505ab9bc53b29bcd4323884b9fd21427aebea5d703c7043b87d41495735a3416214161735a6e3f7eb79b212372031e9b324d24993fcdceb58bb24dfbb2b7816e181b567e646710b3fd09b15ee7d38d3326e6afdca912ea59da40b1eef47b1de73b49cd437f3e57dbef0d3571b92f975d393905d25deeef67d45d5212cfb9d6c4869a2d7cd018889d3e948a3fa00265ebd83d9c80fc36fa239fb5532fb130cbec36ed4c9101eca0ee7da033b15702260ec3e8a1a95389e78fc4598f697e39bab41373202c54f4a00d6913b7cca205467b98c6844c8afaa502d532516bfa78b891a3c83156189f04fa5500630bdd44c7f8df46badee196253d427c930674acc680a34d31e300d57c5301d649e253b2716034d000dcb9b9114a246fb2b1f4561f8799abb01bfb588b71979b5c2cb0df67f5081de98ecddb03338f10e415f69d846205ac360b6dfccbc111698c76aeb0ef78e12b03d9fe6fc3aec4664e13f1b0a32a1066fc3bd2c72bba70602eecc684b4f93e377e82dd235e47aecb0e0bffca1baba031a6688bfc8ced5ec63b2b731abb082cd5b14be46c44cc1800eed523de356ba9cd6a08def43001c31c3fce960cfefa4dd246062a18672e46dd6192b94d206d87099773bd0d29865aeba1f72b56e48c99f973b142606ae9326287e4164ac8669b1349a0aad4cc8302877e6b00e2178413315acd781eb53f3510eec635adef6fba59148a0a8598ba454bd8df3d54074e95b9214ef13837672c5bf4dc60ab6d15fb009793f23e6d23135b7dc9467d986c05c280eec37b92e56f0e39c35f4e135144a96a8f7610e11dfe5670858f63fd0914c1e"}}, 0x3) ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) socket(0x2b, 0x1, 0x1) listen$auto(0x3, 0x83) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sa_data_min="1177f7a996c03917d3da2361b47d"}, 0x5) landlock_create_ruleset$auto(&(0x7f00000007c0)={0x1}, 0x8, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000001540)={0x33c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xff}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x35, 0xbd, "3735425a2f52031d5c95fd6a8b1015c42599a032bb94e1a52850b2439b3e42a441b15b54471f4563b8c5f2ab250aa69968"}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8001}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x7}, @NL80211_ATTR_MLO_LINKS={0x150, 0x138, "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"}, @NL80211_ATTR_BEACON_HEAD={0x183, 0xe, "a1da229262007f75b2a33c9d3dfc85a5983127d8f0490a83307ab08c4a85fb4f786f15bbc8972d1be55838f63709a4939849a697795a63727ad7ed041091d7562e6c426b77879cf7dc0f7ace45e4513cc6193346e77b5c4fb63d7a888ae10f484f0445c5eb3a47985024e87974c65490aac853ce839aa3855780e9df88f72b990024104d58ed9dcc28d76315a01c3676fadc3f8114e8853ccfaf2537013a8cc63d4f7c1fc8b8f1f8aa89c630fa9a76d4a3bf52f66232bb293f83960761ccb66053f2dcb950da65ff0507cdf0a334a8717881a2a08014c3c8822094083ac5df110b51b47367caa7e797772d06f7bcddc1d625fb088d5324bfa4b6c1d47277ce2d9788b699a8940f2e4480844b54acebb185ab1d9cd7c07acefb7729961037ba538a7f4724ffbbeb9a575f723cafa80ab61aadf5d5e24ad64e71b694834ba8982615446503f0dd9477cc8285308e7fac49c78d34373da071100b0367c745c9034230895da5d07f58e3ad349a9c29fc6383b879833d4aad95fc7b88cefe48c8eb"}]}, 0x33c}}, 0x48000) socket(0x1d, 0x2, 0x7) connect$auto(0x3, &(0x7f0000000180)={0x5, @sockaddr_1_1}, 0x54) 2.962416093s ago: executing program 1 (id=1630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), r0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) memfd_create$auto(&(0x7f0000000000)='.\x80\xbe?\xa7\xf5\xdd\xd8e\xc8\xc6\x89\xde\x84\xb8\x8c\xe7+[|+\x92\xfb\xa1\xc4\xfb\xff\x81\xe0z\xa0\nu\xd5<\xf4\xea\xd8b\xb5', 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x2) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = getpid() mmap$auto(0x0, 0x20009, 0x1, 0xeb1, 0x10000008, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0x4, 0x80}, 0x96) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/cgroup\x00') lseek$auto(0x0, 0x4f, 0x1) getdents64$auto(0x0, 0xfffffffffffffffc, 0xd6a1) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fdffffff", @ANYRES16=r1, @ANYBLOB="592b25bd7000fddbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008000) 2.466730072s ago: executing program 1 (id=1631): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) exit$auto(0x5f97) unshare$auto(0x40000080) exit$auto(0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) set_mempolicy_home_node$auto(0x600000, 0xffffffffffffffff, 0x0, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') fanotify_init$auto(0x4, 0x2000000002) r0 = socket(0x1, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) syz_genetlink_get_family_id$auto_NLBL_MGMT(&(0x7f0000000100), 0xffffffffffffffff) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x48004) connect$auto(0x3, 0x0, 0x55) mmap$auto(0xffffffffffffff81, 0x3, 0xe0, 0x13, 0x6, 0x8977) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mknod$auto(&(0x7f0000000080)='-{!-)\x00', 0x2, 0x6) socket(0xa, 0x801, 0x106) setsockopt$auto(0x6, 0x29, 0x4b, 0x0, 0x56f) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) 1.879739805s ago: executing program 2 (id=1632): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0x1, 0x2, 0x0) r0 = socket(0x2, 0x3, 0x6) ioctl$auto(0x3, 0x8907, 0xfffffffffffff4e0) ioctl$auto(0x3, 0x8907, 0xfffffffffffff4e0) syslog$auto(0x2, 0x0, 0x400000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) close_range$auto(0x2, 0x8000, 0x0) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000200), r1) vmsplice$auto(0x1, 0x0, 0x6, 0x8) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) capget$auto(0x0, 0x0) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x40000000084, 0x1c, 0xfffffffffffffffe, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="13ffffed", @ANYRES16=r3, @ANYBLOB="f50128bd7000fbdbdf250a00000a"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000000c0), r0) sendmsg$auto_TCP_METRICS_CMD_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x4c, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, {@u6_addr16=[0x60f5, 0x366, 0xb, 0x3, 0x1, 0x81, 0xe, 0x8]}}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @multicast2}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @local}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, {@u6_addr32=[0x9, 0x80000000, 0x6, 0x2]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) bpf$auto(0x5, 0x0, 0x401) sendfile$auto(0x6, 0x3, &(0x7f0000000040)=0xfffffffffffffff8, 0x3) 1.736283271s ago: executing program 2 (id=1633): socket(0x2, 0x801, 0x100) (async, rerun: 32) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async, rerun: 32) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x2, 0x0) (async, rerun: 32) socket(0x2, 0x1, 0x8) (async, rerun: 32) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) (async, rerun: 64) r0 = socket(0x1d, 0x2, 0x2) (rerun: 64) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) (async) mlockall$auto(0x7) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socketpair$auto(0x1f, 0x3, 0x3, 0x0) (async) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="5cb04505669709e465251500000adb"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x2, 0x0) socket(0x2b, 0x1, 0x1) (async) mmap$auto(0x0, 0x80000001, 0xe2, 0xebe, 0x401, 0x8000) (async) getsockopt$auto(0x6, 0x40000000029, 0x16, 0xfffffffffffffffe, 0x0) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) socket(0x29, 0x80000, 0x8) (async) rseq$auto(&(0x7f0000000000)={0xffff7ffe, 0x401, 0x0, 0x6, 0xffffffff, 0x8}, 0x7ffe, 0x3, 0x6) (async, rerun: 64) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async, rerun: 64) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1.427361101s ago: executing program 1 (id=1634): mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pidfd_open$auto(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x2, 0x0) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32) mq_open$auto(&(0x7f00000000c0)='\xff)-\\&[}\x00\x8b\xa5\x1f\x04< rU\xcf<,!\xc1\xa7\xcb\xedB\x1a\xc3P@V\xbbO\x86\xe6\x92}q\x92\x12\xff\x8a\xa1(\xa2\xc4Y\x88\tc', 0xde8, 0xf, 0x0) (async) socket(0x10, 0x2, 0x14) (async) socket(0xa, 0x5, 0x0) (async, rerun: 64) shutdown$auto(0x200000003, 0x2) (async, rerun: 64) socket(0x2b, 0x1, 0x0) socket(0x10, 0x2, 0x4) (async) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x8, 0xffffffff, 0x190, 0x6a, 0x0, 0x8, 0x3, 0x9, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", 0x0, 0x541, 0x4, 0x7, 0x4, 0x1009, 0x4, 0x2, 0xc6e, 0x5, @attach_btf_obj_fd=0x3, 0x166, 0x7ff, 0x6, 0x6, 0x48000000, 0xa7c2}, 0x7) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"d9ef7f"}}, 0x55) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') (async) r0 = socket(0x2, 0x801, 0x100) sendmsg$auto_NL80211_CMD_START_AP(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2000c004) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) (async) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) 1.20829287s ago: executing program 1 (id=1635): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(0x1, &(0x7f0000000100)={&(0x7f0000000140), 0x400000040000fdef}, 0x1) socket(0x15, 0x5, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(&(0x7f0000000080)) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0xffffffffffffffff) 604.379117ms ago: executing program 2 (id=1636): r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_get_self_attr$auto(0x4, 0x0, 0x0, 0xf0000000) futex_waitv$auto(&(0x7f0000000000)={0xfffffffffffffffc, 0x5d98, 0x6, 0x4}, 0x200bf50, 0x0, 0x0, 0x62c0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x7ea, &(0x7f0000000000)={0x6, 0x6c53, 0x10000400, 0x7, 0x1005, 0x7, 0x7, [0x4, 0x2e9, 0x30], {0x2, 0x1, 0x8, 0x7, 0xce60, 0x100005, 0x800001, 0xf5c, 0x2000007}, {0x4, 0x1003, 0xffff7ffe, 0x2, 0x8, 0x200, 0x2003, 0x0, 0x3}}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x9, 0x1, 0x9, 0x10, 0x8001, 0x1) setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f00000007c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_GET_INFO(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000012c0)={0x14, r2, 0x401, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4004804) capget$auto(0x0, 0xfffffffffffffffe) socket(0x2, 0x3, 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (fail_nth: 9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 129.220368ms ago: executing program 1 (id=1637): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) set_mempolicy$auto(0x3, &(0x7f0000000180)=0xfffffffffffffffd, 0xe4b) (async, rerun: 32) mmap$auto(0x5, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async, rerun: 32) socket(0xf, 0x3, 0x2) (async, rerun: 32) socket(0x2, 0xa, 0xe57a) (async) socket(0x15, 0x801, 0x103) (async) socket(0x18, 0x5, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async, rerun: 64) readahead$auto(0x6, 0x6, 0xffffffffffffffff) (async, rerun: 64) socket(0xa, 0x5, 0x87) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00b3dd", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fedbdf2503000000080002009e5b2a00"], 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x0) (async) setsockopt$auto(0x4, 0x29, 0x1a, 0x0, 0x200577) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0xb, 0xe, 0x0) (async) sendmsg$auto_NL80211_CMD_SET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000f9446fe51fe0ecd6f54c7079cf00", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf251a000000"], 0x14}, 0x1, 0x0, 0x0, 0xc050}, 0x4800) (async, rerun: 32) mmap$auto(0x0, 0xe984, 0xdf, 0xeb1, 0x2, 0x8002) (rerun: 32) socket(0x25, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x1f, 0x2, 0x7e8b885d) 0s ago: executing program 1 (id=1638): r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_get_self_attr$auto(0x4, 0x0, 0x0, 0xf0000000) futex_waitv$auto(&(0x7f0000000000)={0xfffffffffffffffc, 0x5d98, 0x6, 0x4}, 0x200bf50, 0x0, 0x0, 0x62c0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x7ea, &(0x7f0000000000)={0x6, 0x6c53, 0x10000400, 0x7, 0x1005, 0x7, 0x7, [0x4, 0x2e9, 0x5], {0x2, 0x1, 0x1, 0x7, 0xce60, 0x100005, 0x800001, 0xf5c, 0x2000007}, {0x4, 0x1003, 0xffff7ffe, 0x2, 0x8000000a, 0x200, 0x2003, 0x0, 0x3}}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x9, 0x1, 0x9, 0x10, 0x8001, 0x1) setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f00000007c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_GET_INFO(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000012c0)={0x14, r2, 0x401, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4004804) capget$auto(0x0, 0xfffffffffffffffe) socket(0x2, 0x3, 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0x8, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x40080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) kernel console output (not intermixed with test programs): [1, 0] type 2 family 0 port 6081 - 0 [ 282.255344][ T7048] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.679021][ T7048] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.012400][ T7048] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.367272][ T7048] bridge_slave_1: left allmulticast mode [ 283.373275][ T7048] bridge_slave_1: left promiscuous mode [ 283.407240][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.503359][ T7048] bridge_slave_0: left allmulticast mode [ 283.516998][ T7048] bridge_slave_0: left promiscuous mode [ 283.522928][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.928508][ T5252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.940094][ T5252] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.958122][ T5252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.979573][ T5252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.992398][ T5252] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 284.012716][ T5252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.963648][ T7048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.043121][ T7048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.084644][ T5247] Bluetooth: hci2: command tx timeout [ 286.106495][ T7048] bond0 (unregistering): Released all slaves [ 288.031145][ T7048] hsr_slave_0: left promiscuous mode [ 288.043510][ T7048] hsr_slave_1: left promiscuous mode [ 288.187271][ T5247] Bluetooth: hci2: command tx timeout [ 288.197504][ T7048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.205088][ T7048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.213435][ T7048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.224637][ T7048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.279396][ T7048] veth1_macvtap: left promiscuous mode [ 288.285528][ T7048] veth0_macvtap: left promiscuous mode [ 288.291499][ T7048] veth1_vlan: left promiscuous mode [ 288.297028][ T7048] veth0_vlan: left promiscuous mode [ 289.171093][ T7048] team0 (unregistering): Port device team_slave_1 removed [ 289.251575][ T7048] team0 (unregistering): Port device team_slave_0 removed [ 289.589396][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 290.153218][ T9074] chnl_net:caif_netlink_parms(): no params data found [ 290.236959][ T5247] Bluetooth: hci2: command tx timeout [ 290.662925][ T9074] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.672570][ T9074] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.709605][ T9074] bridge_slave_0: entered allmulticast mode [ 290.744272][ T9074] bridge_slave_0: entered promiscuous mode [ 290.879656][ T9200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.778'. [ 290.914903][ T9074] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.966568][ T9074] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.997229][ T9074] bridge_slave_1: entered allmulticast mode [ 291.018716][ T9074] bridge_slave_1: entered promiscuous mode [ 291.220681][ T9074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.370584][ T9074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.500116][ T9074] team0: Port device team_slave_0 added [ 291.542333][ T9074] team0: Port device team_slave_1 added [ 291.733813][ T9074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.751587][ T9074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.844592][ T9074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.879428][ T9074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.906956][ T9074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.993686][ T9074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.218214][ T9074] hsr_slave_0: entered promiscuous mode [ 292.233077][ T9074] hsr_slave_1: entered promiscuous mode [ 292.323027][ T5247] Bluetooth: hci2: command tx timeout [ 292.337137][ T9074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.344825][ T9074] Cannot create hsr debugfs directory [ 294.841717][ T9074] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 294.886373][ T9074] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 294.947365][ T9074] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 294.997572][ T9074] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 295.317914][ T9074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.384736][ T9074] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.438613][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.445940][ T7049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.522833][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.530106][ T7049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.226157][ T9074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.489209][ T9074] veth0_vlan: entered promiscuous mode [ 296.549461][ T9074] veth1_vlan: entered promiscuous mode [ 296.669818][ T9074] veth0_macvtap: entered promiscuous mode [ 296.707836][ T9074] veth1_macvtap: entered promiscuous mode [ 296.738202][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.748977][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.759274][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.769932][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.779973][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.790889][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.802649][ T9074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.814841][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.826964][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.837187][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.848256][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.858262][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.868917][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.891935][ T9074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.902872][ T9074] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.924078][ T9074] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.946425][ T9074] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.977108][ T9074] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.720259][ T7044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.745105][ T7044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.819858][ T7048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.837715][ T7048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.961757][ T9565] netlink: 'syz.3.837': attribute type 1 has an invalid length. [ 304.997027][ T9565] netlink: 48 bytes leftover after parsing attributes in process `syz.3.837'. [ 309.197835][ T9639] svc: failed to register nfsdv3 RPC service (errno 111). [ 309.250443][ T9639] svc: failed to register nfsaclv3 RPC service (errno 111). [ 312.080462][ T9673] syz.3.862(9673): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 316.108527][ T9763] kernel read not supported for file /#)-\&[} (pid: 9763 comm: syz.2.884) [ 316.138946][ T29] audit: type=1804 audit(3235.500:5): pid=9763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.884" name="#)-\&[}" dev="mqueue" ino=28211 res=1 errno=0 [ 316.199910][ T29] audit: type=1800 audit(3235.550:6): pid=9763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.884" name="#)-\&[}" dev="mqueue" ino=28211 res=0 errno=0 [ 316.297010][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'. [ 318.019742][ T9826] netlink: 'syz.1.904': attribute type 11 has an invalid length. [ 318.027767][ T9826] netlink: 'syz.1.904': attribute type 11 has an invalid length. [ 318.664779][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.909'. [ 319.424953][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.909'. [ 319.757854][ T5252] Bluetooth: hci1: command 0x0406 tx timeout [ 322.443148][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'. [ 322.799130][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.805963][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.587709][ T5247] Bluetooth: hci0: Malformed HCI Event [ 326.943254][ T7044] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.272042][ T7044] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.518108][ T7044] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.713028][ T5252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 327.723103][ T5252] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.732154][ T5252] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.740830][ T5252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.748865][ T5252] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 327.756772][ T5252] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 327.994586][ T7044] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.231101][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.957'. [ 328.514849][ T7044] bridge_slave_1: left allmulticast mode [ 328.555501][ T7044] bridge_slave_1: left promiscuous mode [ 328.597348][ T7044] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.682959][ T7044] bridge_slave_0: left allmulticast mode [ 328.698021][ T7044] bridge_slave_0: left promiscuous mode [ 328.703882][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.847431][ T5247] Bluetooth: hci3: command tx timeout [ 331.018038][ T7044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.047701][ T7044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.080581][ T7044] bond0 (unregistering): Released all slaves [ 331.276548][T10023] chnl_net:caif_netlink_parms(): no params data found [ 331.926318][ T5247] Bluetooth: hci3: command tx timeout [ 332.199364][T10023] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.237263][T10023] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.244575][T10023] bridge_slave_0: entered allmulticast mode [ 332.269593][T10023] bridge_slave_0: entered promiscuous mode [ 332.308318][T10023] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.339481][T10023] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.346787][T10023] bridge_slave_1: entered allmulticast mode [ 332.378422][T10023] bridge_slave_1: entered promiscuous mode [ 332.514290][ T7044] hsr_slave_0: left promiscuous mode [ 332.592450][ T7044] hsr_slave_1: left promiscuous mode [ 332.613493][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.636986][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.656591][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.692112][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.750270][ T7044] veth1_macvtap: left promiscuous mode [ 332.755974][ T7044] veth0_macvtap: left promiscuous mode [ 332.772258][ T7044] veth1_vlan: left promiscuous mode [ 332.787037][ T7044] veth0_vlan: left promiscuous mode [ 333.762782][ T7044] team0 (unregistering): Port device team_slave_1 removed [ 333.810711][ T7044] team0 (unregistering): Port device team_slave_0 removed [ 334.001466][ T5247] Bluetooth: hci3: command tx timeout [ 334.395718][T10023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.410082][T10023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.511833][T10023] team0: Port device team_slave_0 added [ 334.522346][T10023] team0: Port device team_slave_1 added [ 334.631103][T10023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.644915][T10023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.699790][T10023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.720989][T10023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.728489][T10023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.755776][T10023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.189835][T10023] hsr_slave_0: entered promiscuous mode [ 335.201204][T10023] hsr_slave_1: entered promiscuous mode [ 335.227215][T10023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.243414][T10023] Cannot create hsr debugfs directory [ 336.011794][ T29] audit: type=1326 audit(3255.400:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10166 comm="syz.2.977" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f337d37dff9 code=0x0 [ 336.077659][ T5247] Bluetooth: hci3: command tx timeout [ 336.599831][T10023] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 336.625668][T10023] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 336.656165][T10023] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 336.676363][T10023] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.927054][T10023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.004405][T10023] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.104738][ T7047] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.111985][ T7047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.126671][ T7047] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.133985][ T7047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.634664][ T7048] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.984852][ T7048] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.033412][ T5252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.053656][ T5252] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.062867][ T5252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.083558][ T5252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.099308][ T5252] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.106810][ T5252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.371805][ T7048] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.506037][ T7048] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.536309][T10023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.650932][T10023] veth0_vlan: entered promiscuous mode [ 338.663370][T10023] veth1_vlan: entered promiscuous mode [ 338.694812][T10023] veth0_macvtap: entered promiscuous mode [ 338.705675][T10023] veth1_macvtap: entered promiscuous mode [ 338.723422][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.734068][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.744055][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.754719][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.764688][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.775786][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.788160][T10023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.833205][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.851509][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.873995][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.899392][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.937623][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.963435][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.992854][T10023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.152422][T10023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.180155][T10023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.226296][T10023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.272784][T10023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.831415][ T7048] bridge_slave_1: left allmulticast mode [ 339.838522][ T7048] bridge_slave_1: left promiscuous mode [ 339.844748][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.923058][ T7048] bridge_slave_0: left allmulticast mode [ 339.929218][ T7048] bridge_slave_0: left promiscuous mode [ 339.943632][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.158108][ T5247] Bluetooth: hci2: command tx timeout [ 341.262077][ T7048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.309294][ T7048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.336997][ T7048] bond0 (unregistering): Released all slaves [ 341.558461][ T7046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.591541][ T7046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.702406][ T7041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.750011][ T7041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.100962][T10224] chnl_net:caif_netlink_parms(): no params data found [ 342.242058][ T5247] Bluetooth: hci2: command tx timeout [ 343.108688][T10224] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.115866][T10224] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.148186][T10224] bridge_slave_0: entered allmulticast mode [ 343.155593][T10224] bridge_slave_0: entered promiscuous mode [ 343.188071][T10224] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.206949][T10224] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.236062][T10224] bridge_slave_1: entered allmulticast mode [ 343.253703][T10224] bridge_slave_1: entered promiscuous mode [ 343.581647][ T7048] hsr_slave_0: left promiscuous mode [ 343.766972][ T7048] hsr_slave_1: left promiscuous mode [ 343.907857][ T7048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.915364][ T7048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.018650][ T7048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.026168][ T7048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.176720][ T7048] veth1_macvtap: left promiscuous mode [ 344.210868][ T7048] veth0_macvtap: left promiscuous mode [ 344.216575][ T7048] veth1_vlan: left promiscuous mode [ 344.240097][ T7048] veth0_vlan: left promiscuous mode [ 344.317782][ T5247] Bluetooth: hci2: command tx timeout [ 344.602205][T10363] kernel read not supported for file / (pid: 10363 comm: syz.0.1003) [ 344.715627][ T29] audit: type=1800 audit(8277262383.970:8): pid=10363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1003" name=08 dev="mqueue" ino=31363 res=0 errno=0 [ 346.391348][ T7048] team0 (unregistering): Port device team_slave_1 removed [ 346.404177][ T5247] Bluetooth: hci2: command tx timeout [ 346.521151][ T7048] team0 (unregistering): Port device team_slave_0 removed [ 347.359281][T10224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.423712][T10224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.608541][T10224] team0: Port device team_slave_0 added [ 347.629293][T10224] team0: Port device team_slave_1 added [ 347.770574][T10224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.794771][T10224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.856250][T10224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.885259][T10224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.899761][T10224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.964385][T10224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.315794][T10224] hsr_slave_0: entered promiscuous mode [ 348.344414][T10224] hsr_slave_1: entered promiscuous mode [ 348.361342][T10224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.370541][T10224] Cannot create hsr debugfs directory [ 349.699593][T10224] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 349.740198][T10224] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 349.778570][T10224] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 349.856440][T10224] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 350.078011][T10224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.133639][T10224] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.176302][ T7048] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.183598][ T7048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.251637][ T7046] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.258863][ T7046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.846502][T10224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.026277][T10224] veth0_vlan: entered promiscuous mode [ 351.073796][T10224] veth1_vlan: entered promiscuous mode [ 351.153611][T10224] veth0_macvtap: entered promiscuous mode [ 351.179089][T10224] veth1_macvtap: entered promiscuous mode [ 351.233273][T10224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.282701][T10224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.316991][T10224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.349406][T10224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.364299][T10224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.385176][T10224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.433381][T10224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.518866][T10224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.559957][T10224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.589983][T10224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.625785][T10224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.657087][T10224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.686972][T10224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.708706][T10224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.734963][T10224] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.764262][T10224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.793454][T10224] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.817288][T10224] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.918724][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'. [ 351.999442][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 352.233329][ T7044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.259976][ T7044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.403978][ T7047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.424172][ T7047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.903507][T10702] openvswitch: netlink: Flow key attr not present in new flow. [ 359.235780][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1082'. [ 365.960928][ T7047] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.672943][ T7047] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.947479][ T5252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.964280][ T5252] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.973791][ T5252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.988267][ T5252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.996341][ T5252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 367.004540][ T5252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 367.185797][ T7047] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.794711][ T7047] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.877706][T10843] chnl_net:caif_netlink_parms(): no params data found [ 368.073667][T10868] nbd: must specify at least one socket [ 368.448563][T10843] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.455868][T10843] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.477193][T10843] bridge_slave_0: entered allmulticast mode [ 368.484522][T10843] bridge_slave_0: entered promiscuous mode [ 368.567186][T10843] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.574371][T10843] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.597358][T10843] bridge_slave_1: entered allmulticast mode [ 368.604775][T10843] bridge_slave_1: entered promiscuous mode [ 369.003159][T10843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.034245][ T7047] bridge_slave_1: left allmulticast mode [ 369.042711][ T5247] Bluetooth: hci0: command tx timeout [ 369.059307][ T7047] bridge_slave_1: left promiscuous mode [ 369.065135][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.265479][ T7047] bridge_slave_0: left allmulticast mode [ 369.277684][ T7047] bridge_slave_0: left promiscuous mode [ 369.298876][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.989114][T10924] cgroup: fork rejected by pids controller in /syz1 [ 371.089081][T10955] unsupported nlmsg_type 40 [ 371.116950][ T5247] Bluetooth: hci0: command tx timeout [ 372.297051][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1118'. [ 373.197012][ T5247] Bluetooth: hci0: command tx timeout [ 375.277001][ T5247] Bluetooth: hci0: command tx timeout [ 378.664305][ T7047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.746264][ T7047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.885796][ T7047] bond0 (unregistering): Released all slaves [ 378.956636][T10843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.665495][ T7047] HfR: left promiscuous mode [ 379.833919][T10843] team0: Port device team_slave_0 added [ 379.885865][T10843] team0: Port device team_slave_1 added [ 380.270595][T10843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.285393][T10843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.386973][T10843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.418713][T10843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.425783][T10843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.537245][T10843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.427801][T10843] hsr_slave_0: entered promiscuous mode [ 381.487479][T10843] hsr_slave_1: entered promiscuous mode [ 381.547500][T10843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.555147][T10843] Cannot create hsr debugfs directory [ 383.380915][T11184] svc: failed to register nfsdv3 RPC service (errno 111). [ 383.416469][T11184] svc: failed to register nfsaclv3 RPC service (errno 111). [ 384.087339][ T7047] hsr_slave_0: left promiscuous mode [ 384.134711][ T7047] hsr_slave_1: left promiscuous mode [ 384.183987][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.197019][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.216345][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.240234][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.241012][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.254042][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.370578][ T7047] veth1_macvtap: left promiscuous mode [ 384.376531][ T7047] veth0_macvtap: left promiscuous mode [ 384.388322][ T7047] veth1_vlan: left promiscuous mode [ 384.393751][ T7047] veth0_vlan: left promiscuous mode [ 385.641651][ T5252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 385.651945][ T5252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 385.677999][ T5252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 385.687474][ T5252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 385.701250][ T5252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 385.712517][ T5252] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.496749][ T7047] team0 (unregistering): Port device team_slave_1 removed [ 386.571636][ T7047] team0 (unregistering): Port device team_slave_0 removed [ 387.756986][ T5247] Bluetooth: hci4: command tx timeout [ 388.231502][T11207] chnl_net:caif_netlink_parms(): no params data found [ 388.231785][T11213] sctp: [Deprecated]: syz.0.1139 (pid 11213) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.231785][T11213] Use struct sctp_sack_info instead [ 388.604609][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 388.977655][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 389.067397][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 389.069207][T11207] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.127000][T11207] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.134345][T11207] bridge_slave_0: entered allmulticast mode [ 389.179323][T11207] bridge_slave_0: entered promiscuous mode [ 389.206008][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 389.207770][T11207] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.281574][T11207] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.307317][T11207] bridge_slave_1: entered allmulticast mode [ 389.314983][T11207] bridge_slave_1: entered promiscuous mode [ 389.528677][T11207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.560746][T11207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.837042][ T5247] Bluetooth: hci4: command tx timeout [ 389.910325][ T7047] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.976301][T11207] team0: Port device team_slave_0 added [ 389.989905][T11207] team0: Port device team_slave_1 added [ 390.102073][T10843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 390.213524][ T7047] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.259204][T11207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.266234][T11207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.337890][T11207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.358839][T10843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 390.379989][T10843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 390.395476][T11207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.408263][T11207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.464987][T11207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.541674][ T7047] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.571036][T10843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 390.823302][ T7047] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.952175][T11207] hsr_slave_0: entered promiscuous mode [ 390.987286][T11207] hsr_slave_1: entered promiscuous mode [ 391.482966][ T7047] bridge_slave_1: left allmulticast mode [ 391.507799][ T7047] bridge_slave_1: left promiscuous mode [ 391.513675][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.648247][ T7047] bridge_slave_0: left allmulticast mode [ 391.653990][ T7047] bridge_slave_0: left promiscuous mode [ 391.705661][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.919260][ T5247] Bluetooth: hci4: command tx timeout [ 393.363171][ T7047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.447546][ T7047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.468963][ T7047] bond0 (unregistering): Released all slaves [ 393.525574][T10843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.998228][ T5247] Bluetooth: hci4: command tx timeout [ 394.257575][T10843] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.342357][T10822] syz.1.1101 (10822) used greatest stack depth: 20672 bytes left [ 394.464877][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.472280][ T7049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.727874][ T7047] hsr_slave_0: left promiscuous mode [ 394.734179][ T7047] hsr_slave_1: left promiscuous mode [ 394.742034][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.777521][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.853111][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.877278][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.970971][ T7047] veth1_macvtap: left promiscuous mode [ 394.976780][ T7047] veth0_macvtap: left promiscuous mode [ 395.017065][ T7047] veth1_vlan: left promiscuous mode [ 395.022806][ T7047] veth0_vlan: left promiscuous mode [ 397.812265][ T7047] team0 (unregistering): Port device team_slave_1 removed [ 398.033724][ T7047] team0 (unregistering): Port device team_slave_0 removed [ 399.665921][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'. [ 400.054097][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.061359][ T7049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.544171][T11207] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 400.766647][T11207] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 400.831525][T11207] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 400.993921][T11207] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.074349][T10843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.298567][T10843] veth0_vlan: entered promiscuous mode [ 401.352864][T10843] veth1_vlan: entered promiscuous mode [ 401.427294][T11207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.494596][T10843] veth0_macvtap: entered promiscuous mode [ 401.531235][T10843] veth1_macvtap: entered promiscuous mode [ 401.556527][T11207] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.594068][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.601294][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.656623][T10843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.704029][T10843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.737186][T10843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.762730][T10843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.789221][T10843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.843812][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.851065][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.953959][T10843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.986854][T10843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.018027][T10843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.045345][T10843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.091840][T10843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.169034][T11377] Process accounting resumed [ 402.175777][T10843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.195597][T10843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.206907][T10843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.215697][T10843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.559264][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.602808][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.661902][ T7049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.696973][ T7049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.893727][T11207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.002551][T11207] veth0_vlan: entered promiscuous mode [ 403.036125][T11207] veth1_vlan: entered promiscuous mode [ 403.138968][T11207] veth0_macvtap: entered promiscuous mode [ 403.168521][T11207] veth1_macvtap: entered promiscuous mode [ 403.235521][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.279057][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.306981][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.332387][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.363420][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.386991][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.418667][T11207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.441816][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.476919][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.497129][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.526988][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.558897][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.586897][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.608509][T11207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.642668][T11207] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.672550][T11207] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.706929][T11207] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.715731][T11207] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.131887][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.172844][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.234547][ T7035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.262716][ T7035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.843607][ T7047] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.983203][ T7047] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.137826][ T7047] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.294844][ T7047] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.591575][ T7047] bridge_slave_1: left allmulticast mode [ 411.629991][ T7047] bridge_slave_1: left promiscuous mode [ 411.635885][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.678268][ T7047] bridge_slave_0: left allmulticast mode [ 411.684013][ T7047] bridge_slave_0: left promiscuous mode [ 411.710118][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.227555][ T5252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 412.240765][ T5252] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 412.249846][ T5252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 412.265621][ T5252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 412.273527][ T5252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 412.284886][ T5252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 412.996729][ T7047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.012078][ T7047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.038737][ T7047] bond0 (unregistering): Released all slaves [ 413.639051][ T7047] hsr_slave_0: left promiscuous mode [ 413.645326][ T7047] hsr_slave_1: left promiscuous mode [ 413.658526][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.666034][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.704327][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.714046][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.750284][ T7047] veth1_macvtap: left promiscuous mode [ 413.755912][ T7047] veth0_macvtap: left promiscuous mode [ 413.769286][ T7047] veth1_vlan: left promiscuous mode [ 413.774715][ T7047] veth0_vlan: left promiscuous mode [ 414.319384][ T5252] Bluetooth: hci0: command tx timeout [ 414.426534][ T5247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 414.470030][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 414.488555][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 414.509620][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 414.542912][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 414.565895][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.111935][ T7047] team0 (unregistering): Port device team_slave_1 removed [ 415.190417][ T7047] team0 (unregistering): Port device team_slave_0 removed [ 416.226050][ T5252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.236229][ T5252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.252110][ T5252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.285836][ T5252] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.293755][ T5252] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 416.305084][ T5252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 416.402366][ T5247] Bluetooth: hci0: command tx timeout [ 416.718760][ T5247] Bluetooth: hci2: command tx timeout [ 416.855025][T11472] chnl_net:caif_netlink_parms(): no params data found [ 416.899398][T11404] syz.0.1156 (11404) used greatest stack depth: 20368 bytes left [ 417.164914][T10944] syz.1.1122 (10944) used greatest stack depth: 18832 bytes left [ 417.392327][T11472] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.405887][T11472] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.422860][T11472] bridge_slave_0: entered allmulticast mode [ 417.430975][T11472] bridge_slave_0: entered promiscuous mode [ 417.493338][T11472] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.519936][T11472] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.573832][T11472] bridge_slave_1: entered allmulticast mode [ 417.618721][T11472] bridge_slave_1: entered promiscuous mode [ 417.881859][T11472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.913215][T11472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.072401][T11472] team0: Port device team_slave_0 added [ 418.385233][ T7047] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.397497][ T5247] Bluetooth: hci1: command tx timeout [ 418.453264][T11472] team0: Port device team_slave_1 added [ 418.477883][ T5247] Bluetooth: hci0: command tx timeout [ 418.711627][T11472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.736251][T11472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.777786][T11472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.799259][ T5247] Bluetooth: hci2: command tx timeout [ 419.154115][ T7047] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.351045][T11472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.360668][T11472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.401886][T11472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.427718][T11495] chnl_net:caif_netlink_parms(): no params data found [ 419.625693][ T7047] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.724784][T11498] chnl_net:caif_netlink_parms(): no params data found [ 420.362189][ T7047] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.401373][T11472] hsr_slave_0: entered promiscuous mode [ 420.477105][ T5247] Bluetooth: hci1: command tx timeout [ 420.517835][T11472] hsr_slave_1: entered promiscuous mode [ 420.567074][ T5247] Bluetooth: hci0: command tx timeout [ 420.627319][T10932] syz.1.1122 (10932) used greatest stack depth: 18768 bytes left [ 420.699538][T11472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.707412][T11472] Cannot create hsr debugfs directory [ 420.877133][ T5247] Bluetooth: hci2: command tx timeout [ 421.866026][T11495] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.900298][T11495] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.927343][T11495] bridge_slave_0: entered allmulticast mode [ 421.938770][T11495] bridge_slave_0: entered promiscuous mode [ 422.208137][T11495] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.215502][T11495] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.222973][T11495] bridge_slave_1: entered allmulticast mode [ 422.231172][T11495] bridge_slave_1: entered promiscuous mode [ 422.502001][T11495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.530857][T11495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.557841][ T5247] Bluetooth: hci1: command tx timeout [ 422.649228][T11498] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.656446][T11498] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.677152][T11498] bridge_slave_0: entered allmulticast mode [ 422.684501][T11498] bridge_slave_0: entered promiscuous mode [ 422.729660][T11498] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.757558][T11498] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.764890][T11498] bridge_slave_1: entered allmulticast mode [ 422.788174][T11498] bridge_slave_1: entered promiscuous mode [ 422.957322][ T5247] Bluetooth: hci2: command tx timeout [ 423.506493][ T7047] bridge_slave_1: left allmulticast mode [ 423.512312][ T7047] bridge_slave_1: left promiscuous mode [ 423.519358][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.587757][ T7047] bridge_slave_0: left allmulticast mode [ 423.593530][ T7047] bridge_slave_0: left promiscuous mode [ 423.607144][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.616581][ T7047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.642328][ T5247] Bluetooth: hci1: command tx timeout [ 424.658064][ T7047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.680871][ T7047] bond0 (unregistering): Released all slaves [ 424.830209][T11498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.926590][T11495] team0: Port device team_slave_0 added [ 424.950090][T11495] team0: Port device team_slave_1 added [ 425.048544][T11498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.411326][T11498] team0: Port device team_slave_0 added [ 425.720837][T11495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.732595][T11495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.786913][T11495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.810179][T11495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.817647][T11495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.866893][T11495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.890907][T11498] team0: Port device team_slave_1 added [ 426.145364][T11498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.167978][T11498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.225481][T11498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.353253][T11495] hsr_slave_0: entered promiscuous mode [ 426.368032][T11495] hsr_slave_1: entered promiscuous mode [ 426.425184][T11495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.445919][T11495] Cannot create hsr debugfs directory [ 426.466052][T11498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.473508][T11498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.536049][T11498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.938416][T11498] hsr_slave_0: entered promiscuous mode [ 426.954191][T11498] hsr_slave_1: entered promiscuous mode [ 426.969265][T11498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.986932][T11498] Cannot create hsr debugfs directory [ 427.042451][ T7047] hsr_slave_0: left promiscuous mode [ 427.049012][ T7047] hsr_slave_1: left promiscuous mode [ 427.082687][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.090626][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.118005][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.140997][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.173707][ T7047] veth1_macvtap: left promiscuous mode [ 427.186708][ T7047] veth1_vlan: left promiscuous mode [ 427.197400][ T7047] veth0_vlan: left promiscuous mode [ 428.210726][ T7047] team0 (unregistering): Port device team_slave_1 removed [ 428.303915][ T7047] team0 (unregistering): Port device team_slave_0 removed [ 429.420086][T11472] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 429.519902][T11472] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 429.536377][T11472] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 429.611094][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 429.625316][T11472] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 429.934141][ T7047] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.051955][T11472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.121659][ T7047] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.170576][T11472] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.314129][ T7047] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.364779][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.372061][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.499148][ T7047] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.548947][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.556153][ T7036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.587658][T11495] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 430.620512][T11495] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 430.648772][T11495] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 430.687978][T11495] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 430.915171][ T7047] bridge_slave_1: left allmulticast mode [ 430.923096][ T7047] bridge_slave_1: left promiscuous mode [ 430.937371][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.964913][ T7047] bridge_slave_0: left allmulticast mode [ 430.977233][ T7047] bridge_slave_0: left promiscuous mode [ 430.983053][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.556618][ T7047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.580173][ T7047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.604984][ T7047] bond0 (unregistering): Released all slaves [ 431.859774][T11495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.951816][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 432.005570][T11495] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.116413][ T7041] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.123730][ T7041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.198253][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.205535][ T7036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.440373][T11472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.517130][ T7047] hsr_slave_0: left promiscuous mode [ 432.539258][ T7047] hsr_slave_1: left promiscuous mode [ 432.553563][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.577891][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.585940][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.600248][ T7047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.634468][ T7047] veth1_macvtap: left promiscuous mode [ 432.646386][ T7047] veth0_macvtap: left promiscuous mode [ 432.653558][ T7047] veth1_vlan: left promiscuous mode [ 432.659122][ T7047] veth0_vlan: left promiscuous mode [ 433.421040][ T7047] team0 (unregistering): Port device team_slave_1 removed [ 433.490038][ T7047] team0 (unregistering): Port device team_slave_0 removed [ 434.312746][T11495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 434.410253][T11498] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 434.435180][T11498] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 434.452309][T11498] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 434.553102][T11498] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 434.606575][T11472] veth0_vlan: entered promiscuous mode [ 434.654542][T11472] veth1_vlan: entered promiscuous mode [ 434.802271][T11472] veth0_macvtap: entered promiscuous mode [ 434.843464][T11472] veth1_macvtap: entered promiscuous mode [ 434.904003][T11472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.917058][T11472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.929246][T11472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.969208][T11498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.985948][T11472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.001095][T11472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.018464][T11472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.059797][T11495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.072242][T11472] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.083604][T11472] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.093205][T11472] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.120185][T11472] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.166098][T11498] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.214270][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.221485][ T7036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.232799][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.240157][ T7036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.296620][T11495] veth0_vlan: entered promiscuous mode [ 435.350877][T11495] veth1_vlan: entered promiscuous mode [ 435.483230][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.505040][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.578045][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.585950][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.619489][T11495] veth0_macvtap: entered promiscuous mode [ 435.665010][T11495] veth1_macvtap: entered promiscuous mode [ 435.749252][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.788787][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.817312][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.836326][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.865587][T11495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.902995][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.945085][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.976937][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.016907][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.058178][T11495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.147320][T11495] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.166492][T11495] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.196973][T11495] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.226563][T11495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.286091][T11498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.330678][T11804] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1211'. [ 436.368961][T11804] netlink: zone id is out of range [ 436.598296][T11498] veth0_vlan: entered promiscuous mode [ 436.630083][ T7036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.661619][ T7036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.704784][T11498] veth1_vlan: entered promiscuous mode [ 436.806704][ T7036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.830600][ T7036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.891017][T11498] veth0_macvtap: entered promiscuous mode [ 436.921550][T11498] veth1_macvtap: entered promiscuous mode [ 436.961820][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.985588][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.004745][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.016032][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.026318][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.037882][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.073013][T11498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.118684][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.136936][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.163654][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.213689][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.257030][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.286497][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.318818][T11498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.370607][T11498] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.404117][T11498] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.441345][T11498] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.470835][T11498] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.812386][ T7036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.846551][ T7036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.910974][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.938577][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.743601][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'. [ 443.473914][T11959] netlink: 'syz.1.1238': attribute type 11 has an invalid length. [ 443.573377][T11959] svc: failed to register nfsdv3 RPC service (errno 111). [ 443.599811][T11959] svc: failed to register nfsaclv3 RPC service (errno 111). [ 443.799756][T11949] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1240'. [ 445.680835][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.696964][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.431200][T12055] ptrace attach of "./syz-executor exec"[11495] was attempted by "./syz-executor exec"[12055] [ 447.565610][T12056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1263'. [ 448.101869][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.364886][T12073] Process accounting resumed [ 448.383471][ T5252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 448.404538][ T5252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 448.413228][ T5252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 448.428807][ T5252] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 448.436574][ T5252] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 448.446029][ T5252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 448.476253][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.502454][T12070] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1267'. [ 448.823022][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.149806][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.640195][T12072] chnl_net:caif_netlink_parms(): no params data found [ 449.872885][ T35] bridge_slave_1: left allmulticast mode [ 449.883703][ T35] bridge_slave_1: left promiscuous mode [ 449.896400][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.028776][ T35] bridge_slave_0: left allmulticast mode [ 450.034520][ T35] bridge_slave_0: left promiscuous mode [ 450.077204][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.487176][ T5247] Bluetooth: hci1: command tx timeout [ 451.110306][T12111] can: request_module (can-proto-0) failed. [ 452.225725][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.288017][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.375506][ T35] bond0 (unregistering): Released all slaves [ 452.566951][ T5247] Bluetooth: hci1: command tx timeout [ 453.291028][T12072] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.316997][T12072] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.340226][T12072] bridge_slave_0: entered allmulticast mode [ 453.366450][T12072] bridge_slave_0: entered promiscuous mode [ 453.398685][T12072] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.436485][T12072] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.449776][T12072] bridge_slave_1: entered allmulticast mode [ 453.477290][T12072] bridge_slave_1: entered promiscuous mode [ 453.881168][T12072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.923551][T12072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.174907][T12072] team0: Port device team_slave_0 added [ 454.346210][ T35] hsr_slave_0: left promiscuous mode [ 454.376827][ T35] hsr_slave_1: left promiscuous mode [ 454.387337][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.394839][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.425914][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.437008][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.554839][ T35] veth1_macvtap: left promiscuous mode [ 454.573761][ T35] veth0_macvtap: left promiscuous mode [ 454.587220][ T35] veth1_vlan: left promiscuous mode [ 454.596959][ T35] veth0_vlan: left promiscuous mode [ 454.637783][ T5247] Bluetooth: hci1: command tx timeout [ 456.726901][ T5247] Bluetooth: hci1: command tx timeout [ 458.514734][ T35] team0 (unregistering): Port device team_slave_1 removed [ 458.692136][ T35] team0 (unregistering): Port device team_slave_0 removed [ 459.779280][T12072] team0: Port device team_slave_1 added [ 459.855284][T12072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.870795][T12072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.899183][T12072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.914382][T12072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.922070][T12072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.951041][T12072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.308828][T12072] hsr_slave_0: entered promiscuous mode [ 460.324884][T12072] hsr_slave_1: entered promiscuous mode [ 460.331376][T12072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.350144][T12072] Cannot create hsr debugfs directory [ 461.779329][T12072] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 462.256153][T12072] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 462.430359][T12072] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 462.481688][T12072] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 462.751304][T12072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.847754][T12072] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.882785][ T7041] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.890015][ T7041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.968935][ T7041] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.976179][ T7041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.138434][T12072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 463.711775][T12072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.839865][T12072] veth0_vlan: entered promiscuous mode [ 463.875855][T12072] veth1_vlan: entered promiscuous mode [ 463.987195][T12072] veth0_macvtap: entered promiscuous mode [ 464.002758][T12072] veth1_macvtap: entered promiscuous mode [ 464.024954][T12072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.049627][T12072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.082428][T12072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.102851][T12072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.122030][T12072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.149551][T12072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.167208][T12072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.197695][T12072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.219099][T12072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.249851][T12072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.279316][T12072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.316956][T12072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.354133][T12072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.378489][T12072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.411869][T12072] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.430983][T12072] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.457375][T12352] ptrace attach of "./syz-executor exec"[11472] was attempted by "./syz-executor exec"[12352] [ 464.477439][T12072] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.486254][T12072] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.731680][ T7049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.754545][ T7049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.850715][ T7035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.881056][ T7035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.140842][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1320'. [ 465.350688][ T29] audit: type=1107 audit(8277292060.520:9): pid=12375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 465.376520][ T29] audit: type=1107 audit(8277292060.520:10): pid=12375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 465.476528][ T29] audit: type=1326 audit(8277292060.640:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.3.1323" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9c097dff9 code=0x0 [ 465.897946][ T29] audit: type=1326 audit(8277292061.070:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.1.1265" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a6637dff9 code=0x0 [ 466.351751][T12404] FAULT_INJECTION: forcing a failure. [ 466.351751][T12404] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 466.441600][T12404] CPU: 0 UID: 0 PID: 12404 Comm: syz.3.1329 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 466.452471][T12404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 466.462585][T12404] Call Trace: [ 466.465903][T12404] [ 466.468872][T12404] dump_stack_lvl+0x16c/0x1f0 [ 466.473619][T12404] should_fail_ex+0x497/0x5b0 [ 466.478378][T12404] _copy_from_iter+0x29b/0x13e0 [ 466.483295][T12404] ? __pfx__copy_from_iter+0x10/0x10 [ 466.488636][T12404] ? __virt_addr_valid+0x1a4/0x590 [ 466.493819][T12404] ? __virt_addr_valid+0x5e/0x590 [ 466.498916][T12404] ? __phys_addr_symbol+0x30/0x80 [ 466.504002][T12404] ? __check_object_size+0x488/0x710 [ 466.509363][T12404] netlink_sendmsg+0x813/0xd70 [ 466.514197][T12404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.519564][T12404] ____sys_sendmsg+0x9ae/0xb40 [ 466.524399][T12404] ? copy_msghdr_from_user+0x10b/0x160 [ 466.529941][T12404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.535303][T12404] ? __pfx___lock_acquire+0x10/0x10 [ 466.540578][T12404] ___sys_sendmsg+0x135/0x1e0 [ 466.545336][T12404] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.550611][T12404] ? lock_acquire+0x2f/0xb0 [ 466.555162][T12404] ? __fget_files+0x40/0x3f0 [ 466.559796][T12404] ? fdget+0x176/0x210 [ 466.563898][T12404] __sys_sendmsg+0x117/0x1f0 [ 466.568536][T12404] ? __pfx___sys_sendmsg+0x10/0x10 [ 466.573691][T12404] ? __fget_files+0x244/0x3f0 [ 466.578419][T12404] do_syscall_64+0xcd/0x250 [ 466.582966][T12404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.588896][T12404] RIP: 0033:0x7fb9c097dff9 [ 466.593352][T12404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.613003][T12404] RSP: 002b:00007fb9c1823038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.621485][T12404] RAX: ffffffffffffffda RBX: 00007fb9c0b35f80 RCX: 00007fb9c097dff9 [ 466.629486][T12404] RDX: 0000000000008004 RSI: 0000000020000140 RDI: 0000000000000003 [ 466.637488][T12404] RBP: 00007fb9c1823090 R08: 0000000000000000 R09: 0000000000000000 [ 466.645487][T12404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.653484][T12404] R13: 0000000000000000 R14: 00007fb9c0b35f80 R15: 00007ffd4847a068 [ 466.661501][T12404] [ 468.068836][T12439] FAULT_INJECTION: forcing a failure. [ 468.068836][T12439] name failslab, interval 1, probability 0, space 0, times 0 [ 468.104402][T12439] CPU: 1 UID: 0 PID: 12439 Comm: syz.1.1342 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 468.115274][T12439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 468.125387][T12439] Call Trace: [ 468.128734][T12439] [ 468.131715][T12439] dump_stack_lvl+0x16c/0x1f0 [ 468.136469][T12439] should_fail_ex+0x497/0x5b0 [ 468.141234][T12439] should_failslab+0xc2/0x120 [ 468.145996][T12439] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 468.151455][T12439] ? skb_clone+0x190/0x3f0 [ 468.155968][T12439] skb_clone+0x190/0x3f0 [ 468.160301][T12439] netlink_deliver_tap+0xb26/0xcf0 [ 468.165490][T12439] netlink_unicast+0x5e1/0x7f0 [ 468.170331][T12439] ? __pfx_netlink_unicast+0x10/0x10 [ 468.175685][T12439] ? __phys_addr_symbol+0x30/0x80 [ 468.180787][T12439] ? __check_object_size+0x488/0x710 [ 468.186157][T12439] netlink_sendmsg+0x8b8/0xd70 [ 468.190998][T12439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.196375][T12439] ____sys_sendmsg+0x9ae/0xb40 [ 468.201214][T12439] ? copy_msghdr_from_user+0x10b/0x160 [ 468.206746][T12439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.212110][T12439] ? __pfx___lock_acquire+0x10/0x10 [ 468.217391][T12439] ___sys_sendmsg+0x135/0x1e0 [ 468.222147][T12439] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.227443][T12439] ? lock_acquire+0x2f/0xb0 [ 468.232020][T12439] ? __fget_files+0x40/0x3f0 [ 468.236689][T12439] ? fdget+0x176/0x210 [ 468.240824][T12439] __sys_sendmsg+0x117/0x1f0 [ 468.244937][T12428] syz.2.1337 (12428): attempted to duplicate a private mapping with mremap. This is not supported. [ 468.245470][T12439] ? __pfx___sys_sendmsg+0x10/0x10 [ 468.261667][T12439] ? __fget_files+0x244/0x3f0 [ 468.266433][T12439] do_syscall_64+0xcd/0x250 [ 468.271013][T12439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.276984][T12439] RIP: 0033:0x7f2a6637dff9 [ 468.281448][T12439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.301116][T12439] RSP: 002b:00007f2a6708f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.309603][T12439] RAX: ffffffffffffffda RBX: 00007f2a66535f80 RCX: 00007f2a6637dff9 [ 468.317634][T12439] RDX: 0000000000008004 RSI: 0000000020000140 RDI: 0000000000000003 [ 468.325667][T12439] RBP: 00007f2a6708f090 R08: 0000000000000000 R09: 0000000000000000 [ 468.333701][T12439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.341725][T12439] R13: 0000000000000000 R14: 00007f2a66535f80 R15: 00007fff44f5e028 [ 468.349813][T12439] [ 469.375117][T12482] FAULT_INJECTION: forcing a failure. [ 469.375117][T12482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.408400][T12482] CPU: 1 UID: 0 PID: 12482 Comm: syz.2.1352 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 469.419272][T12482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 469.429387][T12482] Call Trace: [ 469.432710][T12482] [ 469.435691][T12482] dump_stack_lvl+0x16c/0x1f0 [ 469.440452][T12482] should_fail_ex+0x497/0x5b0 [ 469.445225][T12482] _copy_to_user+0x30/0xc0 [ 469.449703][T12482] simple_read_from_buffer+0xd0/0x160 [ 469.455233][T12482] proc_fail_nth_read+0x198/0x270 [ 469.460327][T12482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.466029][T12482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.471647][T12482] vfs_read+0x1ce/0xbd0 [ 469.475868][T12482] ? __fget_files+0x23a/0x3f0 [ 469.480609][T12482] ? fdget_pos+0x24c/0x360 [ 469.485085][T12482] ? __pfx_lock_release+0x10/0x10 [ 469.490183][T12482] ? trace_lock_acquire+0x14a/0x1d0 [ 469.495447][T12482] ? __pfx_vfs_read+0x10/0x10 [ 469.500184][T12482] ? __pfx___mutex_lock+0x10/0x10 [ 469.505290][T12482] ? __fget_files+0x244/0x3f0 [ 469.510045][T12482] ksys_read+0x12f/0x260 [ 469.514349][T12482] ? __pfx_ksys_read+0x10/0x10 [ 469.519183][T12482] do_syscall_64+0xcd/0x250 [ 469.523765][T12482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.529733][T12482] RIP: 0033:0x7fd1f557ca3c [ 469.534203][T12482] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 469.553882][T12482] RSP: 002b:00007fd1f62af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 469.562382][T12482] RAX: ffffffffffffffda RBX: 00007fd1f5735f80 RCX: 00007fd1f557ca3c [ 469.570415][T12482] RDX: 000000000000000f RSI: 00007fd1f62af0a0 RDI: 0000000000000004 [ 469.578533][T12482] RBP: 00007fd1f62af090 R08: 0000000000000000 R09: 0000000000000000 [ 469.586559][T12482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.594592][T12482] R13: 0000000000000000 R14: 00007fd1f5735f80 R15: 00007ffdd353ded8 [ 469.602646][T12482] [ 472.743323][T12548] netlink: 'syz.1.1367': attribute type 282 has an invalid length. [ 473.446410][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.563407][ T5252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 473.585427][ T5252] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 473.600241][ T5252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 473.612976][ T5252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 473.628293][ T5252] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 473.635811][ T5252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 473.669561][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.861205][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.043254][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.298961][T12564] chnl_net:caif_netlink_parms(): no params data found [ 474.664193][T12564] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.684228][T12564] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.707340][T12564] bridge_slave_0: entered allmulticast mode [ 474.728315][T12564] bridge_slave_0: entered promiscuous mode [ 474.750609][ T35] bridge_slave_1: left allmulticast mode [ 474.762289][ T35] bridge_slave_1: left promiscuous mode [ 474.777796][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.827935][ T35] bridge_slave_0: left allmulticast mode [ 474.833673][ T35] bridge_slave_0: left promiscuous mode [ 474.852316][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.606691][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.620888][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.633502][ T35] bond0 (unregistering): Released all slaves [ 475.655450][T12564] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.666314][T12564] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.676585][T12564] bridge_slave_1: entered allmulticast mode [ 475.686909][ T5252] Bluetooth: hci2: command tx timeout [ 475.695377][T12564] bridge_slave_1: entered promiscuous mode [ 475.844354][T12564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.989996][T12564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.351698][T12564] team0: Port device team_slave_0 added [ 476.402559][T12564] team0: Port device team_slave_1 added [ 476.483898][ T35] hsr_slave_0: left promiscuous mode [ 476.492488][ T35] hsr_slave_1: left promiscuous mode [ 476.535761][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.546959][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.575567][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.587513][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.635470][ T35] veth1_macvtap: left promiscuous mode [ 476.648434][ T35] veth0_macvtap: left promiscuous mode [ 476.654279][ T35] veth1_vlan: left promiscuous mode [ 476.664378][ T35] veth0_vlan: left promiscuous mode [ 477.559484][ T35] team0 (unregistering): Port device team_slave_1 removed [ 477.645620][ T35] team0 (unregistering): Port device team_slave_0 removed [ 477.758344][ T5252] Bluetooth: hci2: command tx timeout [ 478.478804][T12564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.486372][T12564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.557102][T12564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.597515][T12564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.604757][T12564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.675931][T12564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.882811][T12564] hsr_slave_0: entered promiscuous mode [ 478.906446][T12564] hsr_slave_1: entered promiscuous mode [ 478.935117][T12564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.955056][T12564] Cannot create hsr debugfs directory [ 479.837530][ T5252] Bluetooth: hci2: command tx timeout [ 480.094286][T12564] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 480.145679][T12564] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 480.191399][T12564] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 480.242116][T12564] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 480.519344][T12564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.570534][T12564] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.591957][ T7041] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.599217][ T7041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.620533][ T7041] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.627900][ T7041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.730164][ T5252] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 480.842556][T12564] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 480.855140][T12564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.512035][T12564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.552863][T12564] veth0_vlan: entered promiscuous mode [ 481.566076][T12564] veth1_vlan: entered promiscuous mode [ 481.595608][T12564] veth0_macvtap: entered promiscuous mode [ 481.605386][T12564] veth1_macvtap: entered promiscuous mode [ 481.623120][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.633725][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.643811][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.654389][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.664859][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.676009][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.692167][T12564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.703658][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.716845][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.726730][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.746586][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.757021][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.768283][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.781179][T12564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.791964][T12564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.801207][T12564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.810065][T12564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.818931][T12564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.926861][ T5252] Bluetooth: hci2: command tx timeout [ 482.373005][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.385294][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.510394][ T7041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.600564][ T7041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.803265][T12727] svc: failed to register nfsdv3 RPC service (errno 111). [ 483.007419][T12727] svc: failed to register nfsaclv3 RPC service (errno 111). [ 483.490742][T12749] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1407'. [ 483.913719][T12755] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1409'. [ 484.155808][T12769] FAULT_INJECTION: forcing a failure. [ 484.155808][T12769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.175402][T12769] CPU: 0 UID: 0 PID: 12769 Comm: syz.3.1411 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 484.186269][T12769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 484.196363][T12769] Call Trace: [ 484.199679][T12769] [ 484.202668][T12769] dump_stack_lvl+0x16c/0x1f0 [ 484.207406][T12769] should_fail_ex+0x497/0x5b0 [ 484.212143][T12769] _copy_to_user+0x30/0xc0 [ 484.216602][T12769] simple_read_from_buffer+0xd0/0x160 [ 484.222173][T12769] proc_fail_nth_read+0x198/0x270 [ 484.227270][T12769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 484.232959][T12769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 484.238644][T12769] vfs_read+0x1ce/0xbd0 [ 484.242883][T12769] ? __fget_files+0x23a/0x3f0 [ 484.247603][T12769] ? fdget_pos+0x24c/0x360 [ 484.252061][T12769] ? __pfx_lock_release+0x10/0x10 [ 484.257226][T12769] ? trace_lock_acquire+0x14a/0x1d0 [ 484.262503][T12769] ? __pfx_vfs_read+0x10/0x10 [ 484.267219][T12769] ? __pfx___mutex_lock+0x10/0x10 [ 484.272329][T12769] ? __fget_files+0x244/0x3f0 [ 484.277065][T12769] ksys_read+0x12f/0x260 [ 484.281382][T12769] ? __pfx_ksys_read+0x10/0x10 [ 484.286199][T12769] do_syscall_64+0xcd/0x250 [ 484.290804][T12769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.296830][T12769] RIP: 0033:0x7fb9c097ca3c [ 484.301286][T12769] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 484.320942][T12769] RSP: 002b:00007fb9c1802030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 484.329403][T12769] RAX: ffffffffffffffda RBX: 00007fb9c0b36058 RCX: 00007fb9c097ca3c [ 484.337412][T12769] RDX: 000000000000000f RSI: 00007fb9c18020a0 RDI: 000000000000000a [ 484.345416][T12769] RBP: 00007fb9c1802090 R08: 0000000000000000 R09: 0000000000000000 [ 484.353430][T12769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.361439][T12769] R13: 0000000000000000 R14: 00007fb9c0b36058 R15: 00007ffd4847a068 [ 484.369988][T12769] [ 484.725807][T12774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1412'. [ 486.240320][T12811] raw_sendmsg: syz.2.1420 forgot to set AF_INET. Fix it! [ 487.188982][T12833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1426'. [ 487.289069][T12833] veth0_macvtap: left promiscuous mode [ 487.822502][ T7049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.998857][ T7049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.299561][ T7049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.562805][ T7049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.794986][ T5247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 488.805915][ T5247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 488.817837][ T5247] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 488.826725][ T5247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 488.835855][ T5247] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 488.844305][ T5247] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 489.241292][ T7049] bridge_slave_1: left allmulticast mode [ 489.288662][ T7049] bridge_slave_1: left promiscuous mode [ 489.304756][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.454361][ T7049] bridge_slave_0: left allmulticast mode [ 489.473476][ T7049] bridge_slave_0: left promiscuous mode [ 489.487843][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.429657][T12910] nbd: must specify a size in bytes for the device [ 490.876943][ T5252] Bluetooth: hci1: command tx timeout [ 491.345833][T12914] nbd: couldn't find device at index 914048202 [ 491.823532][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1445'. [ 491.842266][ T7049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.907463][ T7049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.939139][ T7049] bond0 (unregistering): Released all slaves [ 491.986358][T12866] chnl_net:caif_netlink_parms(): no params data found [ 492.966018][ T5252] Bluetooth: hci1: command tx timeout [ 493.719314][T12866] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.727701][T12866] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.735177][T12866] bridge_slave_0: entered allmulticast mode [ 493.772394][T12866] bridge_slave_0: entered promiscuous mode [ 494.017094][T12866] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.024349][T12866] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.046482][T12866] bridge_slave_1: entered allmulticast mode [ 494.078157][T12866] bridge_slave_1: entered promiscuous mode [ 494.617782][ T7049] hsr_slave_0: left promiscuous mode [ 494.720721][ T7049] hsr_slave_1: left promiscuous mode [ 494.843363][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.868916][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.069657][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.086015][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.095650][ T5252] Bluetooth: hci1: command tx timeout [ 495.534601][ T7049] veth1_macvtap: left promiscuous mode [ 495.547600][ T7049] veth1_vlan: left promiscuous mode [ 495.566875][ T7049] veth0_vlan: left promiscuous mode [ 497.107024][ T7049] team0 (unregistering): Port device team_slave_1 removed [ 497.118694][ T5252] Bluetooth: hci1: command tx timeout [ 497.168958][ T7049] team0 (unregistering): Port device team_slave_0 removed [ 497.843568][T12866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.946508][T12866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.044389][T12866] team0: Port device team_slave_0 added [ 498.055524][T12866] team0: Port device team_slave_1 added [ 498.367472][T12866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.374509][T12866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.476974][T12866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.549078][T12866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.566852][T12866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.667287][T12866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.873722][T12866] hsr_slave_0: entered promiscuous mode [ 498.968102][T12866] hsr_slave_1: entered promiscuous mode [ 499.021378][T12866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.042460][T12866] Cannot create hsr debugfs directory [ 499.328544][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1458'. [ 501.129811][T12866] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 501.200997][T12866] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 501.222129][T12866] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 501.270125][T12866] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 501.660784][T12866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.774176][T12866] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.799856][ T7035] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.807136][ T7035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.841477][ T7035] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.848710][ T7035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.959054][T12866] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 502.003306][T12866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 502.669365][T12866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.789560][T12866] veth0_vlan: entered promiscuous mode [ 502.823894][T12866] veth1_vlan: entered promiscuous mode [ 502.935617][T12866] veth0_macvtap: entered promiscuous mode [ 502.960036][T12866] veth1_macvtap: entered promiscuous mode [ 503.022061][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.071996][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.112930][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.155541][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.196891][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.217689][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.251877][T12866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.282086][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.321003][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.345308][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.407003][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.426975][T12866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.452911][T12866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.488334][T12866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.535659][T12866] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.566836][T12866] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.597047][T12866] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.616877][T12866] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.888224][ T7035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.931241][ T7035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.002592][ T7035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.021746][ T7035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.119653][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.126203][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.199440][ T5247] Bluetooth: hci4: command 0x0406 tx timeout [ 517.911922][T13485] svc: failed to register nfsdv3 RPC service (errno 111). [ 517.931365][T13485] svc: failed to register nfsaclv3 RPC service (errno 111). [ 518.020875][ T7049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.161714][ T7049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.470882][ T7049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.686240][ T7049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.017253][ T7049] bridge_slave_1: left allmulticast mode [ 519.023005][ T7049] bridge_slave_1: left promiscuous mode [ 519.070649][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.137846][ T7049] bridge_slave_0: left allmulticast mode [ 519.143767][ T7049] bridge_slave_0: left promiscuous mode [ 519.181368][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.252857][ T7049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.278933][ T5247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 520.287436][ T7049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.292983][ T5247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 520.305780][ T5247] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 520.309209][ T7049] bond0 (unregistering): Released all slaves [ 520.317960][ T5247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 520.330213][ T5247] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 520.338927][ T5247] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 521.396203][ T7049] hsr_slave_0: left promiscuous mode [ 521.463892][ T7049] hsr_slave_1: left promiscuous mode [ 521.481759][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.507203][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.577961][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.591852][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.695943][ T7049] veth1_macvtap: left promiscuous mode [ 521.701742][ T7049] veth0_macvtap: left promiscuous mode [ 521.715812][ T7049] veth1_vlan: left promiscuous mode [ 521.733032][ T7049] veth0_vlan: left promiscuous mode [ 522.038664][T13571] FAULT_INJECTION: forcing a failure. [ 522.038664][T13571] name failslab, interval 1, probability 0, space 0, times 0 [ 522.119547][T13571] CPU: 0 UID: 0 PID: 13571 Comm: syz.3.1554 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 522.130459][T13571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 522.140664][T13571] Call Trace: [ 522.143992][T13571] [ 522.146972][T13571] dump_stack_lvl+0x16c/0x1f0 [ 522.151727][T13571] should_fail_ex+0x497/0x5b0 [ 522.156475][T13571] ? fs_reclaim_acquire+0xae/0x160 [ 522.161667][T13571] should_failslab+0xc2/0x120 [ 522.166414][T13571] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 522.171852][T13571] ? vm_area_alloc+0x1f/0x1c0 [ 522.176596][T13571] vm_area_alloc+0x1f/0x1c0 [ 522.181173][T13571] mmap_region+0xf18/0x2a50 [ 522.185766][T13571] ? __pfx_mmap_region+0x10/0x10 [ 522.190770][T13571] ? hlock_class+0x4e/0x130 [ 522.195401][T13571] ? mm_get_unmapped_area+0x95/0xe0 [ 522.200680][T13571] ? bpf_lsm_mmap_addr+0x9/0x10 [ 522.205597][T13571] ? security_mmap_addr+0x6c/0x1e0 [ 522.210785][T13571] ? __get_unmapped_area+0x26b/0x3a0 [ 522.216147][T13571] do_mmap+0xc00/0xfc0 [ 522.220298][T13571] vm_mmap_pgoff+0x1ba/0x360 [ 522.224979][T13571] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 522.230166][T13571] ? __fget_files+0x244/0x3f0 [ 522.234916][T13571] ksys_mmap_pgoff+0x7d/0x5c0 [ 522.239753][T13571] ? __pfx_ksys_write+0x10/0x10 [ 522.244673][T13571] __x64_sys_mmap+0x125/0x190 [ 522.249423][T13571] do_syscall_64+0xcd/0x250 [ 522.253996][T13571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.259956][T13571] RIP: 0033:0x7fb9c097dff9 [ 522.264458][T13571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.284134][T13571] RSP: 002b:00007fb9c1802038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 522.292610][T13571] RAX: ffffffffffffffda RBX: 00007fb9c0b36058 RCX: 00007fb9c097dff9 [ 522.300654][T13571] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 522.308653][T13571] RBP: 00007fb9c1802090 R08: fffffffffffffffa R09: 0000000000008000 [ 522.316649][T13571] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 522.324648][T13571] R13: 0000000000000000 R14: 00007fb9c0b36058 R15: 00007ffd4847a068 [ 522.332669][T13571] [ 522.410903][ T5252] Bluetooth: hci1: command tx timeout [ 524.012142][ T7049] team0 (unregistering): Port device team_slave_1 removed [ 524.104261][ T7049] team0 (unregistering): Port device team_slave_0 removed [ 524.478405][ T5252] Bluetooth: hci1: command tx timeout [ 525.397602][T13616] FAULT_INJECTION: forcing a failure. [ 525.397602][T13616] name failslab, interval 1, probability 0, space 0, times 0 [ 525.435719][T13616] CPU: 1 UID: 0 PID: 13616 Comm: syz.3.1564 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 525.446589][T13616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 525.456705][T13616] Call Trace: [ 525.460072][T13616] [ 525.463058][T13616] dump_stack_lvl+0x16c/0x1f0 [ 525.467816][T13616] should_fail_ex+0x497/0x5b0 [ 525.472564][T13616] ? fs_reclaim_acquire+0xae/0x160 [ 525.477753][T13616] should_failslab+0xc2/0x120 [ 525.482506][T13616] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 525.487955][T13616] ? vm_area_alloc+0xe0/0x1c0 [ 525.492709][T13616] vm_area_alloc+0xe0/0x1c0 [ 525.497275][T13616] mmap_region+0xf18/0x2a50 [ 525.501857][T13616] ? __pfx_mmap_region+0x10/0x10 [ 525.506866][T13616] ? hlock_class+0x4e/0x130 [ 525.511498][T13616] ? mm_get_unmapped_area+0x95/0xe0 [ 525.516773][T13616] ? bpf_lsm_mmap_addr+0x9/0x10 [ 525.521687][T13616] ? security_mmap_addr+0x6c/0x1e0 [ 525.526872][T13616] ? __get_unmapped_area+0x26b/0x3a0 [ 525.532227][T13616] do_mmap+0xc00/0xfc0 [ 525.536370][T13616] vm_mmap_pgoff+0x1ba/0x360 [ 525.541040][T13616] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 525.546228][T13616] ? __fget_files+0x244/0x3f0 [ 525.550987][T13616] ksys_mmap_pgoff+0x7d/0x5c0 [ 525.551005][T13530] chnl_net:caif_netlink_parms(): no params data found [ 525.551036][T13616] ? __pfx_ksys_write+0x10/0x10 [ 525.567383][T13616] __x64_sys_mmap+0x125/0x190 [ 525.572131][T13616] do_syscall_64+0xcd/0x250 [ 525.576712][T13616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.582672][T13616] RIP: 0033:0x7fb9c097dff9 [ 525.587180][T13616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.606935][T13616] RSP: 002b:00007fb9c1802038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 525.615664][T13616] RAX: ffffffffffffffda RBX: 00007fb9c0b36058 RCX: 00007fb9c097dff9 [ 525.623666][T13616] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 525.631729][T13616] RBP: 00007fb9c1802090 R08: fffffffffffffffa R09: 0000000000008000 [ 525.639833][T13616] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 525.647835][T13616] R13: 0000000000000000 R14: 00007fb9c0b36058 R15: 00007ffd4847a068 [ 525.655852][T13616] [ 526.094217][T13530] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.117139][T13530] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.124533][T13530] bridge_slave_0: entered allmulticast mode [ 526.178224][T13530] bridge_slave_0: entered promiscuous mode [ 526.221649][T13530] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.242644][T13530] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.257398][T13530] bridge_slave_1: entered allmulticast mode [ 526.273834][T13530] bridge_slave_1: entered promiscuous mode [ 526.294537][T13641] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1567'. [ 526.404123][T13530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.436354][T13530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.566826][ T5252] Bluetooth: hci1: command tx timeout [ 526.729874][T13530] team0: Port device team_slave_0 added [ 526.750969][T13530] team0: Port device team_slave_1 added [ 526.850360][T13530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.867247][T13530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.944686][T13530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.971356][T13530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.978462][T13530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.005067][T13530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.164055][T13530] hsr_slave_0: entered promiscuous mode [ 527.188571][T13530] hsr_slave_1: entered promiscuous mode [ 527.199443][T13530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.223269][T13530] Cannot create hsr debugfs directory [ 528.093397][T13687] FAULT_INJECTION: forcing a failure. [ 528.093397][T13687] name failslab, interval 1, probability 0, space 0, times 0 [ 528.146863][T13687] CPU: 1 UID: 0 PID: 13687 Comm: syz.3.1575 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 528.157738][T13687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 528.167832][T13687] Call Trace: [ 528.171139][T13687] [ 528.174095][T13687] dump_stack_lvl+0x16c/0x1f0 [ 528.178826][T13687] should_fail_ex+0x497/0x5b0 [ 528.183550][T13687] ? fs_reclaim_acquire+0xae/0x160 [ 528.188706][T13687] should_failslab+0xc2/0x120 [ 528.193432][T13687] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 528.199380][T13687] ? shmem_alloc_inode+0x25/0x50 [ 528.204700][T13687] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 528.210208][T13687] shmem_alloc_inode+0x25/0x50 [ 528.215048][T13687] alloc_inode+0x5d/0x230 [ 528.219541][T13687] new_inode+0x22/0x210 [ 528.223751][T13687] shmem_get_inode+0x194/0xea0 [ 528.228689][T13687] ? __vm_enough_memory+0x184/0x3f0 [ 528.233975][T13687] __shmem_file_setup+0x16f/0x300 [ 528.239039][T13687] shmem_zero_setup+0x93/0x1b0 [ 528.243845][T13687] mmap_region+0x1f84/0x2a50 [ 528.248492][T13687] ? __pfx_mmap_region+0x10/0x10 [ 528.253478][T13687] ? hlock_class+0x4e/0x130 [ 528.258074][T13687] ? mm_get_unmapped_area+0x95/0xe0 [ 528.263323][T13687] ? bpf_lsm_mmap_addr+0x9/0x10 [ 528.268235][T13687] ? security_mmap_addr+0x6c/0x1e0 [ 528.273398][T13687] ? __get_unmapped_area+0x26b/0x3a0 [ 528.278729][T13687] do_mmap+0xc00/0xfc0 [ 528.282859][T13687] vm_mmap_pgoff+0x1ba/0x360 [ 528.287502][T13687] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 528.292677][T13687] ? __fget_files+0x244/0x3f0 [ 528.297403][T13687] ksys_mmap_pgoff+0x7d/0x5c0 [ 528.302209][T13687] ? __pfx_ksys_write+0x10/0x10 [ 528.307120][T13687] __x64_sys_mmap+0x125/0x190 [ 528.311925][T13687] do_syscall_64+0xcd/0x250 [ 528.316480][T13687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.322422][T13687] RIP: 0033:0x7fb9c097dff9 [ 528.326869][T13687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.346542][T13687] RSP: 002b:00007fb9c1802038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 528.354996][T13687] RAX: ffffffffffffffda RBX: 00007fb9c0b36058 RCX: 00007fb9c097dff9 [ 528.362999][T13687] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 528.371003][T13687] RBP: 00007fb9c1802090 R08: fffffffffffffffa R09: 0000000000008000 [ 528.379092][T13687] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 528.387092][T13687] R13: 0000000000000000 R14: 00007fb9c0b36058 R15: 00007ffd4847a068 [ 528.395397][T13687] [ 528.647040][ T5252] Bluetooth: hci1: command tx timeout [ 529.372109][T13710] svc: failed to register nfsdv3 RPC service (errno 111). [ 529.403572][T13710] svc: failed to register nfsaclv3 RPC service (errno 111). [ 529.440013][T13713] nbd: must specify at least one socket [ 529.913202][T13530] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 529.955234][T13530] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 530.089825][T13530] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 530.215286][T13530] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 530.523489][T13530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.590809][T13530] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.625523][ T7035] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.632838][ T7035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.673601][ T7035] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.680842][ T7035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.271660][T13530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.392107][T13530] veth0_vlan: entered promiscuous mode [ 531.438048][T13530] veth1_vlan: entered promiscuous mode [ 531.494206][T13530] veth0_macvtap: entered promiscuous mode [ 531.702819][T13530] veth1_macvtap: entered promiscuous mode [ 531.770514][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.841932][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.892058][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.926917][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.966836][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.026005][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.057524][T13530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.072275][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.083357][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.107593][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.136844][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.148090][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.170466][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.184803][T13530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.246400][T13530] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.267803][T13530] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.276586][T13530] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.313284][T13530] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.533961][ T7035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.568196][ T7035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.632181][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.689508][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.797118][T13774] Bluetooth: hci0: command 0x0406 tx timeout [ 536.312506][T13873] ptrace attach of "./syz-executor exec"[13530] was attempted by "./syz-executor exec"[13873] [ 539.090226][T13969] delete_channel: no stack [ 539.104758][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'. [ 540.987044][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1619'. [ 541.362706][T14016] svc: failed to register nfsdv3 RPC service (errno 111). [ 541.384421][T14016] svc: failed to register nfsaclv3 RPC service (errno 512). [ 542.423992][ T7049] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.720060][T13774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 542.736573][T13774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 542.745588][T13774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 542.791778][T13774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 542.801611][T13774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 542.809840][T13774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 542.910241][ T7049] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.050494][ T7049] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.160800][ T7049] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.461680][ T7049] bridge_slave_1: left allmulticast mode [ 543.471489][ T7049] bridge_slave_1: left promiscuous mode [ 543.481477][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.516578][ T7049] bridge_slave_0: left allmulticast mode [ 543.526963][ T7049] bridge_slave_0: left promiscuous mode [ 543.532863][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.127317][ T5252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 544.144181][ T5252] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 544.163942][ T5252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 544.176467][ T5252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 544.197261][ T5252] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 544.216029][ T5252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 544.336560][ T7049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.352059][ T7049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.369922][ T7049] bond0 (unregistering): Released all slaves [ 544.616977][T14031] chnl_net:caif_netlink_parms(): no params data found [ 544.881326][T13774] Bluetooth: hci0: command tx timeout [ 545.052743][T14015] svc: failed to register nfsdv3 RPC service (errno 111). [ 545.091865][T14015] svc: failed to register nfsaclv3 RPC service (errno 512). [ 545.187047][T14031] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.194418][T14031] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.209274][T14031] bridge_slave_0: entered allmulticast mode [ 545.218153][T14031] bridge_slave_0: entered promiscuous mode [ 545.261869][T14040] chnl_net:caif_netlink_parms(): no params data found [ 545.274080][T14031] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.285568][T14031] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.295012][T14031] bridge_slave_1: entered allmulticast mode [ 545.302591][T14031] bridge_slave_1: entered promiscuous mode [ 545.410915][T14031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.460568][ T7049] hsr_slave_0: left promiscuous mode [ 545.466661][ T7049] hsr_slave_1: left promiscuous mode [ 545.488581][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.496086][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.505882][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.513817][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.544746][ T7049] veth1_macvtap: left promiscuous mode [ 545.550961][ T7049] veth0_macvtap: left promiscuous mode [ 545.557290][ T7049] veth1_vlan: left promiscuous mode [ 545.562781][ T7049] veth0_vlan: left promiscuous mode [ 546.321805][T13774] Bluetooth: hci2: command tx timeout [ 546.765813][ T7049] team0 (unregistering): Port device team_slave_1 removed [ 546.885856][ T7049] team0 (unregistering): Port device team_slave_0 removed [ 546.958233][T13774] Bluetooth: hci0: command tx timeout [ 547.046425][T14108] FAULT_INJECTION: forcing a failure. [ 547.046425][T14108] name failslab, interval 1, probability 0, space 0, times 0 [ 547.061199][T14108] CPU: 1 UID: 0 PID: 14108 Comm: syz.2.1636 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 547.072051][T14108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 547.082167][T14108] Call Trace: [ 547.085484][T14108] [ 547.088458][T14108] dump_stack_lvl+0x16c/0x1f0 [ 547.093203][T14108] should_fail_ex+0x497/0x5b0 [ 547.097928][T14108] ? fs_reclaim_acquire+0xae/0x160 [ 547.103105][T14108] should_failslab+0xc2/0x120 [ 547.107864][T14108] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 547.113318][T14108] ? mas_alloc_nodes+0x172/0x830 [ 547.118338][T14108] mas_alloc_nodes+0x172/0x830 [ 547.123181][T14108] mas_node_count_gfp+0x105/0x130 [ 547.128291][T14108] mas_preallocate+0x53b/0xcd0 [ 547.133100][T14108] ? __pfx_mas_preallocate+0x10/0x10 [ 547.138422][T14108] ? shmem_get_inode+0x703/0xea0 [ 547.143439][T14108] mmap_region+0x165e/0x2a50 [ 547.148127][T14108] ? __pfx_mmap_region+0x10/0x10 [ 547.153138][T14108] ? hlock_class+0x4e/0x130 [ 547.157765][T14108] ? mm_get_unmapped_area+0x95/0xe0 [ 547.163044][T14108] ? bpf_lsm_mmap_addr+0x9/0x10 [ 547.167955][T14108] ? security_mmap_addr+0x6c/0x1e0 [ 547.173138][T14108] ? __get_unmapped_area+0x26b/0x3a0 [ 547.178585][T14108] do_mmap+0xc00/0xfc0 [ 547.182732][T14108] vm_mmap_pgoff+0x1ba/0x360 [ 547.187499][T14108] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 547.192744][T14108] ? __fget_files+0x244/0x3f0 [ 547.197499][T14108] ksys_mmap_pgoff+0x7d/0x5c0 [ 547.202257][T14108] ? __pfx_ksys_write+0x10/0x10 [ 547.207175][T14108] __x64_sys_mmap+0x125/0x190 [ 547.211915][T14108] do_syscall_64+0xcd/0x250 [ 547.216492][T14108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.222447][T14108] RIP: 0033:0x7fd1f557dff9 [ 547.226935][T14108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.246608][T14108] RSP: 002b:00007fd1f62af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 547.255083][T14108] RAX: ffffffffffffffda RBX: 00007fd1f5735f80 RCX: 00007fd1f557dff9 [ 547.263128][T14108] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 547.271247][T14108] RBP: 00007fd1f62af090 R08: fffffffffffffffa R09: 0000000000008000 [ 547.279281][T14108] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 547.287309][T14108] R13: 0000000000000000 R14: 00007fd1f5735f80 R15: 00007ffdd353ded8 [ 547.295355][T14108] [ 547.307881][T14108] ------------[ cut here ]------------ [ 547.314539][T14108] kernel BUG at mm/page_table_check.c:90! [ 547.320711][T14108] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 547.327699][T14108] CPU: 1 UID: 0 PID: 14108 Comm: syz.2.1636 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 547.338511][T14108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 547.348608][T14108] RIP: 0010:page_table_check_clear.part.0+0x389/0x540 [ 547.355442][T14108] Code: 00 e8 cb 1a f4 ff b8 ff ff ff ff f0 0f c1 43 04 8d 58 ff 31 ff 89 de e8 55 cc 92 ff 85 db 0f 89 7d fe ff ff e8 08 ca 92 ff 90 <0f> 0b e8 00 ca 92 ff 48 89 ef e8 b8 f1 ff ff 48 83 c4 10 5b 5d 41 [ 547.375108][T14108] RSP: 0018:ffffc900044b73d8 EFLAGS: 00010293 [ 547.381232][T14108] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: ffffffff81f9ddab [ 547.389250][T14108] RDX: ffff8880299d9e00 RSI: ffffffff81f9ddb8 RDI: 0000000000000005 [ 547.397271][T14108] RBP: ffff88801d0f0050 R08: 0000000000000005 R09: 0000000000000000 [ 547.405289][T14108] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000001 [ 547.413392][T14108] R13: 0000000000000200 R14: 0000000000000000 R15: dffffc0000000000 [ 547.421412][T14108] FS: 00007fd1f62af6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 547.430391][T14108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 547.437007][T14108] CR2: 0000000020000170 CR3: 00000000629c8000 CR4: 00000000003526f0 [ 547.445040][T14108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 547.453065][T14108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 547.461061][T14108] Call Trace: [ 547.464354][T14108] [ 547.467316][T14108] ? die+0x31/0x80 [ 547.471064][T14108] ? do_trap+0x232/0x430 [ 547.475431][T14108] ? page_table_check_clear.part.0+0x389/0x540 [ 547.481633][T14108] ? page_table_check_clear.part.0+0x389/0x540 [ 547.487834][T14108] ? do_error_trap+0xf4/0x230 [ 547.492548][T14108] ? page_table_check_clear.part.0+0x389/0x540 [ 547.498769][T14108] ? handle_invalid_op+0x34/0x40 [ 547.503753][T14108] ? page_table_check_clear.part.0+0x389/0x540 [ 547.509945][T14108] ? exc_invalid_op+0x2e/0x50 [ 547.514662][T14108] ? asm_exc_invalid_op+0x1a/0x20 [ 547.519744][T14108] ? page_table_check_clear.part.0+0x37b/0x540 [ 547.525940][T14108] ? page_table_check_clear.part.0+0x388/0x540 [ 547.532136][T14108] ? page_table_check_clear.part.0+0x389/0x540 [ 547.538329][T14108] ? page_table_check_clear.part.0+0x388/0x540 [ 547.544522][T14108] __page_table_check_pmd_clear+0x3a9/0x600 [ 547.550453][T14108] ? __pfx___page_table_check_pmd_clear+0x10/0x10 [ 547.556909][T14108] zap_huge_pmd+0x264/0x1380 [ 547.561613][T14108] unmap_page_range+0x15ef/0x3ce0 [ 547.566691][T14108] ? __pfx_lock_release+0x10/0x10 [ 547.571795][T14108] ? __pfx_unmap_page_range+0x10/0x10 [ 547.577202][T14108] ? unmap_vmas+0x1d1/0x490 [ 547.581830][T14108] ? __pfx_lock_release+0x10/0x10 [ 547.586896][T14108] ? trace_lock_acquire+0x14a/0x1d0 [ 547.592128][T14108] unmap_single_vma+0x194/0x2b0 [ 547.597020][T14108] unmap_vmas+0x22f/0x490 [ 547.601384][T14108] ? __pfx_unmap_vmas+0x10/0x10 [ 547.606298][T14108] ? __pfx_lock_release+0x10/0x10 [ 547.611365][T14108] ? lock_acquire+0x2f/0xb0 [ 547.615908][T14108] ? mlock_drain_local+0x6f/0x4f0 [ 547.620959][T14108] unmap_region+0x201/0x480 [ 547.625506][T14108] ? __pfx_unmap_region+0x10/0x10 [ 547.630569][T14108] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 547.636514][T14108] mmap_region+0x1c00/0x2a50 [ 547.641148][T14108] ? __pfx_mmap_region+0x10/0x10 [ 547.646125][T14108] ? hlock_class+0x4e/0x130 [ 547.650680][T14108] ? mm_get_unmapped_area+0x95/0xe0 [ 547.655916][T14108] ? bpf_lsm_mmap_addr+0x9/0x10 [ 547.660810][T14108] ? security_mmap_addr+0x6c/0x1e0 [ 547.665967][T14108] ? __get_unmapped_area+0x26b/0x3a0 [ 547.671288][T14108] do_mmap+0xc00/0xfc0 [ 547.675395][T14108] vm_mmap_pgoff+0x1ba/0x360 [ 547.680035][T14108] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 547.685233][T14108] ? __fget_files+0x244/0x3f0 [ 547.689973][T14108] ksys_mmap_pgoff+0x7d/0x5c0 [ 547.694695][T14108] ? __pfx_ksys_write+0x10/0x10 [ 547.699578][T14108] __x64_sys_mmap+0x125/0x190 [ 547.704285][T14108] do_syscall_64+0xcd/0x250 [ 547.708829][T14108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.714754][T14108] RIP: 0033:0x7fd1f557dff9 [ 547.719238][T14108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.738879][T14108] RSP: 002b:00007fd1f62af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 547.747322][T14108] RAX: ffffffffffffffda RBX: 00007fd1f5735f80 RCX: 00007fd1f557dff9 [ 547.755319][T14108] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 547.763311][T14108] RBP: 00007fd1f62af090 R08: fffffffffffffffa R09: 0000000000008000 [ 547.771309][T14108] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 547.779388][T14108] R13: 0000000000000000 R14: 00007fd1f5735f80 R15: 00007ffdd353ded8 [ 547.787565][T14108] [ 547.790597][T14108] Modules linked in: [ 547.794850][T14108] ---[ end trace 0000000000000000 ]--- [ 547.801084][T14108] RIP: 0010:page_table_check_clear.part.0+0x389/0x540 [ 547.808590][T14108] Code: 00 e8 cb 1a f4 ff b8 ff ff ff ff f0 0f c1 43 04 8d 58 ff 31 ff 89 de e8 55 cc 92 ff 85 db 0f 89 7d fe ff ff e8 08 ca 92 ff 90 <0f> 0b e8 00 ca 92 ff 48 89 ef e8 b8 f1 ff ff 48 83 c4 10 5b 5d 41 [ 547.828482][T14108] RSP: 0018:ffffc900044b73d8 EFLAGS: 00010293 [ 547.834607][T14108] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: ffffffff81f9ddab [ 547.843067][T14108] RDX: ffff8880299d9e00 RSI: ffffffff81f9ddb8 RDI: 0000000000000005 [ 547.851420][T14108] RBP: ffff88801d0f0050 R08: 0000000000000005 R09: 0000000000000000 [ 547.859522][T14108] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000001 [ 547.867586][T14108] R13: 0000000000000200 R14: 0000000000000000 R15: dffffc0000000000 [ 547.875605][T14108] FS: 00007fd1f62af6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 547.884656][T14108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 547.891391][T14108] CR2: 0000000020000170 CR3: 00000000629c8000 CR4: 00000000003526f0 [ 547.899846][T14108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 547.908259][T14108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 547.916291][T14108] Kernel panic - not syncing: Fatal exception [ 547.922715][T14108] Kernel Offset: disabled [ 547.927061][T14108] Rebooting in 86400 seconds..