last executing test programs: 4.925678747s ago: executing program 0 (id=3638): ioctl$auto(0xc8, 0x400454d0, 0x3) r0 = socket(0xa, 0x2, 0x0) listmount$auto(&(0x7f0000000040)={0x3734, 0x5, 0x80000000, 0xe11, 0xfff}, &(0x7f0000000080)=0xc, 0xe, 0x5) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) 3.767992832s ago: executing program 0 (id=3647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000300), r1) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002300)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8002}, 0x8010) r3 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000000), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000000c0)={0x58, r3, 0x8a00f4e9954364ed, 0x70bd29, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_NAME={0x44, 0x11, '\xfd\xff\xff\xff\xff\xff\xff\xff-\x9c\xe4\xbe\x9e6y\x93\xd5\xbc\x9f\xdc\xa7\tL\xa8\xa6\xe2\f\x01k\a\x86\xc1a\x12;\xab\xd7+\x99\xe71\xe5\xabW)\x02;oX\xfc+\x8b@\x90\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x58}}, 0x24000054) 3.420024086s ago: executing program 0 (id=3650): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') setns(r3, 0x0) clone$auto(0x4cd5897d, 0x521, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setns(r2, 0x0) sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4004840) r4 = open(&(0x7f0000000000)='./file0\x00', 0x440000, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x200, 0x70bd29, 0x25dfdbff}, 0x34}, 0x1, 0x0, 0x0, 0x40034}, 0x84080) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioperm$auto(0x7, 0x6, 0x2) arch_prctl$auto(0x4001, 0x175) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xc, 0x0, 0x0) listen$auto(0x3, 0x81) io_uring_setup$auto(0x6, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) open(0x0, 0xa240, 0x1de) 3.050515707s ago: executing program 2 (id=3655): mmap$auto(0x81, 0x200001, 0x7, 0x40eb2, 0x402, 0x300000000000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) keyctl$auto(0x6, 0xfffffffffffffffb, 0x81, 0xfffffffffe, 0x9) (async) mlockall$auto(0x7) fchmod$auto(0x6, 0x7af3) read$auto(0x3, 0x0, 0xffff) socket(0x1, 0x2, 0x0) (async) socket(0x1e, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x100000044, 0x4, 0x17, 0x5, 0xfffffffffffff000) (async) clone$auto(0x6, 0x7fffffffffffffff, 0x0, 0x0, 0x0) 2.980255988s ago: executing program 0 (id=3656): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3, 0xe9) close_range$auto(0x2, 0x8000, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) socket(0x2, 0x80002, 0x73) recvfrom$auto(0x3, 0x0, 0x9, 0x6, 0x0, 0x0) (async) recvfrom$auto(0x3, 0x0, 0x9, 0x6, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r1, 0x301, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x7}, 0x4010) socket(0x2, 0x2, 0x1) (async) socket(0x2, 0x2, 0x1) socket(0x25, 0x1, 0x3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socketpair$auto(0x2, 0x2, 0x8000000000000000, 0x0) futex$auto(0x0, 0xb, 0x5, &(0x7f00000000c0)={0x1, 0x9}, &(0x7f0000000100)=0x6, 0x7ff) 2.716257578s ago: executing program 2 (id=3659): keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) r0 = socket(0x10, 0x2, 0xc) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) setresuid$auto(0x2, 0x7, 0x8080) 2.440628179s ago: executing program 2 (id=3663): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) recvmsg$auto(0x7, 0x0, 0xbff) 1.965784177s ago: executing program 3 (id=3665): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f00000000c0)='./file0\x00', 0x46dc2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x5, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f00000009c0)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) syz_genetlink_get_family_id$auto_nfsd(0x0, r0) flistxattr$auto(0x7, &(0x7f0000000080)='@/!\x00', 0xfc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) open(&(0x7f00000000c0)='./file0\x00', 0x46dc2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x5, 0x0) (async) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f00000009c0)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) (async) syz_genetlink_get_family_id$auto_nfsd(0x0, r0) (async) flistxattr$auto(0x7, &(0x7f0000000080)='@/!\x00', 0xfc) (async) 1.887872456s ago: executing program 0 (id=3667): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000080), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xf000, 0x8, 0x1000000003, 0x2009b72, 0x2, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_802_15_4_MAC(0x0, 0xffffffffffffffff) socket(0xa, 0x2, 0x0) (async) sendmmsg$auto(0x5, &(0x7f0000000280)={{&(0x7f0000000140), 0xdb, &(0x7f00000001c0)={0x0, 0x100000000}, 0x1, &(0x7f0000000200), 0x2, 0xa4}, 0xe}, 0x5, 0x5) (async) fallocate$auto(0x1, 0x40, 0x7, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000100), r2) sendmsg$auto_TIPC_NL_MEDIA_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f40)={0x14, r3, 0x301, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000880) (async) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000d80), 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x3}, 0x7, 0xe, &(0x7f0000000240)={0x7, 0x7}) (async) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) sendmsg$auto_IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x14, r1, 0x811, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40008051}, 0x4000) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x130, r4, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_HE_BSS_COLOR={0x7, 0x11b, "6cf371"}, @NL80211_ATTR_SCAN_FREQUENCIES={0xea, 0x2c, "335b0d2a09463458f86f0c009e2b8b00c3b69d50781166e4df1ddffaf8fff9e0f99ff45eda2f173c5e09d6edbd782b75daca3f092a51f78ac50d4b5448690dc9e1f4fcbac5706a6b529eed1716e2f3ac1d84801f97f573643838da4d261dc06561b5b3328129d0ec02d8906e93df14559842811fb05be168200a430263f32e8e4b1df8e8e092847dd1056a6b09774ff4c47235aeb541fce5b1cd1cb37f9b85aab6a940e149875cdf242e5b0252f67b691152222915fe5a1696c20f54625cc25030270207fc448347c1148406da87c4d145612f3e6ada15322764504df70c37bc618f4b65d56c"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @NL80211_ATTR_STA_WME={0x6, 0x81, 0x2}, @NL80211_ATTR_STA_WME={0x6, 0x81, 0x3}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x6}, @NL80211_ATTR_MESH_ID={0x7, 0x18, "de4c7c"}]}, 0x130}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) (async) socket(0x1, 0x1, 0x696) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2c, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000380), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bond_slave_0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x98, r6, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r7}, @MACSEC_ATTR_SA_CONFIG={0x79, 0x3, "f1b5e4290e9ffb94c75ee3b1f5276974307f7309c98018d20a09c907782c6c60b1fb6ee006f6c41ca25f7256043bbe8ce2fcd925435477e88b6914d83ef55772e4e49a3ebefa71a7a467200bbd05cc9bb63ed3618efe01f43de65204066e183b95af045e7969ed59da1f3733e8047b8bc7acf88fb9"}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000001}, 0xc000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 1.834083756s ago: executing program 3 (id=3668): set_mempolicy$auto(0x8003, &(0x7f00000000c0)=0x7e, 0x4) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0x8, 0x1000009, 0x5f, 0x3f00, 0x3}, 0x6f3) 1.724172656s ago: executing program 3 (id=3669): r0 = socket(0xa, 0x3, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60000021}, 0x10004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001480)={0x14, r2, 0x949398432f28d783, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000580), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000001180), r5) sendmsg$auto_NFC_CMD_START_POLL(r5, &(0x7f0000001340)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001300)={&(0x7f00000011c0)={0x10c, r6, 0x301, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x3}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x5}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_LLC_SDP={0xc0, 0x13, "4c02d3f229cc2529ac02ceb7248be5426698a598968af98330bfae89d1ab6e128147c57d961efb6481fd645fdfbd9e87e143b443c6f9c9a6bd148ec597406b7bed3c6f90de33f9cbb531354d4b2b57146c2ddc3057ee08690be57f4196a5794706f390c0f39bbeca2574d95ac4bb9967afc0ac4ff4a844d602687b93798727b18c4ea234938c3be972cee4e72281915a51502118dc64719fd11e019846ceef3ef2e105e8298c87368ef3a8b50ffdb5cffa29c13f7d2472f51b9c8b10"}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x2}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xe0}, @NFC_ATTR_VENDOR_ID={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x28004}, 0x8005) sendmsg$auto_NFC_CMD_DISABLE_SE(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x130, r6, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x7}, @NFC_ATTR_SE_APDU={0x101, 0x19, "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"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x6}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x200}]}, 0x130}}, 0x4004) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010b27bd7000fbdbdf25010000000c0099"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendmsg$auto_NL80211_CMD_REMOVE_LINK(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x15c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xfb, 0xbe, "5920096413e870bd58427da69a455d20cd20348e714cd73280eca0a0073c0867c29d5d9e3eb9d0fcdc5353b8aecd7cbdaa305106ec59857b04a76042bf03a544e094a58a86407feb819b3b720fc60cbeee17ba3cfb801931ab84b9a72b0c130b8ec37af86187131c1d86c4e073f8a64892edc635ff6b14b9522cd1c961bc1736792481af12db7dd25b3b39533f47a9b9f9a2a345b3292349b54d22c98ab2f37d03dfbd5b5dae6ace46c461a2c5df4531e31baf681edf0eb5b9ddb91f45425b576aa082720a61dc0cd4c60b4f708ee8c88dad29bd792a93883777a5b335708950439d88327419303c2ff9c5d91c4200bb593b4fb908bd2a"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x3f, 0x6e, "d4c201e13630e956f6123a2f48009a829a54f218f5a0744cec7b2a2251eb0e9294e7f35db5c02c29c5b7665755039fc033974fb17493ba56f53e61"}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xc36e}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4044840}, 0x24040040) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) mprotect$auto(0x1ffff000, 0x7e3, 0x100000000004) close_range$auto(0x0, 0xfffffffffffff000, 0x2) timerfd_create$auto(0x9, 0x0) socket(0xa, 0x3, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) socketpair$auto(0x62, 0x8, 0x2, &(0x7f0000000080)=0x10001) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f0000000180)={0xa, @sockaddr_1_1}, 0x55) 1.424020089s ago: executing program 3 (id=3671): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) pidfd_open$auto(0x1, 0x0) socket(0x21, 0x2, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) fanotify_init$auto(0x2, 0x2) (async) setreuid$auto(0x3, 0x7) (async) fanotify_mark$auto(0x5, 0x7e, 0x7, 0x40000004, 0xfffffffffffffffc) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x18, 0x101000000000000, 0x8000) close_range$auto(0xfffffffe, 0xfffffffffffff000, 0x8) (async) mmap$auto(0x4, 0x401, 0x101, 0x19, 0x6, 0x5) 1.351301s ago: executing program 3 (id=3673): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) (async) epoll_create$auto(0x0) (async) open(&(0x7f0000000800)='./file0\x00', 0x103c40, 0x50) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) (async) setregid$auto(0x4, 0xd) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mknodat$auto(0x5, 0x0, 0xfffffffffffff084, 0x400) (async) madvise$auto(0x0, 0x80000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x4, 0x1, 0xf, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) 1.250513897s ago: executing program 2 (id=3674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_NET_DM(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NET_DM_CMD_CONFIG_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0x4}, @NET_DM_ATTR_UNSPEC={0x98, 0x0, "8e74b19ef1ebee6a73550722884d75d86a1885cdb19d689482d3e78db44919e7565a496433cbe82b17604f9b12d23000036c723a1d7ea752b18d27ad19fd41c79741a2b7c3476afe4353ba25dc238c6d991091201088652cbcaaa66e95674ad55d5ae6f965ba9328eb002c76604413cbf32951be298e166a50087cc407d0d0ad15a15e82e88b879c52c5f61fe69dc67bb90a4873"}, @NET_DM_ATTR_HW_DROPS={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c010}, 0x41) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000200), r0) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="1c0002009d59ed0d6c0ee0870c7bcaedca6384bf1e8e86bb5c8edcc2a87f44eb873aac7e2943562f3c391a80f7a2b1d9ebae09c985560d5b19d8ff078bb0434f2651992fe9683038e73b390487d345ac3888a06326515a20122cc91631e2ee5b826cc77b6cf20a700b4dd74f158070cc9a1aa2e7c29e147d054bca043f5ebbcd0e5c291551958b9744d51a1d18b6f1ca", @ANYRES16=r0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4000814) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), r0) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000002b80)={0x114, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1c26}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0xc5, 0x7, "4da67cf7c27c120e3984130834a73f9221887ac28e443c4a1a7da8d2ddcf2890cce5822826764f3f410e53f43f300d2e04700395778e7935c99f6a38f6f3e56e7d8a18d15791b3b4f9378d743a8f0cbbe1c604a782030626ead26826f4790233f19c29fbaf1da77e1b84522d05ca0f4237b24aead87b47d41805fa9967d02ad2deba1895652b8d630c30213ed8f72c1066f1bb9fb1b242d08a55d32398d8d3c635008f2c61049c8abf600a98d1d2d0b0027aecaf27d20b6ff4129883e111e1c858"}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}]}, 0x114}, 0x1, 0x0, 0x0, 0x200480c0}, 0x24040000) r5 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000580), r3) sendmsg$auto_TIPC_NL_NET_GET(r0, &(0x7f00000026c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002680)={&(0x7f00000005c0)={0x20a4, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NAME_TABLE={0x1004, 0x8, "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"}, @TIPC_NLA_UNSPEC={0x1004, 0x0, "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"}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x81, 0x6, "cbfd26d772ea0ab64c231d13db938e54431c9f24fa3a89760e34354db690da498af96194b5085f7fc48b75c6fc51803913858e5676c5f1609fbf36fdb6a591b56c3efb9d035db46e5bd665d1b22d026157fa1aea547b2d5ae529b24870b42a68874cd0f248b9099c35b3f93153b53bbb9e3d82c16111b4811f2069403e"}]}, 0x20a4}}, 0x800) r6 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000002740), r0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000003b00)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003ac0)={&(0x7f0000002cc0)=ANY=[@ANYBLOB="10030000", @ANYRES16=r6, @ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_NL802154_CMD_ASSOCIATE(r0, &(0x7f0000003c00)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b80)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000225bd7000fbdbdf252800000012002300fc5292267fb9999d1fc68808f5f000000800270009000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4041) r7 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000003c80), r0) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r3, &(0x7f0000003d80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003cc0)={0x14, r7, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}}, 0x40400c0) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000003e80)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003e40)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="08ee27bd7000fedbdf256f000000089f94f45fb933d03d8ca17ad52376739d1857687ade280874348d31b682cd3552ffe9832dcf51bfc39f4b259afe1cd1b658a39f540e373e6149269f6fd6fc191c142f7910a42e858c5b14a479aaf97ee6b4d35023da9c15cfe9cdd2bbd616ae0b75bf4925b51cec1ef9f92376b2b0"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) vmsplice$auto(0x5, &(0x7f0000003ec0)={0xfffffffffffffffd, 0x8000000000000001}, 0x3, 0x1) dup2$auto(0x81, 0x7) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000003f40), r0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r3, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000003f80)={0xf4, r8, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0xe0, 0x3, "d403e7075a4b287b4f10f2967484d780987800cd670c4662c5508151e98d4ab7257ee1e564bf306516e4bf114c63182364cc67a5d32acd9de1e3a8fcd6de27761fba6b63c790f778beb325fba1f366e5eb1f7831188809385501b5c63c5ee846ecf2aade44b39df6aabeb7523550ebb9165e5a894feb2e6dedcd79ce76f8b70550cb362deef6f113e37303c3235d5b0a45dce7066354ca02ffa1344be2ac9b7e4c38f76171d13fb4e5df2df66d85b9b386249595c0c14c9c9dceb4bd5e7d98c2cfbb6289df013097492969d60b4b0fa99a70bb53b234aac68be5f95a"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x100}, 0x0) r9 = syz_genetlink_get_family_id$auto_NLBL_CALIPSO(&(0x7f0000004140), r3) madvise$auto(0x0, 0x2000040080000004, 0xe) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) futex$auto(0xffffffffffffffff, 0x1, 0x2, 0xfffffffffffffffd, 0x0, 0x5131) sendmsg$auto_NLBL_CALIPSO_C_ADD(r3, &(0x7f0000004200)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000041c0)={&(0x7f0000004180)={0x1c, r9, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x20040084) vmsplice$auto(0x40, &(0x7f0000004300)={&(0x7f0000004240)="cc06ebcccf8c995773fec0f28da2332750974a2ae646d650527f404451b78404b71667b648b6ccf429b4c197df5246afee2dde377d9c9bb6781e07353634b7ba611dc80fd3105f8b2e1023352bf4a7cd02bedf291dbd0410aa107f2dacfcdd14877965f5b6d79a730071d3b06eb37f184667eb64952e02fe70a3e24c544c9958aaa282ecabcf42637f54a1c670d594b91b60228fa12d2bae3d73c943b09afda1bd59d364161107323d55e854c75b93031b", 0x8}, 0x8, 0x5) pwritev2$auto(0x8, &(0x7f0000004380)={&(0x7f0000004340)="1b0ee71aa3a64bdbc112f1ce9887ea0d7419489d4dee20a53b16d5205d67738a22ef27cf267ca70f", 0x1}, 0x6, 0x9, 0x16, 0x0) r10 = syz_genetlink_get_family_id$auto_HSR(&(0x7f0000004400), r0) sendmsg$auto_HSR_C_GET_NODE_LIST(r0, &(0x7f0000004540)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)={0x50, r10, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HSR_A_NODE_ADDR={0xa, 0x1, "f000"}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, "862d16cf2e3a"}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x9}, @HSR_A_NODE_ADDR={0xa, 0x1, "ccd3295ebc1b"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0xd1) 1.129573911s ago: executing program 3 (id=3676): mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) (async) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x4, 0x1) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) (async, rerun: 64) socket(0x23, 0x2, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) stat$auto(&(0x7f0000000040)='ns/pid_for_children\x00', 0x0) (async, rerun: 64) socket(0xa, 0x3, 0x3a) (async, rerun: 64) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) (async, rerun: 64) ioctl$auto(0x1, 0x541b, 0x8) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) dup2$auto(0x800000003, 0x3) ioctl$auto(0x3ff, 0x8, 0xbb88) 993.645407ms ago: executing program 1 (id=3677): set_mempolicy$auto(0x8003, &(0x7f00000000c0)=0x7e, 0x4) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0x8, 0x1000009, 0x5f, 0x1000000, 0x3}, 0x6f3) 803.95246ms ago: executing program 1 (id=3678): mincore$auto(0x1000, 0xffffffffffffffff, 0x0) symlink$auto(&(0x7f0000000000)='-\x00', &(0x7f0000000040)='(\'\xd5\x00') socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x6) prctl$auto(0x10000000018, 0x5, 0x4, 0x20000000009, 0x0) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)=ANY=[@ANYBLOB="a6995ef3", @ANYRES16=r1, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x80) mincore$auto(0x8000000000000000, 0x1, &(0x7f0000000140)='veth1_to_hsr\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) symlink$auto(&(0x7f00000000c0)=']\x00', &(0x7f0000000100)='(\'\xd5\x00') syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) fallocate$auto(0x3, 0x3, 0x2, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f00000038c0)=ANY=[@ANYBLOB="141864ad", @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0xecac9eb1bdd4400c}, 0x0) mbind$auto(0x0, 0x95d2, 0x4, 0xfffffffffffffffc, 0x6, 0x2) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) mbind$auto(0x800, 0x2, 0x3, &(0x7f00000006c0)=0x1, 0x7fffffff, 0x8) ioctl$auto(0xc8, 0x400454dc, 0xe) 777.835008ms ago: executing program 0 (id=3679): socket(0x1, 0x2, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket(0x22, 0x2, 0x24) ioperm$auto(0x2, 0x3, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) semtimedop$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={0x4, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) move_pages$auto(0x1, 0x2, 0x0, 0x0, 0x0, 0x2) getsockopt$auto(0x100000006, 0x11, 0x64, 0xfffffffffffffffc, 0x0) socket(0x25, 0x1, 0x3) write$auto(0x3, 0xfffffffffffffffe, 0x7fff) connect$auto(0x72, &(0x7f0000000000)={0x100, @sockaddr_1_1={"a7396390032f35005c7587f4685ce2a8f30ffd1808aec41809947bd91ed9ee3d175019123bda80d9353fc7a92fbf927c93125d1e58e6fd9113c0dc44226ddddd43af693b5664e8"}}, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) flock$auto(0x2, 0x6) mmap$auto(0x0, 0x100000044, 0x4, 0x17, 0x5, 0xfffffffffffff000) 726.347167ms ago: executing program 2 (id=3680): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) timer_settime$auto(0x975, 0x4, &(0x7f0000000000)={{0x80, 0x9}, {0x4, 0xebb0a64}}, &(0x7f0000000040)={{0x7, 0x78000}, {0xfffffffb, 0x10000}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x106) getsockopt$auto(0x6, 0x11c, 0x2, 0xfffffffffffffffe, 0x0) 628.798988ms ago: executing program 1 (id=3681): fsmount$auto(0x4, 0x0, 0x200003) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011) r0 = socket(0xa, 0x6, 0x0) connect$auto(0x3, &(0x7f0000000000)={0xa, @sa_data_min="139a5e4d0e2f2f9d39f704a1487d"}, 0x55) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r0) memfd_secret$auto(0x72df6d71) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000002540)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20) mmap$auto(0x0, 0xd, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0xa, 0xe9e, 0x4, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0xfffffffffffffffe, 0x0, 0x9, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) 491.918506ms ago: executing program 1 (id=3682): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_NET_DM(&(0x7f0000000000), r0) settimeofday$auto(&(0x7f0000000140)={0x4, 0xca}, &(0x7f0000000180)={0xe50000, 0x6}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) utime$auto(0x0, &(0x7f0000001380)={0x6, 0xc0}) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100240d}, 0xc, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="23ecc35c203e8b35b8120b3cbbeffa4d37e64a4c9668ae1cd7886adacc954e653f2bf8640afb41fcac247c1e571059d1510769af08144d32de8eeb38aff5e6d039e6ac536e0e38c537a92186d226a6210f6f", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf25070000000c000200ee47571f116a7dffc1000300883fe1f94e3a402968f4f879ba9c8405a4a6a5397dc854f5c6a8e4ef52ac5ff4dd9f2fbb1e21ab83c72be80ac152b4881d885a342f203ecb182d6f4e6fa0a57b85502e2873acc52ea8a28f06968c9cb5c92c241f57f6a1e949ce659deaab147b190f58e24404e438a2d44e05c3a81835ceb2c51ab5b839aaf2eb4ded2f8fa1498603c98debe24787492e6efe037da948198bcea71c5eddb7b567b096537e7ecbba3905ec037b7174658b1862110d6ca449c99d32208e428a48b44e2be800000008000100", @ANYRES32=r1, @ANYBLOB="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"], 0x324}, 0x1, 0x0, 0x0, 0x4000810}, 0x50001) socket(0x25, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 269.900591ms ago: executing program 1 (id=3683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_CAPABILITY={0x15, 0x10d, "f5f027f1528731b85d8a0a0f02f31b63b8"}]}, 0x2c}}, 0x4000000) set_mempolicy$auto(0x8003, &(0x7f00000000c0)=0x7e, 0x4) fsmount$auto(0x6, 0x1, 0xac) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_DONE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HANDSHAKE_A_DONE_SOCKFD={0x8}]}, 0x1c}}, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7fe, 0x6, 0x8, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) 54.701175ms ago: executing program 2 (id=3684): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0xa, 0x2, 0x88) (async) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40808}, 0x0) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x2, 0x697b}, 0xed7138c}, 0x9a6, 0xff00) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) getdents64$auto(0x5, 0x0, 0x2) 0s ago: executing program 1 (id=3685): madvise$auto(0x8000000, 0x2000040080000004, 0xc) pwrite64$auto(0x8, 0x0, 0x4, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x800000000000df, 0xeb1, 0xa, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x800000000000df, 0xeb1, 0xa, 0x8000) setsockopt$auto(0x4, 0x1, 0xc, 0x0, 0x6) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="fde82dbd70250400000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) socket(0x2, 0xa, 0xe57a) ioctl$auto(0x3, 0x9, 0xfffffffffffff4e0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futex$auto(0xfffffffffffffffe, 0x4, 0x7, 0x0, 0xfffffffffffffffc, 0xffffff7f) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futex_waitv$auto(0x0, 0x7f, 0x0, 0x0, 0x7) sync_file_range$auto(0x1, 0x7fffffffffffffff, 0xffffffffffffffff, 0x4) ioperm$auto(0x3, 0x5, 0x149) semctl$auto(0x1ff, 0x2, 0x13, 0x1) io_uring_setup$auto(0x40000002c55, 0x0) mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2) clone$auto(0x1000, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5) kernel console output (not intermixed with test programs): [T14221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 717.852790][T14299] netlink: 'syz.1.1938': attribute type 11 has an invalid length. [ 718.853015][T14338] svc: failed to register nfsdv3 RPC service (errno 111). [ 718.915652][T14338] svc: failed to register nfsaclv3 RPC service (errno 512). [ 719.368316][T14347] netlink: 'syz.3.1949': attribute type 11 has an invalid length. [ 721.631663][T14378] netlink: 'syz.2.1958': attribute type 11 has an invalid length. [ 721.862937][T13287] syz.0.1754 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 722.111556][T13287] CPU: 0 UID: 0 PID: 13287 Comm: syz.0.1754 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 722.122072][T13287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 722.132164][T13287] Call Trace: [ 722.135471][T13287] [ 722.138425][T13287] dump_stack_lvl+0x16c/0x1f0 [ 722.143140][T13287] dump_header+0x101/0x900 [ 722.147594][T13287] oom_kill_process+0x270/0xa60 [ 722.152575][T13287] out_of_memory+0x343/0x16b0 [ 722.157299][T13287] ? lock_acquire+0x170/0x560 [ 722.162025][T13287] ? __pfx_out_of_memory+0x10/0x10 [ 722.167174][T13287] ? rcu_read_unlock+0x17/0x60 [ 722.171979][T13287] ? find_held_lock+0x2d/0x110 [ 722.176787][T13287] mem_cgroup_out_of_memory+0x207/0x270 [ 722.182375][T13287] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 722.188492][T13287] ? do_raw_spin_unlock+0x172/0x230 [ 722.193729][T13287] try_charge_memcg+0x5b9/0xaf0 [ 722.198629][T13287] ? __pfx_try_charge_memcg+0x10/0x10 [ 722.204219][T13287] ? get_mem_cgroup_from_mm+0x129/0x5f0 [ 722.209814][T13287] __mem_cgroup_charge+0x9b/0x280 [ 722.214883][T13287] shmem_alloc_and_add_folio+0x507/0xc00 [ 722.220558][T13287] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 722.226756][T13287] ? shmem_allowable_huge_orders+0x208/0x440 [ 722.232781][T13287] shmem_get_folio_gfp+0x689/0x1530 [ 722.238019][T13287] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 722.243788][T13287] shmem_write_begin+0x161/0x300 [ 722.248770][T13287] ? __pfx_shmem_write_begin+0x10/0x10 [ 722.254271][T13287] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 722.261189][T13287] generic_perform_write+0x2ba/0x920 [ 722.266781][T13287] ? __pfx_generic_perform_write+0x10/0x10 [ 722.272622][T13287] ? __pfx_generic_write_checks+0x10/0x10 [ 722.278393][T13287] shmem_file_write_iter+0x10e/0x140 [ 722.283733][T13287] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 722.289577][T13287] __kernel_write_iter+0x318/0xa80 [ 722.294734][T13287] ? __pfx___kernel_write_iter+0x10/0x10 [ 722.300415][T13287] ? get_dump_page+0x15c/0x220 [ 722.305227][T13287] ? copy_mc_enhanced_fast_string+0xa/0x13 [ 722.311093][T13287] dump_user_range+0x389/0x8a0 [ 722.315897][T13287] ? __pfx_dump_user_range+0x10/0x10 [ 722.321219][T13287] ? elf_coredump_extra_notes_write+0xba/0x4f0 [ 722.327416][T13287] ? __pfx_writenote+0x10/0x10 [ 722.332218][T13287] elf_core_dump+0x2766/0x3840 [ 722.337013][T13287] ? hlock_class+0x4e/0x130 [ 722.341562][T13287] ? __pfx_elf_core_dump+0x10/0x10 [ 722.346709][T13287] ? kasan_save_stack+0x42/0x60 [ 722.351590][T13287] ? kasan_save_stack+0x33/0x60 [ 722.356496][T13287] ? __kasan_kmalloc+0xaa/0xb0 [ 722.361297][T13287] ? __kmalloc_node_noprof+0x211/0x440 [ 722.366795][T13287] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 722.372295][T13287] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 722.378223][T13287] ? asm_exc_page_fault+0x26/0x30 [ 722.383329][T13287] ? __pfx_sort+0x10/0x10 [ 722.387693][T13287] ? do_coredump+0x2c42/0x4160 [ 722.392483][T13287] do_coredump+0x2c42/0x4160 [ 722.397121][T13287] ? __pfx_do_coredump+0x10/0x10 [ 722.402087][T13287] ? kmem_cache_free+0x152/0x4b0 [ 722.407058][T13287] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 722.412980][T13287] ? asm_exc_page_fault+0x26/0x30 [ 722.418103][T13287] get_signal+0x237c/0x26d0 [ 722.422649][T13287] ? __pfx_get_signal+0x10/0x10 [ 722.427531][T13287] ? rcu_is_watching+0x12/0xc0 [ 722.432323][T13287] ? trace_irq_disable.constprop.0+0xe4/0x130 [ 722.438439][T13287] arch_do_signal_or_restart+0x90/0x7e0 [ 722.444036][T13287] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 722.450244][T13287] ? do_user_addr_fault+0xa4b/0x13f0 [ 722.455585][T13287] irqentry_exit_to_user_mode+0x13f/0x280 [ 722.461435][T13287] asm_exc_page_fault+0x26/0x30 [ 722.466321][T13287] RIP: 0033:0x0 [ 722.469804][T13287] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 722.477185][T13287] RSP: 002b:000000000000000d EFLAGS: 00010217 [ 722.483277][T13287] RAX: 0000000000000000 RBX: 00007fa281335f80 RCX: 00007fa28117df39 [ 722.491268][T13287] RDX: ffffffffffffffff RSI: 0000000000000005 RDI: 0000000000008001 [ 722.499262][T13287] RBP: 00007fa2811f0216 R08: 0000000000000006 R09: 0000000000000000 [ 722.507260][T13287] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 722.515256][T13287] R13: 0000000000000000 R14: 00007fa281335f80 R15: 00007fff77fbb378 [ 722.523264][T13287] ? 0xffffffffff600000 [ 722.527454][T13287] [ 722.545325][T13287] memory: usage 307200kB, limit 307200kB, failcnt 67343 [ 722.553046][T13287] memory+swap: usage 431204kB, limit 9007199254740988kB, failcnt 0 [ 722.561327][T13287] kmem: usage 4868kB, limit 9007199254740988kB, failcnt 0 [ 722.569555][T13287] Memory cgroup stats for /syz0: [ 722.569731][T13287] cache 307535872 [ 722.578405][T13287] rss 1089536 [ 722.591903][T13287] rss_huge 0 [ 722.665604][T13287] shmem 307523584 [ 722.669405][T13287] mapped_file 30916608 [ 722.673564][T13287] dirty 8192 [ 722.676776][T13287] writeback 0 [ 722.680160][T13287] workingset_refault_anon 5951 [ 722.693412][T14392] unsupported nlmsg_type 40 [ 722.699625][T13287] workingset_refault_file 7041 [ 722.704910][T13287] swap 126980096 [ 722.708578][T13287] swapcached 958464 [ 722.712497][T13287] pgpgin 1165077 [ 722.717594][T13287] pgpgout 1093071 [ 722.721342][T13287] pgfault 276651 [ 722.725975][T13287] pgmajfault 1764 [ 722.729770][T13287] inactive_anon 278958080 [ 722.734649][T13287] active_anon 30613504 [ 722.738855][T13287] inactive_file 8192 [ 722.743256][T13287] active_file 4096 [ 722.747070][T13287] unevictable 0 [ 722.763026][T13287] hierarchical_memory_limit 314572800 [ 722.768569][T13287] hierarchical_memsw_limit 9223372036854771712 [ 722.780006][T13287] total_cache 307535872 [ 722.786799][T13287] total_rss 1089536 [ 722.790758][T13287] total_rss_huge 0 [ 722.801147][T13287] total_shmem 307523584 [ 722.806066][T13287] total_mapped_file 30916608 [ 722.811090][T13287] total_dirty 8192 [ 722.821187][T13287] total_writeback 0 [ 722.825448][T13287] total_workingset_refault_anon 5951 [ 722.830827][T13287] total_workingset_refault_file 7041 [ 722.842334][T13287] total_swap 126980096 [ 722.846884][T13287] total_swapcached 958464 [ 722.851310][T13287] total_pgpgin 1165077 [ 722.866997][T13287] total_pgpgout 1093071 [ 722.871282][T13287] total_pgfault 276651 [ 722.880590][T13287] total_pgmajfault 1764 [ 722.886606][T13287] total_inactive_anon 278958080 [ 722.891564][T13287] total_active_anon 30613504 [ 722.901501][T13287] total_inactive_file 8192 [ 722.907595][T13287] total_active_file 4096 [ 722.912030][T13287] total_unevictable 0 [ 722.921425][T13287] anon_cost 0 [ 722.930892][T13287] file_cost 0 [ 722.942560][T13287] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1744,pid=13209,uid=0 [ 723.004172][T13287] Memory cgroup out of memory: Killed process 13209 (syz.0.1744) total-vm:128268kB, anon-rss:740kB, file-rss:38732kB, shmem-rss:17712kB, UID:0 pgtables:240kB oom_score_adj:1000 [ 723.298026][T14397] nbd: couldn't find a device at index 46932 [ 723.912356][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 724.255487][T14395] delete_channel: no stack [ 724.260137][T14395] delete_channel: no stack [ 724.272399][T14395] delete_channel: no stack [ 724.277010][T14395] delete_channel: no stack [ 724.281600][T14395] delete_channel: no stack [ 724.302908][T14395] delete_channel: no stack [ 724.307539][T14395] delete_channel: no stack [ 724.312211][T14395] delete_channel: no stack [ 724.316947][T14395] delete_channel: no stack [ 724.321640][T14395] delete_channel: no stack [ 724.326312][T14395] delete_channel: no stack [ 724.330976][T14395] delete_channel: no stack [ 724.335679][T14395] delete_channel: no stack [ 724.340267][T14395] delete_channel: no stack [ 724.345421][T14395] delete_channel: no stack [ 724.350009][T14395] delete_channel: no stack [ 724.354726][T14395] delete_channel: no stack [ 724.359712][T14395] delete_channel: no stack [ 724.365042][T14395] delete_channel: no stack [ 724.369700][T14395] delete_channel: no stack [ 724.374329][T14395] delete_channel: no stack [ 724.378881][T14395] delete_channel: no stack [ 724.394470][T14395] delete_channel: no stack [ 724.399071][T14395] delete_channel: no stack [ 724.404183][T14395] delete_channel: no stack [ 724.408852][T14395] delete_channel: no stack [ 724.413489][T14395] delete_channel: no stack [ 724.418195][T14395] delete_channel: no stack [ 724.422857][T14395] delete_channel: no stack [ 724.427431][T14395] delete_channel: no stack [ 724.432313][T14395] delete_channel: no stack [ 724.437070][T14395] delete_channel: no stack [ 724.441645][T14395] delete_channel: no stack [ 724.446364][T14395] delete_channel: no stack [ 724.451028][T14395] delete_channel: no stack [ 724.455668][T14395] delete_channel: no stack [ 724.460317][T14395] delete_channel: no stack [ 724.465308][T14395] delete_channel: no stack [ 724.469860][T14395] delete_channel: no stack [ 724.474530][T14395] delete_channel: no stack [ 724.479102][T14395] delete_channel: no stack [ 724.483890][T14395] delete_channel: no stack [ 724.488570][T14395] delete_channel: no stack [ 724.493213][T14395] delete_channel: no stack [ 724.499205][T14395] delete_channel: no stack [ 724.506122][T14395] delete_channel: no stack [ 724.510820][T14395] delete_channel: no stack [ 724.515533][T14395] delete_channel: no stack [ 724.520112][T14395] delete_channel: no stack [ 724.524920][T14395] delete_channel: no stack [ 724.529494][T14395] delete_channel: no stack [ 724.534153][T14395] delete_channel: no stack [ 724.538823][T14395] delete_channel: no stack [ 724.543472][T14395] delete_channel: no stack [ 724.548048][T14395] delete_channel: no stack [ 724.552713][T14395] delete_channel: no stack [ 724.557295][T14395] delete_channel: no stack [ 724.562073][T14395] delete_channel: no stack [ 724.566873][T14395] delete_channel: no stack [ 724.571456][T14395] delete_channel: no stack [ 724.576291][T14395] delete_channel: no stack [ 724.581107][T14395] delete_channel: no stack [ 724.585895][T14395] delete_channel: no stack [ 724.590473][T14395] delete_channel: no stack [ 724.595179][T14395] delete_channel: no stack [ 725.365068][T14182] syz.0.1899 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 725.427137][T14182] CPU: 1 UID: 0 PID: 14182 Comm: syz.0.1899 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 725.438832][T14182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 725.448919][T14182] Call Trace: [ 725.452218][T14182] [ 725.455164][T14182] dump_stack_lvl+0x16c/0x1f0 [ 725.459876][T14182] dump_header+0x101/0x900 [ 725.464349][T14182] oom_kill_process+0x270/0xa60 [ 725.469234][T14182] out_of_memory+0x343/0x16b0 [ 725.473941][T14182] ? lock_acquire+0x170/0x560 [ 725.478661][T14182] ? __pfx_out_of_memory+0x10/0x10 [ 725.483811][T14182] ? rcu_read_unlock+0x17/0x60 [ 725.488606][T14182] ? find_held_lock+0x2d/0x110 [ 725.493416][T14182] mem_cgroup_out_of_memory+0x207/0x270 [ 725.499003][T14182] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 725.505117][T14182] ? do_raw_spin_unlock+0x172/0x230 [ 725.510353][T14182] try_charge_memcg+0x5b9/0xaf0 [ 725.515244][T14182] ? __pfx_try_charge_memcg+0x10/0x10 [ 725.520655][T14182] ? get_mem_cgroup_from_mm+0x129/0x5f0 [ 725.526233][T14182] __mem_cgroup_charge+0x9b/0x280 [ 725.531270][T14182] shmem_alloc_and_add_folio+0x507/0xc00 [ 725.536919][T14182] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 725.543083][T14182] ? shmem_allowable_huge_orders+0x208/0x440 [ 725.549067][T14182] ? mark_lock+0xb5/0xc60 [ 725.553413][T14182] shmem_get_folio_gfp+0x689/0x1530 [ 725.558624][T14182] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 725.564267][T14182] ? inode_update_timestamps+0x165/0x580 [ 725.569907][T14182] shmem_write_begin+0x161/0x300 [ 725.574943][T14182] ? __pfx_shmem_write_begin+0x10/0x10 [ 725.580406][T14182] ? lockdep_hardirqs_on+0x7c/0x110 [ 725.585609][T14182] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 725.592478][T14182] ? ktime_get_coarse_real_ts64+0x147/0x200 [ 725.598382][T14182] generic_perform_write+0x2ba/0x920 [ 725.603689][T14182] ? __pfx_generic_perform_write+0x10/0x10 [ 725.609498][T14182] ? __mark_inode_dirty+0x2ae/0xe60 [ 725.614704][T14182] ? generic_update_time+0xcf/0xf0 [ 725.619821][T14182] ? mnt_put_write_access_file+0x45/0xf0 [ 725.625470][T14182] shmem_file_write_iter+0x10e/0x140 [ 725.630773][T14182] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 725.636591][T14182] __kernel_write_iter+0x318/0xa80 [ 725.641721][T14182] ? __pfx___kernel_write_iter+0x10/0x10 [ 725.647368][T14182] ? get_dump_page+0x15c/0x220 [ 725.652147][T14182] ? dump_user_range+0x399/0x8a0 [ 725.657097][T14182] dump_user_range+0x389/0x8a0 [ 725.661875][T14182] ? __pfx_dump_user_range+0x10/0x10 [ 725.667172][T14182] ? elf_coredump_extra_notes_write+0xba/0x4f0 [ 725.673346][T14182] ? __pfx_writenote+0x10/0x10 [ 725.678116][T14182] ? elf_core_dump+0x2263/0x3840 [ 725.683068][T14182] elf_core_dump+0x2766/0x3840 [ 725.687849][T14182] ? hlock_class+0x4e/0x130 [ 725.692372][T14182] ? __pfx_elf_core_dump+0x10/0x10 [ 725.697490][T14182] ? kasan_save_stack+0x42/0x60 [ 725.702345][T14182] ? kasan_save_stack+0x33/0x60 [ 725.707200][T14182] ? __kasan_kmalloc+0xaa/0xb0 [ 725.711973][T14182] ? __kmalloc_node_noprof+0x211/0x440 [ 725.717435][T14182] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 725.722904][T14182] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 725.728802][T14182] ? asm_exc_page_fault+0x26/0x30 [ 725.733885][T14182] ? __pfx_sort+0x10/0x10 [ 725.738229][T14182] ? do_coredump+0x2c42/0x4160 [ 725.742996][T14182] do_coredump+0x2c42/0x4160 [ 725.747604][T14182] ? __pfx_do_coredump+0x10/0x10 [ 725.752546][T14182] ? kmem_cache_free+0x152/0x4b0 [ 725.757490][T14182] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 725.763390][T14182] ? asm_exc_page_fault+0x26/0x30 [ 725.768473][T14182] get_signal+0x237c/0x26d0 [ 725.772987][T14182] ? force_sig_fault+0xad/0xf0 [ 725.777754][T14182] ? __pfx_get_signal+0x10/0x10 [ 725.782616][T14182] arch_do_signal_or_restart+0x90/0x7e0 [ 725.788177][T14182] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 725.794339][T14182] ? __bad_area_nosemaphore+0x334/0x6a0 [ 725.799901][T14182] ? do_user_addr_fault+0x920/0x13f0 [ 725.805238][T14182] irqentry_exit_to_user_mode+0x13f/0x280 [ 725.810966][T14182] asm_exc_page_fault+0x26/0x30 [ 725.815817][T14182] RIP: 0033:0x7fa28117df41 [ 725.820236][T14182] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 725.839853][T14182] RSP: 002b:0000000040000006 EFLAGS: 00010217 [ 725.845927][T14182] RAX: 0000000000000000 RBX: 00007fa281335f80 RCX: 00007fa28117df39 [ 725.853901][T14182] RDX: ffffffff81000000 RSI: 0000000040000006 RDI: 000000000012051c [ 725.861872][T14182] RBP: 00007fa2811f0216 R08: 0000000080000001 R09: 0000000000000000 [ 725.869841][T14182] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 725.877814][T14182] R13: 0000000000000001 R14: 00007fa281335f80 R15: 00007fff77fbb378 [ 725.885796][T14182] ? 0xffffffff81000000 [ 725.889955][T14182] [ 726.121061][T14182] memory: usage 306380kB, limit 307200kB, failcnt 68063 [ 726.128206][T14182] memory+swap: usage 429788kB, limit 9007199254740988kB, failcnt 0 [ 726.154437][T14182] kmem: usage 4620kB, limit 9007199254740988kB, failcnt 0 [ 726.188530][T14182] Memory cgroup stats for /syz0: [ 726.188710][T14182] cache 307011584 [ 726.208891][T14182] rss 1044480 [ 726.212492][T14182] rss_huge 0 [ 726.215810][T14182] shmem 306892800 [ 726.219540][T14182] mapped_file 28164096 [ 726.229728][T14182] dirty 0 [ 726.425378][T14182] writeback 0 [ 726.428719][T14182] workingset_refault_anon 5954 [ 726.574530][T14182] workingset_refault_file 7143 [ 726.579355][T14182] swap 127012864 [ 726.700951][T14182] swapcached 974848 [ 726.704814][T14182] pgpgin 1168363 [ 726.854693][T14182] pgpgout 1096493 [ 727.070884][T14182] pgfault 277400 [ 727.074486][T14182] pgmajfault 1866 [ 727.078137][T14182] inactive_anon 118480896 [ 727.160229][T14182] active_anon 189898752 [ 727.329391][T14182] inactive_file 0 [ 727.350580][T14182] active_file 118784 [ 727.410594][T14182] unevictable 0 [ 727.414114][T14182] hierarchical_memory_limit 314572800 [ 727.554085][T14182] hierarchical_memsw_limit 9223372036854771712 [ 727.560306][T14182] total_cache 307011584 [ 727.688371][T14182] total_rss 1044480 [ 727.753929][T14182] total_rss_huge 0 [ 727.757729][T14182] total_shmem 306892800 [ 727.800592][T14182] total_mapped_file 28164096 [ 727.805535][T14182] total_dirty 0 [ 727.809429][T14182] total_writeback 0 [ 727.932979][T14182] total_workingset_refault_anon 5954 [ 727.938537][T14182] total_workingset_refault_file 7143 [ 727.991348][T14182] total_swap 127012864 [ 727.995468][T14182] total_swapcached 974848 [ 727.999805][T14182] total_pgpgin 1168363 [ 728.146297][T14182] total_pgpgout 1096493 [ 728.196283][T14182] total_pgfault 277400 [ 728.243611][T14182] total_pgmajfault 1866 [ 728.247819][T14182] total_inactive_anon 118480896 [ 728.400550][T14182] total_active_anon 189898752 [ 728.405288][T14182] total_inactive_file 0 [ 728.409475][T14182] total_active_file 118784 [ 728.414022][T14182] total_unevictable 0 [ 728.418019][T14182] anon_cost 0 [ 728.421412][T14182] file_cost 0 [ 728.424710][T14182] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1744,pid=13212,uid=0 [ 728.439724][T14182] Memory cgroup out of memory: Killed process 13212 (syz.0.1744) total-vm:128268kB, anon-rss:768kB, file-rss:38732kB, shmem-rss:14992kB, UID:0 pgtables:244kB oom_score_adj:1000 [ 730.483636][ T29] audit: type=1326 audit(4294967315.501:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14515 comm=093D exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbb257df39 code=0x0 [ 732.121518][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 732.140338][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 732.154958][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 732.166230][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 732.175950][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 732.184681][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 732.715325][T14538] chnl_net:caif_netlink_parms(): no params data found [ 733.483753][T14538] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.490994][T14538] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.498419][T14538] bridge_slave_0: entered allmulticast mode [ 733.505928][T14538] bridge_slave_0: entered promiscuous mode [ 733.514217][T14538] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.521394][T14538] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.528674][T14538] bridge_slave_1: entered allmulticast mode [ 733.535701][T14538] bridge_slave_1: entered promiscuous mode [ 733.970451][T14538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.993258][T14538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.217246][ T5238] Bluetooth: hci4: command tx timeout [ 734.920303][T14538] team0: Port device team_slave_0 added [ 734.958963][T14538] team0: Port device team_slave_1 added [ 735.863425][T14538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.896929][T14538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.985584][T14538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.044440][T14538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.061601][T14538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.096438][T14538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.298954][ T5238] Bluetooth: hci4: command tx timeout [ 737.177071][T14538] hsr_slave_0: entered promiscuous mode [ 737.397024][T14538] hsr_slave_1: entered promiscuous mode [ 737.535492][T14538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 737.543112][T14538] Cannot create hsr debugfs directory [ 738.390006][ T5238] Bluetooth: hci4: command tx timeout [ 740.358981][T14538] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.464009][ T5238] Bluetooth: hci4: command tx timeout [ 741.219000][T14538] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.661381][T14538] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.447164][T14538] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.386496][T14538] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 743.474934][T14538] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 743.595063][T14538] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 743.730834][T14538] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 744.248878][T14538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.266739][T14538] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.300361][T14538] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 744.310829][T14538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 744.354685][ T9037] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.361832][ T9037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.371020][ T9037] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.378180][ T9037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.746443][T14538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.849176][T14538] veth0_vlan: entered promiscuous mode [ 744.886985][T14538] veth1_vlan: entered promiscuous mode [ 745.032071][T14538] veth0_macvtap: entered promiscuous mode [ 745.053725][T14538] veth1_macvtap: entered promiscuous mode [ 745.090682][T14538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.151761][T14538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.172964][T14538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.194270][T14538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.227223][T14538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.249124][T14538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.281706][T14538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.316041][T14538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.336361][T14538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.371561][T14538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.413155][T14538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.444808][T14538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.479317][T14538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.517874][T14538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.528858][T14538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.552733][T14538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.582979][T14538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.621405][T14538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.661388][T14538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.671248][T14538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.691215][T14538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.730714][T14538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.737022][T14687] netlink: 'syz.1.2041': attribute type 11 has an invalid length. [ 745.752245][T14538] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.760987][T14538] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.784153][T14538] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.818891][T14538] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.028216][ T9037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.079115][ T9037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.412815][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.419244][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.296455][T14281] syz.0.1931 (14281) used greatest stack depth: 17984 bytes left [ 749.972765][ T9037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.000105][ T9037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.261853][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 750.271404][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 750.280282][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 750.294195][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 750.309242][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 750.316688][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 751.720661][ T9031] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.368322][ T5238] Bluetooth: hci1: command tx timeout [ 752.943711][ T9031] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.986970][ T9031] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.447095][ T5238] Bluetooth: hci1: command tx timeout [ 754.656002][ T9031] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.181639][T14720] chnl_net:caif_netlink_parms(): no params data found [ 755.974645][ T9031] bridge_slave_1: left allmulticast mode [ 755.997695][ T9031] bridge_slave_1: left promiscuous mode [ 756.003856][ T9031] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.302750][ T9031] bridge_slave_0: left allmulticast mode [ 756.326244][ T9031] bridge_slave_0: left promiscuous mode [ 756.332031][ T9031] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.577951][ T5238] Bluetooth: hci1: command tx timeout [ 756.617343][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 756.634852][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 756.656297][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 756.693785][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 756.704864][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 756.713890][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 756.807189][T14780] futex_wake_op: syz.0.2060 tries to shift op by -256; fix this program [ 758.597934][ T9031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.629556][ T54] Bluetooth: hci1: command tx timeout [ 758.725553][ T9031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.765379][ T54] Bluetooth: hci5: command tx timeout [ 758.778376][ T9031] bond0 (unregistering): Released all slaves [ 759.555283][T14720] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.587024][T14720] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.594306][T14720] bridge_slave_0: entered allmulticast mode [ 759.625761][T14720] bridge_slave_0: entered promiscuous mode [ 759.747641][T14720] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.754987][T14720] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.762266][T14720] bridge_slave_1: entered allmulticast mode [ 759.795519][T14720] bridge_slave_1: entered promiscuous mode [ 759.940074][T14720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.952181][T14720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.409567][T14720] team0: Port device team_slave_0 added [ 760.605983][T14720] team0: Port device team_slave_1 added [ 760.737773][T14720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.772478][T14720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.838971][T14720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.852457][T14720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.859530][T14720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.863875][ T54] Bluetooth: hci5: command tx timeout [ 760.885489][T14720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.124344][T14720] hsr_slave_0: entered promiscuous mode [ 761.146007][T14720] hsr_slave_1: entered promiscuous mode [ 761.156680][T14720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 761.176216][T14720] Cannot create hsr debugfs directory [ 761.255719][ T9031] hsr_slave_0: left promiscuous mode [ 761.274967][ T9031] hsr_slave_1: left promiscuous mode [ 761.294064][ T9031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.301521][ T9031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.339584][ T9031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.353878][ T9031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.381290][ T9031] veth1_macvtap: left promiscuous mode [ 761.386947][ T9031] veth0_macvtap: left promiscuous mode [ 761.392657][ T9031] veth1_vlan: left promiscuous mode [ 761.398545][ T9031] veth0_vlan: left promiscuous mode [ 762.404953][ T9031] team0 (unregistering): Port device team_slave_1 removed [ 762.504438][ T9031] team0 (unregistering): Port device team_slave_0 removed [ 762.932801][ T54] Bluetooth: hci5: command tx timeout [ 764.055004][T14776] chnl_net:caif_netlink_parms(): no params data found [ 764.730149][T14776] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.756522][T14776] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.765452][T14776] bridge_slave_0: entered allmulticast mode [ 764.772686][T14776] bridge_slave_0: entered promiscuous mode [ 764.782634][T14776] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.789748][T14776] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.797161][T14776] bridge_slave_1: entered allmulticast mode [ 764.804289][T14776] bridge_slave_1: entered promiscuous mode [ 764.934016][T14776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.001938][ T54] Bluetooth: hci5: command tx timeout [ 765.011586][T14776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.176297][T14776] team0: Port device team_slave_0 added [ 766.614496][T14776] team0: Port device team_slave_1 added [ 766.851219][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 766.861267][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 766.872324][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 766.886821][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 766.894813][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 766.902327][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 767.016489][ T9031] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.318219][ T9031] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.462391][T14776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.469443][T14776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.537285][T14776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.552384][T14776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.559356][T14776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.610404][T14776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.720177][ T9031] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.796401][T14776] hsr_slave_0: entered promiscuous mode [ 767.828606][T14776] hsr_slave_1: entered promiscuous mode [ 767.910853][ T9031] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.080744][T14720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 768.098815][T14720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 768.175191][T14720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 768.262985][T14720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 768.636210][ T9031] bridge_slave_1: left allmulticast mode [ 768.644349][ T9031] bridge_slave_1: left promiscuous mode [ 768.650567][ T9031] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.750833][ T9031] bridge_slave_0: left allmulticast mode [ 768.756527][ T9031] bridge_slave_0: left promiscuous mode [ 768.793177][ T9031] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.820946][ T9031] bridge_slave_1: left allmulticast mode [ 768.830598][ T9031] bridge_slave_1: left promiscuous mode [ 768.836349][ T9031] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.896915][ T9031] bridge_slave_0: left allmulticast mode [ 768.909749][ T9031] bridge_slave_0: left promiscuous mode [ 768.936962][ T9031] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.000577][ T5238] Bluetooth: hci0: command tx timeout [ 769.966425][ T5238] Bluetooth: hci2: command 0x0406 tx timeout [ 771.012309][ T9031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.056106][ T9031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.084299][ T54] Bluetooth: hci0: command tx timeout [ 771.107888][ T9031] bond0 (unregistering): Released all slaves [ 771.620516][ T9031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.641380][ T9031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.683199][ T9031] bond0 (unregistering): Released all slaves [ 771.894148][T14892] chnl_net:caif_netlink_parms(): no params data found [ 773.158354][ T5238] Bluetooth: hci0: command tx timeout [ 773.549740][T14720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.244115][T14720] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.658918][T14892] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.666193][T14892] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.708654][T14892] bridge_slave_0: entered allmulticast mode [ 774.715659][T14892] bridge_slave_0: entered promiscuous mode [ 774.749482][T14892] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.777661][T14892] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.784904][T14892] bridge_slave_1: entered allmulticast mode [ 774.828170][T14892] bridge_slave_1: entered promiscuous mode [ 774.849728][T12910] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.856934][T12910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.081655][ T6064] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.088813][ T6064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.217286][T14892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.237487][ T5238] Bluetooth: hci0: command tx timeout [ 775.313341][T14892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.404547][T14720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 775.446302][T14720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 775.533710][ T9031] hsr_slave_0: left promiscuous mode [ 775.547198][ T9031] hsr_slave_1: left promiscuous mode [ 775.555190][ T9031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.586566][ T9031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.607846][ T9031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.615295][ T9031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.692015][ T9031] hsr_slave_0: left promiscuous mode [ 775.711147][ T9031] hsr_slave_1: left promiscuous mode [ 775.718106][ T9031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.725555][ T9031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.756632][ T9031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.764088][ T9031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.850836][ T9031] veth1_macvtap: left promiscuous mode [ 775.865581][ T9031] veth0_macvtap: left promiscuous mode [ 775.886430][ T9031] veth1_vlan: left promiscuous mode [ 775.892632][ T9031] veth0_vlan: left promiscuous mode [ 775.917473][ T9031] veth1_macvtap: left promiscuous mode [ 775.923032][ T9031] veth0_macvtap: left promiscuous mode [ 775.946959][ T9031] veth1_vlan: left promiscuous mode [ 775.952313][ T9031] veth0_vlan: left promiscuous mode [ 779.157018][ T9031] team0 (unregistering): Port device team_slave_1 removed [ 779.352622][ T9031] team0 (unregistering): Port device team_slave_0 removed [ 780.314517][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 780.337095][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 780.421956][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 780.430714][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 780.438967][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 780.446700][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 782.513442][ T5238] Bluetooth: hci4: command tx timeout [ 783.421538][ T9031] team0 (unregistering): Port device team_slave_1 removed [ 783.515206][ T9031] team0 (unregistering): Port device team_slave_0 removed [ 784.428425][T14892] team0: Port device team_slave_0 added [ 784.460573][T14776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 784.517790][T14892] team0: Port device team_slave_1 added [ 784.534835][T14776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 784.546555][T14776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 784.598007][ T5238] Bluetooth: hci4: command tx timeout [ 784.924803][T14776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 785.004665][T14892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.068080][T14892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.106821][T14892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.222396][T14892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.229640][T14892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.280598][T14892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.430224][T14892] hsr_slave_0: entered promiscuous mode [ 785.453957][T14892] hsr_slave_1: entered promiscuous mode [ 785.460195][T14892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 785.475402][T14892] Cannot create hsr debugfs directory [ 785.551256][T14720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.632296][T14720] veth0_vlan: entered promiscuous mode [ 785.655205][T14720] veth1_vlan: entered promiscuous mode [ 785.730277][T14720] veth0_macvtap: entered promiscuous mode [ 785.852552][T14720] veth1_macvtap: entered promiscuous mode [ 785.932088][T14892] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.010693][T14776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.090814][T14720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.102905][T14720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.113783][T14720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.124962][T14720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.135055][T14720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.145996][T14720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.157812][T14720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.187753][T14892] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.225447][T14720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.247521][T14720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.260914][T14720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.280770][T14720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.292036][T14720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.311601][T14720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.345411][T14720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.479911][T14892] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.506150][T14776] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.528030][T14720] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.542094][T14720] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.550821][T14720] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.560318][T14720] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.578995][T14983] chnl_net:caif_netlink_parms(): no params data found [ 786.675303][ T5238] Bluetooth: hci4: command tx timeout [ 786.713920][T14892] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.754952][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.762122][ T6064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.776297][ T6064] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.783469][ T6064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.145233][T14776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 787.192129][T14983] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.199343][T14983] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.208168][T14983] bridge_slave_0: entered allmulticast mode [ 787.216589][T14983] bridge_slave_0: entered promiscuous mode [ 787.229847][T14983] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.252487][T14983] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.259722][T14983] bridge_slave_1: entered allmulticast mode [ 787.276404][T14983] bridge_slave_1: entered promiscuous mode [ 787.327034][T14892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 787.370184][T14892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 787.388459][T14892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 787.442239][ T9037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.450296][ T9037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.569914][ T9031] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.600184][T14892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 787.632876][T14983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.657754][T14983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.705467][ T9031] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.902853][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.951325][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.977416][ T9031] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.045451][T14983] team0: Port device team_slave_0 added [ 788.072345][T14983] team0: Port device team_slave_1 added [ 788.144496][ T9031] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.189222][T14776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.228708][T14983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.247736][T14983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.289492][T14983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.410781][T14983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.417772][T14983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.458686][T14983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.509835][T14892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.637589][T14892] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.715707][T14983] hsr_slave_0: entered promiscuous mode [ 788.731622][T14983] hsr_slave_1: entered promiscuous mode [ 788.738382][T14983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 788.754410][T14983] Cannot create hsr debugfs directory [ 788.769681][ T5238] Bluetooth: hci4: command tx timeout [ 788.794667][T14776] veth0_vlan: entered promiscuous mode [ 788.809281][T14776] veth1_vlan: entered promiscuous mode [ 788.834140][T14776] veth0_macvtap: entered promiscuous mode [ 788.844213][T14776] veth1_macvtap: entered promiscuous mode [ 788.861251][T14776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.873541][T14776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.884542][T14776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.897209][T14776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.909517][T14776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.921754][T14776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.945789][T14776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.963054][T14776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.985090][T14776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.076866][ T9035] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.084044][ T9035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.106213][ T9035] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.113388][ T9035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.245091][T14892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 789.279553][T14892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 789.323917][ T9031] bridge_slave_1: left allmulticast mode [ 789.333619][ T9031] bridge_slave_1: left promiscuous mode [ 789.339372][ T9031] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.420282][ T9031] bridge_slave_0: left allmulticast mode [ 789.426080][ T9031] bridge_slave_0: left promiscuous mode [ 789.432975][ T9031] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.443781][ T9031] bridge_slave_1: left allmulticast mode [ 789.462797][ T9031] bridge_slave_1: left promiscuous mode [ 789.468622][ T9031] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.492653][ T9031] bridge_slave_0: left allmulticast mode [ 789.498836][ T9031] bridge_slave_0: left promiscuous mode [ 789.514978][ T9031] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.214163][ T9031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.227486][ T9031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.269380][ T9031] bond0 (unregistering): Released all slaves [ 791.682183][ T9031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.719763][ T9031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.734361][ T9031] bond0 (unregistering): Released all slaves [ 791.830730][T14776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.858458][T14776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.888346][T14776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.908678][T14776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.928724][T14776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.958313][T14776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.979736][T14776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.998313][T14776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.027443][T14776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.121824][T14776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.148269][T14776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.157261][T14776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.188198][T14776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.714495][T14892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.859815][ T9037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.887762][ T9037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.159760][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.189085][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.220742][ T9031] hsr_slave_0: left promiscuous mode [ 793.226855][ T9031] hsr_slave_1: left promiscuous mode [ 793.242874][ T9031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.262944][ T9031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.284649][ T9031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.296738][ T9031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.398230][ T9031] hsr_slave_0: left promiscuous mode [ 793.404266][ T9031] hsr_slave_1: left promiscuous mode [ 793.426735][ T9031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.435064][ T9031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.466067][ T9031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.475471][ T9031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.571008][ T9031] veth1_macvtap: left promiscuous mode [ 793.576678][ T9031] veth0_macvtap: left promiscuous mode [ 793.592734][ T9031] veth1_vlan: left promiscuous mode [ 793.601574][ T9031] veth0_vlan: left promiscuous mode [ 793.628621][ T9031] veth1_macvtap: left promiscuous mode [ 793.634173][ T9031] veth0_macvtap: left promiscuous mode [ 793.647592][ T9031] veth1_vlan: left promiscuous mode [ 793.652910][ T9031] veth0_vlan: left promiscuous mode [ 795.518836][ T9031] team0 (unregistering): Port device team_slave_1 removed [ 795.693582][ T9031] team0 (unregistering): Port device team_slave_0 removed [ 798.226572][ T9031] team0 (unregistering): Port device team_slave_1 removed [ 798.355693][ T9031] team0 (unregistering): Port device team_slave_0 removed [ 799.706355][T15074] netlink: 'syz.2.2089': attribute type 11 has an invalid length. [ 800.349678][T14892] veth0_vlan: entered promiscuous mode [ 800.361094][T14892] veth1_vlan: entered promiscuous mode [ 800.417773][T14892] veth0_macvtap: entered promiscuous mode [ 800.732714][T14892] veth1_macvtap: entered promiscuous mode [ 801.032206][T14892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.091899][T14892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.168142][T15075] delete_channel: no stack [ 801.354314][T14892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.365996][T14892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.411219][T14892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.452039][T14892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.483728][T14892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.634463][T14892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.646342][T14892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.680798][T14892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.702060][T14892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.762252][T14892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.800527][T14892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.985619][T14892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.040041][T14892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.071564][T14892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.091995][T14892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.121229][T14892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.332312][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.381621][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.430317][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.449912][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.206630][T14983] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 803.233230][T14983] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 803.343597][T14983] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 803.386741][T14983] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 803.683246][T14983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.802237][T14983] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.842454][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.849646][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.952792][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.959988][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.521049][T14983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.631694][T14983] veth0_vlan: entered promiscuous mode [ 804.663022][T14983] veth1_vlan: entered promiscuous mode [ 804.713226][T14983] veth0_macvtap: entered promiscuous mode [ 804.738383][T14983] veth1_macvtap: entered promiscuous mode [ 804.780000][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.804509][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.819115][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.840519][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.862060][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.882967][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.904412][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.925009][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.948799][T14983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.981371][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.006548][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.017025][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.027967][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.038314][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.074055][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.104107][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.127196][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.139517][T14983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.168568][T14983] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.184168][T14983] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.203532][T14983] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.222560][T14983] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.361299][T15150] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 805.379818][T15150] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 805.437901][ T9031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.454471][ T9031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.516991][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.543031][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.666313][T15155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2101'. [ 805.839161][T15163] netlink: 'syz.1.2102': attribute type 11 has an invalid length. [ 808.825847][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.832405][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.078344][T15381] svc: failed to register nfsdv3 RPC service (errno 111). [ 818.093223][T15381] svc: failed to register nfsaclv3 RPC service (errno 111). [ 818.654500][T15396] netlink: 'syz.0.2170': attribute type 3 has an invalid length. [ 819.465044][T15383] ptrace attach of "./syz-executor exec"[14776] was attempted by "./syz-executor exec"[15383] [ 821.822655][T15464] netlink: 'syz.2.2190': attribute type 11 has an invalid length. [ 824.186428][T15504] netlink: 'syz.0.2201': attribute type 11 has an invalid length. [ 825.642812][T15547] netlink: 'syz.3.2213': attribute type 11 has an invalid length. [ 825.854729][T15543] FAULT_INJECTION: forcing a failure. [ 825.854729][T15543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.905440][T15543] CPU: 0 UID: 0 PID: 15543 Comm: syz.1.2211 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 825.915912][T15543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 825.925992][T15543] Call Trace: [ 825.929291][T15543] [ 825.932240][T15543] dump_stack_lvl+0x16c/0x1f0 [ 825.936957][T15543] should_fail_ex+0x497/0x5b0 [ 825.941663][T15543] _copy_from_user+0x30/0xf0 [ 825.946292][T15543] copy_clone_args_from_user+0x156/0x780 [ 825.951966][T15543] ? ksys_write+0x12f/0x260 [ 825.956495][T15543] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 825.962696][T15543] ? vfs_write+0x14d/0x1140 [ 825.967230][T15543] __do_sys_clone3+0xaa/0x270 [ 825.971917][T15543] ? __pfx___do_sys_clone3+0x10/0x10 [ 825.977232][T15543] do_syscall_64+0xcd/0x250 [ 825.981750][T15543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.987652][T15543] RIP: 0033:0x7fc58677df39 [ 825.992064][T15543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.011670][T15543] RSP: 002b:00007fc5861ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 826.020085][T15543] RAX: ffffffffffffffda RBX: 00007fc586935f80 RCX: 00007fc58677df39 [ 826.028055][T15543] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000000 [ 826.036034][T15543] RBP: 00007fc5861ff090 R08: 0000000000000000 R09: 0000000000000000 [ 826.044007][T15543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.051982][T15543] R13: 0000000000000000 R14: 00007fc586935f80 R15: 00007ffdf6503448 [ 826.059967][T15543] [ 826.223693][T15559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2217'. [ 826.480671][T15561] delete_channel: no stack [ 827.384698][T15584] netlink: 'syz.3.2223': attribute type 11 has an invalid length. [ 827.454866][T15588] netlink: 'syz.2.2224': attribute type 11 has an invalid length. [ 827.756757][T15591] FAULT_INJECTION: forcing a failure. [ 827.756757][T15591] name failslab, interval 1, probability 0, space 0, times 0 [ 827.796377][T15591] CPU: 1 UID: 0 PID: 15591 Comm: syz.3.2225 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 827.806859][T15591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 827.816941][T15591] Call Trace: [ 827.820235][T15591] [ 827.823179][T15591] dump_stack_lvl+0x16c/0x1f0 [ 827.827892][T15591] should_fail_ex+0x497/0x5b0 [ 827.832598][T15591] ? fs_reclaim_acquire+0xae/0x160 [ 827.837747][T15591] should_failslab+0xc2/0x120 [ 827.842459][T15591] kmem_cache_alloc_node_noprof+0x71/0x310 [ 827.848302][T15591] ? copy_process+0x4a3/0x6f00 [ 827.853132][T15591] copy_process+0x4a3/0x6f00 [ 827.857750][T15591] ? __might_fault+0x13b/0x190 [ 827.862557][T15591] ? __pfx_copy_process+0x10/0x10 [ 827.867636][T15591] ? __might_fault+0xe3/0x190 [ 827.874926][T15591] ? _copy_from_user+0x5d/0xf0 [ 827.880527][T15591] kernel_clone+0xfd/0x960 [ 827.884979][T15591] ? ksys_write+0x12f/0x260 [ 827.889514][T15591] ? __pfx_kernel_clone+0x10/0x10 [ 827.894577][T15591] ? vfs_write+0x14d/0x1140 [ 827.899119][T15591] __do_sys_clone3+0x1f5/0x270 [ 827.903912][T15591] ? __pfx___do_sys_clone3+0x10/0x10 [ 827.909263][T15591] do_syscall_64+0xcd/0x250 [ 827.913788][T15591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.919709][T15591] RIP: 0033:0x7fb37d97df39 [ 827.924142][T15591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 827.943776][T15591] RSP: 002b:00007fb37e6e1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 827.952233][T15591] RAX: ffffffffffffffda RBX: 00007fb37db35f80 RCX: 00007fb37d97df39 [ 827.960238][T15591] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000000 [ 827.968236][T15591] RBP: 00007fb37e6e1090 R08: 0000000000000000 R09: 0000000000000000 [ 827.976234][T15591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.984232][T15591] R13: 0000000000000000 R14: 00007fb37db35f80 R15: 00007fffe0cf81f8 [ 827.992240][T15591] [ 829.477556][T15627] netlink: 'syz.0.2234': attribute type 11 has an invalid length. [ 830.235951][T15641] FAULT_INJECTION: forcing a failure. [ 830.235951][T15641] name failslab, interval 1, probability 0, space 0, times 0 [ 830.304229][T15641] CPU: 0 UID: 0 PID: 15641 Comm: syz.0.2238 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 830.314703][T15641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 830.324783][T15641] Call Trace: [ 830.328079][T15641] [ 830.331030][T15641] dump_stack_lvl+0x16c/0x1f0 [ 830.335742][T15641] should_fail_ex+0x497/0x5b0 [ 830.340445][T15641] ? fs_reclaim_acquire+0xae/0x160 [ 830.345582][T15641] should_failslab+0xc2/0x120 [ 830.350302][T15641] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 830.355726][T15641] ? prepare_creds+0x2e/0x750 [ 830.360439][T15641] prepare_creds+0x2e/0x750 [ 830.364974][T15641] ? __pfx_get_random_u64+0x10/0x10 [ 830.370197][T15641] copy_creds+0xa7/0xa50 [ 830.374477][T15641] copy_process+0xf06/0x6f00 [ 830.379097][T15641] ? __might_fault+0x13b/0x190 [ 830.383924][T15641] ? __pfx_copy_process+0x10/0x10 [ 830.388974][T15641] ? __might_fault+0xe3/0x190 [ 830.393692][T15641] ? _copy_from_user+0x5d/0xf0 [ 830.398496][T15641] kernel_clone+0xfd/0x960 [ 830.402946][T15641] ? ksys_write+0x12f/0x260 [ 830.407475][T15641] ? __pfx_kernel_clone+0x10/0x10 [ 830.412535][T15641] ? vfs_write+0x14d/0x1140 [ 830.417079][T15641] __do_sys_clone3+0x1f5/0x270 [ 830.421871][T15641] ? __pfx___do_sys_clone3+0x10/0x10 [ 830.427230][T15641] do_syscall_64+0xcd/0x250 [ 830.431770][T15641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.437703][T15641] RIP: 0033:0x7f8bc3f7df39 [ 830.442136][T15641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.461855][T15641] RSP: 002b:00007f8bc4cf8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 830.470308][T15641] RAX: ffffffffffffffda RBX: 00007f8bc4135f80 RCX: 00007f8bc3f7df39 [ 830.478305][T15641] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000000 [ 830.486297][T15641] RBP: 00007f8bc4cf8090 R08: 0000000000000000 R09: 0000000000000000 [ 830.494293][T15641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.502375][T15641] R13: 0000000000000000 R14: 00007f8bc4135f80 R15: 00007ffc7db44f78 [ 830.510385][T15641] [ 831.544738][T15674] netlink: 'syz.3.2246': attribute type 11 has an invalid length. [ 832.050406][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2251'. [ 832.650073][T15660] netlink: 'syz.1.2244': attribute type 11 has an invalid length. [ 838.234865][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2279'. [ 839.131367][T15807] svc: failed to register nfsdv3 RPC service (errno 111). [ 839.177423][T15807] svc: failed to register nfsaclv3 RPC service (errno 111). [ 842.954677][T15905] Invalid ELF header magic: != ELF [ 845.216080][T15923] netlink: 'syz.1.2315': attribute type 11 has an invalid length. [ 846.811735][T15950] netlink: 'syz.0.2321': attribute type 11 has an invalid length. [ 847.412034][T15963] netlink: 'syz.2.2325': attribute type 11 has an invalid length. [ 851.916244][T16032] netlink: 'syz.0.2344': attribute type 11 has an invalid length. [ 854.075054][T16066] delete_channel: no stack [ 857.218584][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2379'. [ 859.598761][ T6064] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.071201][ T6064] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.517852][ T6064] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.537091][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 860.549610][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 860.558115][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 860.575627][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 860.583225][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 860.592499][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 860.986192][ T6064] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.770765][T16203] chnl_net:caif_netlink_parms(): no params data found [ 862.188734][ T6064] bridge_slave_1: left allmulticast mode [ 862.197254][ T6064] bridge_slave_1: left promiscuous mode [ 862.203024][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.274518][ T6064] bridge_slave_0: left allmulticast mode [ 862.280210][ T6064] bridge_slave_0: left promiscuous mode [ 862.352840][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.487203][T16232] ptrace attach of "./syz-executor exec"[14720] was attempted by "./syz-executor exec"[16232] [ 862.664136][ T5238] Bluetooth: hci2: command tx timeout [ 864.701358][ T6064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.744310][ T5238] Bluetooth: hci2: command tx timeout [ 864.869251][ T6064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.909488][ T6064] bond0 (unregistering): Released all slaves [ 865.191776][T16203] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.215551][T16203] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.243470][T16203] bridge_slave_0: entered allmulticast mode [ 865.255278][T16203] bridge_slave_0: entered promiscuous mode [ 865.393773][T16203] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.414796][T16203] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.422662][T16203] bridge_slave_1: entered allmulticast mode [ 865.443675][T16203] bridge_slave_1: entered promiscuous mode [ 865.867449][T16203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.880732][T16203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.912776][T16267] could not allocate digest TFM handle [ 866.106586][T16203] team0: Port device team_slave_0 added [ 866.149695][T16203] team0: Port device team_slave_1 added [ 866.666589][T16203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.673672][T16203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.751464][T16203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.824336][ T5238] Bluetooth: hci2: command tx timeout [ 866.875877][ T6064] hsr_slave_0: left promiscuous mode [ 866.915805][ T6064] hsr_slave_1: left promiscuous mode [ 866.984655][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.992123][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.000773][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 867.028809][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.137630][ T6064] veth1_macvtap: left promiscuous mode [ 867.143220][ T6064] veth0_macvtap: left promiscuous mode [ 867.169641][ T6064] veth1_vlan: left promiscuous mode [ 867.194191][ T6064] veth0_vlan: left promiscuous mode [ 868.904247][ T5238] Bluetooth: hci2: command tx timeout [ 868.989111][ T6064] team0 (unregistering): Port device team_slave_1 removed [ 869.066692][ T6064] team0 (unregistering): Port device team_slave_0 removed [ 869.781429][T16203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.791276][T16203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.844106][T16203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.108905][T16203] hsr_slave_0: entered promiscuous mode [ 870.148185][T16203] hsr_slave_1: entered promiscuous mode [ 870.189549][T16203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 870.214907][T16203] Cannot create hsr debugfs directory [ 870.270106][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.279789][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.763311][T16353] netlink: 448 bytes leftover after parsing attributes in process `syz.3.2424'. [ 870.892840][T16361] netlink: 448 bytes leftover after parsing attributes in process `syz.3.2424'. [ 871.453363][T16203] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 871.508974][T16203] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 871.544686][T16203] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 871.587056][T16203] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 871.728934][T16203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.745675][T16203] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.776398][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.783505][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.844613][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.851749][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.329531][T16203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.459106][T16203] veth0_vlan: entered promiscuous mode [ 872.508066][T16203] veth1_vlan: entered promiscuous mode [ 872.647955][T16203] veth0_macvtap: entered promiscuous mode [ 872.657092][T16203] veth1_macvtap: entered promiscuous mode [ 872.671878][T16203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.682548][T16203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.692472][T16203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.703075][T16203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.712976][T16203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.723500][T16203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.733444][T16203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.744083][T16203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.757465][T16203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.767252][T16203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.777810][T16203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.790185][T16203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.800934][T16203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.811120][T16203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.821976][T16203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.832107][T16203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.842950][T16203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.855030][T16203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.865129][T16203] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.873863][T16203] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.882914][T16203] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.891794][T16203] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.149453][T16381] delete_channel: no stack [ 873.254585][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.293011][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.338360][ T6056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.385125][ T6056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.466352][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 882.583220][ T5238] Bluetooth: hci5: command 0x0406 tx timeout [ 884.853999][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2495'. [ 888.361637][ T6064] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.586624][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 888.598926][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 888.617069][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 888.642538][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 888.655321][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 888.667560][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 888.800345][ T6064] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.958751][ T6064] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.219295][ T6064] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.972111][ T6064] bridge_slave_1: left allmulticast mode [ 889.990948][ T6064] bridge_slave_1: left promiscuous mode [ 890.001687][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.145837][ T6064] bridge_slave_0: left allmulticast mode [ 890.156037][ T6064] bridge_slave_0: left promiscuous mode [ 890.162013][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.748190][ T54] Bluetooth: hci1: command tx timeout [ 891.279222][ T6064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.349384][ T6064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.372752][ T6064] bond0 (unregistering): Released all slaves [ 891.438850][T16774] chnl_net:caif_netlink_parms(): no params data found [ 891.564783][T16825] openvswitch: netlink: Flow actions attr not present in new flow. [ 891.855759][T16774] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.863154][T16774] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.919096][T16774] bridge_slave_0: entered allmulticast mode [ 891.937038][T16774] bridge_slave_0: entered promiscuous mode [ 891.952830][T16774] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.962933][T16774] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.973562][T16774] bridge_slave_1: entered allmulticast mode [ 891.996288][T16774] bridge_slave_1: entered promiscuous mode [ 892.220377][T16774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.247576][T16841] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 892.309983][ T6064] hsr_slave_0: left promiscuous mode [ 892.337842][ T6064] hsr_slave_1: left promiscuous mode [ 892.343964][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.352446][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.371143][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.379096][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.423020][ T6064] veth1_macvtap: left promiscuous mode [ 892.428739][ T6064] veth0_macvtap: left promiscuous mode [ 892.434569][ T6064] veth1_vlan: left promiscuous mode [ 892.447909][ T6064] veth0_vlan: left promiscuous mode [ 892.825048][ T54] Bluetooth: hci1: command tx timeout [ 892.830504][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 893.087813][ T6064] team0 (unregistering): Port device team_slave_1 removed [ 893.235272][ T6064] team0 (unregistering): Port device team_slave_0 removed [ 894.160435][T16774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.337218][T16774] team0: Port device team_slave_0 added [ 894.348104][T16774] team0: Port device team_slave_1 added [ 894.422954][T16774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.444494][T16774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.523876][T16774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.542432][T16774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.568679][T16774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.664221][T16774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.874253][T16774] hsr_slave_0: entered promiscuous mode [ 894.900244][T16774] hsr_slave_1: entered promiscuous mode [ 894.906087][ T5238] Bluetooth: hci1: command tx timeout [ 894.938367][T16774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 894.954118][T16774] Cannot create hsr debugfs directory [ 896.115578][T16774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 896.152739][T16774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 896.177032][T16774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 896.206837][T16774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 896.552691][T16774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.618239][T16774] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.667561][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.674767][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.737105][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.744582][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.858581][T16774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 896.973035][ T5238] Bluetooth: hci1: command tx timeout [ 897.215230][T16974] mmap: syz.1.2553 (16974): VmData 37654528 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 897.366731][T16774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.556654][T16774] veth0_vlan: entered promiscuous mode [ 897.603824][T16774] veth1_vlan: entered promiscuous mode [ 897.697369][T16774] veth0_macvtap: entered promiscuous mode [ 897.735705][T16774] veth1_macvtap: entered promiscuous mode [ 897.777363][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.798518][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.812087][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.852788][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.863246][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.874032][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.886174][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.898333][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.909894][T16774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.920924][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.972199][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.995520][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.022171][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.054199][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.102166][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.132106][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.162634][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.185376][T16774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.250519][T16774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.287719][T16774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.318244][T16774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.337660][T16774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.693156][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.725939][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.819238][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.871721][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.654427][T17130] netlink: 'syz.1.2573': attribute type 11 has an invalid length. [ 904.841798][T17183] netlink: 632 bytes leftover after parsing attributes in process `syz.3.2584'. [ 906.193934][T17198] delete_channel: no stack [ 906.965843][T17217] openvswitch: netlink: Message has 4 unknown bytes. [ 907.359101][T17225] netlink: 'syz.3.2595': attribute type 11 has an invalid length. [ 907.401711][T17225] netlink: 'syz.3.2595': attribute type 11 has an invalid length. [ 907.436823][T17225] netlink: 'syz.3.2595': attribute type 11 has an invalid length. [ 910.226303][ T29] audit: type=1326 audit(4294967315.639:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17286 comm="syz.3.2614" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb37d97df39 code=0x0 [ 910.432924][T17291] svc: failed to register nfsdv3 RPC service (errno 111). [ 910.462222][T17291] svc: failed to register nfsaclv3 RPC service (errno 111). [ 913.754427][T17358] svc: failed to register nfsdv3 RPC service (errno 111). [ 913.855753][T17358] svc: failed to register nfsaclv3 RPC service (errno 111). [ 913.986535][T17363] nbd: couldn't find device at index 16711686 [ 914.094991][T17363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2632'. [ 915.047989][ T29] audit: type=1326 audit(4294967320.472:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17381 comm="syz.0.2640" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bc3f7df39 code=0x0 [ 921.283292][T17567] svc: failed to register nfsdv3 RPC service (errno 111). [ 921.309524][T17567] svc: failed to register nfsaclv3 RPC service (errno 111). [ 923.505877][T17619] delete_channel: no stack [ 925.090971][T17640] netlink: 'syz.3.2716': attribute type 3 has an invalid length. [ 931.677279][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.695736][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.108704][T17770] netlink: 'syz.2.2752': attribute type 11 has an invalid length. [ 937.426032][T17823] netlink: 'syz.2.2768': attribute type 1 has an invalid length. [ 937.495342][T17823] delete_channel: no stack [ 940.823181][T13094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 940.855734][T13094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 940.865992][T13094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 940.874781][T13094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 940.884715][T13094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 940.893174][T13094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 941.262779][T17881] chnl_net:caif_netlink_parms(): no params data found [ 942.668811][T17881] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.706795][T17881] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.729887][T17881] bridge_slave_0: entered allmulticast mode [ 942.756265][T17881] bridge_slave_0: entered promiscuous mode [ 942.833683][T17881] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.870388][T17881] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.884008][T17881] bridge_slave_1: entered allmulticast mode [ 942.901297][T17881] bridge_slave_1: entered promiscuous mode [ 942.959875][T13094] Bluetooth: hci4: command tx timeout [ 943.133360][T17881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.161439][T17881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.358246][T17881] team0: Port device team_slave_0 added [ 943.391930][T17881] team0: Port device team_slave_1 added [ 943.621145][T17881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.636717][T17881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.695903][T17881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.832612][T17881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.859241][T17881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.969399][T17881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.234327][T17881] hsr_slave_0: entered promiscuous mode [ 944.293080][T17881] hsr_slave_1: entered promiscuous mode [ 944.323303][T17881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 944.350519][T17881] Cannot create hsr debugfs directory [ 945.038929][T13094] Bluetooth: hci4: command tx timeout [ 946.267310][T17881] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.610388][T17881] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.843307][T17881] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.052275][T17881] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.107623][T13094] Bluetooth: hci4: command tx timeout [ 947.583007][T17881] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 947.610544][T17881] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 947.644373][T17881] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 947.714426][T17881] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 947.918720][T17881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.956682][T17881] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.039071][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.046192][ T6064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.068925][ T6064] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.076074][ T6064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.560930][T17881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.682619][T17881] veth0_vlan: entered promiscuous mode [ 948.719948][T17881] veth1_vlan: entered promiscuous mode [ 948.810216][T17881] veth0_macvtap: entered promiscuous mode [ 948.845196][T17881] veth1_macvtap: entered promiscuous mode [ 948.907909][T17881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.937190][T17881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.976681][T17881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.004412][T17881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.024932][T17881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.073792][T17881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.108982][T17881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.140550][T17881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.186495][T17881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.201035][T13094] Bluetooth: hci4: command tx timeout [ 949.236976][T17881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.387919][T17881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.398645][T17881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.420565][T17881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.449396][T17881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.492049][T17881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.536494][T17881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.568622][T17881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.601284][T17881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.656716][T17881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.698867][T17881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.743587][T17881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.796107][T17881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.873605][T17881] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.913015][T17881] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.963400][T17881] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.995665][T17881] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.340571][ T6062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.384045][ T6062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.514526][ T9037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.560564][ T9037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.242009][T18001] svc: failed to register nfsdv3 RPC service (errno 111). [ 953.280500][T18001] svc: failed to register nfsaclv3 RPC service (errno 111). [ 954.619648][T18044] svc: failed to register nfsdv3 RPC service (errno 111). [ 954.651966][T18044] svc: failed to register nfsaclv3 RPC service (errno 111). [ 957.064783][T18077] nbd: must specify a size in bytes for the device [ 959.747686][T18155] openvswitch: netlink: Message has 4 unknown bytes. [ 961.444690][T18204] Process accounting resumed [ 965.662303][T18286] netlink: 'syz.3.2890': attribute type 11 has an invalid length. [ 971.499414][T18422] FAULT_INJECTION: forcing a failure. [ 971.499414][T18422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 971.536067][T18422] CPU: 0 UID: 0 PID: 18422 Comm: syz.1.2933 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 971.546547][T18422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 971.556632][T18422] Call Trace: [ 971.559921][T18422] [ 971.562864][T18422] dump_stack_lvl+0x16c/0x1f0 [ 971.567567][T18422] should_fail_ex+0x497/0x5b0 [ 971.572263][T18422] _copy_to_user+0x30/0xc0 [ 971.576698][T18422] simple_read_from_buffer+0xd0/0x160 [ 971.582098][T18422] proc_fail_nth_read+0x198/0x270 [ 971.587167][T18422] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 971.592742][T18422] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 971.598304][T18422] vfs_read+0x1ce/0xbd0 [ 971.602477][T18422] ? __fget_files+0x23a/0x3f0 [ 971.607181][T18422] ? fdget_pos+0x24c/0x360 [ 971.611607][T18422] ? __pfx_lock_release+0x10/0x10 [ 971.616645][T18422] ? __pfx_vfs_read+0x10/0x10 [ 971.621329][T18422] ? __pfx___mutex_lock+0x10/0x10 [ 971.626367][T18422] ? __fget_files+0x244/0x3f0 [ 971.631059][T18422] ksys_read+0x12f/0x260 [ 971.635311][T18422] ? __pfx_ksys_read+0x10/0x10 [ 971.640093][T18422] do_syscall_64+0xcd/0x250 [ 971.644602][T18422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.650510][T18422] RIP: 0033:0x7f3c3117c97c [ 971.654926][T18422] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 971.674534][T18422] RSP: 002b:00007f3c3201d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 971.682950][T18422] RAX: ffffffffffffffda RBX: 00007f3c31335f80 RCX: 00007f3c3117c97c [ 971.691008][T18422] RDX: 000000000000000f RSI: 00007f3c3201d0a0 RDI: 0000000000000003 [ 971.698982][T18422] RBP: 00007f3c3201d090 R08: 0000000000000000 R09: 0000000000000000 [ 971.706953][T18422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.714923][T18422] R13: 0000000000000001 R14: 00007f3c31335f80 R15: 00007ffc11baadd8 [ 971.722911][T18422] [ 972.335146][T18439] can: request_module (can-proto-0) failed. [ 973.742169][T18480] cgroup: fork rejected by pids controller in /syz1 [ 976.343107][ T29] audit: type=1326 audit(4294967381.772:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18620 comm="syz.3.2958" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f499537df39 code=0x0 [ 984.928826][ T5238] Bluetooth: hci2: command 0x0406 tx timeout [ 988.197873][T18816] svc: failed to register nfsdv3 RPC service (errno 111). [ 988.254493][T18816] svc: failed to register nfsaclv3 RPC service (errno 111). [ 990.881204][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3032'. [ 991.367388][T18893] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3035'. [ 993.091907][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.099110][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.893254][T18977] can: request_module (can-proto-0) failed. [ 999.939911][ T29] audit: type=1326 audit(3997.512:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19064 comm="syz.0.3077" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bc3f7df39 code=0x0 [ 1002.086513][T19110] can: request_module (can-proto-3) failed. [ 1002.966435][T19134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3096'. [ 1004.337982][T19153] Process accounting resumed [ 1015.646268][ T5238] Bluetooth: hci1: command 0x0406 tx timeout [ 1015.984139][T19351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3157'. [ 1016.619664][T19352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3153'. [ 1016.751353][T19352] Process accounting resumed [ 1017.940793][T19376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3165'. [ 1019.328121][T19405] netlink: 131 bytes leftover after parsing attributes in process `syz.2.3171'. [ 1025.738143][T19525] svc: failed to register nfsdv3 RPC service (errno 111). [ 1025.783675][T19525] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1027.278606][T19536] delete_channel: no stack [ 1032.660185][ T9037] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.150753][ T9037] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.423950][ T9037] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.495101][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1033.504826][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1033.512975][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1033.523315][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1033.531025][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1033.544229][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1033.780639][ T9037] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.591288][T19684] chnl_net:caif_netlink_parms(): no params data found [ 1034.621713][ T9037] bridge_slave_1: left allmulticast mode [ 1034.627415][ T9037] bridge_slave_1: left promiscuous mode [ 1034.643473][ T9037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.666849][ T9037] bridge_slave_0: left allmulticast mode [ 1034.683411][ T9037] bridge_slave_0: left promiscuous mode [ 1034.708610][ T9037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.639684][T13094] Bluetooth: hci2: command tx timeout [ 1035.746020][T19725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3252'. [ 1036.320450][ T9037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1036.342198][ T9037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1036.355549][ T9037] bond0 (unregistering): Released all slaves [ 1037.349342][T19684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.356546][T19684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.375335][T19684] bridge_slave_0: entered allmulticast mode [ 1037.385201][T19684] bridge_slave_0: entered promiscuous mode [ 1037.470583][T19684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.488144][T19684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.500996][T19684] bridge_slave_1: entered allmulticast mode [ 1037.508105][T19684] bridge_slave_1: entered promiscuous mode [ 1037.719183][T13094] Bluetooth: hci2: command tx timeout [ 1038.072767][T19684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.140658][T19684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1038.565825][T19684] team0: Port device team_slave_0 added [ 1038.591858][T19684] team0: Port device team_slave_1 added [ 1039.037423][T19684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.068411][T19684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.138433][T19684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.338863][ T9037] hsr_slave_0: left promiscuous mode [ 1039.355276][ T9037] hsr_slave_1: left promiscuous mode [ 1039.383928][ T9037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1039.436404][ T9037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.533522][ T9037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.549180][ T9037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.639839][ T9037] veth1_macvtap: left promiscuous mode [ 1039.645426][ T9037] veth0_macvtap: left promiscuous mode [ 1039.668625][ T9037] veth1_vlan: left promiscuous mode [ 1039.673996][ T9037] veth0_vlan: left promiscuous mode [ 1039.798647][T13094] Bluetooth: hci2: command tx timeout [ 1041.878416][T13094] Bluetooth: hci2: command tx timeout [ 1043.468109][ T9037] team0 (unregistering): Port device team_slave_1 removed [ 1043.676213][ T9037] team0 (unregistering): Port device team_slave_0 removed [ 1045.489603][T19684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.496590][T19684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1045.529619][T19684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.704996][T19684] hsr_slave_0: entered promiscuous mode [ 1045.758826][T19684] hsr_slave_1: entered promiscuous mode [ 1045.781789][T19684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1045.804908][T19684] Cannot create hsr debugfs directory [ 1046.154621][T19814] nbd: must specify a device to reconfigure [ 1047.263409][T19684] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1047.329686][T19684] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1047.347741][T19684] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1047.371386][T19684] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1047.826243][T19684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.953653][T19684] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.001735][ T6062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.008893][ T6062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.040042][ T6062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.047204][ T6062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.121354][T19684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.267340][T19684] veth0_vlan: entered promiscuous mode [ 1049.331024][T19684] veth1_vlan: entered promiscuous mode [ 1049.417981][T19684] veth0_macvtap: entered promiscuous mode [ 1049.540749][T19684] veth1_macvtap: entered promiscuous mode [ 1049.561117][T19684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.588930][T19684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.607155][T19684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.618158][T19684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.628908][T19684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.639552][T19684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.649673][T19684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.660711][T19684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.671034][T19684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.681502][T19684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.692725][T19684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.702808][T19684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.713320][T19684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.723962][T19684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.734986][T19684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.744928][T19684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.755431][T19684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.765780][T19684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.776695][T19684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.786852][T19684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.797919][T19684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.813766][T19684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.824740][T19684] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.833659][T19684] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.842619][T19684] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.851414][T19684] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.078166][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.129538][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.195025][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.209791][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.625028][T20025] openvswitch: netlink: Flow actions attr not present in new flow. [ 1053.688402][T20028] can: request_module (can-proto-0) failed. [ 1054.528819][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.535989][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.708591][T20059] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3316'. [ 1057.658951][T20124] delete_channel: no stack [ 1066.839882][ T5238] Bluetooth: hci4: command 0x0406 tx timeout [ 1067.849055][T20274] could not allocate digest TFM handle Linux [ 1072.182095][ T29] audit: type=1326 audit(4069.765:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20381 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bc3f7df39 code=0x0 [ 1073.061692][T20425] FAULT_INJECTION: forcing a failure. [ 1073.061692][T20425] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.131349][T20425] CPU: 0 UID: 0 PID: 20425 Comm: syz.3.3408 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 1073.141840][T20425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1073.151927][T20425] Call Trace: [ 1073.155228][T20425] [ 1073.158181][T20425] dump_stack_lvl+0x16c/0x1f0 [ 1073.162899][T20425] should_fail_ex+0x497/0x5b0 [ 1073.167605][T20425] ? fs_reclaim_acquire+0xae/0x160 [ 1073.172755][T20425] should_failslab+0xc2/0x120 [ 1073.177478][T20425] kmem_cache_alloc_node_noprof+0x71/0x310 [ 1073.183317][T20425] ? __alloc_skb+0x2b3/0x380 [ 1073.187937][T20425] __alloc_skb+0x2b3/0x380 [ 1073.192385][T20425] ? __pfx___alloc_skb+0x10/0x10 [ 1073.197361][T20425] ? genl_rcv_msg+0x4bd/0x800 [ 1073.202079][T20425] netlink_ack+0x164/0xb20 [ 1073.206530][T20425] netlink_rcv_skb+0x327/0x410 [ 1073.211311][T20425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1073.216350][T20425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1073.221655][T20425] ? down_read+0xc9/0x330 [ 1073.226002][T20425] ? __pfx_down_read+0x10/0x10 [ 1073.230779][T20425] ? netlink_deliver_tap+0x1ae/0xcf0 [ 1073.236173][T20425] genl_rcv+0x28/0x40 [ 1073.240248][T20425] netlink_unicast+0x53c/0x7f0 [ 1073.245022][T20425] ? __pfx_netlink_unicast+0x10/0x10 [ 1073.250311][T20425] ? __phys_addr_symbol+0x30/0x80 [ 1073.255348][T20425] ? __check_object_size+0x488/0x710 [ 1073.261185][T20425] netlink_sendmsg+0x8b8/0xd70 [ 1073.265978][T20425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1073.271282][T20425] ____sys_sendmsg+0x9ae/0xb40 [ 1073.276057][T20425] ? copy_msghdr_from_user+0x10b/0x160 [ 1073.281535][T20425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1073.286826][T20425] ? find_held_lock+0x2d/0x110 [ 1073.291595][T20425] ? __pfx___lock_acquire+0x10/0x10 [ 1073.296808][T20425] ___sys_sendmsg+0x135/0x1e0 [ 1073.301496][T20425] ? __pfx____sys_sendmsg+0x10/0x10 [ 1073.306717][T20425] ? ksys_write+0x21e/0x260 [ 1073.311221][T20425] ? __pfx_lock_release+0x10/0x10 [ 1073.316266][T20425] ? fdget+0x176/0x210 [ 1073.320353][T20425] __sys_sendmsg+0x117/0x1f0 [ 1073.324956][T20425] ? __pfx___sys_sendmsg+0x10/0x10 [ 1073.330075][T20425] ? __fget_files+0x244/0x3f0 [ 1073.334783][T20425] do_syscall_64+0xcd/0x250 [ 1073.339325][T20425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.345235][T20425] RIP: 0033:0x7f499537df39 [ 1073.349652][T20425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1073.369264][T20425] RSP: 002b:00007f4996228038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1073.377682][T20425] RAX: ffffffffffffffda RBX: 00007f4995535f80 RCX: 00007f499537df39 [ 1073.385673][T20425] RDX: 0000000020040810 RSI: 0000000020000280 RDI: 0000000000000004 [ 1073.393671][T20425] RBP: 00007f4996228090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.401650][T20425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.409625][T20425] R13: 0000000000000000 R14: 00007f4995535f80 R15: 00007ffcfeaafd28 [ 1073.417616][T20425] [ 1079.604386][T20568] netlink: 229 bytes leftover after parsing attributes in process `syz.0.3442'. [ 1082.810544][T20650] svc: failed to register nfsdv3 RPC service (errno 111). [ 1082.908528][T20650] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1085.518674][T20716] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3476'. [ 1085.580012][T20716] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3476'. [ 1087.256891][T20734] can: request_module (can-proto-4) failed. [ 1090.064379][ T6056] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.313698][ T6056] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.409383][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1090.427712][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1090.444464][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1090.472534][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1090.489955][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1090.497642][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1090.831975][ T6056] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.346096][ T6056] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.622139][T20799] chnl_net:caif_netlink_parms(): no params data found [ 1091.792252][ T6056] bridge_slave_1: left allmulticast mode [ 1091.797943][ T6056] bridge_slave_1: left promiscuous mode [ 1091.829678][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.855363][ T6056] bridge_slave_0: left allmulticast mode [ 1091.909937][ T6056] bridge_slave_0: left promiscuous mode [ 1091.915940][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.409577][T20821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3505'. [ 1092.532260][T13094] Bluetooth: hci1: command tx timeout [ 1093.688892][ T6056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.743106][ T6056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.830601][ T6056] bond0 (unregistering): Released all slaves [ 1094.598429][T13094] Bluetooth: hci1: command tx timeout [ 1094.760399][T20799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.767778][T20799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.818634][T20799] bridge_slave_0: entered allmulticast mode [ 1094.840976][T20799] bridge_slave_0: entered promiscuous mode [ 1094.871301][T20799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.906163][T20799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.918672][T20799] bridge_slave_1: entered allmulticast mode [ 1094.926224][T20799] bridge_slave_1: entered promiscuous mode [ 1095.499342][T20799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.549819][T20799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.983576][ T6056] hsr_slave_0: left promiscuous mode [ 1096.120828][ T6056] hsr_slave_1: left promiscuous mode [ 1096.158553][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.166116][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.190096][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.206038][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.268250][ T6056] veth1_macvtap: left promiscuous mode [ 1096.273945][ T6056] veth0_macvtap: left promiscuous mode [ 1096.289743][ T6056] veth1_vlan: left promiscuous mode [ 1096.295291][ T6056] veth0_vlan: left promiscuous mode [ 1096.684360][T13094] Bluetooth: hci1: command tx timeout [ 1098.758384][T13094] Bluetooth: hci1: command tx timeout [ 1099.119895][ T6056] team0 (unregistering): Port device team_slave_1 removed [ 1099.489379][ T6056] team0 (unregistering): Port device team_slave_0 removed [ 1102.274682][T20799] team0: Port device team_slave_0 added [ 1102.301535][T20799] team0: Port device team_slave_1 added [ 1102.566009][T20799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.627069][T20799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.708113][T20799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.748637][T20799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.779216][T20799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.873050][T20799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1103.317776][T20799] hsr_slave_0: entered promiscuous mode [ 1103.364516][T20799] hsr_slave_1: entered promiscuous mode [ 1103.378458][T20799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1103.407207][T20799] Cannot create hsr debugfs directory [ 1105.606523][T21036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3549'. [ 1107.681871][T20799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1107.797175][T20799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1107.850190][T20799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1107.948479][T20799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1108.126406][T20799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.146097][T20799] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.157226][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.164460][ T6064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.221883][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.229063][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.747368][T20799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.910590][T20799] veth0_vlan: entered promiscuous mode [ 1108.960519][T20799] veth1_vlan: entered promiscuous mode [ 1109.050327][T20799] veth0_macvtap: entered promiscuous mode [ 1109.113650][T20799] veth1_macvtap: entered promiscuous mode [ 1109.161209][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.188392][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.208344][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.244702][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.295256][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.314137][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.356151][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.395469][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.416606][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.448348][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.471094][T20799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1109.517633][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.548404][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.598412][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.618368][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.658378][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.678961][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.718383][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.758354][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.778353][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.818415][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.849681][T20799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1109.948373][T20799] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.957112][T20799] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.010048][T20799] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.031139][T20799] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.680981][ T6062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.719619][ T6062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.819498][ T6056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.827370][ T6056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.463307][T21220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1114.718453][T21281] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1115.084337][ T9037] bridge_slave_1: left allmulticast mode [ 1115.100669][ T9037] bridge_slave_1: left promiscuous mode [ 1115.120682][ T9037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.185061][ T9037] bridge_slave_0: left allmulticast mode [ 1115.191188][ T9037] bridge_slave_0: left promiscuous mode [ 1115.197017][ T9037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.407935][ C0] Adjusting tsc more than 11% (8582470 vs 8464275) [ 1115.898562][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.905449][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.169688][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3600'. [ 1117.113118][ T9037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1117.268918][ T9037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.360088][ T9037] bond0 (unregistering): Released all slaves [ 1117.680171][T21330] delete_channel: no stack [ 1119.613067][ T9037] hsr_slave_0: left promiscuous mode [ 1119.719192][ T9037] hsr_slave_1: left promiscuous mode [ 1119.750344][ T9037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.779647][ T9037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.854355][ T9037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.872834][ T9037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1119.953289][ T9037] veth1_macvtap: left promiscuous mode [ 1119.959964][ T9037] veth0_macvtap: left promiscuous mode [ 1119.966014][ T9037] veth1_vlan: left promiscuous mode [ 1119.971348][ T9037] veth0_vlan: left promiscuous mode [ 1123.642257][ T9037] team0 (unregistering): Port device team_slave_1 removed [ 1123.824804][ T9037] team0 (unregistering): Port device team_slave_0 removed [ 1130.194981][T21611] ------------[ cut here ]------------ [ 1130.201500][T21611] WARNING: CPU: 1 PID: 21611 at mm/huge_memory.c:1602 copy_huge_pmd+0x16dd/0x2500 [ 1130.211031][T21611] Modules linked in: [ 1130.215084][T21611] CPU: 1 UID: 0 PID: 21611 Comm: syz.1.3685 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 1130.225716][T21611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1130.236246][T21611] RIP: 0010:copy_huge_pmd+0x16dd/0x2500 [ 1130.241852][T21611] Code: 01 e9 dd f5 ff ff e8 72 be 9a ff 4c 89 e3 31 ff 83 e3 02 48 89 de e8 d2 c0 9a ff 48 85 db 0f 84 a0 07 00 00 e8 54 be 9a ff 90 <0f> 0b 90 e9 88 ef ff ff e8 46 be 9a ff 49 89 ec 31 ff 41 81 e4 ff [ 1130.262060][T21611] RSP: 0018:ffffc900048b7640 EFLAGS: 00010287 [ 1130.268589][T21611] RAX: 0000000000009196 RBX: 0000000000000002 RCX: ffffc9000ccac000 [ 1130.276722][T21611] RDX: 0000000000040000 RSI: ffffffff81f16acc RDI: 0000000000000007 [ 1130.284821][T21611] RBP: ffffea000187ed00 R08: 0000000000000007 R09: 0000000000000000 [ 1130.292910][T21611] R10: 0000000000000002 R11: 0000000000000000 R12: d7f0000000000e02 [ 1130.301049][T21611] R13: d7ffe7ffeb1bfe02 R14: 0000000000000200 R15: ffff88804465c4d8 [ 1130.309280][T21611] FS: 00007fe0a18ae6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1130.318437][T21611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1130.325138][T21611] CR2: 0000000000000001 CR3: 0000000029560000 CR4: 00000000003506f0 [ 1130.333160][T21611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1130.341289][T21611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1130.349494][T21611] Call Trace: [ 1130.352928][T21611] [ 1130.355865][T21611] ? __warn+0xea/0x3d0 [ 1130.359929][T21611] ? copy_huge_pmd+0x16dd/0x2500 [ 1130.364936][T21611] ? report_bug+0x3c0/0x580 [ 1130.369531][T21611] ? handle_bug+0x54/0xa0 [ 1130.373894][T21611] ? exc_invalid_op+0x17/0x50 [ 1130.378567][T21611] ? asm_exc_invalid_op+0x1a/0x20 [ 1130.383633][T21611] ? copy_huge_pmd+0x16dc/0x2500 [ 1130.388566][T21611] ? copy_huge_pmd+0x16dd/0x2500 [ 1130.393555][T21611] ? __pfx_copy_huge_pmd+0x10/0x10 [ 1130.398676][T21611] ? lockdep_hardirqs_on+0x7c/0x110 [ 1130.404072][T21611] ? __pfx___might_resched+0x10/0x10 [ 1130.410135][T21611] copy_page_range+0xa66/0x5a20 [ 1130.415333][T21611] ? __pfx_copy_page_range+0x10/0x10 [ 1130.420631][T21611] ? mas_store+0x53b/0xad0 [ 1130.425100][T21611] ? __pfx_mas_store+0x10/0x10 [ 1130.429866][T21611] ? down_write+0x14e/0x200 [ 1130.434405][T21611] ? up_write+0x1b2/0x520 [ 1130.438740][T21611] copy_mm+0x134f/0x2550 [ 1130.443431][T21611] ? __pfx_copy_mm+0x10/0x10 [ 1130.448032][T21611] ? copy_process+0x38ef/0x6f00 [ 1130.453247][T21611] ? __raw_spin_lock_init+0x3a/0x110 [ 1130.458542][T21611] copy_process+0x3ab9/0x6f00 [ 1130.463387][T21611] ? __pfx_copy_process+0x10/0x10 [ 1130.468433][T21611] ? futex_wake+0x18e/0x4e0 [ 1130.472991][T21611] kernel_clone+0xfd/0x960 [ 1130.477411][T21611] ? __pfx_kernel_clone+0x10/0x10 [ 1130.482458][T21611] ? do_futex+0x123/0x350 [ 1130.486810][T21611] ? __pfx_do_futex+0x10/0x10 [ 1130.491480][T21611] ? 0xffffffffff600000 [ 1130.495684][T21611] ? 0xffffffffff600000 [ 1130.499825][T21611] __do_sys_clone+0xba/0x100 [ 1130.504596][T21611] ? __pfx___do_sys_clone+0x10/0x10 [ 1130.510082][T21611] ? 0xffffffffff600000 [ 1130.514318][T21611] ? 0xffffffffff600000 [ 1130.518458][T21611] ? 0xffffffffff600000 [ 1130.522610][T21611] do_syscall_64+0xcd/0x250 [ 1130.527198][T21611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.533140][T21611] RIP: 0033:0x7fe0a0b7df39 [ 1130.537553][T21611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1130.557391][T21611] RSP: 002b:00007fe0a18ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1130.566056][T21611] RAX: ffffffffffffffda RBX: 00007fe0a0d36058 RCX: 00007fe0a0b7df39 [ 1130.574076][T21611] RDX: ffffffffff600000 RSI: 0000000000000009 RDI: 0000000000001000 [ 1130.582036][T21611] RBP: 00007fe0a0bf0216 R08: 0000000000000005 R09: 0000000000000000 [ 1130.590046][T21611] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 1130.598126][T21611] R13: 0000000000000000 R14: 00007fe0a0d36058 R15: 00007ffed753f908 [ 1130.606339][T21611] ? 0xffffffffff600000 [ 1130.613208][T21611] ? 0xffffffffff600000 [ 1130.617393][T21611] [ 1130.620406][T21611] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1130.627672][T21611] CPU: 1 UID: 0 PID: 21611 Comm: syz.1.3685 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 1130.638067][T21611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1130.648129][T21611] Call Trace: [ 1130.651393][T21611] [ 1130.654312][T21611] dump_stack_lvl+0x3d/0x1f0 [ 1130.658897][T21611] panic+0x71d/0x800 [ 1130.662795][T21611] ? __pfx_panic+0x10/0x10 [ 1130.667219][T21611] ? show_trace_log_lvl+0x29d/0x3d0 [ 1130.672422][T21611] ? copy_huge_pmd+0x16dd/0x2500 [ 1130.677378][T21611] check_panic_on_warn+0xab/0xb0 [ 1130.682339][T21611] __warn+0xf6/0x3d0 [ 1130.686225][T21611] ? copy_huge_pmd+0x16dd/0x2500 [ 1130.691184][T21611] report_bug+0x3c0/0x580 [ 1130.695507][T21611] handle_bug+0x54/0xa0 [ 1130.699659][T21611] exc_invalid_op+0x17/0x50 [ 1130.704171][T21611] asm_exc_invalid_op+0x1a/0x20 [ 1130.709052][T21611] RIP: 0010:copy_huge_pmd+0x16dd/0x2500 [ 1130.714591][T21611] Code: 01 e9 dd f5 ff ff e8 72 be 9a ff 4c 89 e3 31 ff 83 e3 02 48 89 de e8 d2 c0 9a ff 48 85 db 0f 84 a0 07 00 00 e8 54 be 9a ff 90 <0f> 0b 90 e9 88 ef ff ff e8 46 be 9a ff 49 89 ec 31 ff 41 81 e4 ff [ 1130.734188][T21611] RSP: 0018:ffffc900048b7640 EFLAGS: 00010287 [ 1130.740241][T21611] RAX: 0000000000009196 RBX: 0000000000000002 RCX: ffffc9000ccac000 [ 1130.748199][T21611] RDX: 0000000000040000 RSI: ffffffff81f16acc RDI: 0000000000000007 [ 1130.756174][T21611] RBP: ffffea000187ed00 R08: 0000000000000007 R09: 0000000000000000 [ 1130.764133][T21611] R10: 0000000000000002 R11: 0000000000000000 R12: d7f0000000000e02 [ 1130.772088][T21611] R13: d7ffe7ffeb1bfe02 R14: 0000000000000200 R15: ffff88804465c4d8 [ 1130.780051][T21611] ? copy_huge_pmd+0x16dc/0x2500 [ 1130.784997][T21611] ? __pfx_copy_huge_pmd+0x10/0x10 [ 1130.790100][T21611] ? lockdep_hardirqs_on+0x7c/0x110 [ 1130.795304][T21611] ? __pfx___might_resched+0x10/0x10 [ 1130.800585][T21611] copy_page_range+0xa66/0x5a20 [ 1130.805461][T21611] ? __pfx_copy_page_range+0x10/0x10 [ 1130.810750][T21611] ? mas_store+0x53b/0xad0 [ 1130.815167][T21611] ? __pfx_mas_store+0x10/0x10 [ 1130.819937][T21611] ? down_write+0x14e/0x200 [ 1130.824438][T21611] ? up_write+0x1b2/0x520 [ 1130.828761][T21611] copy_mm+0x134f/0x2550 [ 1130.833006][T21611] ? __pfx_copy_mm+0x10/0x10 [ 1130.837593][T21611] ? copy_process+0x38ef/0x6f00 [ 1130.842436][T21611] ? __raw_spin_lock_init+0x3a/0x110 [ 1130.847711][T21611] copy_process+0x3ab9/0x6f00 [ 1130.852384][T21611] ? __pfx_copy_process+0x10/0x10 [ 1130.857407][T21611] ? futex_wake+0x18e/0x4e0 [ 1130.861906][T21611] kernel_clone+0xfd/0x960 [ 1130.866315][T21611] ? __pfx_kernel_clone+0x10/0x10 [ 1130.871331][T21611] ? do_futex+0x123/0x350 [ 1130.875661][T21611] ? __pfx_do_futex+0x10/0x10 [ 1130.880350][T21611] ? 0xffffffffff600000 [ 1130.884507][T21611] ? 0xffffffffff600000 [ 1130.888668][T21611] __do_sys_clone+0xba/0x100 [ 1130.893252][T21611] ? __pfx___do_sys_clone+0x10/0x10 [ 1130.898448][T21611] ? 0xffffffffff600000 [ 1130.902584][T21611] ? 0xffffffffff600000 [ 1130.906721][T21611] ? 0xffffffffff600000 [ 1130.910870][T21611] do_syscall_64+0xcd/0x250 [ 1130.915361][T21611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.921255][T21611] RIP: 0033:0x7fe0a0b7df39 [ 1130.925657][T21611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1130.945362][T21611] RSP: 002b:00007fe0a18ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1130.953789][T21611] RAX: ffffffffffffffda RBX: 00007fe0a0d36058 RCX: 00007fe0a0b7df39 [ 1130.961764][T21611] RDX: ffffffffff600000 RSI: 0000000000000009 RDI: 0000000000001000 [ 1130.969760][T21611] RBP: 00007fe0a0bf0216 R08: 0000000000000005 R09: 0000000000000000 [ 1130.977723][T21611] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 1130.985781][T21611] R13: 0000000000000000 R14: 00007fe0a0d36058 R15: 00007ffed753f908 [ 1130.993867][T21611] ? 0xffffffffff600000 [ 1130.998016][T21611] ? 0xffffffffff600000 [ 1131.002157][T21611] [ 1131.005429][T21611] Kernel Offset: disabled [ 1131.010050][T21611] Rebooting in 86400 seconds..