last executing test programs: 12.974697972s ago: executing program 0 (id=2846): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x2, 0x0) io_uring_setup$auto(0x3, 0x0) r0 = socket(0xa, 0x2, 0x0) readv$auto(0x4, 0x0, 0x8) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setreuid$auto(0x15, 0x5) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socket(0x2, 0x2, 0x88) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) close_range$auto(r0, r0, 0x1) 12.330955246s ago: executing program 0 (id=2849): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)={0x18, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_CAPABILITY={0x4}]}, 0x18}}, 0x4000000) (async) bpf$auto(0x0, 0x0, 0xa3) (async, rerun: 32) io_setup$auto(0x10000, &(0x7f0000000040)) (rerun: 32) socket(0xa, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) (async) recvfrom$auto(0x3, 0x0, 0x9, 0x6, 0x0, 0x0) (async, rerun: 64) shutdown$auto(0x200000003, 0x2) (rerun: 64) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01032bbd6000ffdbdf252d000000276de950130b47b86123dccbd6485c81b3c884462ee95387bc140d0de23151de98a448bb63531f3c9584147a006d2b77652eea1a2d40d2179112110ee56a4b8c"], 0x14}, 0x1, 0x0, 0x0, 0x7}, 0x4010) (async) mmap$auto(0x21f, 0x40009, 0xdf, 0x20000000000013, 0x56, 0x1) (async, rerun: 32) munlock$auto(0x8, 0x401) (async, rerun: 32) socket(0xa, 0x2, 0x0) personality$auto(0x40004010410ffc) mprotect$auto(0x1ffff000, 0xb, 0x5) (async, rerun: 32) open(&(0x7f0000000100)='./file0\x00', 0x133c00, 0x3) (async, rerun: 32) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) (async) connect$auto(0x3, &(0x7f0000000180)={0x2, @sa_data_min="9231f86ed63133d91a80c310b1db"}, 0x58) (async) get_mempolicy$auto(&(0x7f0000000000)=0x80000000, &(0x7f0000000080)=0xd9, 0x8000005, 0x3, 0xa1fc) (async) socket(0xa, 0x801, 0x100) (async) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32) write$auto(0x3, 0x0, 0x100082) (async, rerun: 32) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) (async) socket(0xa, 0x801, 0x106) (async) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) (async) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) 11.172633043s ago: executing program 0 (id=2852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f00000000c0), r0) sendmsg$auto_IPVS_CMD_GET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x1b0, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x73, 0x3, "d90f63726558ec7ce928e83f0c1bef90c32c8bd5e93a503108360845690272e0a2c7f70d638dfef0d136aac6961114d468300c37a0b413dea9f4150c6b419ee83bc14e2390b01831da79f4a3d53445c0f691442d4efad7d6da5cc42fe9f807280c326af14b2be8143a5ac9a596f32e"}, @IPVS_CMD_ATTR_SERVICE={0x8, 0x1, "cdd80d77"}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x5b, 0x1, "10f42bd47ecf97d19254c3259f81f5555404b01de03a5affacd03af21a74864fa27dfc61d9f8fbc2df590ca42f5db6c3015e3ed1ad47a7409b31b56d7eb3049c42119a2cbeea2aa93c11428a95134cbf5abf10cff4e5cc"}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5b}, @IPVS_CMD_ATTR_SERVICE={0xb2, 0x1, "e12d009a3a091a0b90ccf52c75ab34024d1d2c1376b187c26483964c90bce8b2fb0efee0e073dcef1a4850889c94af1c3d7dfb1acdeab5ecbd02d438fa841bbb9c1d88fd22d276c2f7d93aee21ad008a360e14bc80e2e2f9963dc44b37833b7236f22e4a33fc0d7bce46c2e8f58d0e4e3d7ba78250b1d6af142aa222a601833888034900a8d06c763fe0ea378fdfa241d5e1ba6fae99d35fdf46397cce36a4e707b6978ab480f56d97a310210e7f"}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4}, 0xc001) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x58, 0x5, 0x0, 0xfffffffffffffffc, 0x6) mmap$auto(0x2000, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) clone$auto(0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x0, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) pidfd_open$auto(0x1, 0x0) ioctl$NS_GET_PARENT(r2, 0xff08, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01053544b60025bd7000fcdbdf250400000004000d0008000c"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) 10.175840045s ago: executing program 0 (id=2854): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x39, 0x3, 0x4, 0x6a3d, 0x9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x13, 0x401, 0x800008000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) dup2$auto(0x0, 0x4) prctl$auto(0x2, 0x10001, 0xfff, 0x3, 0x1c00000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x2, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x40040c0) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x0) poll$auto(&(0x7f0000000100)={0x9, 0xfff7, 0x9}, 0x2, 0x8) mknod$auto(&(0x7f0000000040)=':\xfaH', 0xc9, 0xc8) mmap$auto(0x5ea, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0xfffffffa, 0x0, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x4) sendfile$auto(0x1, 0x3, 0x0, 0xc01) fcntl$auto(0x0, 0x407, 0xc) splice$auto(0xea, 0x0, 0xe38f, 0x0, 0x1000, 0x491a84f5) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), 0xffffffffffffffff) getresgid$auto(0x0, 0xfffffffffffffffe, 0xfffffffffffffffc) mmap$auto(0x5, 0x8, 0x6, 0x2b7, 0xffffffff, 0x8000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_PARENT(r0, 0x8008b705, 0x0) shmat$auto(0x0, 0x0, 0x0) clone$auto(0x40083b42, 0x5c84, 0xfffffffffffffffe, 0x0, 0x100000000000f) mount$auto(0x0, 0x0, &(0x7f0000000000)='p\x17rw8low\x00', 0x9, &(0x7f0000000100)) 9.978834217s ago: executing program 1 (id=2856): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0x15, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x2004c815) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) renameat2$auto(0x5, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) socket(0x18, 0xa, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0xc01) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800000000000000c1728d2af766"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x1, 0x8) ioperm$auto(0x1000, 0x40, 0x6) symlink$auto(&(0x7f0000000240)='netdevsim0\x00', &(0x7f0000000280)='NET_DM\x00') connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) 9.047323855s ago: executing program 1 (id=2862): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0007, 0x19) epoll_pwait$auto(0x2, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x4) socket(0xa, 0x2, 0x0) (async) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000010000c1728d2af766"}, 0x55) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) (async) io_uring_setup$auto(0xa, 0x0) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9) 7.997818518s ago: executing program 1 (id=2866): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, 0x0, 0x55) sendmsg$auto_SEG6_CMD_DUMPHMAC(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c4, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x1b, 0x4, "42721f8536c746efb9acb819c9cfd6e650a655f5f975b2"}, @SEG6_ATTR_HMACINFO={0xfc, 0x7, "419d796caba832902b4b80e2cd68bbe0b2459998f6fd628b466b4c0e5e97b39bda4d91dd380a11639c8256732383a7a2776fbce3bf34b986c3a0a9e8550caed836a549b46fddca9fb4cc9fe447ee5040067393a7a3c1af5e1a9498e6a0111ff85a59f9b0492e1729474c3450ff396a8b7598566fac05ff64f712ea2b10660f2ef2e0ac1dd7cbe4188e2ad88e46e6a70ad835ff748d14b268641747da9997e476ef06397892e8a9aa589487999f0d68fcd3b3d83f687cb787f1021e6d2f81114873e87fd0a9036796509f1912c5d75ea1d65ca8a92a289a657eeb257444ac387151a72727b1a2c1f85f3a66af9f5585d5a806fe05a4383f21"}, @SEG6_ATTR_DST={0x14, 0x1, {@u6_addr16=[0xfffe, 0xffff, 0x8, 0x7fff, 0x50d, 0x8, 0x1ff, 0x4]}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x81}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRET={0x62, 0x4, "6b856f7d6be6505e9e5c797e8775a2645d6a5db79352e454d016355b56c9d46a039f39f92dc873cb4bff10fe1c6b9addceb1adec0f1a302f943798d714536170b3ba630d4abc1b472230080b3a846b330fc28aa8fd1cca5a29cbf895fe51"}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20040004}, 0x40000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x140440d4}, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) 7.147505484s ago: executing program 1 (id=2870): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioperm$auto(0x800, 0x5, 0xd) setreuid$auto(0x9, 0x1) getpriority$auto(0x2, 0x9) shmdt$auto(0x0) madvise$auto(0x0, 0x3, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) exit$auto(0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6227, 0x1000, 0x0, 0x100000000, 0xffffffffffffffff) (async) remap_file_pages$auto(0x6227, 0x1000, 0x0, 0x100000000, 0xffffffffffffffff) socket(0x26, 0x80805, 0x0) (async) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) (async) pidfd_open$auto(0x1, 0x0) ioctl$NS_GET_PARENT(r0, 0xff04, 0x0) socket(0x10, 0x3, 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) fanotify_mark$auto(0x400000000000, 0x101, 0x9, 0x4, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x401, 0x8000) 7.047470318s ago: executing program 2 (id=2871): msync$auto(0x1ffff000, 0x80100000000005, 0x400000004) madvise$auto(0x3ff, 0x47, 0x0) msync$auto(0xbb, 0x7fff, 0x6) 6.571132734s ago: executing program 2 (id=2873): ioperm$auto(0x84b, 0x80, 0x901) (async) settimeofday$auto(0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0) sendmsg$auto_GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x2c, r1, 0x401, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, 0x7}, @GTPA_VERSION={0x8, 0x2, 0x38f}, @GTPA_NET_NS_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8014) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x10000000020009, 0x4000000000df, 0x110, 0x3fe, 0x8000) (async) setrlimit$auto(0x1000000007, 0x0) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) socket(0xa, 0x801, 0x84) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async) prctl$auto(0x39, 0x1, 0x1, 0x3, 0x7) clone$auto(0x80000001, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x80000001) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x5, 0x15) (async) ioperm$auto(0x7, 0x2, 0x2) (async) madvise$auto(0x0, 0x200007, 0x19) (async) wait4$auto(0x81, 0xfffffffffffffffc, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x22, 0xa, 0x2) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x80044944, 0x0) (async) socket(0xa, 0x801, 0x84) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) (async) listen$auto(0x3, 0x81) (async) accept$auto(0x3, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89b1, 0x0) setsockopt$auto(0x6, 0x6, 0x1000006e, 0x0, 0x4) accept$auto(0x3, 0x0, 0x0) 5.370659174s ago: executing program 2 (id=2875): setrlimit$auto(0x1000000007, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x739e, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mremap$auto(0x3, 0x4, 0x8, 0x0, 0x2000900000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x12, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0x208, 0x9b72, 0x2, 0x8000) mincore$auto(0x0, 0x8000000000005a, 0x0) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x9, 0x3, 0x8, 0x2800000000000002, 0x9, 0x5e582971, 0xff, 0x2c, 0x4, 0xffff, 0x2, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000140)=&(0x7f0000000100)) close_range$auto(0x2, 0x8000, 0x0) r0 = socket(0x2, 0xa, 0x1) r1 = socket(0x1, 0x1, 0xffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) shmget$auto(0x8, 0x200010561, 0x568d1af2) close_range$auto(0x2, 0x8000, 0x0) r2 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000180), r0) sendmsg$auto_VDPA_CMD_DEV_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="2bf46588cbf55966853ab3d90f70e2", @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25050000000b0004006e732f70696400000c001400fb82000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) socket(0x1, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x6, 0x20000000c, 0xbc5, 0x13, 0x3, 0x0) get_mempolicy$auto(0xfffffffffffffffe, 0x0, 0x3, 0x4, 0x3) socketpair$auto(0x8, 0x7fff, 0x8000000000000000, 0x0) futex$auto(0x0, 0xb, 0x7, &(0x7f00000000c0)={0x4, 0x7}, &(0x7f00000001c0)=0x6, 0x800) fanotify_init$auto(0x1f53, 0x2000000000002) 4.188813405s ago: executing program 3 (id=2879): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x19c, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MLO_LINKS={0x150, 0x138, "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"}, @NL80211_ATTR_REG_ALPHA2={0x37, 0x21, "73e4290bafe70d0ff5c7dbc4498c0fd1a64262fa4d71774d548f7ef0e4611a8b84c0146db6301cc54978430a468104f5646923"}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8004}, 0x4004000) (async) fsync$auto(r0) (async) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x2004805c) (async) r2 = syz_genetlink_get_family_id$auto_NLBL_CIPSOv4(&(0x7f0000000400), r0) sendmsg$auto_NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1f0, r2, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCAT={0x9e, 0xb, "8e0660a841df8bb5eab2118b27b19315b2da4dbb833353c243fe0636f03454d4595d059f7ebc20bbe9bf6926d13dafee110b1a0a79e506ba12efd15e31fd19eab05b572387a8b994525bcf27e7599425f81e48d8e8180bbe0a657605cb38030f08f6ce90818d12599e09462bd268c74b9156b9ffecee375497ee61eb17dfcea32b2a85694d894044320700a85c5c566c67145668ea503d18b27f"}, @NLBL_CIPSOV4_A_MLSCATLST={0xd8, 0xc, "60f26036107310b8b78f015c430fb8fb4856d7c4f948ab3fd041c6a6404424b1257a727dcca3d4fd4aa42753edcedb8e273bb8f5d1bddd3ba2c58c1859ad333c63e0c45cbab5ecf41ff52f1d7b9d5b6ee60e923dfd2e95c21a8bd31e70b62f82a822681bf05d455830ca49ff89aa57fd58038609ffa40811535c2e68b8f0112c4dab9e72d6b77d9cc39023b649b8fa10d6abfd3329ae960cb9258a5a42e61b459eb9a070829e1dc581b845ae527cf9b149e9c8b19b9f4a6d90604299c827ffae9d0df8da658fe7a41d61ea477218c09d61cdf18a"}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8000}, @NLBL_CIPSOV4_A_MLSCATLST={0x4b, 0xc, "6c10236ac87c176d9affecde99f3054ab2d99912eb7569fbf5ced3a3c0f793474d4c6bc89c7393719b89ece61ed9366b7d9178061c21b3b94fec175b207e6eebdee036e02daf00"}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x9}, @NLBL_CIPSOV4_A_MLSCATLST={0x5, 0xc, "f9"}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20040001}, 0x8004) (async) getrandom$auto(&(0x7f00000006c0)='NLBL_CIPSOv4\x00', 0x1, 0x0) (async) r3 = socket(0x9, 0x4, 0x800) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x168, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME={0x10c, 0x33, "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"}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_EMA_RNR_ELEMS={0x36, 0x145, "9734daec4c8ceae853b0af8fca71526f8b3eb391ad9937a8914d0aa4595d878b5c275d9e338c5515bcc6dae19477d7c3c5f8"}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x168}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) (async) ioctl$auto(r3, 0x3897, 0x4) (async) futex$auto(&(0x7f0000000940)=0x2, 0x7c, 0x0, &(0x7f0000000980)={0x5, 0xdbd}, &(0x7f00000009c0)=0x8, 0x8) (async) io_uring_setup$auto(0x5, &(0x7f0000000a00)={0x7, 0x7ff, 0xe, 0x40, 0x9, 0x8, r3, [0x8, 0x4, 0xffff], {0x4, 0x4, 0x1, 0xe, 0x9, 0xe46d, 0xf28, 0x4, 0x800}, {0xf8, 0x3a, 0x3, 0xffff, 0x800, 0xe, 0x6, 0x10001, 0x9}}) (async) mlockall$auto(0x3) (async) mlockall$auto(0x4) (async) fchown$auto(r0, 0x101, 0xc) r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000ac0), r4) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f0000000dc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b00)={0x24c, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x67, 0x8, "853661303fbd003d1dcbfe1fedf48511000089419a4f5c3733da97252f66e901b83ddd9e8a6b6f15ccae22c0488c7421f6ea99809687f457ccade8fd475de797398b1d2f907278d3b18d7f13163ab6064e1d550c9140bbffa459411620955827bc52f5"}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0xdb, 0x3, "0c35ef64d3b15f4c57ba8340fccf21b46451a95ef20e4ad32138d8c6e71d092dae5a3efe2ca120ef7ad604b0f61b1c9806d8b957469ee832f78e2c3765af1810b75fa6dc0ec2bf1fb78633498f971a5feefeceeddc74ac198bb380b3a207b88f5ffb8e39f51a567a51ef274fab8489d2d44c765c90a9b9cc102a0346aadc72fc474262e8db41697f43722e662751884e8a264a2ffcc75e9ae89849d3977a2b77be6d311b2f16ea999583237adf52f5ca4f353e3f7f50b7a74814185e7624c1e0acb3d0a47eb6a0cff180a4c542e8bec82391fc5a94542d"}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @WGDEVICE_A_PUBLIC_KEY={0x5d, 0x4, "3e0777f6fe3d3bfcee3f3d4b37b15b15444f6e9f09ff95869500f4969b700c9ed876966ba5b8959faac10281b8eb843cfcc7debc99fac9738114599b9ec820dfe0dfc698d8205ed3b4e12e1af0328974a7d2d35444e46afb8d"}, @WGDEVICE_A_PRIVATE_KEY={0x70, 0x3, "935910d0a630fcb60519728576a9615d0dc70119e419d4c59a3320dc33a15a41d029f398051018e938bf7bfe4099adba47ebc412ef4fc2710bb4684ee087c74a4daca29115d085cc8125f7a31dec9d8e97e11481a37237647bb61a0816025eea23d7676a0bf63a03cc072bd8"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) getdents64$auto(r0, &(0x7f0000000e00)={0x2f, 0x2}, 0x2c83) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_PMK(r6, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x38, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x579}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x41844}, 0x40) (async) r7 = syz_genetlink_get_family_id$auto_NLBL_MGMT(&(0x7f0000000f80), r4) sendmsg$auto_NLBL_MGMT_C_LISTALL(r6, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x50, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'wireguard\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x4}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'batadv0\x00'}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0xfff}]}, 0x50}}, 0x100) (async) ioctl$auto(r4, 0x0, 0x8) (async) syz_genetlink_get_family_id$auto_HSR(&(0x7f00000010c0), r4) r8 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001140), r3) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r8, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050040}, 0x44080) (async) ioperm$auto(0x4, 0x3, 0x3) (async) r9 = gettid() syz_open_procfs$namespace(r9, &(0x7f0000001240)='ns/time_for_children\x00') 3.527600231s ago: executing program 2 (id=2880): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x1, 0x1, 0x22, &(0x7f0000000000)='\x00', 0xbb) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000980), r0) socket(0x2, 0x2, 0x1) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x1b) mremap$auto(0xffff, 0x4, 0x7d, 0x407, 0xde) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r1 = socket$nl_generic(0x10, 0x3, 0x10) mseal$auto(0x1ffff000, 0x7dda, 0x0) mseal$auto(0x1ffff000, 0x7dda, 0x0) close_range$auto(0x7, 0xfffffffffffffff8, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) setsockopt$auto(r1, 0x84, 0x4, 0xfffffffffffffffe, 0xfffffffc) socket(0x18, 0x4, 0x1) signalfd$auto(0x4, 0x0, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfdef) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') getdents$auto(0x0, 0x0, 0x700) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 2.116331643s ago: executing program 1 (id=2881): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x7ff, 0x8, 0x2000000, 0x0) r0 = socket(0x10, 0x2, 0x4) sendfile$auto(0x1, 0x3, 0x0, 0xc01) fcntl$auto(0x0, 0x8, 0x6) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x28044004) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYBLOB='.\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x10000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) mmap$auto(0x101, 0x5, 0xdf, 0x9b72, 0x2, 0x2) capget$auto(0x0, &(0x7f00000000c0)={0x6ca, 0x0, 0x10001}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') ioctl$NS_GET_PARENT(r2, 0x8008b705, 0x0) shmat$auto(0x0, 0x0, 0x0) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000000)='/\x00', &(0x7f00000000c0)={0xfffffffffffffe01, 0x2, 0x0, 0x3dc3, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x7, 0xffffffffffffffff, 0x8, 0xcab, 0x6, 0x0, 0x4, 0x7}, 0x1000) clone$auto(0x40083b42, 0x5c84, 0xfffffffffffffffe, 0x0, 0x100000000000f) mount$auto(0x0, 0x0, &(0x7f0000000000)='p\x17rw8low\x00', 0x9, &(0x7f0000000040)=[0x8000000000000001, 0x6, 0x81, 0x6, 0x1, 0xcf3c, 0xfffffffffffffffd, 0x11a8]) preadv$auto(0x5, 0x0, 0x3, 0xffff, 0x100000000) clock_gettime$auto(0x4, 0xfffffffffffffffe) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(0xffffffffffffffff, 0x0, 0x4c040) fanotify_init$auto(0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000580), r3) sendmsg$auto_ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000640)={0x0, 0xfffffffffffffffa, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="010729bd7000ffdbdf250900000000000100ac836100"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x400) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x100000000) 1.862471636s ago: executing program 2 (id=2882): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x6, 0x8, 0x6, 0x18, 0x8, 0xf) socket(0x2, 0x2, 0x1) socket(0x25, 0x1, 0x3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/uts\x00') socketpair$auto(0x2, 0x2, 0x8000000000000000, 0x0) futex$auto(0x0, 0xb, 0x5, &(0x7f00000000c0)={0x1, 0x9}, &(0x7f0000000100)=0x6, 0x7ff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x23) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x1, 0x84) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) shutdown$auto(0x200000003, 0x2) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x9ec0000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2a, 0x3, 0x8) statmount$auto(0x0, &(0x7f0000000040)={0x2, 0xfffffffe, 0x36, 0x828, 0x9, 0x8000000000000000, 0x8, 0x7, 0x9, 0x5, 0x2, 0x9, 0x3, 0x8, 0x5, 0xf, 0x100, 0x80000000, 0x10001, 0x5, [0x9, 0x7f, 0x77, 0x100000000000, 0x10, 0xe06, 0x400, 0x3, 0x80000000, 0x8, 0x4, 0x7ffffffffffffff9, 0x10, 0x3, 0x35c4, 0x1, 0x4, 0x8, 0xea8, 0xb2fa, 0xd9, 0x8, 0x5, 0x8, 0xff, 0x7fffffffffffffff, 0x8000000000000004, 0x5a2c, 0x9fa, 0x8000000000000000, 0x2aa, 0x8, 0x7ff, 0x1, 0x1, 0x2, 0xffffffffffff0002, 0x80006b, 0xf, 0x4, 0x2b7, 0x4, 0xf, 0xffffffffffffff26, 0x8, 0xcd, 0x6, 0x7a, 0xdc]}, 0xe3c, 0x0) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x0, 0x8, 0x1, 0x9b74, 0x5, 0x0) read$auto(0x4, 0x0, 0x80) socket(0xa, 0x4, 0x84) move_pages$auto(0x0, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xffffffffffffffff, 0xfffffffe) socket(0x11, 0x4, 0x100) socket(0x1, 0x2, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) connect$auto(r2, 0x0, 0x6) 1.486403028s ago: executing program 3 (id=2883): socket(0xa, 0x6, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async, rerun: 64) keyctl$auto(0x800001f, 0x1000020000002, 0x8000, 0x40000000f, 0x4) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20008000) syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f00000016c0), r0) (async) r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002840), r0) sendmsg$auto_IPVS_CMD_GET_DAEMON(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000002880)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x28000000) (async, rerun: 32) socket(0x2, 0x1, 0x0) (async, rerun: 32) socket(0xa, 0x2, 0x0) fsopen$auto(0x0, 0x1) (async) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) (async) fcntl$auto(0xff80000000000000, 0x406, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x801, 0x106) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0xa, 0x2, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x100000006, 0x0, 0x18, 0xfffffffffffffffe, 0x0) (async) fcntl$auto(0x3, 0x4, 0xffffffffffff0000) madvise$auto(0x1ffff000, 0x5510, 0x8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000080), r3) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r3) (async, rerun: 64) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00', @ANYRES16=r4, @ANYBLOB="ed6429bd7000fddbdf250400000049001100fdffffffffffffff2d9ce4be9e36792fbe93d5bc9fa6f70c016b0786c161123babd72b99e7319b29700602020058fc2b8b4090fc0000000c11e7d33a000000000000000000000000ffec"], 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x24000054) (rerun: 64) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2a8b4483f7114bd5}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042cbd7000fcdbdf250500000008000c002f19000008000500ffffffff04001200"], 0x28}, 0x1, 0x0, 0x0, 0x3400c010}, 0x40) 1.372988047s ago: executing program 0 (id=2884): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), r0) symlink$auto(&(0x7f0000000040)='nbd\x00', &(0x7f0000000080)='nbd\x00') io_submit$auto(0x3, 0x8, &(0x7f0000000100)=&(0x7f00000000c0)={0x8000000000000000, 0x6, 0x0, 0xf05a, 0x8, 0xdefe, 0xfffffffffffff800, 0x7fff, 0x7, 0x0, 0x3608, r0}) sendfile$auto(r0, r1, &(0x7f0000000140)=0x7f, 0x4) userfaultfd$auto(0x80) close_range$auto(r1, r0, 0x9) mbind$auto(0x3, 0x800, 0x6, &(0x7f0000000180)=0x2, 0x7, 0x7) syz_genetlink_get_family_id$auto_NLBL_CALIPSO(&(0x7f00000001c0), r1) userfaultfd$auto(0x0) symlink$auto(&(0x7f0000000200)='+\x00', &(0x7f0000000240)='nbd\x00') access$auto(&(0x7f0000000280)='nbd\x00', 0x7) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000300), r1) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x800}, @CTRL_ATTR_FAMILY_NAME={0xe, 0x2, '}%.^}{(^*\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x40) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000440), r1) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x7, 0x1, ':L.'}, @ETHTOOL_A_CHANNELS_HEADER={0x7, 0x1, "930c68"}, @ETHTOOL_A_CHANNELS_HEADER={0x7, 0x1, "741acc"}, @ETHTOOL_A_CHANNELS_HEADER={0x7, 0x1, "243219"}, @ETHTOOL_A_CHANNELS_HEADER={0x7, 0x1, "0c41c8"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40001) membarrier$auto(0x4, 0x8000, 0x1000) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x3}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xc}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xd}, @NFSD_A_SERVER_GRACETIME={0x8}, @NFSD_A_SERVER_GRACETIME={0x8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4e8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40014}, 0x4000) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000700), r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'bond_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'macvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'vxcan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r6}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r7}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r9}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0xc880) keyctl$auto(0xff800000, 0x1, 0x4, 0x40, 0x8ce) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000980), r0) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), r0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000cc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a40)={0x210, r11, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x83}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb}, @NL80211_ATTR_S1G_CAPABILITY={0xe8, 0x128, "7e4f2ba6506d677c6043a5d90cb894666a3a399b1175f35cf358d1a3acc9925a9fcbd7f449a9478100e50920f58152281ac09b19fe370e1dedce6ff3846bb3a7354dead98ac274ce6e563dc47f14105287f731d450236e7a37b305c244dcb4b1ffb3cc9245ffc4bfe3651ad355afe741f1fc20bf1c9c9014aa1a34ad753835b632bf1df2b4d27c59bf1bd535a8f3dec6f092ae0effd17accc5d0b4d0410c66f8e2218028fac870b23e4a3a739582f2a4883e913b86fd3dfbc334a87e3c4b553af41ff9363119641c38c45a187eb2ea7a0165df960a24ea6aae48c26da66514977ecbb169"}, @NL80211_ATTR_MBSSID_ELEMS={0x60, 0x133, "609acc7c18e0295d8d48fbfdb6a8d9b362866385c1154731b69a62c19d433b5de2be6a994d695f9f8f50c8b31b2990f2c441b4c965423b96e3185e492af327b17ac4e72c25d19e1bd9e57d3ee137f1a93a67fcf881815624a5a3da76"}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0xfffffff7}, @NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x90, 0xbe, "dfce850de5817c6a57080288634cdc8976edc7dc951c4741c066a9174f20bae21629cac6ecf8dae18a3e903bb44f16fb26efd4ca3b2671ff3267e8b810fa03ec4b892c3cb51bceac0bb1c5e8e2f8bdf863944e1c0eefd54082adae22915e6ce23fe60d34b350ad74d1a20b72dddad3472b4f0bb14bb5cfd7c104bfb7dbccffdba2575f62a0e9730ba1c83d98"}]}, 0x210}, 0x1, 0x0, 0x0, 0x400c881}, 0x80) 1.068696266s ago: executing program 3 (id=2885): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) capget$auto(0x0, 0xfffffffffffffffe) connect$auto(0x3, &(0x7f0000000280)={0x2, @sockaddr_1_1={"9f53a1"}}, 0x55) (async, rerun: 64) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) (rerun: 64) 960.398544ms ago: executing program 3 (id=2886): socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffffcd, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f00000016c0), r0) sendmsg$auto_SMC_PNETID_DEL(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400e300", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf25030000000d000100272e4028235e5b2b00000000"], 0x24}, 0x1, 0x0, 0x0, 0x10004}, 0x28004002) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x800000000000008, 0xc, 0x9, 0x3, 0x6, 0x1, 0x40009, 0x5e582972, 0x4000000000000000, 0x14, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xdd86) set_mempolicy$auto(0x9, &(0x7f0000000040)=0x5, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x4, 0x0, 0x1, 0xb33}, 0xed7138c}, 0x2, 0x9) sysinfo$auto(0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) close_range$auto(0x2, 0x8000, 0x0) 823.099082ms ago: executing program 0 (id=2887): mmap$auto(0x1, 0x2000b, 0xae29, 0x38, 0x401, 0x8004) io_uring_setup$auto(0x6, 0x0) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1$auto(0x8000000000000000) epoll_wait$auto(0x5, 0x0, 0x2, 0x100000000) madvise$auto(0x0, 0x3, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) process_mrelease$auto(0xffffffffffffffff, 0xfffffffe) get_mempolicy$auto(&(0x7f0000000640)=0xfffffffc, &(0x7f0000000680)=0x401, 0x81, 0x8, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) open_by_handle_at$auto(0xffffff9c, &(0x7f0000000040)={0xc, 0x2, "4c6c8e85b194f29b6efd901e"}, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) fstat$auto(0x2, 0x0) ioctl$auto(0xc8, 0x8924, 0x0) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0) mount$auto(0x0, &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x7561, 0x0) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000001c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_DEL_PMK(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000c40)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$auto_NETDEV_CMD_NAPI_GET0(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x2c, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1c24}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x24000000) unshare$auto(0x5) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) 429.930615ms ago: executing program 2 (id=2888): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) (async) ioctl$NS_GET_PARENT(r0, 0xff02, 0x0) vmsplice$auto(0x1, &(0x7f0000000000)={&(0x7f00000000c0)=[0x3], 0x5}, 0x4, 0x8) (async) init_module$auto(&(0x7f0000000080)=[0x8000000000000001], 0x9, &(0x7f0000000100)='[^\xc1Z\x00\x00\x00.*\x0e \xb3\xa5n\xb3\x00\x00\x00\x00') (async) rseq$auto(0x0, 0x8000, 0x0, 0x6) (async) rseq$auto(0x0, 0x8004, 0x1, 0xa) (async, rerun: 64) landlock_restrict_self$auto(0x2, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) socket(0xa, 0x3, 0x3a) socket(0x1a, 0x800, 0xfffffff9) (async) r1 = socket(0x10, 0x2, 0x4) bpf$auto(0xe, 0xffffffffffffffff, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42b"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async, rerun: 32) socket(0x2, 0x1, 0x100) (async, rerun: 32) socket(0x2a, 0x5, 0x40) (async, rerun: 64) fcntl$getown(r1, 0x9) (rerun: 64) r2 = gettid() kill$auto(r2, 0x7) (async) r3 = gettid() kill$auto(r3, 0x11) 377.383615ms ago: executing program 3 (id=2889): mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x0) open(&(0x7f0000000000)='./cgroup\x00', 0x141001, 0xe) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) read$auto(0x0, 0x0, 0x2) ioperm$auto(0x3, 0xe, 0x2000000000000149) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0x7, 0x0) socket(0xa, 0x1, 0x0) madvise$auto(0x0, 0x1, 0x4) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x3ff) futex_wait$auto(0x0, 0x0, 0x9d, 0x2, 0x0, 0x4) futex_wake$auto(0x0, 0x8, 0x7, 0x2) timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0) lseek$auto(0x0, 0x2b, 0x0) 306.88841ms ago: executing program 1 (id=2890): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) kcmp$auto(0x1, 0x100000001, 0x5, 0x8f0, 0x24000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket(0x15, 0x5, 0x0) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="09ae0300"}, 0x55) setreuid$auto(0xb, 0xcc) sendto$auto(0x3, 0x0, 0xf, 0x101, &(0x7f0000000140)={0x2, @sockaddr_1_1}, 0x1c) socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_1={r0, 0x2, @next_key=0x3, 0x3}, 0xa3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) fcntl$auto(0x0, 0x407, 0xc) r1 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_PARENT(r1, 0x8008b705, 0x0) shmat$auto(0x0, 0x0, 0x0) clone$auto(0x40083b42, 0x5c84, 0xfffffffffffffffe, 0x0, 0x100000000000f) mount$auto(0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)) preadv$auto(0x5, 0x0, 0x3, 0xffff, 0x100000000) clock_gettime$auto(0x4, 0xfffffffffffffffe) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(0xffffffffffffffff, 0x0, 0x20040010) readv$auto(0x4, 0x0, 0x8) write$auto(0x3, 0x0, 0xfdef) shutdown$auto(0x200000003, 0x2) 0s ago: executing program 3 (id=2891): socket(0x2, 0x2, 0x1) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mknod$auto(0x0, 0x1, 0x4) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0xa, 0x2, 0x0) socket(0xa, 0x800, 0x106) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') socket(0x11, 0x80003, 0x300) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), 0xffffffffffffffff) ioctl$auto(0x1, 0x541b, 0x8) clock_nanosleep$auto(0x2, 0x543bae6e, 0x0, 0xfffffffffffffffd) clock_nanosleep$auto(0x2, 0x543bae6e, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) bind$auto(0x7, &(0x7f0000000000)={0x2, @sa_data_min="590eac1414539774a263b19050fe"}, 0x6f) kernel console output (not intermixed with test programs): T7617] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.346365][T12705] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.365708][T12705] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.385995][T12705] bridge_slave_0: entered allmulticast mode [ 480.404375][T12705] bridge_slave_0: entered promiscuous mode [ 480.460836][ T7617] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.503690][T12705] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.517581][T12705] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.525259][T12705] bridge_slave_1: entered allmulticast mode [ 480.538957][T12705] bridge_slave_1: entered promiscuous mode [ 480.659713][ T54] Bluetooth: hci3: command tx timeout [ 480.678700][ T7617] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.788509][T12705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.852484][ T7617] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.885139][T12705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.991769][T12705] team0: Port device team_slave_0 added [ 481.024580][T12705] team0: Port device team_slave_1 added [ 481.153122][T12705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.167557][T12705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.206929][T12705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.263668][T12705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.270785][T12705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.320879][T12705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.517457][T12705] hsr_slave_0: entered promiscuous mode [ 481.569329][T12705] hsr_slave_1: entered promiscuous mode [ 481.603231][T12705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.639528][T12705] Cannot create hsr debugfs directory [ 481.646021][ T7617] bridge_slave_1: left allmulticast mode [ 481.659594][ T7617] bridge_slave_1: left promiscuous mode [ 481.667358][ T7617] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.717072][ T7617] bridge_slave_0: left allmulticast mode [ 481.736606][ T7617] bridge_slave_0: left promiscuous mode [ 481.752070][ T7617] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.611767][T12768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1481'. [ 482.731169][ T54] Bluetooth: hci3: command tx timeout [ 483.194361][ T7617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.232175][ T7617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.261653][ T7617] bond0 (unregistering): Released all slaves [ 483.380351][ T7617] HSR: left promiscuous mode [ 484.264580][ T7617] hsr_slave_0: left promiscuous mode [ 484.276617][ T7617] hsr_slave_1: left promiscuous mode [ 484.293139][ T7617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.311206][ T7617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.322366][ T7617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.335655][ T7617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.384242][ T7617] veth1_macvtap: left promiscuous mode [ 484.389891][ T7617] veth0_macvtap: left promiscuous mode [ 484.411975][ T7617] veth1_vlan: left promiscuous mode [ 484.417536][ T7617] veth0_vlan: left promiscuous mode [ 484.811142][ T54] Bluetooth: hci3: command tx timeout [ 485.352476][ T7617] team0 (unregistering): Port device team_slave_1 removed [ 485.446598][ T7617] team0 (unregistering): Port device team_slave_0 removed [ 486.715504][T12705] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 486.753731][T12705] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 486.775678][T12705] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 486.814300][T12705] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 486.891071][ T54] Bluetooth: hci3: command tx timeout [ 487.003053][T12705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.282871][T12705] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.525190][ T2957] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.532502][ T2957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.738603][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.745849][ T7617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.085831][T12705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 489.182550][T12705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.382561][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'. [ 489.616225][T12705] veth0_vlan: entered promiscuous mode [ 489.672179][T12705] veth1_vlan: entered promiscuous mode [ 489.788434][T12705] veth0_macvtap: entered promiscuous mode [ 489.809989][T12705] veth1_macvtap: entered promiscuous mode [ 489.863992][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.882436][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.904927][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.941062][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.971043][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.982171][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.012660][T12705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.031261][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.060994][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.070881][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.111040][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.131063][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.151098][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.177464][T12705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.195100][T12705] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.230162][T12705] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.261102][T12705] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.269890][T12705] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.521721][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.538313][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.607619][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.636576][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.914078][T13047] nfsd: Unknown parameter ' 490.031261][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.914078][T13047] <4>[ 490.060994][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.914078][T13047] <4>[ 490.070881][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.914078][T13047] <4>[ 490.111040][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.914078][T13047] <4>[ 490.131063][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.914078][T13047] <4>[ 490.151098][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.914078][T13047] <6>[ 490.177464][T12705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.914078][T13047] <6>[ 490.195100][T12705] netdevsim netdevsim0 netdevsim0: set [1' [ 498.988048][T13068] FAULT_INJECTION: forcing a failure. [ 498.988048][T13068] name failslab, interval 1, probability 0, space 0, times 0 [ 499.041436][T13068] CPU: 1 UID: 0 PID: 13068 Comm: syz.3.1543 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 499.052289][T13068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 499.062393][T13068] Call Trace: [ 499.065715][T13068] [ 499.068690][T13068] dump_stack_lvl+0x16c/0x1f0 [ 499.073458][T13068] should_fail_ex+0x497/0x5b0 [ 499.078208][T13068] ? fs_reclaim_acquire+0xae/0x150 [ 499.083381][T13068] should_failslab+0xc2/0x120 [ 499.088121][T13068] kmem_cache_alloc_node_noprof+0x71/0x310 [ 499.093997][T13068] ? __alloc_skb+0x2b3/0x380 [ 499.098672][T13068] __alloc_skb+0x2b3/0x380 [ 499.103159][T13068] ? __pfx___alloc_skb+0x10/0x10 [ 499.108162][T13068] ? __lock_acquire+0x163e/0x3ce0 [ 499.113268][T13068] tipc_buf_acquire+0x26/0xe0 [ 499.118028][T13068] tipc_msg_build+0x114/0x10d0 [ 499.122870][T13068] ? __pfx_tipc_msg_build+0x10/0x10 [ 499.128139][T13068] ? lock_acquire.part.0+0x11b/0x380 [ 499.133589][T13068] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 499.139294][T13068] ? hlock_class+0x4e/0x130 [ 499.143863][T13068] __tipc_sendstream+0x6f4/0x1170 [ 499.148972][T13068] ? __pfx___tipc_sendstream+0x10/0x10 [ 499.154602][T13068] ? tipc_sendstream+0x41/0x70 [ 499.159435][T13068] ? __pfx_lock_release+0x10/0x10 [ 499.164529][T13068] ? __pfx_woken_wake_function+0x10/0x10 [ 499.170242][T13068] ? mark_held_locks+0x9f/0xe0 [ 499.175075][T13068] ? tipc_sendstream+0x41/0x70 [ 499.179905][T13068] ? __local_bh_enable_ip+0xa4/0x120 [ 499.185253][T13068] tipc_sendstream+0x4f/0x70 [ 499.189907][T13068] sock_write_iter+0x4fe/0x5b0 [ 499.194736][T13068] ? __pfx_sock_write_iter+0x10/0x10 [ 499.200094][T13068] ? bpf_lsm_file_permission+0x9/0x10 [ 499.205518][T13068] ? security_file_permission+0x71/0x210 [ 499.211228][T13068] vfs_write+0x6b5/0x1140 [ 499.215640][T13068] ? __pfx_sock_write_iter+0x10/0x10 [ 499.220992][T13068] ? trace_lock_acquire+0x14a/0x1d0 [ 499.226241][T13068] ? __pfx_vfs_write+0x10/0x10 [ 499.231061][T13068] ? __fget_files+0x40/0x3f0 [ 499.235818][T13068] ksys_write+0x1fa/0x260 [ 499.240195][T13068] ? __pfx_ksys_write+0x10/0x10 [ 499.245110][T13068] do_syscall_64+0xcd/0x250 [ 499.249684][T13068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.255652][T13068] RIP: 0033:0x7f7c3a17dff9 [ 499.260119][T13068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.279791][T13068] RSP: 002b:00007f7c39bbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 499.288269][T13068] RAX: ffffffffffffffda RBX: 00007f7c3a336130 RCX: 00007f7c3a17dff9 [ 499.296299][T13068] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 499.304416][T13068] RBP: 00007f7c39bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 499.312445][T13068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.320471][T13068] R13: 0000000000000001 R14: 00007f7c3a336130 R15: 00007ffe4bb38778 [ 499.328523][T13068] [ 503.912838][ T5248] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 503.951510][ T5248] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 503.986718][ T5248] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 504.091439][ T5248] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 504.101515][ T5248] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 504.109419][ T5248] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 504.606310][T13115] chnl_net:caif_netlink_parms(): no params data found [ 504.673653][T13121] FAULT_INJECTION: forcing a failure. [ 504.673653][T13121] name fail_futex, interval 1, probability 0, space 0, times 1 [ 504.761149][T13121] CPU: 0 UID: 0 PID: 13121 Comm: syz.0.1553 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 504.772015][T13121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 504.782140][T13121] Call Trace: [ 504.785457][T13121] [ 504.788443][T13121] dump_stack_lvl+0x16c/0x1f0 [ 504.793200][T13121] should_fail_ex+0x497/0x5b0 [ 504.797956][T13121] get_futex_key+0x1b1/0x1090 [ 504.802685][T13121] ? hlock_class+0x4e/0x130 [ 504.807255][T13121] ? __pfx_get_futex_key+0x10/0x10 [ 504.812446][T13121] futex_wake+0xe8/0x4e0 [ 504.816750][T13121] ? exit_mm_release+0x19/0x30 [ 504.821592][T13121] ? __pfx_futex_wake+0x10/0x10 [ 504.826546][T13121] ? find_held_lock+0x2d/0x110 [ 504.831380][T13121] do_futex+0x1e5/0x350 [ 504.835596][T13121] ? __pfx_do_futex+0x10/0x10 [ 504.840328][T13121] ? __might_fault+0xe3/0x190 [ 504.845056][T13121] ? __might_fault+0xe3/0x190 [ 504.849789][T13121] mm_release+0x24e/0x300 [ 504.854173][T13121] do_exit+0x88b/0x2d70 [ 504.858410][T13121] ? get_signal+0x8fb/0x26d0 [ 504.863059][T13121] ? __pfx_do_exit+0x10/0x10 [ 504.867711][T13121] ? do_raw_spin_lock+0x12d/0x2c0 [ 504.872796][T13121] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 504.878225][T13121] do_group_exit+0xd3/0x2a0 [ 504.882794][T13121] get_signal+0x2658/0x26d0 [ 504.887363][T13121] ? vfs_write+0x14d/0x1140 [ 504.891924][T13121] ? __pfx_sock_write_iter+0x10/0x10 [ 504.897277][T13121] ? __pfx_get_signal+0x10/0x10 [ 504.902188][T13121] ? __pfx_vfs_write+0x10/0x10 [ 504.907011][T13121] ? __fget_files+0x40/0x3f0 [ 504.911680][T13121] arch_do_signal_or_restart+0x90/0x7e0 [ 504.917302][T13121] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 504.923539][T13121] ? ksys_write+0x1ad/0x260 [ 504.928098][T13121] ? __pfx_ksys_write+0x10/0x10 [ 504.933016][T13121] syscall_exit_to_user_mode+0x150/0x2a0 [ 504.938734][T13121] do_syscall_64+0xda/0x250 [ 504.943304][T13121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.949260][T13121] RIP: 0033:0x7f6b7557dff9 [ 504.953717][T13121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.973372][T13121] RSP: 002b:00007f6b7640b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 504.981846][T13121] RAX: fffffffffffffe00 RBX: 00007f6b75736130 RCX: 00007f6b7557dff9 [ 504.989887][T13121] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 504.997915][T13121] RBP: 00007f6b7640b090 R08: 0000000000000000 R09: 0000000000000000 [ 505.005939][T13121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.013989][T13121] R13: 0000000000000000 R14: 00007f6b75736130 R15: 00007fff648d61c8 [ 505.022018][T13121] [ 505.296845][T13115] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.304225][T13115] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.312018][T13115] bridge_slave_0: entered allmulticast mode [ 505.319284][T13115] bridge_slave_0: entered promiscuous mode [ 505.375810][T13115] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.392067][T13115] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.411457][T13115] bridge_slave_1: entered allmulticast mode [ 505.418628][T13115] bridge_slave_1: entered promiscuous mode [ 505.707792][T13115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.773827][T13115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.992228][T13115] team0: Port device team_slave_0 added [ 506.023577][T13115] team0: Port device team_slave_1 added [ 506.203100][ T54] Bluetooth: hci0: command tx timeout [ 506.463776][T13115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.470785][T13115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.541176][T13115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.564774][T13115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.589089][T13115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.701030][T13115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.814454][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.824095][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.635143][T13115] hsr_slave_0: entered promiscuous mode [ 507.712050][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1573'. [ 507.747243][T13115] hsr_slave_1: entered promiscuous mode [ 508.261135][ T54] Bluetooth: hci0: command tx timeout [ 508.979089][T13115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.536682][T13115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.977494][T13197] delete_channel: no stack [ 510.148774][T13115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.342421][ T54] Bluetooth: hci0: command tx timeout [ 510.522617][T13115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.035241][T13115] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 511.104141][T13115] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 511.279241][T13115] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 511.364430][T13115] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 511.733531][T13115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.780101][T13115] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.805546][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.812784][ T7617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.863476][ T7613] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.870621][ T7613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.418073][ T54] Bluetooth: hci0: command tx timeout [ 512.537646][T13115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.573794][T13227] futex_wake_op: syz.3.1582 tries to shift op by 64; fix this program [ 512.592038][T13226] futex_wake_op: syz.3.1582 tries to shift op by 64; fix this program [ 512.699113][T13115] veth0_vlan: entered promiscuous mode [ 512.731667][T13115] veth1_vlan: entered promiscuous mode [ 512.810198][T13115] veth0_macvtap: entered promiscuous mode [ 512.861352][T13115] veth1_macvtap: entered promiscuous mode [ 512.877609][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.901065][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.919827][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.930412][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.940585][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.951180][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.961329][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.972975][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.984544][T13115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.994487][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.008616][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.019054][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.036424][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.046399][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.057063][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.067176][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.078464][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.089850][T13115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.104019][T13115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.122418][T13115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.131825][T13115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.141034][T13115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.394167][ T7611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.420124][ T7611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.513714][ T7644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.552934][ T7644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.140421][T13244] kernel read not supported for file /#)-\&[} (pid: 13244 comm: syz.1.1556) [ 514.151090][ T29] audit: type=1804 audit(8277262446.280:8): pid=13244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1556" name="#)-\&[}" dev="mqueue" ino=46094 res=1 errno=0 [ 514.345741][ T29] audit: type=1800 audit(8277262446.490:9): pid=13244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1556" name="#)-\&[}" dev="mqueue" ino=46094 res=0 errno=0 [ 514.547684][ T29] audit: type=1326 audit(8277262446.690:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13238 comm="syz.3.1586" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c3a17dff9 code=0x0 [ 515.212740][ T29] audit: type=1804 audit(8277262447.360:11): pid=13244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1556" name="#)-\&[}" dev="mqueue" ino=46094 res=1 errno=0 [ 515.303516][ T29] audit: type=1804 audit(8277262447.380:12): pid=13244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1556" name="#)-\&[}" dev="mqueue" ino=46094 res=1 errno=0 [ 518.386394][T13295] nbd: must specify an index to disconnect [ 523.344230][T13386] netlink: 'syz.1.1614': attribute type 11 has an invalid length. [ 523.562824][T13390] netlink: zone id is out of range [ 523.587793][T13390] netlink: zone id is out of range [ 523.607310][T13390] netlink: zone id is out of range [ 523.619785][T13390] netlink: zone id is out of range [ 523.641035][T13390] netlink: zone id is out of range [ 523.651259][T13390] netlink: zone id is out of range [ 523.657001][T13390] netlink: zone id is out of range [ 523.671106][T13390] netlink: zone id is out of range [ 523.686590][T13390] netlink: zone id is out of range [ 523.701034][T13390] netlink: zone id is out of range [ 524.179625][T13397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1617'. [ 525.837126][T13408] netlink: 'syz.2.1619': attribute type 11 has an invalid length. [ 526.551059][T13425] Unable to find swap-space signature [ 533.801922][ T29] audit: type=1804 audit(8277262465.947:13): pid=13561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1655" name="#)-\&[}" dev="mqueue" ino=46832 res=1 errno=0 [ 533.822983][T13561] kernel read not supported for file /#)-\&[} (pid: 13561 comm: syz.0.1655) [ 533.980961][ T29] audit: type=1804 audit(8277262466.117:14): pid=13567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1655" name="#)-\&[}" dev="mqueue" ino=46832 res=1 errno=0 [ 534.060962][ T29] audit: type=1804 audit(8277262466.117:15): pid=13567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1655" name="#)-\&[}" dev="mqueue" ino=46832 res=1 errno=0 [ 534.151358][ T29] audit: type=1800 audit(8277262466.147:16): pid=13561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1655" name="#)-\&[}" dev="mqueue" ino=46832 res=0 errno=0 [ 534.500989][T13542] Bluetooth: hci1: command 0x0406 tx timeout [ 537.467167][T13603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1666'. [ 543.243687][T13659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1683'. [ 544.576774][T13668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.241662][T13732] svc: failed to register nfsdv3 RPC service (errno 111). [ 547.342464][T13732] svc: failed to register nfsaclv3 RPC service (errno 111). [ 547.497987][T13728] can: request_module (can-proto-4) failed. [ 549.112671][ T7617] bridge_slave_1: left allmulticast mode [ 549.118483][ T7617] bridge_slave_1: left promiscuous mode [ 549.141164][ T7617] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.210829][ T7617] bridge_slave_0: left allmulticast mode [ 549.217037][ T7617] bridge_slave_0: left promiscuous mode [ 549.251715][ T7617] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.816352][ T7617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.858176][ T7617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.882019][ T7617] bond0 (unregistering): Released all slaves [ 551.000107][ T7617] HSR: left promiscuous mode [ 552.248990][ T7617] hsr_slave_0: left promiscuous mode [ 552.283332][ T7617] hsr_slave_1: left promiscuous mode [ 552.298008][ T7617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.324492][ T7617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.359621][ T7617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.383433][ T7617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.454244][ T7617] veth1_macvtap: left promiscuous mode [ 552.459869][ T7617] veth0_macvtap: left promiscuous mode [ 552.478506][ T7617] veth1_vlan: left promiscuous mode [ 552.496250][ T7617] veth0_vlan: left promiscuous mode [ 554.333499][ T7617] team0 (unregistering): Port device team_slave_1 removed [ 554.506924][ T7617] team0 (unregistering): Port device team_slave_0 removed [ 557.474900][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1736'. [ 557.582842][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1735'. [ 557.761112][T13878] blktrace: Concurrent blktraces are not allowed on loop255 [ 562.394518][T13988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1770'. [ 564.968589][T14031] svc: failed to register nfsdv3 RPC service (errno 111). [ 565.051618][T14031] svc: failed to register nfsaclv3 RPC service (errno 111). [ 568.262634][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.269104][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.433723][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 574.756716][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1840'. [ 574.783637][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1840'. [ 575.086310][T14245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.405304][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1854'. [ 576.835166][T14284] HSR: entered promiscuous mode [ 578.207793][T14330] delete_channel: no stack [ 582.662966][T14424] nfs: Bad value for 'source' [ 584.172103][T14446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 584.465899][T14451] Process accounting resumed [ 585.316100][T14478] block device autoloading is deprecated and will be removed. [ 586.692768][ T7622] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.820417][ T7622] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.876990][T14511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1909'. [ 587.101372][ T7622] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.436117][ T7622] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.717170][ T7622] bridge_slave_1: left allmulticast mode [ 587.733035][ T7622] bridge_slave_1: left promiscuous mode [ 587.756671][ T7622] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.820343][ T7622] bridge_slave_0: left allmulticast mode [ 587.840754][ T7622] bridge_slave_0: left promiscuous mode [ 587.857005][ T7622] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.961467][T13542] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 587.975347][T13542] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 587.989508][T13542] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 588.011385][T13542] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 588.019190][T13542] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 588.027440][T13542] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 588.448067][T14552] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 588.965269][ T7622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.978102][ T7622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.991813][ T7622] bond0 (unregistering): Released all slaves [ 590.124748][ T54] Bluetooth: hci2: command tx timeout [ 590.318460][ T7622] hsr_slave_0: left promiscuous mode [ 590.337235][ T7622] hsr_slave_1: left promiscuous mode [ 590.347863][ T7622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.377950][ T7622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.403432][ T7622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.418107][ T7622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.505143][ T7622] veth1_macvtap: left promiscuous mode [ 590.524241][ T7622] veth0_macvtap: left promiscuous mode [ 590.540353][ T7622] veth1_vlan: left promiscuous mode [ 590.585287][ T7622] veth0_vlan: left promiscuous mode [ 591.731247][ T7622] team0 (unregistering): Port device team_slave_1 removed [ 591.794849][ T7622] team0 (unregistering): Port device team_slave_0 removed [ 592.176672][ T54] Bluetooth: hci2: command tx timeout [ 592.530617][T14535] chnl_net:caif_netlink_parms(): no params data found [ 592.982093][T14535] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.990038][T14535] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.026572][T14535] bridge_slave_0: entered allmulticast mode [ 593.042919][T14535] bridge_slave_0: entered promiscuous mode [ 593.078115][T14535] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.091063][T14535] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.098625][T14535] bridge_slave_1: entered allmulticast mode [ 593.113013][T14535] bridge_slave_1: entered promiscuous mode [ 593.354569][T14535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.367849][T14646] could not allocate digest TFM handle [ 593.377189][T14535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.561051][T14535] team0: Port device team_slave_0 added [ 593.619316][T14535] team0: Port device team_slave_1 added [ 593.659509][T14651] could not allocate digest TFM handle [ 593.941460][T14535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.948573][T14535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.031011][T14535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.090573][T14535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.125186][T14535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.200779][T14535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.251040][ T54] Bluetooth: hci2: command tx timeout [ 594.319162][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1936'. [ 594.396964][T14535] hsr_slave_0: entered promiscuous mode [ 594.428404][T14535] hsr_slave_1: entered promiscuous mode [ 594.472678][T14535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 594.480327][T14535] Cannot create hsr debugfs directory [ 596.330994][ T54] Bluetooth: hci2: command tx timeout [ 597.236824][T14535] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 597.311611][T14535] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 597.371701][T14535] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 597.430346][T14535] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 597.641501][T14535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.690613][T14535] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.714519][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.721768][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.755884][ T2957] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.763137][ T2957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.926770][T14535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 597.960940][T14535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 598.355957][T14535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.490742][T14535] veth0_vlan: entered promiscuous mode [ 598.529420][T14535] veth1_vlan: entered promiscuous mode [ 598.597415][T14535] veth0_macvtap: entered promiscuous mode [ 598.635278][T14535] veth1_macvtap: entered promiscuous mode [ 598.702222][T14535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.740897][T14535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.750792][T14535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.795609][T14535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.806249][T14535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.850910][T14535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.887871][T14535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.924716][T14535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.968327][T14535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.010182][T14535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.059889][T14535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.078422][T14535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.114867][T14535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.142820][T14535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.237359][T14535] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.291904][T14535] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.300777][T14535] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.350937][T14535] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.758510][ T2902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.801272][ T2902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.972796][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.011116][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.087432][T14865] HfR: entered promiscuous mode [ 605.865535][T14940] can: request_module (can-proto-0) failed. [ 607.047287][T14971] nbd: must specify a size in bytes for the device [ 609.525698][T15025] netlink: 'syz.3.1987': attribute type 11 has an invalid length. [ 612.188825][T15070] netlink: zone id is out of range [ 612.217780][T15070] netlink: zone id is out of range [ 612.245642][T15070] netlink: zone id is out of range [ 612.283023][T15070] netlink: zone id is out of range [ 612.299055][T15070] netlink: zone id is out of range [ 612.324023][T15070] netlink: zone id is out of range [ 612.329217][T15070] netlink: zone id is out of range [ 612.337429][T15074] ptrace attach of "./syz-executor exec"[9664] was attempted by "./syz-executor exec"[15074] [ 612.384633][T15070] netlink: zone id is out of range [ 612.389821][T15070] netlink: zone id is out of range [ 612.435925][T15070] netlink: zone id is out of range [ 613.495151][ T7617] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.624694][ T7617] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.661362][T15096] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.2005'. [ 613.749366][ T7617] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.920041][ T7617] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.083849][T13542] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 614.093011][T13542] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 614.101173][T13542] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 614.110641][T13542] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 614.140372][ T7617] bridge_slave_1: left allmulticast mode [ 614.150338][ T7617] bridge_slave_1: left promiscuous mode [ 614.160267][T13542] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 614.160450][ T7617] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.175396][T13542] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 614.277625][ T7617] bridge_slave_0: left allmulticast mode [ 614.284057][ T7617] bridge_slave_0: left promiscuous mode [ 614.290112][ T7617] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.889334][T13542] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 614.899799][T13542] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 614.909499][T13542] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 614.919168][T13542] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 614.927291][T13542] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 614.937987][T13542] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 615.051844][ T7617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.064859][ T7617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.077802][ T7617] bond0 (unregistering): Released all slaves [ 615.591081][ T7617] hsr_slave_0: left promiscuous mode [ 615.648154][ T7617] hsr_slave_1: left promiscuous mode [ 615.667964][ T7617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.680956][ T7617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.700003][ T7617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.711770][ T7617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.752694][ T7617] veth1_macvtap: left promiscuous mode [ 615.758331][ T7617] veth0_macvtap: left promiscuous mode [ 615.780331][ T7617] veth1_vlan: left promiscuous mode [ 615.805653][ T7617] veth0_vlan: left promiscuous mode [ 616.134514][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2016'. [ 616.251590][ T54] Bluetooth: hci0: command tx timeout [ 616.889028][ T7617] team0 (unregistering): Port device team_slave_1 removed [ 616.969047][ T7617] team0 (unregistering): Port device team_slave_0 removed [ 617.061068][ T54] Bluetooth: hci3: command tx timeout [ 617.856216][T15154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2016'. [ 618.013447][T15104] chnl_net:caif_netlink_parms(): no params data found [ 618.332060][T15123] chnl_net:caif_netlink_parms(): no params data found [ 618.339196][ T54] Bluetooth: hci0: command tx timeout [ 618.676377][T15104] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.717689][T15104] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.741166][T15104] bridge_slave_0: entered allmulticast mode [ 618.748431][T15104] bridge_slave_0: entered promiscuous mode [ 618.755332][T15185] delete_channel: no stack [ 618.850687][T15104] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.889944][T15104] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.898314][T15104] bridge_slave_1: entered allmulticast mode [ 618.912167][T15104] bridge_slave_1: entered promiscuous mode [ 619.012307][T15123] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.042202][T15123] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.049763][T15123] bridge_slave_0: entered allmulticast mode [ 619.072245][T15123] bridge_slave_0: entered promiscuous mode [ 619.085144][T15123] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.106452][T15123] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.122168][T15123] bridge_slave_1: entered allmulticast mode [ 619.131151][ T54] Bluetooth: hci3: command tx timeout [ 619.132968][T15123] bridge_slave_1: entered promiscuous mode [ 619.267148][T15104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.307944][T15104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.436527][ T7617] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.494580][T15123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.520580][T15123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.672268][ T7617] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.844978][ T7617] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.905130][T15104] team0: Port device team_slave_0 added [ 619.939373][T15123] team0: Port device team_slave_0 added [ 619.963645][T15123] team0: Port device team_slave_1 added [ 620.019452][T15104] team0: Port device team_slave_1 added [ 620.111896][ T7617] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.279718][T15123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.291530][T15123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.339979][T15123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.409272][T15123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.411069][ T54] Bluetooth: hci0: command tx timeout [ 620.426162][T15123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.458117][T15123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.489024][T15104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.502723][T15104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.529280][T15104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.589697][T15104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.602526][T15104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.629147][T15104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.672266][T15123] hsr_slave_0: entered promiscuous mode [ 620.679149][T15123] hsr_slave_1: entered promiscuous mode [ 620.720640][T15104] hsr_slave_0: entered promiscuous mode [ 620.727542][T15104] hsr_slave_1: entered promiscuous mode [ 620.738844][T15104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.747152][T15104] Cannot create hsr debugfs directory [ 620.902470][ T7617] bridge_slave_1: left allmulticast mode [ 620.908291][ T7617] bridge_slave_1: left promiscuous mode [ 620.914514][ T7617] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.926101][ T7617] bridge_slave_0: left allmulticast mode [ 620.932696][ T7617] bridge_slave_0: left promiscuous mode [ 620.938622][ T7617] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.211164][ T54] Bluetooth: hci3: command tx timeout [ 621.294650][ T7617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.307888][ T7617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.319399][ T7617] bond0 (unregistering): Released all slaves [ 621.388802][ T7617] HSR: left promiscuous mode [ 622.254310][ T7617] hsr_slave_0: left promiscuous mode [ 622.288705][ T7617] hsr_slave_1: left promiscuous mode [ 622.312367][ T7617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.338315][ T7617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.362202][ T7617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.370171][ T7617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.425886][ T7617] veth1_macvtap: left promiscuous mode [ 622.435115][ T7617] veth0_macvtap: left promiscuous mode [ 622.440801][ T7617] veth1_vlan: left promiscuous mode [ 622.462346][ T7617] veth0_vlan: left promiscuous mode [ 622.499108][ T54] Bluetooth: hci0: command tx timeout [ 623.098341][ T7617] team0 (unregistering): Port device team_slave_1 removed [ 623.143403][ T7617] team0 (unregistering): Port device team_slave_0 removed [ 623.294075][ T54] Bluetooth: hci3: command tx timeout [ 623.764205][T15123] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 623.935632][T15123] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 623.957777][T15123] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 624.155749][T15123] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 624.807738][T15123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.896028][T15104] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 624.925663][T15104] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 624.945079][T15104] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 624.966858][T15104] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 624.990517][T15123] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.028986][ T7622] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.036254][ T7622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.084690][ T2957] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.091909][ T2957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.334747][T15104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.408752][T15104] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.440999][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.448231][ T7617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.496967][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.504201][ T7617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.784666][T15123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.925468][T15123] veth0_vlan: entered promiscuous mode [ 625.984540][T15123] veth1_vlan: entered promiscuous mode [ 626.086604][T15123] veth0_macvtap: entered promiscuous mode [ 626.118123][T15104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.139054][T15123] veth1_macvtap: entered promiscuous mode [ 626.219204][T15123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.240391][T15123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.255946][T15123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.274732][T15123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.323710][T15123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.349668][T15123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.381230][T15123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.401087][T15123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.412040][T15123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.431647][T15123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.497126][T15123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.507354][T15123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.531030][T15123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.539819][T15123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.606412][T15104] veth0_vlan: entered promiscuous mode [ 626.675144][T15104] veth1_vlan: entered promiscuous mode [ 626.883463][T15104] veth0_macvtap: entered promiscuous mode [ 626.906530][ T2902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.940523][ T2902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.964735][T15104] veth1_macvtap: entered promiscuous mode [ 627.081376][T15104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.101340][T15104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.132222][T15104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.158773][T15104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.194828][T15104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.222399][T15104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.248299][T15104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.280744][ T7622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.282626][T15104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.310943][ T7622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.320417][T15104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.342310][T15104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.370896][T15104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.407132][T15104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.430891][T15104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.461337][T15104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.523972][T15104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.551006][T15104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.580210][T15104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.605276][T15104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.832188][ T7617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.840095][ T7617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.929981][ T7617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.944158][ T7617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.695052][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.701730][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.232011][T15583] netlink: 'syz.0.2082': attribute type 11 has an invalid length. [ 636.264065][T15584] netlink: 'syz.0.2082': attribute type 11 has an invalid length. [ 636.387113][T15589] netlink: 4 bytes leftover after parsing attributes in process `ÿÿòÿÿÿòÿÿÿ'. [ 641.992216][T15690] netlink: 'syz.2.2106': attribute type 11 has an invalid length. [ 642.010443][T15690] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2106'. [ 642.989172][T15705] kexec: Could not allocate control_code_buffer [ 654.332228][T13542] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 654.343708][T13542] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 654.356161][T13542] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 654.377966][T13542] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 654.389591][T13542] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 654.397596][T13542] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 654.709627][ T2902] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.125005][ T2902] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.709266][ T2902] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.890342][T15941] chnl_net:caif_netlink_parms(): no params data found [ 656.210585][ T2902] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.491139][ T54] Bluetooth: hci1: command tx timeout [ 656.502807][T15941] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.510275][T15941] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.521603][T15941] bridge_slave_0: entered allmulticast mode [ 656.529023][T15941] bridge_slave_0: entered promiscuous mode [ 656.583599][T15941] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.590780][T15941] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.639263][T15941] bridge_slave_1: entered allmulticast mode [ 656.660714][T15941] bridge_slave_1: entered promiscuous mode [ 656.994264][T15941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.034025][T15941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.512296][T15941] team0: Port device team_slave_0 added [ 657.532978][T15941] team0: Port device team_slave_1 added [ 657.608312][T15941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.642780][T15941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.731739][T15941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.755546][ T2902] bridge_slave_1: left allmulticast mode [ 657.791131][ T2902] bridge_slave_1: left promiscuous mode [ 657.801524][ T2902] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.059868][ T2902] bridge_slave_0: left allmulticast mode [ 658.085907][ T2902] bridge_slave_0: left promiscuous mode [ 658.101096][ T2902] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.577418][ T54] Bluetooth: hci1: command tx timeout [ 659.733450][ T2902] gre0 (unregistering): left allmulticast mode [ 660.650937][ T54] Bluetooth: hci1: command tx timeout [ 661.393430][ T2902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.439367][ T2902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.553542][ T2902] bond0 (unregistering): Released all slaves [ 661.681672][T15941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.688683][T15941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.769577][T15941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.071093][ T2902] HfR: left promiscuous mode [ 662.348406][T15941] hsr_slave_0: entered promiscuous mode [ 662.421993][T15941] hsr_slave_1: entered promiscuous mode [ 662.432707][T15941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 662.440358][T15941] Cannot create hsr debugfs directory [ 662.471454][ T2902] HSR: left promiscuous mode [ 662.731008][ T54] Bluetooth: hci1: command tx timeout [ 666.342037][T16113] openvswitch: netlink: Flow key attribute not present in set flow. [ 666.454901][T15941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 666.632264][T15941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 666.722386][T15941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 667.063792][T15941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 667.444669][ T2902] hsr_slave_0: left promiscuous mode [ 667.483456][ T2902] hsr_slave_1: left promiscuous mode [ 667.595094][ T2902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.602820][ T2902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.683305][ T2902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.709659][ T2902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.806950][ T2902] veth1_macvtap: left promiscuous mode [ 667.851139][ T2902] veth0_macvtap: left promiscuous mode [ 667.856912][ T2902] veth1_vlan: left promiscuous mode [ 667.891012][ T2902] veth0_vlan: left promiscuous mode [ 668.649680][T16159] Process accounting resumed [ 669.684281][ T2902] team0 (unregistering): Port device team_slave_1 removed [ 669.788720][ T2902] team0 (unregistering): Port device team_slave_0 removed [ 670.843135][T15941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.862034][T15941] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.877936][ T7622] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.885106][ T7622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.988847][ T6091] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.996077][ T6091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.434573][T13542] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 671.444507][T13542] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 671.453550][T13542] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 671.498184][T13542] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 671.506491][T13542] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 671.555844][T13542] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 671.567322][T15941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.609217][T15941] veth0_vlan: entered promiscuous mode [ 671.626549][T15941] veth1_vlan: entered promiscuous mode [ 671.653418][T15941] veth0_macvtap: entered promiscuous mode [ 671.662913][T15941] veth1_macvtap: entered promiscuous mode [ 671.679713][T15941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.690348][T15941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.700518][T15941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.711027][T15941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.720930][T15941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.732028][T15941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.743936][T15941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.753812][T15941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.764370][T15941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.774424][T15941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.784953][T15941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.794857][T15941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.805438][T15941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.818141][T15941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.828731][T15941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.838147][T15941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.847526][T15941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.856423][T15941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.516879][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.528515][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.764827][ T6091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.795320][ T6091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.947660][T16209] chnl_net:caif_netlink_parms(): no params data found [ 673.203026][T16209] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.221109][T16209] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.228382][T16209] bridge_slave_0: entered allmulticast mode [ 673.250609][T16209] bridge_slave_0: entered promiscuous mode [ 673.315005][T16209] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.332026][T16209] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.349655][T16209] bridge_slave_1: entered allmulticast mode [ 673.369219][T16209] bridge_slave_1: entered promiscuous mode [ 673.485740][T16209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.532483][T16209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.625138][T16209] team0: Port device team_slave_0 added [ 673.664937][T16209] team0: Port device team_slave_1 added [ 673.758324][T16209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.791408][T16209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.868746][T16209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.941429][ T54] Bluetooth: hci4: command tx timeout [ 673.980622][T16209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.009439][T16209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.064399][T16209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.327389][T16209] hsr_slave_0: entered promiscuous mode [ 674.345019][T16209] hsr_slave_1: entered promiscuous mode [ 674.357712][T16209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 674.367392][T16209] Cannot create hsr debugfs directory [ 675.324762][T16209] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.422476][T16279] Unable to find swap-space signature [ 675.482359][T16209] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.714227][T16209] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.923486][T16209] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.011993][ T54] Bluetooth: hci4: command tx timeout [ 676.155802][T16209] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 676.210270][T16209] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 676.269683][T16209] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 676.332319][T16209] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 676.739028][T16209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.865972][T16209] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.963335][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.970482][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.044650][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.051861][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.101819][ T54] Bluetooth: hci4: command tx timeout [ 678.190294][T16209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.407592][T16209] veth0_vlan: entered promiscuous mode [ 678.481738][T16209] veth1_vlan: entered promiscuous mode [ 678.614733][T16209] veth0_macvtap: entered promiscuous mode [ 678.673940][T16209] veth1_macvtap: entered promiscuous mode [ 678.751387][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 678.804223][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.865876][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 678.897214][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.940858][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.015166][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.081209][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.130338][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.188578][T16209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.277849][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.341220][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.394223][T16321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2234'. [ 679.410708][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.467443][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.531756][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.591016][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.643635][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.699153][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.757758][T16209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.910769][T16209] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.986820][T16209] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.021112][T16209] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.056895][T16209] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.182145][ T54] Bluetooth: hci4: command tx timeout [ 680.320102][ T2902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.350872][ T2902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.529193][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.550889][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.922068][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2237'. [ 681.506032][T16340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2238'. [ 681.535104][T16340] tc_dump_action: action bad kind [ 682.051361][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.217934][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.414125][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.577315][T13542] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 682.594802][T13542] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 682.603044][T13542] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 682.611819][T13542] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 682.621432][T13542] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 682.629809][T13542] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 682.881734][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.545995][ T11] bridge_slave_1: left allmulticast mode [ 683.575650][ T11] bridge_slave_1: left promiscuous mode [ 683.591486][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.741704][ T11] bridge_slave_0: left allmulticast mode [ 683.771102][ T11] bridge_slave_0: left promiscuous mode [ 683.777022][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.732152][ T54] Bluetooth: hci0: command tx timeout [ 685.729123][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.762333][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.806320][ T11] bond0 (unregistering): Released all slaves [ 685.848014][T16356] chnl_net:caif_netlink_parms(): no params data found [ 686.434246][T16356] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.461097][T16356] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.484323][T16356] bridge_slave_0: entered allmulticast mode [ 686.504549][T16356] bridge_slave_0: entered promiscuous mode [ 686.535070][T16356] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.551041][T16356] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.561472][T16356] bridge_slave_1: entered allmulticast mode [ 686.589199][T16356] bridge_slave_1: entered promiscuous mode [ 686.710129][ T11] hsr_slave_0: left promiscuous mode [ 686.757572][ T11] hsr_slave_1: left promiscuous mode [ 686.764297][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.790447][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.821040][ T54] Bluetooth: hci0: command tx timeout [ 686.851864][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.891825][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.978636][ T11] veth1_macvtap: left promiscuous mode [ 686.995716][ T11] veth0_macvtap: left promiscuous mode [ 687.016239][ T11] veth1_vlan: left promiscuous mode [ 687.037978][ T11] veth0_vlan: left promiscuous mode [ 688.901040][ T54] Bluetooth: hci0: command tx timeout [ 689.016828][ T11] team0 (unregistering): Port device team_slave_1 removed [ 689.399620][ T11] team0 (unregistering): Port device team_slave_0 removed [ 690.971312][ T54] Bluetooth: hci0: command tx timeout [ 691.143008][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.149431][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.519638][T16356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.705445][T16356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.948431][T16356] team0: Port device team_slave_0 added [ 691.994043][T16356] team0: Port device team_slave_1 added [ 692.318222][T16356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.340868][T16356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.420874][T16356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.878246][T16356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.888049][T16356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.950897][T16356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.502387][T16356] hsr_slave_0: entered promiscuous mode [ 693.527665][T16356] hsr_slave_1: entered promiscuous mode [ 693.592290][T16356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 693.599936][T16356] Cannot create hsr debugfs directory [ 695.461499][T16537] sock: sock_set_timeout: `syz.1.2268' (pid 16537) tries to set negative timeout [ 697.129456][T16356] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 697.197134][T16571] openvswitch: netlink: Message has 4 unknown bytes. [ 697.364921][T16356] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 697.573784][T16356] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 697.713613][T16356] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 698.021303][T16356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.041109][T16356] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.077479][T16356] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 698.088113][T16356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 698.176600][T14304] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.183857][T14304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.215726][T14304] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.222951][T14304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.425020][T16591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2273'. [ 698.594179][T16356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.630345][T16356] veth0_vlan: entered promiscuous mode [ 698.642305][T16356] veth1_vlan: entered promiscuous mode [ 698.716116][T16356] veth0_macvtap: entered promiscuous mode [ 698.743248][T16356] veth1_macvtap: entered promiscuous mode [ 698.798261][T16356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.840903][T16356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.870939][T16356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.912299][T16356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.941609][T16356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.968234][T16356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.012688][T16356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.041201][T16356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.071596][T16356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.113174][T16356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.163047][T16356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.206806][T16356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.260590][T16356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.289017][T16356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.320866][T16356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.341343][T16356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.378794][T16356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.402662][T16356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.445054][T16356] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.491082][T16356] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.499870][T16356] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.521010][T16356] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.011095][T16625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2275'. [ 700.208400][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.228153][ T6091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.258220][ T6091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.275152][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.959435][T13542] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 704.981901][T13542] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 705.011737][T13542] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 705.032820][T13542] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 705.041917][T13542] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 705.061057][T13542] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 705.524856][T14304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.874614][T14304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.957494][ T29] audit: type=1326 audit(4294967301.150:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16762 comm="syz.1.2296" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8051b7dff9 code=0x0 [ 706.575317][T14304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.138300][ T54] Bluetooth: hci1: command tx timeout [ 707.164823][T14304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.402705][T16743] chnl_net:caif_netlink_parms(): no params data found [ 707.951597][T16792] ptrace attach of "./syz-executor exec"[16209] was attempted by "./syz-executor exec"[16792] [ 708.102526][T16743] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.109798][T16743] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.148684][T16743] bridge_slave_0: entered allmulticast mode [ 708.156248][T16743] bridge_slave_0: entered promiscuous mode [ 708.193339][T16743] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.200482][T16743] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.216980][T16743] bridge_slave_1: entered allmulticast mode [ 708.224419][T16743] bridge_slave_1: entered promiscuous mode [ 708.859052][T16743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.906632][T16743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.230905][ T54] Bluetooth: hci1: command tx timeout [ 710.016174][T14304] bridge_slave_1: left allmulticast mode [ 710.023033][T14304] bridge_slave_1: left promiscuous mode [ 710.029642][T14304] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.220599][T14304] bridge_slave_0: left allmulticast mode [ 710.237186][T14304] bridge_slave_0: left promiscuous mode [ 710.291248][T14304] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.301268][ T54] Bluetooth: hci1: command tx timeout [ 713.371209][ T54] Bluetooth: hci1: command tx timeout [ 715.491403][T14304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.603381][T14304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.743462][T14304] bond0 (unregistering): Released all slaves [ 716.094953][T16743] team0: Port device team_slave_0 added [ 716.132717][T16743] team0: Port device team_slave_1 added [ 716.580911][T14304] HfR: left promiscuous mode [ 717.232340][T16840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2305'. [ 718.100689][T16743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.122724][T16743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.182759][T16743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.570139][T16743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.577476][T16743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.610990][T16743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.954501][T16743] hsr_slave_0: entered promiscuous mode [ 719.001392][T16743] hsr_slave_1: entered promiscuous mode [ 719.061267][T16743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 719.068917][T16743] Cannot create hsr debugfs directory [ 719.101617][T13542] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 719.112598][T13542] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 719.126918][T13542] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 719.165403][T13542] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 719.173326][T13542] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 719.185870][T13542] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 719.484827][T14304] hsr_slave_0: left promiscuous mode [ 719.507630][T14304] hsr_slave_1: left promiscuous mode [ 719.536460][T14304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.554407][T14304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.611806][T14304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.619272][T14304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.721265][T14304] veth1_macvtap: left promiscuous mode [ 719.740557][T14304] veth0_macvtap: left promiscuous mode [ 719.759461][T14304] veth1_vlan: left promiscuous mode [ 719.779820][T14304] veth0_vlan: left promiscuous mode [ 721.290999][ T54] Bluetooth: hci2: command tx timeout [ 721.732054][T14304] team0 (unregistering): Port device team_slave_1 removed [ 721.887703][T14304] team0 (unregistering): Port device team_slave_0 removed [ 723.375867][ T54] Bluetooth: hci2: command tx timeout [ 725.560385][ T54] Bluetooth: hci2: command tx timeout [ 726.824538][T16854] chnl_net:caif_netlink_parms(): no params data found [ 727.612681][T13542] Bluetooth: hci2: command tx timeout [ 727.718466][T16854] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.731767][T16854] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.739037][T16854] bridge_slave_0: entered allmulticast mode [ 727.764738][T16854] bridge_slave_0: entered promiscuous mode [ 727.846153][T14304] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.934379][T16854] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.962938][T16854] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.970225][T16854] bridge_slave_1: entered allmulticast mode [ 728.012987][T16854] bridge_slave_1: entered promiscuous mode [ 728.076913][T14304] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.025262][T16854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.124285][T14304] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.179028][T16854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.204517][T16743] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 729.230425][T16743] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 729.349453][T14304] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.792276][T16743] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 729.867737][T16854] team0: Port device team_slave_0 added [ 729.915309][T16854] team0: Port device team_slave_1 added [ 729.941335][T16743] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 730.652220][T14304] bridge_slave_1: left allmulticast mode [ 730.657938][T14304] bridge_slave_1: left promiscuous mode [ 730.683057][T14304] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.693128][T14304] bridge_slave_0: left allmulticast mode [ 730.698819][T14304] bridge_slave_0: left promiscuous mode [ 730.727556][T14304] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.118709][T14304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.169149][T14304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.224179][T14304] bond0 (unregistering): Released all slaves [ 732.266013][T16854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.346087][T16854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.544587][T16854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.593111][T16854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.613820][T16854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.735771][T16854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.402834][T16854] hsr_slave_0: entered promiscuous mode [ 733.443016][T16854] hsr_slave_1: entered promiscuous mode [ 733.461169][T16854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 733.489727][T16854] Cannot create hsr debugfs directory [ 733.615400][T16743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.700190][T14304] hsr_slave_0: left promiscuous mode [ 733.711782][T14304] hsr_slave_1: left promiscuous mode [ 733.728838][T14304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.771546][T14304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.788380][T14304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.838596][T14304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.902621][T14304] veth1_macvtap: left promiscuous mode [ 733.908222][T14304] veth0_macvtap: left promiscuous mode [ 733.931034][T14304] veth1_vlan: left promiscuous mode [ 733.936400][T14304] veth0_vlan: left promiscuous mode [ 735.545270][T14304] team0 (unregistering): Port device team_slave_1 removed [ 735.788820][T14304] team0 (unregistering): Port device team_slave_0 removed [ 737.732501][T16743] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.805364][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.812575][ T7617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.822675][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.829813][ T7617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.948928][T16743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 738.356985][T16994] svc: failed to register nfsdv3 RPC service (errno 111). [ 738.400725][T16994] svc: failed to register nfsaclv3 RPC service (errno 111). [ 739.293413][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 739.422117][T16743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.466056][T16743] veth0_vlan: entered promiscuous mode [ 739.478982][T16743] veth1_vlan: entered promiscuous mode [ 739.504171][T16743] veth0_macvtap: entered promiscuous mode [ 739.565405][T16743] veth1_macvtap: entered promiscuous mode [ 739.654595][T16854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 739.672758][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.691480][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.708356][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.731218][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.750027][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.769976][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.878828][T16743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.891098][T16854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 739.927832][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.947344][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.958832][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.976559][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.987284][T16743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.007223][T16743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.028187][T16743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.047579][T16854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 740.059388][T16854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 740.112423][T16743] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.138975][T16743] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.168496][T16743] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.191013][T16743] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.679730][ T7617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.696313][ T7617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.826338][T16854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.866492][ T7637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.896988][ T7637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.920335][T16854] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.966454][ T7637] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.973702][ T7637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.034327][ T7637] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.041577][ T7637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.326056][T16854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 741.939279][T16854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.130728][T16854] veth0_vlan: entered promiscuous mode [ 742.186404][T16854] veth1_vlan: entered promiscuous mode [ 742.356399][T16854] veth0_macvtap: entered promiscuous mode [ 742.423969][T16854] veth1_macvtap: entered promiscuous mode [ 742.540328][T16854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.569619][T16854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.629355][T16854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.660385][T16854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.674270][T16854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.691552][T16854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.701892][T16854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.712744][T16854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.724263][T16854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.734630][T16854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.745152][T16854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.756861][T16854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.771596][T16854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.801015][T16854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.821034][T16854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.841474][T16854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.881317][T16854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.938516][T16854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.031574][T16854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.079528][T16854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.141011][T16854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.149877][T16854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.145871][ T7618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.188398][ T7618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.280947][ T7618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.290264][ T7618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.642876][T17094] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2337'. [ 745.699235][T17094] netlink: 'syz.1.2337': attribute type 11 has an invalid length. [ 748.911797][T17174] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2359'. [ 752.589698][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.600946][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.298604][T17303] delete_channel: no stack [ 759.981977][ T29] audit: type=1326 audit(4294967355.180:18): auid=4294967295 uid=2 gid=0 ses=4294967295 subj=unconfined pid=17399 comm="syz.2.2421" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f3597dff9 code=0x0 [ 760.023347][ T29] audit: type=1326 audit(4294967355.210:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17399 comm="syz.2.2421" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f3597dff9 code=0x0 [ 766.112883][T17503] cgroup: fork rejected by pids controller in /syz0 [ 770.116328][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'. [ 771.170880][ T7637] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.363897][ T7637] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.600203][ T7637] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.687324][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 771.698142][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 771.707113][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 771.715797][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 771.724283][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 771.732771][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 771.833847][ T7637] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.170024][T13542] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 772.186234][T13542] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 772.195829][T13542] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 772.213117][T13542] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 772.221111][T13542] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 772.241111][T13542] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 772.305953][ T7637] bridge_slave_1: left allmulticast mode [ 772.351409][ T7637] bridge_slave_1: left promiscuous mode [ 772.357289][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.440930][ T7637] bridge_slave_0: left allmulticast mode [ 772.462527][ T7637] bridge_slave_0: left promiscuous mode [ 772.468696][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.814308][ T54] Bluetooth: hci0: command tx timeout [ 774.013173][ T7637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.032295][ T7637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.054744][ T7637] bond0 (unregistering): Released all slaves [ 774.275964][T17647] chnl_net:caif_netlink_parms(): no params data found [ 774.341418][ T54] Bluetooth: hci1: command tx timeout [ 774.797004][T17647] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.808625][T17647] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.819504][T17647] bridge_slave_0: entered allmulticast mode [ 774.827205][T17647] bridge_slave_0: entered promiscuous mode [ 775.001978][T17647] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.022750][T17647] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.061064][T17647] bridge_slave_1: entered allmulticast mode [ 775.068342][T17647] bridge_slave_1: entered promiscuous mode [ 775.186217][ T7637] hsr_slave_0: left promiscuous mode [ 775.229201][ T7637] hsr_slave_1: left promiscuous mode [ 775.245258][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.253432][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.271815][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.279299][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.326208][ T7637] veth1_macvtap: left promiscuous mode [ 775.332297][ T7637] veth0_macvtap: left promiscuous mode [ 775.337958][ T7637] veth1_vlan: left promiscuous mode [ 775.361093][ T7637] veth0_vlan: left promiscuous mode [ 775.851571][ T54] Bluetooth: hci0: command tx timeout [ 776.412035][ T54] Bluetooth: hci1: command tx timeout [ 776.492801][ T7637] team0 (unregistering): Port device team_slave_1 removed [ 776.539586][ T7637] team0 (unregistering): Port device team_slave_0 removed [ 776.633121][T17733] nfs: Bad value for 'source' [ 777.337618][T17647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.402911][T17647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.491665][T17651] chnl_net:caif_netlink_parms(): no params data found [ 777.562790][T17742] svc: failed to register nfsdv3 RPC service (errno 111). [ 777.579425][T17647] team0: Port device team_slave_0 added [ 777.581085][T17742] svc: failed to register nfsaclv3 RPC service (errno 111). [ 777.619278][T17647] team0: Port device team_slave_1 added [ 777.774208][T17647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.810897][T17647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.932316][T17647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.938411][ T54] Bluetooth: hci0: command tx timeout [ 778.011376][T17647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.018391][T17647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.061803][T17647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.221073][T17651] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.228990][T17651] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.272008][T17651] bridge_slave_0: entered allmulticast mode [ 778.305213][T17651] bridge_slave_0: entered promiscuous mode [ 778.335453][T17647] hsr_slave_0: entered promiscuous mode [ 778.354070][T17647] hsr_slave_1: entered promiscuous mode [ 778.367066][T17647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 778.393904][T17647] Cannot create hsr debugfs directory [ 778.433218][T17651] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.449742][T17651] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.466364][T17651] bridge_slave_1: entered allmulticast mode [ 778.492425][ T54] Bluetooth: hci1: command tx timeout [ 778.507299][T17651] bridge_slave_1: entered promiscuous mode [ 778.665739][T17651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.833294][T17651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.951504][ T7637] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.135306][ T7637] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.165393][T17651] team0: Port device team_slave_0 added [ 779.230379][T17651] team0: Port device team_slave_1 added [ 779.322243][ T7637] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.389358][T17651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.401249][T17651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.452473][T17651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.537943][ T7637] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.643617][T17651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.650639][T17651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.688745][T17651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.899528][T17651] hsr_slave_0: entered promiscuous mode [ 779.914892][T17651] hsr_slave_1: entered promiscuous mode [ 779.924260][T17651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 779.936248][T17651] Cannot create hsr debugfs directory [ 780.015339][ T54] Bluetooth: hci0: command tx timeout [ 780.482501][ T7637] bridge_slave_1: left allmulticast mode [ 780.488246][ T7637] bridge_slave_1: left promiscuous mode [ 780.509836][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.572663][ T54] Bluetooth: hci1: command tx timeout [ 780.576135][ T7637] bridge_slave_0: left allmulticast mode [ 780.599386][ T7637] bridge_slave_0: left promiscuous mode [ 780.621037][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.548516][ T7637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.576203][ T7637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.594838][ T7637] bond0 (unregistering): Released all slaves [ 782.361847][ T7637] hsr_slave_0: left promiscuous mode [ 782.372560][ T7637] hsr_slave_1: left promiscuous mode [ 782.386246][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.398124][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.418210][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.440877][ T7637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.500013][ T7637] veth1_macvtap: left promiscuous mode [ 782.505983][ T7637] veth0_macvtap: left promiscuous mode [ 782.512179][ T7637] veth1_vlan: left promiscuous mode [ 782.517670][ T7637] veth0_vlan: left promiscuous mode [ 783.875547][ T7637] team0 (unregistering): Port device team_slave_1 removed [ 783.953771][ T7637] team0 (unregistering): Port device team_slave_0 removed [ 784.906868][T17647] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 785.052827][T17647] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 785.140681][T17647] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 785.190219][T17647] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 785.737508][T17647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.815246][T17647] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.842744][ T7618] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.849953][ T7618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.926908][ T7618] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.934180][ T7618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.068860][T17651] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 786.085486][T17651] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 786.099169][T17651] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 786.116668][T17651] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 786.147939][T17647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 786.377848][T17651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.434388][T17651] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.465430][ T29] audit: type=1326 audit(8277292042.020:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17890 comm="syz.2.2509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f3597dff9 code=0x0 [ 786.559035][ T7618] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.566263][ T7618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.608099][ T7618] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.615322][ T7618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.732088][T17647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.933753][T17647] veth0_vlan: entered promiscuous mode [ 786.990732][T17647] veth1_vlan: entered promiscuous mode [ 787.098748][T17647] veth0_macvtap: entered promiscuous mode [ 787.169391][T17647] veth1_macvtap: entered promiscuous mode [ 787.255579][T17651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.279465][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.299042][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.321619][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.357855][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.368136][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.390962][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.418846][T17647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.465036][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.502270][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.531017][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.537298][T17923] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2510'. [ 787.561233][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.580985][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.587662][T17923] netlink: 'syz.2.2510': attribute type 11 has an invalid length. [ 787.612026][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.634695][T17647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.706026][T17647] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.735640][T17647] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.751347][T17647] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.760466][T17647] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.952777][T17651] veth0_vlan: entered promiscuous mode [ 788.087484][T17651] veth1_vlan: entered promiscuous mode [ 788.144561][ T7618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.181123][ T7618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.242262][T17651] veth0_macvtap: entered promiscuous mode [ 788.270631][ T7618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.300510][ T7618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.303428][T17651] veth1_macvtap: entered promiscuous mode [ 788.369464][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.420831][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.430715][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.464809][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.490876][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.521019][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.551016][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.581231][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.616556][T17651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.623323][T17935] can: request_module (can-proto-3) failed. [ 788.653823][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.710832][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.720719][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.769781][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.791771][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.840951][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.881099][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.901161][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.930465][T17651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.970250][T17651] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.008329][T17651] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.046381][T17651] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.069284][T17651] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.089815][T17963] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2517'. [ 789.135993][T17963] netlink: 'syz.2.2517': attribute type 11 has an invalid length. [ 789.483636][ T7618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.497891][ T7618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.565973][T14304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.593410][T14304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.051163][T18023] can: request_module (can-proto-5) failed. [ 795.816719][T18162] openvswitch: netlink: Flow key attr not present in new flow. [ 801.623586][T18266] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2569'. [ 801.741822][T18266] netlink: 'syz.1.2569': attribute type 11 has an invalid length. [ 806.640206][T18363] netlink: zone id is out of range [ 806.658969][T18363] netlink: zone id is out of range [ 806.664177][T18363] netlink: zone id is out of range [ 806.688971][T18363] netlink: zone id is out of range [ 806.712321][T18363] netlink: zone id is out of range [ 806.729443][T18363] netlink: zone id is out of range [ 806.739261][T18363] netlink: zone id is out of range [ 806.769402][T18363] netlink: zone id is out of range [ 806.774674][T18363] netlink: zone id is out of range [ 806.788894][T18363] netlink: zone id is out of range [ 807.711051][T18391] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2604'. [ 807.763537][T18391] HSR: entered promiscuous mode [ 810.515771][T18422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2614'. [ 814.008068][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.014630][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 821.601524][T18611] delete_channel: no stack [ 822.021546][ T29] audit: type=1800 audit(8277292041.893:21): pid=18625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2655" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 830.337229][T18773] svc: failed to register nfsdv3 RPC service (errno 111). [ 830.401573][T18773] svc: failed to register nfsaclv3 RPC service (errno 111). [ 834.430095][T18839] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2707'. [ 834.455197][T18839] netlink: 'syz.2.2707': attribute type 11 has an invalid length. [ 834.750800][ T7610] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.027206][ T7610] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.401833][ T7610] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.776711][ T7610] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.437593][ T7610] bridge_slave_1: left allmulticast mode [ 836.443326][ T7610] bridge_slave_1: left promiscuous mode [ 836.461043][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.536317][ T7610] bridge_slave_0: left allmulticast mode [ 836.543756][ T7610] bridge_slave_0: left promiscuous mode [ 836.574650][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.815013][T13542] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 837.853445][T13542] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 837.869537][T13542] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 837.879619][T13542] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 837.903644][T13542] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 837.915599][T13542] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 839.250885][ T7610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.305243][ T7610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.334588][ T7610] bond0 (unregistering): Released all slaves [ 839.992785][T13542] Bluetooth: hci2: command tx timeout [ 841.925790][T18901] chnl_net:caif_netlink_parms(): no params data found [ 842.071437][T13542] Bluetooth: hci2: command tx timeout [ 842.267896][ T7610] hsr_slave_0: left promiscuous mode [ 842.451321][ T7610] hsr_slave_1: left promiscuous mode [ 842.462402][ T7610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.542250][ T7610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.191333][T13542] Bluetooth: hci2: command tx timeout [ 844.534591][ T7610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.542997][ T7610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.752089][ T7610] veth1_macvtap: left promiscuous mode [ 844.783536][ T7610] veth0_macvtap: left promiscuous mode [ 844.789209][ T7610] veth1_vlan: left promiscuous mode [ 844.851854][ T7610] veth0_vlan: left promiscuous mode [ 846.229308][T13542] Bluetooth: hci2: command tx timeout [ 846.952089][ T7610] team0 (unregistering): Port device team_slave_1 removed [ 847.157969][ T7610] team0 (unregistering): Port device team_slave_0 removed [ 850.115633][T18901] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.125035][T18901] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.143822][T18901] bridge_slave_0: entered allmulticast mode [ 850.174598][T18901] bridge_slave_0: entered promiscuous mode [ 850.253660][T18901] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.274614][T18901] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.374629][T18901] bridge_slave_1: entered allmulticast mode [ 850.398387][T18901] bridge_slave_1: entered promiscuous mode [ 850.592150][T18901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.631165][T18901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.836632][T18901] team0: Port device team_slave_0 added [ 850.889370][T18901] team0: Port device team_slave_1 added [ 851.094174][T18901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.126390][T18901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.217224][T18901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.288146][T18901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.336122][T18901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.439442][T18901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.684250][T18901] hsr_slave_0: entered promiscuous mode [ 851.708202][T18901] hsr_slave_1: entered promiscuous mode [ 851.826093][T18901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 851.855245][T18901] Cannot create hsr debugfs directory [ 855.421249][T19091] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2747'. [ 855.468557][T19091] netlink: 'syz.0.2747': attribute type 11 has an invalid length. [ 856.298218][T18901] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 856.365748][T18901] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 856.405084][T18901] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 856.442765][T18901] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 856.780410][T18901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.880573][T18901] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.947896][ T7637] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.955127][ T7637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.025510][ T7637] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.032719][ T7637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.572738][T19111] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2752'. [ 857.582287][T19111] netlink: 'syz.0.2752': attribute type 11 has an invalid length. [ 858.394426][T19122] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2753'. [ 858.437055][T19122] netlink: 'syz.0.2753': attribute type 11 has an invalid length. [ 858.588388][T18901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.986532][T18901] veth0_vlan: entered promiscuous mode [ 859.029030][T18901] veth1_vlan: entered promiscuous mode [ 859.214764][T19135] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2755'. [ 859.224096][T19135] netlink: 'syz.0.2755': attribute type 11 has an invalid length. [ 859.448239][T18901] veth0_macvtap: entered promiscuous mode [ 859.461567][T18901] veth1_macvtap: entered promiscuous mode [ 859.478170][T18901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.488794][T18901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.498713][T18901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.509458][T18901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.519579][T18901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.530485][T18901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.540430][T18901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.550976][T18901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.562413][T18901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.573406][T18901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.584008][T18901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.593895][T18901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.604516][T18901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.614598][T18901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.625128][T18901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.635081][T18901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.645642][T18901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.656908][T18901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.667346][T18901] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.676208][T18901] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.684982][T18901] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.693782][T18901] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.713425][T19136] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2750'. [ 859.795222][T19136] netlink: 'syz.3.2750': attribute type 11 has an invalid length. [ 860.149075][T19143] svc: failed to register nfsdv3 RPC service (errno 111). [ 860.205625][T19143] svc: failed to register nfsaclv3 RPC service (errno 111). [ 860.313373][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.321890][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.640320][ T7617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.672105][ T7617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.151898][T19224] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2766'. [ 863.180348][T19224] netlink: 'syz.3.2766': attribute type 11 has an invalid length. [ 864.766644][T19282] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2775'. [ 864.809642][T19282] netlink: 'syz.3.2775': attribute type 11 has an invalid length. [ 867.375958][T19375] can: request_module (can-proto-0) failed. [ 867.647003][T19383] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2792'. [ 875.430272][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.436686][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.625838][T19587] Process accounting resumed [ 883.393619][T19662] can: request_module (can-proto-4) failed. [ 884.489544][T19688] Process accounting resumed [ 892.999788][T19795] Oops: general protection fault, probably for non-canonical address 0xdffffc0000002c03: 0000 [#1] PREEMPT SMP KASAN PTI [ 893.012490][T19795] KASAN: probably user-memory-access in range [0x0000000000016018-0x000000000001601f] [ 893.022045][T19795] CPU: 0 UID: 0 PID: 19795 Comm: syz.2.2888 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 893.032828][T19795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 893.042900][T19795] RIP: 0010:__smc_diag_dump.constprop.0+0x3e2/0x2500 [ 893.049624][T19795] Code: 4c 8b b3 58 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 43 5c d2 f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 86 1c 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 893.069252][T19795] RSP: 0018:ffffc90009b87160 EFLAGS: 00010206 [ 893.075421][T19795] RAX: dffffc0000000000 RBX: ffff88803449f300 RCX: ffffffff88fe40a4 [ 893.083404][T19795] RDX: 0000000000002c03 RSI: ffffffff8aba5d8d RDI: 0000000000016018 [ 893.091394][T19795] RBP: ffff88805fd4d5e0 R08: 0000000000000005 R09: 0000000000000000 [ 893.099396][T19795] R10: 0000000080000001 R11: 0000000000000000 R12: 0000000000000000 [ 893.107383][T19795] R13: ffff88807a188000 R14: 0000000000016000 R15: 0000000000000002 [ 893.115371][T19795] FS: 00007f5f367ab6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 893.124325][T19795] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 893.130928][T19795] CR2: 00007f201f0cfd58 CR3: 000000007f8ea000 CR4: 00000000003526f0 [ 893.138915][T19795] Call Trace: [ 893.142233][T19795] [ 893.145178][T19795] ? die_addr+0x3b/0xa0 [ 893.149356][T19795] ? exc_general_protection+0x155/0x230 [ 893.154937][T19795] ? asm_exc_general_protection+0x26/0x30 [ 893.160686][T19795] ? sock_diag_save_cookie+0x44/0xd0 [ 893.165996][T19795] ? __smc_diag_dump.constprop.0+0x3cd/0x2500 [ 893.172086][T19795] ? __smc_diag_dump.constprop.0+0x3e2/0x2500 [ 893.178179][T19795] ? __pfx_mark_lock+0x10/0x10 [ 893.182992][T19795] ? __pfx___smc_diag_dump.constprop.0+0x10/0x10 [ 893.189358][T19795] ? hlock_class+0x4e/0x130 [ 893.193902][T19795] ? __lock_acquire+0x163e/0x3ce0 [ 893.198968][T19795] ? __pfx___lock_acquire+0x10/0x10 [ 893.204205][T19795] ? mark_held_locks+0x9f/0xe0 [ 893.209010][T19795] ? lock_acquire.part.0+0x11b/0x380 [ 893.214336][T19795] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 893.220011][T19795] ? rcu_is_watching+0x12/0xc0 [ 893.224793][T19795] ? trace_lock_acquire+0x14a/0x1d0 [ 893.230014][T19795] ? smc_diag_dump_proto+0x103/0x420 [ 893.235342][T19795] ? lock_acquire+0x2f/0xb0 [ 893.239884][T19795] ? smc_diag_dump_proto+0x103/0x420 [ 893.245209][T19795] smc_diag_dump_proto+0x26d/0x420 [ 893.250351][T19795] smc_diag_dump+0x27/0x90 [ 893.254795][T19795] netlink_dump+0x552/0xcc0 [ 893.259319][T19795] ? __pfx_netlink_dump+0x10/0x10 [ 893.264378][T19795] ? __mutex_lock+0x1a6/0x9c0 [ 893.269095][T19795] ? find_held_lock+0x2d/0x110 [ 893.273898][T19795] ? lock_acquire+0x2f/0xb0 [ 893.278433][T19795] ? netlink_lookup+0x3d/0x270 [ 893.283229][T19795] __netlink_dump_start+0x6d9/0x980 [ 893.288469][T19795] smc_diag_handler_dump+0x1fb/0x240 [ 893.293784][T19795] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 893.299616][T19795] ? trace_lock_acquire+0x14a/0x1d0 [ 893.304843][T19795] ? __pfx_smc_diag_dump+0x10/0x10 [ 893.309987][T19795] sock_diag_rcv_msg+0x437/0x790 [ 893.314956][T19795] netlink_rcv_skb+0x165/0x410 [ 893.319746][T19795] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 893.325229][T19795] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 893.330563][T19795] ? netlink_deliver_tap+0x1ae/0xcf0 [ 893.335890][T19795] netlink_unicast+0x53c/0x7f0 [ 893.340698][T19795] ? __pfx_netlink_unicast+0x10/0x10 [ 893.346021][T19795] ? __phys_addr_symbol+0x30/0x80 [ 893.351084][T19795] ? __check_object_size+0x488/0x710 [ 893.356411][T19795] netlink_sendmsg+0x8b8/0xd70 [ 893.361229][T19795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.366585][T19795] ____sys_sendmsg+0x9ae/0xb40 [ 893.371410][T19795] ? copy_msghdr_from_user+0x10b/0x160 [ 893.376913][T19795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 893.382225][T19795] ? hlock_class+0x4e/0x130 [ 893.386778][T19795] ? __pfx___lock_acquire+0x10/0x10 [ 893.392049][T19795] ___sys_sendmsg+0x135/0x1e0 [ 893.396773][T19795] ? __pfx____sys_sendmsg+0x10/0x10 [ 893.402026][T19795] ? lock_acquire+0x2f/0xb0 [ 893.406565][T19795] ? __fget_files+0x40/0x3f0 [ 893.411198][T19795] ? fdget+0x176/0x210 [ 893.415289][T19795] __sys_sendmsg+0x117/0x1f0 [ 893.419912][T19795] ? __pfx___sys_sendmsg+0x10/0x10 [ 893.425054][T19795] do_syscall_64+0xcd/0x250 [ 893.429594][T19795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.435516][T19795] RIP: 0033:0x7f5f3597dff9 [ 893.439948][T19795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 893.459678][T19795] RSP: 002b:00007f5f367ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 893.468135][T19795] RAX: ffffffffffffffda RBX: 00007f5f35b36058 RCX: 00007f5f3597dff9 [ 893.476131][T19795] RDX: 000000000400c000 RSI: 0000000020000140 RDI: 0000000000000006 [ 893.484120][T19795] RBP: 00007f5f359f0296 R08: 0000000000000000 R09: 0000000000000000 [ 893.492105][T19795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 893.500093][T19795] R13: 0000000000000000 R14: 00007f5f35b36058 R15: 00007ffcce14a668 [ 893.508089][T19795] [ 893.511121][T19795] Modules linked in: [ 893.516195][T19795] ---[ end trace 0000000000000000 ]--- [ 893.522656][T19795] RIP: 0010:__smc_diag_dump.constprop.0+0x3e2/0x2500 [ 893.529627][T19795] Code: 4c 8b b3 58 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 43 5c d2 f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 86 1c 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 893.549564][T19795] RSP: 0018:ffffc90009b87160 EFLAGS: 00010206 [ 893.555684][T19795] RAX: dffffc0000000000 RBX: ffff88803449f300 RCX: ffffffff88fe40a4 [ 893.563929][T19795] RDX: 0000000000002c03 RSI: ffffffff8aba5d8d RDI: 0000000000016018 [ 893.572382][T19795] RBP: ffff88805fd4d5e0 R08: 0000000000000005 R09: 0000000000000000 [ 893.580774][T19795] R10: 0000000080000001 R11: 0000000000000000 R12: 0000000000000000 [ 893.589060][T19795] R13: ffff88807a188000 R14: 0000000000016000 R15: 0000000000000002 [ 893.597347][T19795] FS: 00007f5f367ab6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 893.606634][T19795] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 893.613457][T19795] CR2: 00007f201f0cfd58 CR3: 000000007f8ea000 CR4: 00000000003526f0 [ 893.621670][T19795] Kernel panic - not syncing: Fatal exception [ 893.628072][T19795] Kernel Offset: disabled [ 893.632403][T19795] Rebooting in 86400 seconds..