last executing test programs: 9.33335469s ago: executing program 2 (id=3669): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) setuid$auto(0xe) msgctl$auto(0x0, 0x0, 0x0) tkill$auto(0x80000000000001, 0x7) keyctl$auto(0x2000000000000012, 0x7fff, 0x5069, 0x1, 0x65c) socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fcntl$auto(0x3, 0x4, 0xa553) connect$auto(0x3, &(0x7f0000000040)={0x2, @sa_data_min="d1b9735c9faefa79bf4170f67833"}, 0x55) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) shutdown$auto(0x200000003, 0x2) 7.905873965s ago: executing program 2 (id=3672): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x403, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0xfffffffe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) bind$auto(0x8, 0xfffffffffffffffd, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x7ff, 0x8000) clone$auto(0x7, 0x7, 0xffffffffffffffff, 0x0, 0x7) ioprio_get$auto(0x2000000002, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fstatfs$auto(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4) keyctl$auto(0xe, 0x2, 0x16efae4c, 0x8000005092, 0x61f93bdb) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x6, 0x0) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) 7.092805447s ago: executing program 2 (id=3675): mkdir$auto(&(0x7f0000000280)='}[\xe8QG\x06,&*}\x00\xda\r\x01@l\xefr\x84\xc9{\xc7\x12D\x98a/W\xfd<\xebs\x17\anA-\xe3\xbb\\\xa6i\xccQ\x98\x01\x87\xdb]\r\xd3\x0f\xc0\x93\x0eM=C\xe1l \t\xcf\xdeQ\x82\x97a\xbc\xe5\xe1\xa2\xa6Q\xb4\xbf\x7f\x8d\x0fDZ\x93\x1d\xb2E\xde]\xe7\x00;\xb4\xaf\xccV\xcf\x87\x9b\xdb\xc4\x91m\x02\x80hEA\xb5\xe6\xff\x9e\x9f`\xd8\x1c\xd6\xa3\xdb\xd2)!\xe4\xfc3\x91\xc3Y~\\\xd4\xa0)\xdczs\x84\x06\x80\xfc\xa9\xceO\xcc\xbc\x93\xbe\x14\x8e-&=\x84\xcey\xb4ywT\xb4\'Ob\x95\b\x0e\xc3\xe5\xe6\xc7[\xdd\n0\xd5\x98\xe3Mt\xe5\xab\x8d\xa9\x90', 0x8001) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare$auto(0x20000) mount$auto(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\x83\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)\x1f\xbby\xe5\xc4w\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0Z>\xe1=\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x00'/192, 0x4, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r2, 0x0) socket(0xa, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x4000080) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$auto(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\x83\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)\x1f\xbby\xe5\xc4w\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0Z>\xe1=\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x00'/192, 0x4, 0x0) 6.116604649s ago: executing program 3 (id=3677): close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0xf, 0xf, 0x400000bb) socket(0x2a, 0x2, 0x400000) (async) socket(0x2a, 0x2, 0x400000) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 5.867843777s ago: executing program 3 (id=3678): r0 = socket(0x10, 0x2, 0x4) sendfile$auto(0x1, 0x3, 0x0, 0xc01) (async) socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (async) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0xa, 0x1a0, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x1) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x2, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0x401, 0x8000) (rerun: 32) getsockopt$auto(0x100000006, 0x0, 0x3, 0xffffffffffffffff, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioperm$auto(0x8, 0x9, 0x500402) (async) setsockopt$auto(0x3, 0x7, 0x10004d, 0xffffffffffffffff, 0x7) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), r1) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x28044004) (async, rerun: 64) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) shmat$auto(0x0, 0x0, 0x0) clone$auto(0x40083b42, 0x5c84, 0xfffffffffffffffe, 0x0, 0x100000000000f) 5.793646694s ago: executing program 1 (id=3679): memfd_create$auto(0x0, 0xe) mmap$auto(0x7, 0x400008, 0xe1, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) execve$auto(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_VDPA_CMD_DEV_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC=r0], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) 5.347194693s ago: executing program 1 (id=3680): syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fcntl$auto(0x4, 0x4, 0xa553) shutdown$auto(0x5, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xc8, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xe4}, @NL80211_ATTR_MLD_ADDR={0x15, 0x13a, "e89542e06748d1a58119fbdfb7fcbeaa8d"}, @NL80211_ATTR_REKEY_DATA={0x61, 0x7a, "3c9666bd9b98e452d3d138c7b9e7ad4215214356757f920f2d792263605f45baed6aa8227e12c15d979960d77e30525b394b9f83a5b26e35384f5b906713c14b255bd9654455640f1f8c90307f9536196d0ec1c600bb7024143d90c43b"}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xffff}, @NL80211_ATTR_TID_CONFIG={0x11, 0x11d, "85a9ee57c403bc1386931273b4"}, @NL80211_ATTR_STA_WME={0x6, 0x81, 0x9}]}, 0xc8}, 0x1, 0x0, 0x0, 0x48000}, 0x1) socket(0xa, 0x2, 0x73) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmmsg$auto(0x3, 0x0, 0x200, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xc, 0x8000) clone$auto(0x8000000000000000, 0x104, 0xfffffffffffffffc, 0x0, 0x100000000) r1 = socket(0x21, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(r0, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(r1, 0x200499) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) madvise$auto(0x0, 0x3, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x8000) 4.287998282s ago: executing program 2 (id=3681): sendmmsg$auto(0x8, &(0x7f0000000080)={{0x0, 0x10001, 0x0, 0x9, &(0x7f0000000300), 0x24, 0xfffffffb}, 0x4}, 0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x24, 0x697b}, 0xed7138c}, 0x9a6, 0x0) 3.047600939s ago: executing program 2 (id=3683): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioperm$auto(0xde, 0x9, 0x100402) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) fanotify_init$auto(0x5, 0x2000000000002) (async) socket(0x26, 0x80805, 0x0) (async) socket(0x2c, 0x80003, 0x0) (async) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) bpf$auto(0x4, &(0x7f00000001c0)=@test={0x2, 0x80, 0x2, 0x0, 0x101, 0x8, 0x9, 0x3, 0x3, 0xdd78, 0x5, 0x8, 0x5e0, 0x4, 0x4}, 0xc) (async) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x2, &(0x7f0000000180), 0x83) (async) fremovexattr$auto(0x2, 0x0) (async) mmap$auto(0x1, 0x400008, 0x10001003, 0x9b72, 0x2, 0x800008000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) prctl$auto(0x5, 0x7, 0x7, 0x8, 0x5) (async) sendto$auto(0xffffffffffffffff, &(0x7f0000000000)=[0x0, 0x7fffffffffffffff, 0x2, 0x1, 0x3, 0xf, 0x8, 0x9], 0x5, 0xaa0, &(0x7f0000000040)={0x8, @sa_data_min="27407395e5133bce4c8ace682859"}, 0x7) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) kill$auto(0x8000000000000001, 0xb) 2.82400984s ago: executing program 0 (id=3684): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timerfd_create$auto(0x9, 0x0) timerfd_create$auto(0x53, 0x5) semctl$auto(0x1ff, 0x2, 0x13, 0x4) ioctl$auto(0x3, 0x40085400, 0x5) readv$auto(0x3, &(0x7f0000000380)={0x0, 0x100}, 0x3) 2.519735124s ago: executing program 3 (id=3685): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x79, 0x0, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') fcntl$auto(0x0, 0x402, 0x80000001) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x804) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_GET_STATION(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_PMK={0xd, 0xfe, "1a9db9db2841cce8e3"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') socket(0x2b, 0x1, 0x1) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x8000000000000006, 0x22, 0x0, 0x7ffffc) 2.471367112s ago: executing program 0 (id=3686): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) sysfs$auto(0x2, 0x100000000000033, 0x0) (rerun: 32) fsopen$auto(0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (async, rerun: 32) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) prctl$auto(0x8, 0x1, 0x6, 0x1, 0xfff) (async) setuid$auto(0x81) io_cancel$auto(0x9, &(0x7f0000000000)={0x8, 0x7, 0x3ff, 0x3, 0x9, 0x1, 0xe43d, 0xfffffffffffffff9, 0x7, 0x0, 0x3}, &(0x7f0000000040)={0x6, 0x1, 0x6, 0xc1c5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20000000) (async) syz_genetlink_get_family_id$auto_nfsd(0x0, r1) (async) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVEDEF(r1, 0x0, 0x8000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01032bbd7000ffdbdf2522"], 0x14}, 0x1, 0x0, 0x0, 0x7}, 0x4010) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async, rerun: 32) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x20000000008000) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_open_procfs$namespace(0x0, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6645148a27308d41}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x48000) swapon$auto(&(0x7f0000000000)='X))\x00', 0x5259) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IEEE802154_ASSOCIATE_REQ(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x884) (async) dup2$auto(r4, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000001c0), r4) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x4000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2.161306619s ago: executing program 1 (id=3687): rt_sigqueueinfo$auto(0x9, 0x8, &(0x7f0000000000)={@siginfo_0_0={0xacb4, 0x5, 0xfffffffa, @_sigsys={0x0, 0x4, 0xfffffffe}}}) r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7002ffdbdf2502d6322c09"], 0x24}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async, rerun: 32) r1 = socket(0x10, 0x2, 0x0) (rerun: 32) recvfrom$auto(r1, &(0x7f00000000c0)=[0xab, 0x2, 0x401, 0x5, 0x2aa, 0x6, 0x12925c7e], 0x2, 0x1ff, &(0x7f0000000100)={0x7, @sockaddr_1_1={"c0922b9a9172c1e7662e6c51344f56f51eb5e374fc0d67ca103f6639a7db497ed1af9b240d569514d126"}}, &(0x7f0000000180)=0x1) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) capset$auto(&(0x7f00000001c0)={0xf}, &(0x7f0000000200)={0x5, 0x80000001, 0x2}) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) 1.799894838s ago: executing program 1 (id=3688): mmap$auto(0x0, 0x9, 0xe2, 0x15, 0xc01, 0x8002) (async) close_range$auto(0xffffffffffffffff, 0x8000, 0x7fffffff) (async) socket(0x1, 0x5, 0x0) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xe, 0x6, 0x400000000000013, 0x3, 0x8000) r0 = socket(0x2, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) (async) open(&(0x7f00000000c0)='./cgroup\x00', 0x70001, 0x34) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) socket(0x28, 0x5, 0x0) (async) open_by_handle_at$auto(0x4, 0xffffffffffffffff, 0x9658) (async) settimeofday$auto(&(0x7f0000000180)={0x1ed5d7403, 0x1}, 0x0) connect$auto(0x3, &(0x7f0000000040)={0x28, @sockaddr_1_1={'o'}}, 0x3) (async) ioctl$auto(0x3, 0x800005411, 0x38) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0xc, 0x9, 0x0, 0xc}, 0x283) socket(0x5, 0x5, 0x4) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0x50, 0x5, 0x8002) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0xd, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="14694dde", @ANYRES16=r2, @ANYBLOB="060028bd7000fadbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4004004) (async) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002c80), r1) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) mlockall$auto(0x7) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(0x0, 0x3, 0xc0, &(0x7f0000000040)={0xe10, 0x15af, 0x9, 0x1b}) 1.685269021s ago: executing program 3 (id=3689): mmap$auto(0x800000f000, 0x9a79, 0x1000000003, 0x9b72, 0x2, 0x8000) mmap$auto(0x7, 0x7, 0x5, 0x10, 0x5, 0x3) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) (async) setrlimit$auto(0x1000000007, 0x0) socket(0x22, 0x2, 0x24) mmap$auto(0x249, 0x6f6d79a7, 0x7fff, 0x16, 0x7ff, 0x10000000000000) (async) mmap$auto(0x249, 0x6f6d79a7, 0x7fff, 0x16, 0x7ff, 0x10000000000000) 1.589671761s ago: executing program 1 (id=3690): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) acct$auto(0x0) mmap$auto(0x0, 0x4, 0x4000000020df, 0x40eb2, 0x402, 0x300000000000) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x23) bpf$auto(0x10, 0x0, 0x9) 1.499931896s ago: executing program 3 (id=3691): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) socket(0xa, 0x801, 0x4) rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7fffffff, 0x8000) arch_prctl$auto(0x5001, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x3, 0x20009, 0x4000000000df, 0xeb1, 0x80000001, 0x8000) sysfs$auto(0x1, 0x0, 0x101) io_pgetevents$auto(0x1bb7ceb5, 0x100000000000ef, 0x100000001, 0x0, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe09, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) connect$auto(0x3, &(0x7f0000000100)={0x7fff, @sa_data_min="5448a2de881205b4bce899ba8e3e"}, 0x53) socket(0xa, 0x2, 0x0) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x800000000000008, 0xc, 0x9, 0x3, 0x6, 0x1, 0x40009, 0xcd16, 0x4000000000000000, 0x14, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f00000018c0)={0x2, @sa_data_min="915bac14140ba3df94bb303b2f9d"}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x80003, 0x300) write$auto(0x3, 0x0, 0xfdef) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f00000018c0)={0x2, @sa_data_min="915bac14140ba3df94bb303b2f9d"}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) prctl$auto(0x23, 0x3, 0x2008, 0x0, 0x0) 1.472365945s ago: executing program 0 (id=3692): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f00000001c0)='\xc4--:\xdd:,.\xa1K\'\a6\xeb\x9a\xcb\xd5:J\xf2\x1e\x8fj\xa5\xd7l(\x10b\xc3\x95tl\xca\n\"{l\b\xaa+w \x7f\x042\xbe\x95`\xb0o\xe7\x84\xcd\xf7\xb4\xc1\x89\xabR\x16\xca\xa86\xbf\x9e\xff\xc0r\xa7\xa7[\xd2\xc0\xcf \xefZ\x9b\x01\x82$5_\x14z1\x1b:um\xcc*(cB\x05\xcd\x018\x80\x86\x87\xd2\x84`0\xda\xc8Y\x83>*\x9e\xf7!v\xf0\xeb\x1e\xd3\xd1&H<\x7f\xf7\x9f\xc28\xc9ViL7c?\xd75\x8f\xff\"\xf8\x93#\xa49\'\xd5\xbeH\x82\n\xe3\x19\xd4\t\xd5Eu\x05\xf4b\xc8\x99\x17\xee*D\x86\xa2\x9f\xa0\x9f\xca$\xcf\x19\xb34o\xbc\xd8h\x97\xcdB\x8b\x03\xaa#\xff\xd1l\xbc\v\f-k\x9d\xf5\xde\xb3\xb3pf\x02\x8b:\x13\x00\xdf\xb4\xd4f0\xffZ\x84\xd8\xce\xa8{@\x90\xd0\xb00\xb2\xd0(\x9fy\xb7\x02\xbcn\x03\xceF\xbc\xf1rK\x8e\x17+\xa2\x8aG\xed\x12\xfds\x1d\x13;\x16\xbcdZ\x90\x8e\xe8\x88\x17r\x1fJ\xb5\r\x93\xbb\xe8Z\xae%\x1a\x9b<\a\t\\,<\x04a\x84\xe7\xea\xefq8\xb3\x93GF&\xda\x9dn\xdf:\xe9nf;\x85\x1a\xe5\x03\xaf\xd5\xdb\xdeDSE\xae\xae\x1e\x0e\xab\xbc\x8az\x959J\a\x83\xf0\x1d\xc5\xca\xb38\xe2\x1d \xd4\x00'/356, 0x4) mmap$auto(0x8000000, 0xf0ffff, 0x1000000016, 0x13, 0x3, 0x180000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r2, 0x5, 0x419c, &(0x7f0000000080)='ovs_vport\x00', 0x4) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000540), r0) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x228, r3, 0x0, 0x70bd29, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x3f, 0x8, 0x0, 0xfffffffffffffffb, 0x9, 0x76, 0xfffffffffffff442, 0xfffffffffffffff9}}, @OVS_VPORT_ATTR_UPCALL_PID={0xfd, 0x5, "d6f8cccff191dce54a513fb3ab15554772b8587e4d48ae82b1f7d9448968ad2c79832472b5fbb98ef8e854bdbab059cb4a328e5a2e61669b743e0aab7857aaa007bf86e3132623649a92775ae670e477b9b28bef23636d9b84adcb61ddc8e096d61f16fb9ef2d1054c99bf77a36310574e41abccd599cc2b641fd0d88e9188864a3fbdd76e5b7c2401f322503d5a662d9a52803a902cb4bec61de23d3fb24b5dc52666c0c7239687ce2f16b60afc82bec7561892229356380c4d3ea8b83314def691c6325cd551fff644dfcf0797712d37082e5640f3dad5a81467351e6dc5d3e814f5f6bc14d525aaede9daa8179098627a00287c680588ac"}, @OVS_VPORT_ATTR_UPCALL_STATS={0xc8, 0xa, "673e9b8ee449b28063293f10e5a88104688a5e290d65e9e5e525d6560e3e9c02898dd30afcfa7ee6919f263066ad2f76303f59c97918b21169cb736c2c3360f989b9d873d59bdbd323f4209345017f891cf7258231190e849293bce5f2c747a424f3ebe8be368c2147193c40b11bd470e9eca8b0c6b81410749ac7b8818c2914e7ab601193ef325b31925d52ddb52f695ddd71bb95bbb21d2bee62f265a887f5a9be16ddb4c8b20f19b628ef4f698693e004abad06c9862c22ddd603a1eaea81239b927c"}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x4}]}, 0x228}, 0x1, 0x0, 0x0, 0x24004040}, 0x41) io_setup$auto(0x0, &(0x7f0000000000)) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB='A\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x10000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x2000, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x20200, 0x15) setsockopt$auto(0x4, 0x0, 0x32, 0xfffffffffffffffe, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="080029bd70f474c2ce00ffdbdf25060000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) ustat$auto(0x5, &(0x7f0000000500)={0xfffffffb, 0xd3, "09632905a894", "a0e9061c46aa"}) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) 1.125168222s ago: executing program 1 (id=3693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x301, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) bpf$auto(0x5, &(0x7f0000000000)=@test={0x9, 0x1, 0xa93f, 0x9, 0x3, 0x3, 0x3da1, 0x0, 0xb4, 0x5, 0x140000000000, 0x0, 0x7fffffff, 0x9, 0x1}, 0x171) io_uring_setup$auto(0x6, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) ioctl$auto(0xffffffffffffffff, 0x7, 0x7) mmap$auto(0xe, 0x81, 0x4, 0x17, 0x329, 0xc8f) clock_adjtime$auto(0x1, &(0x7f0000000000)={0x7, 0x8, 0x4, 0x8, 0x7fffffbf, 0xffffffc0, 0x6, 0x5, 0x3, {0x601a64af, 0x8}, 0xb9, 0x0, 0x1000, 0x2, 0xb, 0x5, 0x10001, 0x101, 0x7fff, 0x3}) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setfsuid$auto(0x2) 1.109840099s ago: executing program 0 (id=3694): fanotify_init$auto(0x602, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$auto(&(0x7f0000000040), 0x0, 0x0, 0x8, 0x0) ioperm$auto(0x101, 0x9, 0x5) socket(0x2, 0x6, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) recvmsg$auto(0x4, 0x0, 0x33c) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(0x0, r0) socket(0x2, 0x5, 0x0) listen$auto(0x3, 0x81) socket(0x26, 0x80805, 0x0) socket(0x2, 0x2, 0x1) ioctl$auto(0xc9, 0x100000002, 0x4000000005c8d) munmap$auto(0x1000000, 0x2000000c) madvise$auto(0x0, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) mmap$auto(0x400000000000, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x55) io_uring_setup$auto(0x6, 0x0) write$auto(0x3, 0x0, 0xfdef) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x101, 0x9, 0x4, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xf1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 250.568147ms ago: executing program 0 (id=3695): eventfd$auto(0x8c) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x6, 0x0) io_uring_setup$auto(0x6, 0x0) write$auto(0x3, 0x0, 0xff) close_range$auto(0x2, 0x8000, 0x0) memfd_create$auto(0x0, 0xa) statmount$auto(0x0, 0x0, 0xe3c, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, 0x0, 0x24080090) migrate_pages$auto(0x1, 0x9, &(0x7f0000000800)=0x3, &(0x7f0000000840)=0x2) 66.747855ms ago: executing program 0 (id=3696): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) memfd_secret$auto(0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async, rerun: 64) socket(0xa, 0x3, 0x3a) (async, rerun: 64) socket(0x2b, 0x1, 0x1) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42b"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async, rerun: 64) r1 = socket(0x2, 0x801, 0x100) (rerun: 64) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x2a0080c0) recvmmsg$auto(0x5, &(0x7f0000000580)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x80000001}, 0x4}, 0x3, 0x6, 0x0) socket(0xa, 0x3, 0x3a) (async) r2 = getpid() pidfd_open$auto(r2, 0x0) (async, rerun: 64) process_madvise$auto(0x1, 0xfffffffffffffffc, 0x0, 0x14, 0x8000000000000000) (async, rerun: 64) mmap$auto(0x0, 0x8, 0xfffffffffffffffa, 0x13, 0x3, 0x0) (async) pipe2$auto(0x0, 0x80) (async) sendfile$auto(0x6, 0x3, 0x0, 0xc01) 65.141725ms ago: executing program 3 (id=3697): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x5, &(0x7f0000000000)=@test={r0, 0x3, 0x5, 0x8000, 0x7fffffffffffffff, 0x5, 0x10001, 0xeed2, 0x4, 0x2, 0x92a, 0x5e4, 0x5, 0xc, 0xd}, 0xfffffffd) socket$nl_generic(0x10, 0x3, 0x10) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x1) mlockall$auto(0x8000d) madvise$auto(0x0, 0x7, 0xfffffffa) mlockall$auto(0x3) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) semctl$auto(0x0, 0xfffffffffffffffa, 0x100000001, 0x95cc) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0xf6c0, 0x1, 0x7a2, 0x12, 0x0, 0x6) epoll_create$auto(0x4) madvise$auto(0x0, 0x7ffffffffffffffc, 0x20a) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) ioperm$auto(0x7, 0x6, 0x3) rseq$auto(&(0x7f0000000300)={0xe, 0x403, 0x6, 0x6, 0x5, 0xfffffffe}, 0x8000, 0x0, 0x6) clone$auto(0x4e8c, 0x8, 0x0, 0x0, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getsockname$auto(r1, 0x0, 0x0) 0s ago: executing program 2 (id=3698): syz_open_procfs$namespace(0x0, 0x0) (async) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setuid$auto(0xe) (async) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) mincore$auto(0x0, 0x8000000000005a, 0x0) (async) keyctl$auto(0x3, 0xfffffffd, 0x6, 0x0, 0x80b8c) (async) ioperm$auto(0xde, 0x9, 0x100402) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) time$auto(&(0x7f0000000080)=0x6) (async) mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) lsetxattr$auto(0x0, 0x0, &(0x7f0000000040), 0x100, 0x200) read$auto(0x3, 0x0, 0x80) io_uring_setup$auto(0x9, &(0x7f00000001c0)={0x1ff, 0x9, 0x5, 0x8fa, 0x9, 0x5, 0x2, [0xff4, 0x5, 0x2], {0xff, 0x3fc0, 0x6, 0x9, 0x38bad908, 0x9, 0xfffffffe, 0x8, 0x3}, {0x203, 0x0, 0x2, 0x17b, 0x3, 0x8, 0x4f, 0x8000, 0x403}}) (async) socket(0x10, 0x2, 0x14) setsockopt$auto(0x3, 0x4, 0x7, 0xffffffffffffffff, 0x3) (async) close_range$auto(0x2, 0x8000, 0x0) (async) open(0x0, 0x22240, 0x155) (async) open(0x0, 0xa240, 0x1de) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) socket(0xa, 0x801, 0x100) (async) r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) socket(0xa, 0x3, 0x3a) (async) socket(0x10, 0x2, 0x4) (async) sendmsg$auto_NETDEV_CMD_NAPI_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kernel console output (not intermixed with test programs): ave_0: entered promiscuous mode [ 760.021330][T17176] hsr_slave_1: entered promiscuous mode [ 760.101748][T17176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 760.128633][T17176] Cannot create hsr debugfs directory [ 761.884079][T17176] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 762.211381][T17176] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 762.360795][T17176] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 762.606352][T17176] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 762.986350][T17176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.059383][T17176] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.105887][T10819] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.113073][T10819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.177023][T10819] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.184192][T10819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.435235][T17303] HfR: entered promiscuous mode [ 763.487611][T17305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2119'. [ 763.821413][T17238] delete_channel: no stack [ 766.274744][T17176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.525248][T17176] veth0_vlan: entered promiscuous mode [ 766.614603][T17176] veth1_vlan: entered promiscuous mode [ 766.756354][T17176] veth0_macvtap: entered promiscuous mode [ 767.084113][T17176] veth1_macvtap: entered promiscuous mode [ 767.223888][T17176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.296286][T17176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.351351][T17176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.430256][T17176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.491074][T17176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.562907][T17176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.602953][T17176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.668612][T17176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.740901][T17176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.830901][T17176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.892479][T17176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.952473][T17176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.024618][T17176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.075093][T17176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.122461][T17176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.200340][T17176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.251756][T17176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.303739][T17176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.420627][T17176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.451813][T17176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.492588][T17176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.561054][T17176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.168411][T17388] nbd: illegal input index -33554433 [ 769.569588][T16188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.647348][T16188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.995113][T16184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.046849][T16184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.047513][T17432] svc: failed to register nfsdv3 RPC service (errno 111). [ 772.110396][T17432] svc: failed to register nfsaclv3 RPC service (errno 111). [ 775.042742][ T5234] Bluetooth: hci0: command 0x0406 tx timeout [ 776.534781][T17515] block device autoloading is deprecated and will be removed. [ 779.247843][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 779.262631][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 779.271189][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 779.303126][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 779.312597][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 779.320208][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 779.988580][T16206] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.209217][T16206] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.432129][T16206] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.774646][T16206] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.973186][T17561] chnl_net:caif_netlink_parms(): no params data found [ 781.363232][T14153] Bluetooth: hci0: command tx timeout [ 781.485894][T17561] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.510651][T17561] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.532568][T17561] bridge_slave_0: entered allmulticast mode [ 781.543685][T17561] bridge_slave_0: entered promiscuous mode [ 781.600937][T17561] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.622743][T17561] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.630066][T17561] bridge_slave_1: entered allmulticast mode [ 781.647588][T17561] bridge_slave_1: entered promiscuous mode [ 782.124983][T17590] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2176'. [ 782.276140][T17561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.400720][T17561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.463141][T16206] bridge_slave_1: left allmulticast mode [ 782.468819][T16206] bridge_slave_1: left promiscuous mode [ 782.474873][T16206] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.613186][T16206] bridge_slave_0: left allmulticast mode [ 782.618877][T16206] bridge_slave_0: left promiscuous mode [ 782.625776][T16206] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.442646][T14153] Bluetooth: hci0: command tx timeout [ 785.080965][T16206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.128139][T16206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.161059][T16206] bond0 (unregistering): Released all slaves [ 785.334109][T17561] team0: Port device team_slave_0 added [ 785.376878][T16206] HSR: left promiscuous mode [ 785.505536][T17561] team0: Port device team_slave_1 added [ 785.529309][T14153] Bluetooth: hci0: command tx timeout [ 785.779951][T17675] netlink: 229 bytes leftover after parsing attributes in process `syz.0.2193'. [ 785.884746][T17658] svc: failed to register nfsdv3 RPC service (errno 111). [ 785.961272][T17658] svc: failed to register nfsaclv3 RPC service (errno 111). [ 785.971086][T17561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.978561][T17561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.027644][T17561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.047115][T16206] HfR: left promiscuous mode [ 786.178230][T17561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.202497][T17561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.242473][T17561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.340138][T17561] hsr_slave_0: entered promiscuous mode [ 787.475639][T17561] hsr_slave_1: entered promiscuous mode [ 787.557148][T17561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 787.602504][T14153] Bluetooth: hci0: command tx timeout [ 787.608887][T17561] Cannot create hsr debugfs directory [ 787.961072][T17713] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2203'. [ 789.642462][T16206] hsr_slave_0: left promiscuous mode [ 789.689646][T16206] hsr_slave_1: left promiscuous mode [ 789.790849][T16206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.801068][T16206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.933323][T16206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.940768][T16206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.061698][T16206] veth1_macvtap: left promiscuous mode [ 790.075719][T16206] veth0_macvtap: left promiscuous mode [ 790.083979][T16206] veth1_vlan: left promiscuous mode [ 790.089305][T16206] veth0_vlan: left promiscuous mode [ 792.695995][T16206] team0 (unregistering): Port device team_slave_1 removed [ 792.909600][T16206] team0 (unregistering): Port device team_slave_0 removed [ 793.837682][T17775] netlink: 'syz.3.2214': attribute type 282 has an invalid length. [ 794.381449][T17816] kernel read not supported for file /#)-\&[} (pid: 17816 comm: syz.3.2221) [ 794.384282][ T29] audit: type=1804 audit(4294967372.389:11): pid=17816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2221" name="#)-\&[}" dev="mqueue" ino=68309 res=1 errno=0 [ 794.512062][ T29] audit: type=1800 audit(4294967372.499:12): pid=17816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2221" name="#)-\&[}" dev="mqueue" ino=68309 res=0 errno=0 [ 795.208837][T17561] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 795.258967][T17561] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 795.288374][T17561] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 795.339506][T17561] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 795.601713][T17561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.618892][T17561] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.629878][T16200] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.637039][T16200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.749106][T17561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 795.759672][T17561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 795.783548][T16184] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.790654][T16184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.089828][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'. [ 796.587189][T17561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.618162][T17561] veth0_vlan: entered promiscuous mode [ 796.629182][T17561] veth1_vlan: entered promiscuous mode [ 796.651023][T17561] veth0_macvtap: entered promiscuous mode [ 796.660203][T17561] veth1_macvtap: entered promiscuous mode [ 796.675203][T17561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.685701][T17561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.695590][T17561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.706081][T17561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.715985][T17561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.726868][T17561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.737105][T17561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.747645][T17561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.759011][T17561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.835040][T17561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.854045][T17561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.912522][T17561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.954903][T17561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.982836][T17561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.062091][T17561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.079553][T17561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.098862][T17561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.123668][T17561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.157484][T17561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.183570][T17561] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.192299][T17561] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.231425][T17561] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.713739][T16193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.752437][T16193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.766100][T16178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.797172][T16178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.306850][T17972] svc: failed to register nfsdv3 RPC service (errno 111). [ 801.328656][T17972] svc: failed to register nfsaclv3 RPC service (errno 111). [ 801.874854][T17979] kernel read not supported for file /#)-\&[} (pid: 17979 comm: syz.3.2244) [ 801.935162][ T29] audit: type=1800 audit(4294967379.949:13): pid=17979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2244" name="#)-\&[}" dev="mqueue" ino=68309 res=0 errno=0 [ 805.603072][T18053] svc: failed to register nfsdv3 RPC service (errno 111). [ 805.674991][T18053] svc: failed to register nfsaclv3 RPC service (errno 111). [ 808.824301][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.830643][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.852875][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2289'. [ 811.964498][T18182] netlink: 'syz.0.2297': attribute type 2 has an invalid length. [ 811.984256][T18182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2297'. [ 814.473226][T18220] delete_channel: no stack [ 815.738905][T18256] Unable to find swap-space signature [ 816.501361][T18267] sctp: [Deprecated]: syz.2.2316 (pid 18267) Use of int in max_burst socket option deprecated. [ 816.501361][T18267] Use struct sctp_assoc_value instead [ 817.725716][T18310] Unable to find swap-space signature [ 821.806266][T16199] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.353734][T16199] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.709940][T16199] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.467911][T16199] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.364586][T16199] bridge_slave_1: left allmulticast mode [ 824.371008][T16199] bridge_slave_1: left promiscuous mode [ 824.402752][T16199] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.477991][T16199] bridge_slave_0: left allmulticast mode [ 824.495690][T16199] bridge_slave_0: left promiscuous mode [ 824.506041][T16199] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.103448][T16199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.149078][T16199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.184292][T16199] bond0 (unregistering): Released all slaves [ 827.963229][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 827.972142][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 827.980301][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 827.989325][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 827.997436][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 828.007989][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 829.002560][T16199] hsr_slave_0: left promiscuous mode [ 829.020480][T16199] hsr_slave_1: left promiscuous mode [ 829.030353][T16199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.041061][T16199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.068000][T16199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.086377][T16199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.148646][T16199] veth1_macvtap: left promiscuous mode [ 829.186985][T16199] veth0_macvtap: left promiscuous mode [ 829.217392][T16199] veth1_vlan: left promiscuous mode [ 829.239585][T16199] veth0_vlan: left promiscuous mode [ 830.487719][ T5234] Bluetooth: hci3: command tx timeout [ 831.366938][ T5234] Bluetooth: hci2: command 0x0406 tx timeout [ 831.858013][T16199] team0 (unregistering): Port device team_slave_1 removed [ 832.017729][T16199] team0 (unregistering): Port device team_slave_0 removed [ 832.260085][T18561] svc: failed to register nfsdv3 RPC service (errno 111). [ 832.305821][T18561] svc: failed to register nfsaclv3 RPC service (errno 111). [ 832.567463][T14153] Bluetooth: hci3: command tx timeout [ 834.642477][T14153] Bluetooth: hci3: command tx timeout [ 835.205777][T18481] chnl_net:caif_netlink_parms(): no params data found [ 836.011194][T18481] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.056681][T18481] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.102884][T18481] bridge_slave_0: entered allmulticast mode [ 836.145851][T18481] bridge_slave_0: entered promiscuous mode [ 836.190703][T18481] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.280451][T18481] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.318782][T18481] bridge_slave_1: entered allmulticast mode [ 836.359994][T18481] bridge_slave_1: entered promiscuous mode [ 836.731272][T14153] Bluetooth: hci3: command tx timeout [ 836.985953][T18481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.506533][T18481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.279885][T18481] team0: Port device team_slave_0 added [ 838.552283][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2392'. [ 838.623583][T18481] team0: Port device team_slave_1 added [ 839.040718][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2396'. [ 839.498181][T18690] HSR: entered promiscuous mode [ 839.549701][T18481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.587518][T18481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.708373][T18481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.764266][T18481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.802224][T18481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.886129][T18481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.149554][T18481] hsr_slave_0: entered promiscuous mode [ 841.244437][T18481] hsr_slave_1: entered promiscuous mode [ 842.017749][T18711] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 842.101618][T18711] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 845.253414][T18742] ptrace attach of "./syz-executor exec"[14151] was attempted by "./syz-executor exec"[18742] [ 852.859691][T18481] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 853.002781][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 853.022509][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 853.032831][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 853.049397][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 853.072659][ T5234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 853.080153][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 853.285255][T18481] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 853.438577][T18481] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 853.574990][T18481] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 854.115765][T18481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.256436][T18481] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.438100][T16198] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.445266][T16198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.527784][T16198] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.534963][T16198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.640236][T18481] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 854.685243][T18481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 854.736492][T18812] chnl_net:caif_netlink_parms(): no params data found [ 855.132459][ T5234] Bluetooth: hci5: command tx timeout [ 855.796990][T18812] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.816161][T18812] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.852535][T18812] bridge_slave_0: entered allmulticast mode [ 855.859535][T18812] bridge_slave_0: entered promiscuous mode [ 855.894752][T18812] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.901870][T18812] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.953718][T18812] bridge_slave_1: entered allmulticast mode [ 856.002738][T18812] bridge_slave_1: entered promiscuous mode [ 856.525097][T18481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 856.565435][T18812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.605708][T18812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.270452][ T5234] Bluetooth: hci5: command tx timeout [ 858.186266][T18812] team0: Port device team_slave_0 added [ 858.933897][T18812] team0: Port device team_slave_1 added [ 858.947793][T18481] veth0_vlan: entered promiscuous mode [ 859.292629][ T5234] Bluetooth: hci5: command tx timeout [ 860.453052][T16197] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.137319][T18481] veth1_vlan: entered promiscuous mode [ 861.362724][ T5234] Bluetooth: hci5: command tx timeout [ 861.696788][T16197] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.001855][T18812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.042884][T18812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.169529][T18812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.351256][T16197] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.397254][T18812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.422617][T18812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.495871][T18812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.660197][T16197] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.762060][T18481] veth0_macvtap: entered promiscuous mode [ 862.917289][T18481] veth1_macvtap: entered promiscuous mode [ 862.961596][T18812] hsr_slave_0: entered promiscuous mode [ 863.046637][T18812] hsr_slave_1: entered promiscuous mode [ 863.112038][T18812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 863.152230][T18812] Cannot create hsr debugfs directory [ 863.372297][ T29] audit: type=1326 audit(4294967441.379:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18948 comm="syz.3.2425" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52c8b7dff9 code=0x0 [ 863.407295][T18481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.482531][T18481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.524362][T18481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.562525][T18481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.620254][T18481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.662524][T18481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.712635][T18481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.752477][T18481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.794252][T18481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.026670][T18481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.092394][T18481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.130653][T18481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.179524][T18481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.222490][T18481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.266984][T18481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.308175][T18481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.358432][T18481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.400235][T18481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.564403][T18481] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.620645][T18481] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.655746][T18481] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.702421][T18481] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.773782][T16197] bridge_slave_1: left allmulticast mode [ 864.779455][T16197] bridge_slave_1: left promiscuous mode [ 864.808733][T16197] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.013294][T16197] bridge_slave_0: left allmulticast mode [ 865.018975][T16197] bridge_slave_0: left promiscuous mode [ 865.074757][T16197] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.233094][T16197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.311687][T16197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.454243][T16197] bond0 (unregistering): Released all slaves [ 870.172605][T16197] hsr_slave_0: left promiscuous mode [ 870.279110][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.285702][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.342963][T16197] hsr_slave_1: left promiscuous mode [ 870.380519][T16197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 870.410806][T16197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.439532][T16197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 870.477666][T16197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.607403][T16197] veth1_macvtap: left promiscuous mode [ 870.652190][T16197] veth0_macvtap: left promiscuous mode [ 870.682985][T16197] veth1_vlan: left promiscuous mode [ 870.688334][T16197] veth0_vlan: left promiscuous mode [ 871.025793][T19016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2430'. [ 872.736329][T16197] team0 (unregistering): Port device team_slave_1 removed [ 872.859087][T16197] team0 (unregistering): Port device team_slave_0 removed [ 874.091798][T16178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.112035][T16178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.253667][T16178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.292529][T16178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.208060][T18812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 875.322482][T18812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 875.377866][T18812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 875.431889][T18812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 875.862186][T18812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.915092][T18812] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.931566][T16198] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.938729][T16198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.998932][T16197] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.006109][T16197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.900907][T18812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.058562][T18812] veth0_vlan: entered promiscuous mode [ 877.153586][T18812] veth1_vlan: entered promiscuous mode [ 877.273339][T18812] veth0_macvtap: entered promiscuous mode [ 877.300964][T18812] veth1_macvtap: entered promiscuous mode [ 877.351522][T18812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.405822][T18812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.442436][T18812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.472689][T18812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.500449][T18812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.523563][T18812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.551456][T18812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.572407][T18812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.613898][T18812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.655297][T18812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.697394][T18812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.717701][T18812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.760586][T18812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.792427][T18812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.832389][T18812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.842225][T18812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.887649][T18812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.911037][T18812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.942943][T18812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.951671][T18812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.973727][T18812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.990037][T18812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.221958][T16178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.239520][T16178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.839000][T16196] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.970142][T16198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.978958][T16198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.157625][T16196] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.421276][T16196] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.668006][T16196] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.035720][T16196] bridge_slave_1: left allmulticast mode [ 880.041408][T16196] bridge_slave_1: left promiscuous mode [ 880.049883][T16196] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.093811][T16196] bridge_slave_0: left allmulticast mode [ 880.099501][T16196] bridge_slave_0: left promiscuous mode [ 880.116498][T16196] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.932095][T14153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 880.953840][T14153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 880.968201][T14153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 880.976269][T14153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 880.988171][T14153] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 880.996361][T14153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 881.579607][T16196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.607403][T16196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.644827][T16196] bond0 (unregistering): Released all slaves [ 882.323236][T16196] hsr_slave_0: left promiscuous mode [ 882.382827][T16196] hsr_slave_1: left promiscuous mode [ 882.411506][T16196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.422994][T16196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.443693][T16196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.451116][T16196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.513997][T16196] veth1_macvtap: left promiscuous mode [ 882.525573][T16196] veth0_macvtap: left promiscuous mode [ 882.531435][T16196] veth1_vlan: left promiscuous mode [ 882.557404][T16196] veth0_vlan: left promiscuous mode [ 883.042908][ T5234] Bluetooth: hci0: command tx timeout [ 883.695681][T16196] team0 (unregistering): Port device team_slave_1 removed [ 883.770668][T16196] team0 (unregistering): Port device team_slave_0 removed [ 884.692184][T19222] chnl_net:caif_netlink_parms(): no params data found [ 885.086271][T19222] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.102473][T19222] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.120270][T19222] bridge_slave_0: entered allmulticast mode [ 885.127538][T19222] bridge_slave_0: entered promiscuous mode [ 885.135502][T19222] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.142643][T19222] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.149811][T19222] bridge_slave_1: entered allmulticast mode [ 885.156823][T19222] bridge_slave_1: entered promiscuous mode [ 885.183880][ T5234] Bluetooth: hci0: command tx timeout [ 885.283403][T19222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.346246][T19222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.494517][T19222] team0: Port device team_slave_0 added [ 885.555289][T19222] team0: Port device team_slave_1 added [ 885.721252][T19222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.746456][T19222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.842095][T19222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.895741][T19222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.910862][T19222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.944902][T19222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.096119][T19222] hsr_slave_0: entered promiscuous mode [ 886.127055][T19222] hsr_slave_1: entered promiscuous mode [ 886.153240][T19222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 886.182453][T19222] Cannot create hsr debugfs directory [ 887.203485][ T5234] Bluetooth: hci0: command tx timeout [ 887.728438][T16196] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.893266][T14153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 887.902756][T14153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 887.911496][T14153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 887.919702][T14153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 887.927341][T14153] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 887.936555][T14153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 887.998024][T16196] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.110942][T16196] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.250338][T16196] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.372485][T19222] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 888.412046][T19222] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 888.436153][T19222] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 888.511895][T19222] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 888.721550][T19357] chnl_net:caif_netlink_parms(): no params data found [ 888.767895][T16196] bridge_slave_1: left allmulticast mode [ 888.773763][T16196] bridge_slave_1: left promiscuous mode [ 888.790458][T16196] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.855953][T16196] bridge_slave_0: left allmulticast mode [ 888.861628][T16196] bridge_slave_0: left promiscuous mode [ 888.879278][T16196] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.282887][ T5234] Bluetooth: hci0: command tx timeout [ 889.493098][T16196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.535877][T16196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.562699][T16196] bond0 (unregistering): Released all slaves [ 890.003289][ T5234] Bluetooth: hci4: command tx timeout [ 890.026836][T19357] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.040182][T19357] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.082759][T19357] bridge_slave_0: entered allmulticast mode [ 890.089782][T19357] bridge_slave_0: entered promiscuous mode [ 890.234288][T19357] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.252729][T19357] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.265843][T19357] bridge_slave_1: entered allmulticast mode [ 890.275406][T19357] bridge_slave_1: entered promiscuous mode [ 890.351877][T19222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.388531][T16196] hsr_slave_0: left promiscuous mode [ 890.417951][T16196] hsr_slave_1: left promiscuous mode [ 890.437064][T16196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.459722][T16196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.468187][T16196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.483428][T16196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.522954][T16196] veth1_macvtap: left promiscuous mode [ 890.528504][T16196] veth0_macvtap: left promiscuous mode [ 890.534563][T16196] veth1_vlan: left promiscuous mode [ 890.539967][T16196] veth0_vlan: left promiscuous mode [ 891.246749][T16196] team0 (unregistering): Port device team_slave_1 removed [ 891.314113][T16196] team0 (unregistering): Port device team_slave_0 removed [ 891.980628][T19357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.007604][T19357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.070829][T19222] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.082439][ T5234] Bluetooth: hci4: command tx timeout [ 892.124389][T19357] team0: Port device team_slave_0 added [ 892.133136][T19357] team0: Port device team_slave_1 added [ 892.404259][T16199] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.411377][T16199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.420738][T16199] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.427865][T16199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.509378][T19222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 892.525551][T19357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.570586][T19357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.602528][T19357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.629946][T19357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.657761][T19357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.705974][T19357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.829659][T19357] hsr_slave_0: entered promiscuous mode [ 892.893249][T19357] hsr_slave_1: entered promiscuous mode [ 892.914132][T19357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 892.921742][T19357] Cannot create hsr debugfs directory [ 893.065722][T19222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.234430][T19222] veth0_vlan: entered promiscuous mode [ 893.274850][T19222] veth1_vlan: entered promiscuous mode [ 893.397802][T19222] veth0_macvtap: entered promiscuous mode [ 893.420666][T19222] veth1_macvtap: entered promiscuous mode [ 893.490540][T19222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.514383][T19222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.544954][T19222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.576326][T19222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.588094][T19222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.607516][T19222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.628642][T19222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 893.700110][T19222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.732624][T19222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.751225][T19222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.799279][T19222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.848419][T19222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.859020][T19222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.898543][T19222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 893.945457][T19222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.960576][T19222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.975297][T19222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.992657][T19222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.162737][ T5234] Bluetooth: hci4: command tx timeout [ 894.383406][T16200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.391261][T16200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.405470][T19357] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 894.425693][T19357] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 894.456786][T19357] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 894.543888][T19357] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 894.589881][T16200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.604821][T16200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.843534][T19357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.900223][T19357] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.003726][T16200] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.010853][T16200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.053273][T16200] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.060391][T16200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.641864][T19357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.827258][T19357] veth0_vlan: entered promiscuous mode [ 895.926080][T19357] veth1_vlan: entered promiscuous mode [ 896.059039][T19357] veth0_macvtap: entered promiscuous mode [ 896.101256][T19357] veth1_macvtap: entered promiscuous mode [ 896.164848][T19357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.192403][T19357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.202236][T19357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.219328][T19357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.229603][T19357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.240425][T19357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.250652][T19357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.261345][T19357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.271216][ T5234] Bluetooth: hci4: command tx timeout [ 896.278908][T19357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.288570][T19357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.299075][T19357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.309006][T19357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.319655][T19357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.329700][T19357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.340247][T19357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.350157][T19357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.360895][T19357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.373877][T19357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.426230][T19357] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.452692][T19357] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.462062][T19357] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.487559][T19357] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.979500][T16197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.001074][T16197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.088723][T16178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.111377][T16178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.257870][T19555] Unable to find swap-space signature [ 899.184381][T19569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2508'. [ 899.216530][T19569] HSR: entered promiscuous mode [ 900.131673][T19586] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2514'. [ 900.873619][T19599] can: request_module (can-proto-0) failed. [ 902.848465][T16184] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.105612][T16184] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.396935][T16184] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.834923][T16184] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.095704][T14153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 904.105294][T14153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 904.113434][T14153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 904.121518][T14153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 904.132191][T14153] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 904.140786][T14153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 904.619141][T16184] bridge_slave_1: left allmulticast mode [ 904.624909][T16184] bridge_slave_1: left promiscuous mode [ 904.630626][T16184] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.913437][T16184] bridge_slave_0: left allmulticast mode [ 904.919118][T16184] bridge_slave_0: left promiscuous mode [ 904.928579][T16184] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.225404][T16184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 906.242488][T14153] Bluetooth: hci3: command tx timeout [ 906.249284][T16184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.297509][T16184] bond0 (unregistering): Released all slaves [ 906.311823][T19709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2538'. [ 906.354696][T19655] chnl_net:caif_netlink_parms(): no params data found [ 906.983688][T19655] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.990801][T19655] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.004286][T19712] nbd: must specify at least one socket [ 907.050669][T19655] bridge_slave_0: entered allmulticast mode [ 907.074666][T19655] bridge_slave_0: entered promiscuous mode [ 907.109039][T19655] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.142547][T19655] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.160409][T19655] bridge_slave_1: entered allmulticast mode [ 907.191352][T19655] bridge_slave_1: entered promiscuous mode [ 907.578392][T16184] hsr_slave_0: left promiscuous mode [ 907.584531][T16184] hsr_slave_1: left promiscuous mode [ 907.629615][T16184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.647441][T16184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.663160][T16184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.673259][T16184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.739216][T16184] veth1_macvtap: left promiscuous mode [ 907.750491][T16184] veth0_macvtap: left promiscuous mode [ 907.762026][T16184] veth1_vlan: left promiscuous mode [ 907.774538][T16184] veth0_vlan: left promiscuous mode [ 908.322485][T14153] Bluetooth: hci3: command tx timeout [ 908.797805][T16184] team0 (unregistering): Port device team_slave_1 removed [ 908.884618][T16184] team0 (unregistering): Port device team_slave_0 removed [ 909.510156][T19655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.647226][T19655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.796775][T19655] team0: Port device team_slave_0 added [ 909.846308][T19655] team0: Port device team_slave_1 added [ 909.981880][T19655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.012643][T19655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.086302][T19655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.099002][T19655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.114023][T19655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.179323][T19655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.403439][T14153] Bluetooth: hci3: command tx timeout [ 910.461346][T19655] hsr_slave_0: entered promiscuous mode [ 910.479641][T19655] hsr_slave_1: entered promiscuous mode [ 912.484402][T14153] Bluetooth: hci3: command tx timeout [ 917.071525][T19655] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 917.123495][T19655] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 917.166575][T19655] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 917.250348][T19655] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 917.697317][T19655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.012862][T19655] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.045697][T16184] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.052869][T16184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.164501][T16200] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.171632][T16200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.354336][T19655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 918.504277][T19917] openvswitch: HSR: Dropping previously announced user features [ 919.037207][T19655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.149661][T19655] veth0_vlan: entered promiscuous mode [ 919.227942][T19655] veth1_vlan: entered promiscuous mode [ 919.347239][T19655] veth0_macvtap: entered promiscuous mode [ 919.386852][T19655] veth1_macvtap: entered promiscuous mode [ 919.442070][T19655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.484397][T19655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.531175][T19655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.568705][T19655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.615631][T19655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.658973][T19655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.690830][T19655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.724826][T19655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.751865][T19655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.811358][T19655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.846336][T19655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.872411][T19655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.899044][T19655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.929457][T19655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.964071][T19655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.984333][T19655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.015052][T19655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.113755][T19655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 920.148541][T19655] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.167801][T19655] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.192411][T19655] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.211427][T19655] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.367647][T16178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.422451][T16178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.504549][T16193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.522113][T16193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.838816][T20049] tc_dump_action: action bad kind [ 924.540450][T20082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2586'. [ 927.032844][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2599'. [ 928.074861][T20219] Unable to find swap-space signature [ 928.643226][T20242] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2610'. [ 931.684554][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.692052][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.039604][T16194] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.448443][T16194] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.563272][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 933.573773][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 933.581534][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 933.593893][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 933.602026][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 933.611277][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 933.993115][T16194] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.105669][T20332] netlink: 'syz.0.2632': attribute type 11 has an invalid length. [ 934.383405][T16194] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.812736][T20324] chnl_net:caif_netlink_parms(): no params data found [ 935.132009][T16194] bridge_slave_1: left allmulticast mode [ 935.141870][T16194] bridge_slave_1: left promiscuous mode [ 935.162622][T16194] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.320972][T16194] bridge_slave_0: left allmulticast mode [ 935.342354][T16194] bridge_slave_0: left promiscuous mode [ 935.368370][T16194] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.682582][T14153] Bluetooth: hci4: command tx timeout [ 937.068745][T16194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.269313][T16194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.376282][T16194] bond0 (unregistering): Released all slaves [ 937.762430][T14153] Bluetooth: hci4: command tx timeout [ 937.841427][T16194] HSR: left promiscuous mode [ 938.006190][T20324] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.035054][T20324] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.064815][T20324] bridge_slave_0: entered allmulticast mode [ 938.071843][T20324] bridge_slave_0: entered promiscuous mode [ 938.483841][T20324] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.490972][T20324] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.529962][T20324] bridge_slave_1: entered allmulticast mode [ 938.538575][T20324] bridge_slave_1: entered promiscuous mode [ 939.143001][T20324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.295923][T20324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.512442][T16194] hsr_slave_0: left promiscuous mode [ 939.560823][T16194] hsr_slave_1: left promiscuous mode [ 939.629926][T16194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.654712][T16194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.694761][T16194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.714619][T16194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.770501][T16194] veth1_macvtap: left promiscuous mode [ 939.786521][T16194] veth0_macvtap: left promiscuous mode [ 939.801231][T16194] veth1_vlan: left promiscuous mode [ 939.816788][T16194] veth0_vlan: left promiscuous mode [ 939.842466][T14153] Bluetooth: hci4: command tx timeout [ 941.244623][T16194] team0 (unregistering): Port device team_slave_1 removed [ 941.389986][T16194] team0 (unregistering): Port device team_slave_0 removed [ 941.922741][T14153] Bluetooth: hci4: command tx timeout [ 942.426761][T20324] team0: Port device team_slave_0 added [ 942.542856][T20324] team0: Port device team_slave_1 added [ 942.825128][T20324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.832103][T20324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.889337][T20324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.977114][T20324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.984343][T20324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.062462][T20324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.321380][T20324] hsr_slave_0: entered promiscuous mode [ 943.359124][T20324] hsr_slave_1: entered promiscuous mode [ 943.378323][T20324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 943.406028][T20324] Cannot create hsr debugfs directory [ 944.523257][T20466] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2650'. [ 944.799217][T20324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 944.830414][T20324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 944.872277][T20324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 944.967008][T20324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 945.367823][T20324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.430032][T20324] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.467248][T16197] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.474425][T16197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.516828][T16194] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.523979][T16194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.060006][T20324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.153224][T20520] netlink: 'syz.0.2660': attribute type 12 has an invalid length. [ 946.186378][T20520] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2660'. [ 946.235875][T20324] veth0_vlan: entered promiscuous mode [ 946.294641][T20324] veth1_vlan: entered promiscuous mode [ 946.330661][T20324] veth0_macvtap: entered promiscuous mode [ 946.340469][T20324] veth1_macvtap: entered promiscuous mode [ 946.356195][T20324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.366700][T20324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.376638][T20324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.387243][T20324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.397169][T20324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.408219][T20324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.418212][T20324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.428770][T20324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.441213][T20324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.451631][T20324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.462385][T20324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.472199][T20324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.483082][T20324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.493203][T20324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.503968][T20324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.513981][T20324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.524455][T20324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.536106][T20324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.548009][T20324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.557626][T20324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.566465][T20324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.575462][T20324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.856444][T16178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.896987][T16178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.955571][T16199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.000099][T16199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.024773][T20546] unsupported nla_type 15018 [ 949.286770][T16178] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.432780][T20640] netlink: zone id is out of range [ 949.437952][T20640] netlink: zone id is out of range [ 949.473970][T20640] netlink: zone id is out of range [ 949.479127][T20640] netlink: zone id is out of range [ 949.499569][T20640] netlink: zone id is out of range [ 949.522945][T20640] netlink: zone id is out of range [ 949.545674][T20640] netlink: zone id is out of range [ 949.572854][T20640] netlink: zone id is out of range [ 949.577991][T20640] netlink: zone id is out of range [ 949.643675][T20640] netlink: zone id is out of range [ 949.738464][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 949.749067][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 949.757419][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 949.768215][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 949.775957][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 949.792758][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 949.814248][T16178] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.058902][T16178] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.469266][T16178] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.845738][T20648] chnl_net:caif_netlink_parms(): no params data found [ 951.063244][T16178] bridge_slave_1: left allmulticast mode [ 951.069029][T16178] bridge_slave_1: left promiscuous mode [ 951.076034][T16178] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.193670][T16178] bridge_slave_0: left allmulticast mode [ 951.199365][T16178] bridge_slave_0: left promiscuous mode [ 951.244764][T16178] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.843109][ T5234] Bluetooth: hci0: command tx timeout [ 952.825347][T20732] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2693'. [ 952.854053][T16178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.875400][T16178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 952.894936][T16178] bond0 (unregistering): Released all slaves [ 952.963206][T20734] HfR: entered promiscuous mode [ 953.639514][T20648] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.655361][T20648] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.669644][T20648] bridge_slave_0: entered allmulticast mode [ 953.683526][T20648] bridge_slave_0: entered promiscuous mode [ 953.740593][T20648] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.751683][T20648] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.759659][T20648] bridge_slave_1: entered allmulticast mode [ 953.767396][T20648] bridge_slave_1: entered promiscuous mode [ 953.922450][ T5234] Bluetooth: hci0: command tx timeout [ 954.273271][T16178] hsr_slave_0: left promiscuous mode [ 954.290462][T16178] hsr_slave_1: left promiscuous mode [ 954.315245][T16178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.336028][T16178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.365940][T16178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.380307][T16178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.421546][T16178] veth1_macvtap: left promiscuous mode [ 954.444781][T16178] veth0_macvtap: left promiscuous mode [ 954.461698][T16178] veth1_vlan: left promiscuous mode [ 954.478455][T16178] veth0_vlan: left promiscuous mode [ 955.926989][ T29] audit: type=1326 audit(4294967305.089:15): auid=4294967295 uid=8 gid=0 ses=4294967295 subj=unconfined pid=20783 comm="syz.1.2702" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f991af7dff9 code=0x0 [ 956.002566][ T5234] Bluetooth: hci0: command tx timeout [ 956.194981][T16178] team0 (unregistering): Port device team_slave_1 removed [ 956.403131][T16178] team0 (unregistering): Port device team_slave_0 removed [ 958.048266][T20648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.079089][T20648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.082625][ T5234] Bluetooth: hci0: command tx timeout [ 958.362071][T20648] team0: Port device team_slave_0 added [ 958.370705][T20648] team0: Port device team_slave_1 added [ 958.568440][T20648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.592375][T20648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.642494][T20648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.688513][T20648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.696455][T20648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.750010][T20648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.112059][T20648] hsr_slave_0: entered promiscuous mode [ 959.204061][T20648] hsr_slave_1: entered promiscuous mode [ 959.223460][T20648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.236951][T20648] Cannot create hsr debugfs directory [ 961.232925][T20858] sysfs: cannot create duplicate filename '/class/ieee80211/-侞6yռ ka;+1)p;!X+@' [ 961.262935][T20858] CPU: 1 UID: 0 PID: 20858 Comm: syz.2.2713 Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 961.273742][T20858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 961.283817][T20858] Call Trace: [ 961.287117][T20858] [ 961.290068][T20858] dump_stack_lvl+0x16c/0x1f0 [ 961.294814][T20858] sysfs_warn_dup+0x7f/0xa0 [ 961.299359][T20858] sysfs_do_create_link_sd+0x124/0x140 [ 961.304851][T20858] sysfs_create_link+0x61/0xc0 [ 961.309651][T20858] device_add+0x62e/0x1a70 [ 961.314108][T20858] ? __pfx_device_add+0x10/0x10 [ 961.318969][T20858] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 961.324875][T20858] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 961.330873][T20858] wiphy_register+0x20d7/0x2d30 [ 961.335741][T20858] ? __pfx_wiphy_register+0x10/0x10 [ 961.340960][T20858] ieee80211_register_hw+0x2959/0x3fb0 [ 961.346442][T20858] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 961.352259][T20858] ? rcu_is_watching+0x12/0xc0 [ 961.357036][T20858] ? trace_hrtimer_init+0x19d/0x220 [ 961.362244][T20858] ? __hrtimer_init+0x106/0x2c0 [ 961.367110][T20858] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 961.372862][T20858] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 961.378942][T20858] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 961.385541][T20858] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 961.390843][T20858] hwsim_new_radio_nl+0xb42/0x12b0 [ 961.395967][T20858] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 961.401533][T20858] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 961.408911][T20858] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 961.416295][T20858] genl_family_rcv_msg_doit+0x202/0x2f0 [ 961.421853][T20858] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 961.427932][T20858] ? bpf_lsm_capable+0x9/0x10 [ 961.432617][T20858] ? security_capable+0x7e/0x260 [ 961.437569][T20858] ? ns_capable+0xd7/0x110 [ 961.441989][T20858] genl_rcv_msg+0x565/0x800 [ 961.446505][T20858] ? __pfx_genl_rcv_msg+0x10/0x10 [ 961.451537][T20858] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 961.457100][T20858] netlink_rcv_skb+0x165/0x410 [ 961.461879][T20858] ? __pfx_genl_rcv_msg+0x10/0x10 [ 961.466916][T20858] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 961.472217][T20858] ? down_read+0xc9/0x330 [ 961.476557][T20858] ? __pfx_down_read+0x10/0x10 [ 961.481337][T20858] ? netlink_deliver_tap+0x1ae/0xcf0 [ 961.486638][T20858] genl_rcv+0x28/0x40 [ 961.490630][T20858] netlink_unicast+0x53c/0x7f0 [ 961.495404][T20858] ? __pfx_netlink_unicast+0x10/0x10 [ 961.500697][T20858] ? __phys_addr_symbol+0x30/0x80 [ 961.505728][T20858] ? __check_object_size+0x488/0x710 [ 961.511026][T20858] netlink_sendmsg+0x8b8/0xd70 [ 961.515800][T20858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 961.521099][T20858] ____sys_sendmsg+0x9ae/0xb40 [ 961.525868][T20858] ? copy_msghdr_from_user+0x10b/0x160 [ 961.531336][T20858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 961.536638][T20858] ? __pfx_lock_release+0x10/0x10 [ 961.541671][T20858] ? __pfx___lock_acquire+0x10/0x10 [ 961.546883][T20858] ___sys_sendmsg+0x135/0x1e0 [ 961.551574][T20858] ? __pfx____sys_sendmsg+0x10/0x10 [ 961.556800][T20858] ? lock_acquire+0x2f/0xb0 [ 961.561311][T20858] ? __fget_files+0x40/0x3f0 [ 961.565915][T20858] ? fdget+0x176/0x210 [ 961.569987][T20858] __sys_sendmsg+0x117/0x1f0 [ 961.574579][T20858] ? __pfx___sys_sendmsg+0x10/0x10 [ 961.579695][T20858] ? do_user_addr_fault+0xe50/0x13f0 [ 961.584995][T20858] ? trace_lock_acquire+0x14a/0x1d0 [ 961.590210][T20858] ? do_user_addr_fault+0x83d/0x13f0 [ 961.595512][T20858] do_syscall_64+0xcd/0x250 [ 961.600031][T20858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.605932][T20858] RIP: 0033:0x7fdb56d7dff9 [ 961.610347][T20858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.629956][T20858] RSP: 002b:00007fdb567ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 961.638376][T20858] RAX: ffffffffffffffda RBX: 00007fdb56f36058 RCX: 00007fdb56d7dff9 [ 961.646348][T20858] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 961.654326][T20858] RBP: 00007fdb56df0296 R08: 0000000000000000 R09: 0000000000000000 [ 961.662297][T20858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.670273][T20858] R13: 0000000000000001 R14: 00007fdb56f36058 R15: 00007ffdc76d33a8 [ 961.678261][T20858] [ 962.882246][T20648] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 962.959801][T20648] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 962.993512][T20648] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 963.178418][T20648] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 963.355853][T20648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.392876][T20648] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.428127][T16177] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.435321][T16177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.488897][T16177] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.496049][T16177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.640478][T20926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2725'. [ 963.677067][T20648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 963.986057][T20937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2727'. [ 964.333654][T20648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.417385][T20648] veth0_vlan: entered promiscuous mode [ 964.437783][T20648] veth1_vlan: entered promiscuous mode [ 964.460680][T20648] veth0_macvtap: entered promiscuous mode [ 964.469881][T20648] veth1_macvtap: entered promiscuous mode [ 964.484960][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.495534][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.505407][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.515860][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.525729][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.536182][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.546078][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.556691][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.568731][T20648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.578518][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.589003][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.598883][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.609356][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.619900][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.630605][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.640657][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.651407][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.663880][T20648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.717715][T20648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.732381][T20648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.741114][T20648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.780618][T20648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.344209][T16178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.352061][T16178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.445358][ T7338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.501861][ T7338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.392007][T21169] netlink: 'syz.3.2759': attribute type 3 has an invalid length. [ 973.546239][T16196] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.830545][T16196] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.320994][T16196] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.837733][T16196] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.882686][T14153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 974.911908][T14153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 974.932578][T14153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 974.993822][T14153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 975.042720][T14153] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 975.050333][T14153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 975.274718][T16196] bridge_slave_1: left allmulticast mode [ 975.280409][T16196] bridge_slave_1: left promiscuous mode [ 975.357487][T16196] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.388226][T16196] bridge_slave_0: left allmulticast mode [ 975.394113][T16196] bridge_slave_0: left promiscuous mode [ 975.400287][T16196] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.192772][T16196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.215805][T16196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.230438][T16196] bond0 (unregistering): Released all slaves [ 976.305504][T16196] HfR: left promiscuous mode [ 976.622182][T21188] chnl_net:caif_netlink_parms(): no params data found [ 977.125287][ T5234] Bluetooth: hci4: command tx timeout [ 977.254256][T21188] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.298594][T21188] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.342695][T21188] bridge_slave_0: entered allmulticast mode [ 977.360719][T21188] bridge_slave_0: entered promiscuous mode [ 977.420857][T21188] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.446176][T21188] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.471710][T21188] bridge_slave_1: entered allmulticast mode [ 977.490424][T21188] bridge_slave_1: entered promiscuous mode [ 977.757741][T21188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.834858][T21188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.376652][T21188] team0: Port device team_slave_0 added [ 978.675550][T16196] hsr_slave_0: left promiscuous mode [ 978.681513][T16196] hsr_slave_1: left promiscuous mode [ 978.689570][T16196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.713027][T16196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.733224][T16196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 978.740879][T16196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.849023][T16196] veth1_macvtap: left promiscuous mode [ 978.871498][T16196] veth0_macvtap: left promiscuous mode [ 978.890019][T16196] veth1_vlan: left promiscuous mode [ 978.917509][T16196] veth0_vlan: left promiscuous mode [ 979.202493][ T5234] Bluetooth: hci4: command tx timeout [ 980.435944][T16196] team0 (unregistering): Port device team_slave_1 removed [ 980.553874][T16196] team0 (unregistering): Port device team_slave_0 removed [ 981.282436][ T5234] Bluetooth: hci4: command tx timeout [ 981.531329][T21188] team0: Port device team_slave_1 added [ 981.822184][T21188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 981.844960][T21188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.875618][T21188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.910769][T21188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.940350][T21188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.033495][T21188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.566028][T21188] hsr_slave_0: entered promiscuous mode [ 982.581409][T21188] hsr_slave_1: entered promiscuous mode [ 982.626272][T21188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 982.662387][T21188] Cannot create hsr debugfs directory [ 983.362529][ T5234] Bluetooth: hci4: command tx timeout [ 985.086196][T21353] can: request_module (can-proto-0) failed. [ 985.629843][T21188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 985.695475][T21188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 985.751919][T21188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 985.797450][T21188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 986.069069][T21188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.297202][T21188] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.347454][T16177] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.354616][T16177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.403991][T16177] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.411138][T16177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.581797][T21188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 987.122249][T21188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.538191][T21188] veth0_vlan: entered promiscuous mode [ 987.589361][T21188] veth1_vlan: entered promiscuous mode [ 987.695446][T21188] veth0_macvtap: entered promiscuous mode [ 987.742142][T21188] veth1_macvtap: entered promiscuous mode [ 987.907715][T21188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 987.944059][T21188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.977025][T21188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.007688][T21188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.038279][T21188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.074763][T21188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.105824][T21188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.142338][T21188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.193764][T21188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 988.224309][T21188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.262339][T21188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.302571][T21188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.332776][T21188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.372386][T21188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.411760][T21188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.432627][T21188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.471559][T21188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.510374][T21188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 988.551049][T21188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.582374][T21188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.622387][T21188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.672354][T21188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.173784][ T7338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.181866][ T7338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.203774][ T7336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.211625][ T7336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.485500][T21423] netlink: 4 bytes leftover after parsing attributes in process `'. [ 990.001458][ T29] audit: type=1326 audit(8277292064.040:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21485 comm="syz.0.2803" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab83f7dff9 code=0x0 [ 990.275677][T21501] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2804'. [ 990.667874][T21506] Invalid ELF header magic: != ELF [ 991.189975][ T29] audit: type=1326 audit(8277292065.230:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21531 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab83f7dff9 code=0x0 [ 992.784361][T21576] svc: failed to register nfsdv3 RPC service (errno 111). [ 992.810280][T21576] svc: failed to register nfsaclv3 RPC service (errno 111). [ 993.129046][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.135514][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.822223][T21596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2827'. [ 1001.770979][ T5234] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 1002.639491][T21726] nbd: must specify at least one socket [ 1002.649891][T21724] raw_sendmsg: syz.3.2858 forgot to set AF_INET. Fix it! [ 1003.436673][T21733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2859'. [ 1007.832662][T21796] kexec: Could not allocate control_code_buffer [ 1015.361687][T21966] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2915'. [ 1015.375234][T21966] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2915'. [ 1016.102372][ T29] audit: type=1800 audit(8277292090.141:18): pid=21979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2918" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1016.588254][T21982] net_ratelimit: 1 callbacks suppressed [ 1016.588276][T21982] openvswitch: netlink: Key type 8590 is out of range max 32 [ 1017.121119][T21989] can: request_module (can-proto-4) failed. [ 1019.824629][T22042] netlink: 'syz.2.2933': attribute type 2 has an invalid length. [ 1022.850770][T22091] delete_channel: no stack [ 1028.063783][T22127] nbd: must specify at least one socket [ 1028.069527][T22127] nbd: must specify at least one socket [ 1028.230538][T22127] nbd: must specify at least one socket [ 1031.122652][T22151] Bluetooth: hci3: command 0x0406 tx timeout [ 1033.147346][T22210] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1035.780260][T22261] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2985'. [ 1035.906000][T22151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1035.962495][T22151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1035.983484][T22151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1036.004626][T22151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1036.013611][T22151] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1036.025589][T22151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1036.118538][ T7338] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.386633][ T7338] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.524428][ T7338] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.820674][ T7338] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.071762][T22266] chnl_net:caif_netlink_parms(): no params data found [ 1037.564837][T22266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.587288][T22266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.606749][T22266] bridge_slave_0: entered allmulticast mode [ 1037.633598][T22266] bridge_slave_0: entered promiscuous mode [ 1037.661409][ T7338] bridge_slave_1: left allmulticast mode [ 1037.672521][ T7338] bridge_slave_1: left promiscuous mode [ 1037.709609][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.801268][ T7338] bridge_slave_0: left allmulticast mode [ 1037.807089][ T7338] bridge_slave_0: left promiscuous mode [ 1037.812955][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.082625][ T5234] Bluetooth: hci4: command tx timeout [ 1039.149886][ T7338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.195901][ T7338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.254582][ T7338] bond0 (unregistering): Released all slaves [ 1039.301559][T22266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.331617][T22266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.352766][T22266] bridge_slave_1: entered allmulticast mode [ 1039.373002][T22266] bridge_slave_1: entered promiscuous mode [ 1039.639359][T22266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.674497][T22266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.844713][T22266] team0: Port device team_slave_0 added [ 1039.973412][T22266] team0: Port device team_slave_1 added [ 1040.162585][ T5234] Bluetooth: hci4: command tx timeout [ 1040.423321][T22266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.430557][T22266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.512383][T22266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.809363][T22266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.833087][T22266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.883257][T22266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.108324][T22266] hsr_slave_0: entered promiscuous mode [ 1041.134386][T22266] hsr_slave_1: entered promiscuous mode [ 1041.170559][T22266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1041.178959][T22266] Cannot create hsr debugfs directory [ 1041.206145][ T7338] hsr_slave_0: left promiscuous mode [ 1041.216307][ T7338] hsr_slave_1: left promiscuous mode [ 1041.253105][ T7338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1041.260728][ T7338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.275169][ T7338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1041.292533][ T7338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.324312][ T7338] veth1_macvtap: left promiscuous mode [ 1041.329869][ T7338] veth0_macvtap: left promiscuous mode [ 1041.342468][ T7338] veth1_vlan: left promiscuous mode [ 1041.351177][ T7338] veth0_vlan: left promiscuous mode [ 1042.163717][ T7338] team0 (unregistering): Port device team_slave_1 removed [ 1042.249372][ T5234] Bluetooth: hci4: command tx timeout [ 1042.257153][ T7338] team0 (unregistering): Port device team_slave_0 removed [ 1044.322606][ T5234] Bluetooth: hci4: command tx timeout [ 1045.339586][T22266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1045.454212][T22266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1045.496949][T22266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1045.614480][T22266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1045.851002][T22266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.906929][T22266] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.920980][T22481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.928138][T22481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.982703][T22481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.989842][T22481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.118781][T22266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1046.955709][T22266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.369600][T22266] veth0_vlan: entered promiscuous mode [ 1047.392826][T22266] veth1_vlan: entered promiscuous mode [ 1047.458518][T22266] veth0_macvtap: entered promiscuous mode [ 1047.463159][T22557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3029'. [ 1047.486667][T22266] veth1_macvtap: entered promiscuous mode [ 1047.554762][T22266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.579053][T22266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.639153][T22266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.662446][T22266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.678609][T22266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.712013][T22266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.732604][T22266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.766545][T22266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.814545][T22266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.860756][T22266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.880477][T22266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.924319][T22266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.949781][T22266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.978673][T22266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1048.012864][T22266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.038373][T22266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1048.083306][T22266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.104146][T22266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1048.300567][T22266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.342464][T22266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.351204][T22266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.388407][T22266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.765494][T22480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.801936][T22480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.866832][T16177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.907815][T16177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.711706][T16187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.731078][T22151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1052.754584][T22151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1052.780070][T22151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1052.803335][T22151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1052.832608][T22151] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1052.849902][T22151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1053.305774][T16187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.825281][T16187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.028765][T16187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.414390][T22666] chnl_net:caif_netlink_parms(): no params data found [ 1054.564750][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.571280][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.814818][T22666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.830121][T22666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.839110][T22666] bridge_slave_0: entered allmulticast mode [ 1054.856706][T22666] bridge_slave_0: entered promiscuous mode [ 1054.962822][ T5234] Bluetooth: hci2: command tx timeout [ 1055.078672][T22666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.112228][T22666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.119572][T22666] bridge_slave_1: entered allmulticast mode [ 1055.140921][T22666] bridge_slave_1: entered promiscuous mode [ 1055.157962][T16187] bridge_slave_1: left allmulticast mode [ 1055.164291][T16187] bridge_slave_1: left promiscuous mode [ 1055.180769][T16187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.267010][T16187] bridge_slave_0: left allmulticast mode [ 1055.281520][T16187] bridge_slave_0: left promiscuous mode [ 1055.295377][T16187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.146703][T16187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.185410][T16187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.196577][T16187] bond0 (unregistering): Released all slaves [ 1056.385234][T16187] HSR: left promiscuous mode [ 1056.580338][T22666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.675481][T22666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.915921][T22666] team0: Port device team_slave_0 added [ 1057.042615][ T5234] Bluetooth: hci2: command tx timeout [ 1057.059119][T22666] team0: Port device team_slave_1 added [ 1057.661445][T22666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.675799][T22666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.739013][T22666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.888045][T22666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1057.910325][T22666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.966778][T22666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.058122][T16187] hsr_slave_0: left promiscuous mode [ 1058.139724][T16187] hsr_slave_1: left promiscuous mode [ 1058.146059][T16187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.164410][T16187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.213117][T16187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.220547][T16187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.287222][T16187] veth1_macvtap: left promiscuous mode [ 1058.309274][T16187] veth0_macvtap: left promiscuous mode [ 1058.315044][T16187] veth1_vlan: left promiscuous mode [ 1058.320361][T16187] veth0_vlan: left promiscuous mode [ 1059.130899][ T5234] Bluetooth: hci2: command tx timeout [ 1059.234018][T16187] team0 (unregistering): Port device team_slave_1 removed [ 1059.434390][T16187] team0 (unregistering): Port device team_slave_0 removed [ 1060.954872][T22666] hsr_slave_0: entered promiscuous mode [ 1060.965184][T22666] hsr_slave_1: entered promiscuous mode [ 1060.972006][T22666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1060.983560][T22666] Cannot create hsr debugfs directory [ 1061.202450][ T5234] Bluetooth: hci2: command tx timeout [ 1061.853621][T22794] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3068'. [ 1062.034014][T22666] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1062.076864][T22666] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1062.136588][T22666] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1062.181391][T22666] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1062.360784][T22666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.416301][T22666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.437993][T16212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.445157][T16212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.521212][T16212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.528382][T16212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.733822][ T29] audit: type=1326 audit(2053.360:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22825 comm="syz.1.3075" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f991af7dff9 code=0x0 [ 1062.829131][T22834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3077'. [ 1062.914782][T22666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.041728][T22666] veth0_vlan: entered promiscuous mode [ 1063.089009][T22666] veth1_vlan: entered promiscuous mode [ 1063.160451][T22666] veth0_macvtap: entered promiscuous mode [ 1063.187507][T22666] veth1_macvtap: entered promiscuous mode [ 1063.232162][T22666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.250274][T22666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.261741][T22666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.280601][T22666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.300533][T22666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.318825][T22666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.330382][T22666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.341774][T22666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.354374][T22666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.386444][T22666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.410885][T22666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.431373][T22666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.448743][T22666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.473657][T22666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.498789][T22666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.532362][T22666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.559612][T22666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.583694][T22666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.618282][T22666] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.643488][T22666] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.663587][T22666] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.689435][T22666] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.816973][T16187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.854134][T16187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.930545][T16187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.959432][T16187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.399453][T22922] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3093'. [ 1067.637142][T22969] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1067.662713][T22969] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1067.670206][T22969] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1067.722038][T22969] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1067.732154][T22969] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1067.757097][T22969] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1067.957537][T22981] .': entered promiscuous mode [ 1069.105693][T23020] kernel read not supported for file /#E-\yċF B|ctpL#kZrV]Le- m,oOɧ (pid: 23020 comm: syz.3.3118) [ 1069.212383][ T29] audit: type=1800 audit(2059.830:20): pid=23020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3118" name=23452D5CF886C079018CC48BB4CA46A30B427C08A3A663917418DE704C23A8FD90F26B5AA17256B65D4C652D0C1A6DBE2CE66F4FC9A7 dev="mqueue" ino=93564 res=0 errno=0 [ 1072.055093][T22151] Bluetooth: hci0: command 0x0406 tx timeout [ 1077.127493][T23158] HSR: entered promiscuous mode [ 1077.263905][T23162] delete_channel: no stack [ 1082.555388][T23298] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3176'. [ 1082.860177][T23303] svc: failed to register nfsdv3 RPC service (errno 111). [ 1082.926245][T23303] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1085.969986][ T5234] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1086.997046][T23392] svc: failed to register nfsdv3 RPC service (errno 111). [ 1087.015495][T23392] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1087.482447][T23396] svc: failed to register nfsdv3 RPC service (errno 111). [ 1087.504072][T23396] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1087.617404][T23393] delete_channel: no stack [ 1088.536307][T23432] openvswitch: netlink: Key type 8590 is out of range max 32 [ 1092.323417][T23502] svc: failed to register nfsdv3 RPC service (errno 111). [ 1092.362739][T23502] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1096.213429][T23583] delete_channel: no stack [ 1103.682601][T23739] blktrace: Concurrent blktraces are not allowed on loop255 [ 1103.931836][T23744] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3290'. [ 1103.982791][T23745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3290'. [ 1108.541493][T23865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3318'. [ 1109.630846][T23900] .': entered promiscuous mode [ 1111.098771][ T29] audit: type=1800 audit(4294967312.659:21): pid=23923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3333" name="SYSV00010000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1111.661514][T23938] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3335'. [ 1113.300828][T23983] block device autoloading is deprecated and will be removed. [ 1116.005167][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.011693][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.305323][T24245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3408'. [ 1131.570073][T24359] can: request_module (can-proto-0) failed. [ 1134.227299][T24409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3443'. [ 1135.765789][T23275] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.210631][T23275] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.371688][T23275] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.572845][T23275] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.872473][T23275] bridge_slave_1: left allmulticast mode [ 1136.878180][T23275] bridge_slave_1: left promiscuous mode [ 1136.943817][T23275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.008562][T23275] bridge_slave_0: left allmulticast mode [ 1137.022288][T23275] bridge_slave_0: left promiscuous mode [ 1137.028067][T23275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.390586][T22151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1137.399792][T22151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1137.408888][T22151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1137.424726][T22151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1137.443975][T22151] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1137.451530][T22151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1137.998937][T24464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3451'. [ 1138.168822][T24473] blktrace: Concurrent blktraces are not allowed on loop255 [ 1138.548799][T23275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1138.592812][T23275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1138.645001][T23275] bond0 (unregistering): Released all slaves [ 1138.742282][T23275] .': left promiscuous mode [ 1139.531577][ T5234] Bluetooth: hci0: command tx timeout [ 1140.131522][T24453] chnl_net:caif_netlink_parms(): no params data found [ 1140.592379][T24453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.601861][T24453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.611942][T24453] bridge_slave_0: entered allmulticast mode [ 1140.619478][T24453] bridge_slave_0: entered promiscuous mode [ 1140.627260][T24453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.634417][T24453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.641560][T24453] bridge_slave_1: entered allmulticast mode [ 1140.648621][T24453] bridge_slave_1: entered promiscuous mode [ 1140.972798][T23275] hsr_slave_0: left promiscuous mode [ 1141.052361][T23275] hsr_slave_1: left promiscuous mode [ 1141.107229][T23275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1141.114897][T23275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.137048][T23275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1141.158137][T23275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1141.208907][T23275] veth1_macvtap: left promiscuous mode [ 1141.221488][T23275] veth0_macvtap: left promiscuous mode [ 1141.235416][T23275] veth1_vlan: left promiscuous mode [ 1141.249888][T23275] veth0_vlan: left promiscuous mode [ 1141.602430][ T5234] Bluetooth: hci0: command tx timeout [ 1142.271363][T23275] team0 (unregistering): Port device team_slave_1 removed [ 1142.400342][T23275] team0 (unregistering): Port device team_slave_0 removed [ 1143.448131][T24453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.521148][T24453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.660219][T24453] team0: Port device team_slave_0 added [ 1143.680441][T24453] team0: Port device team_slave_1 added [ 1143.682430][ T5234] Bluetooth: hci0: command tx timeout [ 1143.861325][T24453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.892376][T24453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.938770][T24453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.994674][T24453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1144.016723][T24453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1144.071388][T24453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1144.236644][T24453] hsr_slave_0: entered promiscuous mode [ 1144.256322][T24453] hsr_slave_1: entered promiscuous mode [ 1144.277846][T24453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1144.300818][T24453] Cannot create hsr debugfs directory [ 1145.539069][T24453] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1145.579519][T24453] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1145.609393][T24453] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1145.637357][T24453] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1145.762747][ T5234] Bluetooth: hci0: command tx timeout [ 1145.873817][T24453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.944866][T24453] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.985904][T16212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.993080][T16212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.035035][T16212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.042250][T16212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.119609][T24453] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1146.159808][T24453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1146.578567][T24453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.698928][T24453] veth0_vlan: entered promiscuous mode [ 1146.732175][T24453] veth1_vlan: entered promiscuous mode [ 1146.814363][T24453] veth0_macvtap: entered promiscuous mode [ 1146.853441][T24453] veth1_macvtap: entered promiscuous mode [ 1146.907044][T24453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.917851][T24453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.928045][T24453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.939058][T24453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.949383][T24453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.959983][T24453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.970245][T24453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.980940][T24453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.992009][T24453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1147.002405][T24453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.012909][T24453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.022974][T24453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.033656][T24453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.043959][T24453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.054752][T24453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.064652][T24453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.075361][T24453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.086707][T24453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1147.096685][T24453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.105458][T24453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.114856][T24453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.123614][T24453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.302979][T23275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.338458][T23275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.446385][T16202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.482315][T16202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.852555][T24662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3477'. [ 1147.909136][T24662] tc_dump_action: action bad kind [ 1147.941929][T24667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3477'. [ 1158.762666][T24863] Invalid ELF header magic: != ELF [ 1159.042345][T22151] Bluetooth: hci4: command 0x0406 tx timeout [ 1160.118926][T24908] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1160.298314][T24908] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1165.934272][T24976] Unable to find swap-space signature [ 1165.974308][T24976] Unable to find swap-space signature [ 1169.622445][T25023] can: request_module (can-proto-0) failed. [ 1177.272588][T25125] Unable to find swap-space signature [ 1177.320269][T25125] Unable to find swap-space signature [ 1177.448523][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.455100][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.524918][T22151] Bluetooth: hci2: command 0x0406 tx timeout [ 1181.203924][T25198] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3583'. [ 1181.362607][T25203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3585'. [ 1181.662764][T25206] Process accounting resumed [ 1186.362759][T25269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3602'. [ 1187.798781][T25303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3609'. [ 1188.698404][T25304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3608'. [ 1188.712478][T25304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3608'. [ 1188.739421][T25304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3608'. [ 1188.987630][T25322] Unable to find swap-space signature [ 1197.236503][T25448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3640'. [ 1198.043523][T25454] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3641'. [ 1202.124304][T25496] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3651'. [ 1203.172459][T25521] svc: failed to register nfsdv3 RPC service (errno 111). [ 1203.342345][T25521] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1206.523638][T25570] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3667'. [ 1206.760593][T25574] netlink: 'syz.3.3668': attribute type 2 has an invalid length. [ 1206.793000][T25574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3668'. [ 1209.544765][T25606] svc: failed to register nfsdv3 RPC service (errno 111). [ 1209.610656][T25606] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1212.944223][T25635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3682'. [ 1213.803547][T25651] Unable to find swap-space signature [ 1214.392275][T25669] delete_channel: no stack [ 1215.865493][T16178] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.999033][T16178] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.234788][T16178] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.532540][T25702] Oops: general protection fault, probably for non-canonical address 0xdffffc0000002c03: 0000 [#1] PREEMPT SMP KASAN PTI [ 1216.545167][T25702] KASAN: probably user-memory-access in range [0x0000000000016018-0x000000000001601f] [ 1216.554723][T25702] CPU: 0 UID: 0 PID: 25702 Comm: syz.0.3696 Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 1216.565498][T25702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1216.575563][T25702] RIP: 0010:__smc_diag_dump.constprop.0+0x3e2/0x2500 [ 1216.582266][T25702] Code: 4c 8b b3 58 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 73 50 d2 f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 86 1c 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 1216.601893][T25702] RSP: 0018:ffffc90004aef160 EFLAGS: 00010206 [ 1216.607973][T25702] RAX: dffffc0000000000 RBX: ffff888078e11700 RCX: ffffffff88fe4a14 [ 1216.615958][T25702] RDX: 0000000000002c03 RSI: ffffffff8aba67dd RDI: 0000000000016018 [ 1216.623944][T25702] RBP: ffff888031ee35e0 R08: 0000000000000005 R09: 0000000000000000 [ 1216.631925][T25702] R10: 0000000080000001 R11: 0000000000000000 R12: 0000000000000000 [ 1216.639907][T25702] R13: ffff88806a8c0000 R14: 0000000000016000 R15: 0000000000000002 [ 1216.647887][T25702] FS: 00007f06cfe1e6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1216.656813][T25702] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1216.663389][T25702] CR2: 00007f06cfdbbd58 CR3: 000000002c93e000 CR4: 00000000003526f0 [ 1216.671359][T25702] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1216.679322][T25702] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1216.687289][T25702] Call Trace: [ 1216.690557][T25702] [ 1216.693481][T25702] ? die_addr+0x3b/0xa0 [ 1216.697632][T25702] ? exc_general_protection+0x155/0x230 [ 1216.703181][T25702] ? asm_exc_general_protection+0x26/0x30 [ 1216.708901][T25702] ? sock_diag_save_cookie+0x44/0xd0 [ 1216.714191][T25702] ? __smc_diag_dump.constprop.0+0x3cd/0x2500 [ 1216.720255][T25702] ? __smc_diag_dump.constprop.0+0x3e2/0x2500 [ 1216.726322][T25702] ? __pfx_mark_lock+0x10/0x10 [ 1216.731086][T25702] ? __pfx___smc_diag_dump.constprop.0+0x10/0x10 [ 1216.737408][T25702] ? hlock_class+0x4e/0x130 [ 1216.741907][T25702] ? __lock_acquire+0x163e/0x3ce0 [ 1216.746938][T25702] ? __pfx___lock_acquire+0x10/0x10 [ 1216.752137][T25702] ? mark_held_locks+0x9f/0xe0 [ 1216.756912][T25702] ? lock_acquire.part.0+0x11b/0x380 [ 1216.762203][T25702] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1216.767840][T25702] ? rcu_is_watching+0x12/0xc0 [ 1216.772599][T25702] ? trace_lock_acquire+0x14a/0x1d0 [ 1216.777793][T25702] ? smc_diag_dump_proto+0x103/0x420 [ 1216.783079][T25702] ? lock_acquire+0x2f/0xb0 [ 1216.787579][T25702] ? smc_diag_dump_proto+0x103/0x420 [ 1216.792862][T25702] smc_diag_dump_proto+0x26d/0x420 [ 1216.797972][T25702] smc_diag_dump+0x27/0x90 [ 1216.802382][T25702] netlink_dump+0x552/0xcc0 [ 1216.806882][T25702] ? __pfx_netlink_dump+0x10/0x10 [ 1216.811901][T25702] ? __mutex_lock+0x1a6/0x9c0 [ 1216.816580][T25702] ? find_held_lock+0x2d/0x110 [ 1216.821343][T25702] ? lock_acquire+0x2f/0xb0 [ 1216.825847][T25702] ? netlink_lookup+0x3d/0x270 [ 1216.830606][T25702] __netlink_dump_start+0x6d9/0x980 [ 1216.835801][T25702] smc_diag_handler_dump+0x1fb/0x240 [ 1216.841083][T25702] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 1216.846886][T25702] ? trace_lock_acquire+0x14a/0x1d0 [ 1216.852102][T25702] ? __pfx_smc_diag_dump+0x10/0x10 [ 1216.857213][T25702] sock_diag_rcv_msg+0x437/0x790 [ 1216.862151][T25702] netlink_rcv_skb+0x165/0x410 [ 1216.866924][T25702] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1216.872383][T25702] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1216.877670][T25702] ? netlink_deliver_tap+0x1ae/0xcf0 [ 1216.882956][T25702] netlink_unicast+0x53c/0x7f0 [ 1216.887717][T25702] ? __pfx_netlink_unicast+0x10/0x10 [ 1216.893000][T25702] ? __phys_addr_symbol+0x30/0x80 [ 1216.898022][T25702] ? __check_object_size+0x488/0x710 [ 1216.903308][T25702] netlink_sendmsg+0x8b8/0xd70 [ 1216.908088][T25702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1216.913384][T25702] ____sys_sendmsg+0x9ae/0xb40 [ 1216.918158][T25702] ? copy_msghdr_from_user+0x10b/0x160 [ 1216.923624][T25702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1216.928910][T25702] ? __pfx___futex_wait+0x10/0x10 [ 1216.933939][T25702] ? try_to_wake_up+0x154/0x14f0 [ 1216.938880][T25702] ___sys_sendmsg+0x135/0x1e0 [ 1216.943563][T25702] ? __pfx____sys_sendmsg+0x10/0x10 [ 1216.948779][T25702] ? fdget+0x176/0x210 [ 1216.952844][T25702] __sys_sendmsg+0x117/0x1f0 [ 1216.957428][T25702] ? __pfx___sys_sendmsg+0x10/0x10 [ 1216.962535][T25702] ? __x64_sys_futex+0x1e1/0x4c0 [ 1216.967479][T25702] do_syscall_64+0xcd/0x250 [ 1216.972000][T25702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.977906][T25702] RIP: 0033:0x7f06cef7dff9 [ 1216.982321][T25702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1217.001928][T25702] RSP: 002b:00007f06cfe1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1217.010335][T25702] RAX: ffffffffffffffda RBX: 00007f06cf136058 RCX: 00007f06cef7dff9 [ 1217.018302][T25702] RDX: 000000000400c000 RSI: 0000000020000140 RDI: 0000000000000041 [ 1217.026267][T25702] RBP: 00007f06ceff0296 R08: 0000000000000000 R09: 0000000000000000 [ 1217.034235][T25702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1217.042199][T25702] R13: 0000000000000000 R14: 00007f06cf136058 R15: 00007fff180f22c8 [ 1217.050176][T25702] [ 1217.053188][T25702] Modules linked in: [ 1217.057927][T25702] ---[ end trace 0000000000000000 ]--- [ 1217.064459][T25702] RIP: 0010:__smc_diag_dump.constprop.0+0x3e2/0x2500 [ 1217.071214][T25702] Code: 4c 8b b3 58 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 73 50 d2 f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 86 1c 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 1217.091010][T25702] RSP: 0018:ffffc90004aef160 EFLAGS: 00010206 [ 1217.097272][T25702] RAX: dffffc0000000000 RBX: ffff888078e11700 RCX: ffffffff88fe4a14 [ 1217.105500][T25702] RDX: 0000000000002c03 RSI: ffffffff8aba67dd RDI: 0000000000016018 [ 1217.113718][T25702] RBP: ffff888031ee35e0 R08: 0000000000000005 R09: 0000000000000000 [ 1217.121707][T25702] R10: 0000000080000001 R11: 0000000000000000 R12: 0000000000000000 [ 1217.130313][T25702] R13: ffff88806a8c0000 R14: 0000000000016000 R15: 0000000000000002 [ 1217.138558][T25702] FS: 00007f06cfe1e6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1217.147778][T25702] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1217.154525][T25702] CR2: 00007f06cfdbbd58 CR3: 000000002c93e000 CR4: 00000000003526f0 [ 1217.162612][T25702] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1217.170598][T25702] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1217.178736][T25702] Kernel panic - not syncing: Fatal exception [ 1217.185055][T25702] Kernel Offset: disabled [ 1217.189363][T25702] Rebooting in 86400 seconds..