last executing test programs: 52.068310306s ago: executing program 2 (id=1034): r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x1c, 0x5}, 0x7) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x0, 0x33, 0xffffffffffffffff, 0x0) socket(0xa, 0x2, 0x0) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0x200, 0x800000000000008, 0xc, 0x9, 0x3, 0x6, 0x1, 0x40009, 0xcd16, 0x4000000000000000, 0x14, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f00000018c0)={0x2, @sa_data_min="915bac14140ba3df94bb303b2f9d"}, 0x55) mmap$auto(0x4, 0x7, 0x1, 0xf0f7, 0x2, 0xee0d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x80003, 0x300) write$auto(0x3, 0x0, 0xfdef) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000280), r0) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd8, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NFSD_A_POOL_MODE_MODE={0x8, 0x1, 'nbd\x00'}, @NFSD_A_POOL_MODE_MODE={0x8, 0x1, 'nbd\x00'}, @NFSD_A_POOL_MODE_MODE={0x7, 0x1, '&@\x00'}, @NFSD_A_POOL_MODE_MODE={0xab, 0x1, '\xe4\xc97V\x11\x19\xf3\x8a\t\xf4wzl\x18\xa5{,\xb5\xa6\xffJ~R\x10e.\x80\xa9.w&\x06\xbb\x99\xac}c\x1d\xfae$c\xfdq\f\x9dl\xe1H&T\x98!\xf6\r\xd3\xf7|\xe0v9\xf2U\x85\xbc\xa1\xa1Tz1#\xf9\xd4\x92\xe7|\xaa\x14\'h\xe4\x88t\n\x1aje\x1d.\xdc \xd0\xd3\x14\x16\xd4\xa9\x10N\xcf?\x98|c\xe9\xe7\x16\xbbP\x86F\xb4A\xda\x15\xc1X\xa1\x9a\x9e\"J\xca(3.\x12_:\x16\"\x12^\xde:\xdaCM\a0\xf97PXi\x90\xff&\xe4\x825\xa7\x93g\xbb\x9cZ\xaa\xc9\xa6D\x9a\x873\x0f\xf81'}]}, 0xd8}, 0x1, 0x0, 0x0, 0x48081}, 0x8814) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000ec0), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) dup2$auto(0x0, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(r1, 0x0, 0x4000040) dup2$auto(r2, r0) ioperm$auto(0x7, 0x6, 0x2) 44.043644945s ago: executing program 3 (id=1046): r0 = socket(0x2b, 0x9, 0x4) fanotify_init$auto(0x65, 0x2) pipe$auto(&(0x7f0000000080)=0x3) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x0, 0x1a, 0xffffffffffffffff, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20008000) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f0000000200)=0x3) socket(0x2c, 0x800, 0x2000003) setresuid$auto(0x1, 0x8, 0x4000000008000) getpgid(0xffffffffffffffff) syz_clone(0x24000, &(0x7f0000000240)="8897af1233d47a62356de19ec397b2db9c2bbafa263aee67e61a028e829f31fe3e708874e17208c2af6d6cda13a2102fa4ed47b31b", 0x35, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="fec04a64e963b503a9b1a0ad9665f0d8b1938579e4f47bf9d12d94eed1814a3f1a9d6d77f7196d23b770ab9935b9ec16096974db0cb5c876fa801cc60ff10296d66c00bd27696ad502824ddf38c24950c2942c46502921cfa12fa780e784b019d3f6f1b8217c2fcf2d0b6fc62d6a14bbf044811aae044de925770f25f5816b68f0bd02e94f4b689b4e1ff7cff251e6c775fa178a584859b8e154158422f3f52495722fd6899b008a1808da98f4729dc51945bc2d50154b38f67c377cc5e67caa9499") bpf$auto(0x3, &(0x7f0000000400)=@link_create={@prog_fd=r0, @target_fd=r1, 0x4, 0x3, @netkit={@relative_fd=r0, 0xff}}, 0x0) r3 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r3) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRES16=r4, @ANYBLOB="00022cbd7000fcdbdf2514000000080016000800000005001d000400000008000f001686000008000500a30f00000700010031413500"], 0x3c}, 0x1, 0x0, 0x0, 0x140440d4}, 0x10) socket(0x22, 0x2, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) mmap$auto(0x20, 0x400008, 0xdf, 0x40000000019, 0xffffffffffffffff, 0x4) r5 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) epoll_ctl$auto(0x5, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(&(0x7f0000000000)='[(*\x00', 0x0) 42.999857404s ago: executing program 3 (id=1050): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x3a) socket(0xa, 0x2, 0x0) mmap$auto(0x6, 0x20009, 0x0, 0xeb1, 0x401, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r0, 0x9, 0x1, &(0x7f0000000080)='ns/pid\x00', &(0x7f00000000c0)=0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffffcd, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x34000}, 0x4, 0x0, 0x1}, 0xed7138c}, 0x2, 0x9) sysinfo$auto(0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1, 0x800, 0x1365) getsockopt$auto(0x100000006, 0x1, 0x3c, 0xfffffffffffffffe, 0x0) socket(0xa, 0x3, 0x73) socket(0xa, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') 42.839441764s ago: executing program 2 (id=1051): mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) creat$auto(&(0x7f0000000040)='X))\x00', 0x5) lseek$auto(0x3, 0x7, 0x4) madvise$auto(0x0, 0x2000040080000004, 0xe) statmount$auto(0xfffffffffffffffc, 0x0, 0x6, 0xffb) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2, 0x1000000004, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xcf, 0x0, 0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') memfd_secret$auto(0x8) munmap$auto(0x20001000, 0x2000000c) mmap$auto(0xfffffffffffffff9, 0x5, 0x4, 0x7fffffff, 0x3, 0x9) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x72) open(&(0x7f0000000040)='./file0\x00', 0x56000, 0x88) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x2cbd5d) execve$auto(&(0x7f0000000140)='-,#\x00', &(0x7f00000001c0)=&(0x7f0000000180)='\\-\x00', &(0x7f0000000240)=&(0x7f0000000200)='\'&') mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8000, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x8040) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) fremovexattr$auto(0x3, &(0x7f0000000080)='\\-\x00') r0 = getpid() move_pages$auto(r0, 0x6, &(0x7f0000000040)=&(0x7f0000000000)=[0x0], &(0x7f0000000080)=0x7fffffff, &(0x7f0000000100)=0x3, 0x2) 42.637398412s ago: executing program 3 (id=1052): mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000001c0), r0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048080}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_vlan\x00', 0x0}) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_PUBLIC_KEY={0x1e, 0x4, "b51abce36b09449b82eae68c67b3311c66cce94b6c71fb5245f6"}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffffff}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x2) r7 = syz_genetlink_get_family_id$auto_NLBL_UNLBL(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r7, 0x30c, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, {@u6_addr8="34f40ffeeba6bca11bb54b62f6ee3c32"}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, {0xffff7fff}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, {@u6_addr16=[0x5, 0xd2b6, 0x3, 0x1, 0x5, 0x7, 0xffe0, 0x8]}}, @NLBL_UNLABEL_A_IFACE={0x6, 0x6, '^\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x18041) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 41.996282371s ago: executing program 3 (id=1054): clone$auto(0x21002, 0x89, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x1) prctl$auto(0x34, 0xffff, 0xa, 0x800, 0x6c) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PHC_VCLOCKS_HEADER={0x7, 0x1, "3fa0fe"}, @ETHTOOL_A_PHC_VCLOCKS_HEADER={0x7, 0x1, "8fda78"}, @ETHTOOL_A_PHC_VCLOCKS_HEADER={0x7, 0x1, "ae89d8"}, @ETHTOOL_A_PHC_VCLOCKS_HEADER={0x7, 0x1, "25c6e8"}, @ETHTOOL_A_PHC_VCLOCKS_HEADER={0x7, 0x1, "b9fd33"}, @ETHTOOL_A_PHC_VCLOCKS_HEADER={0x7, 0x1, "f52b25"}]}, 0x44}, 0x1, 0x0, 0x0, 0x88d0}, 0x24008001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4008, 0xdf, 0x9b72, 0x0, 0x8000) (async) mmap$auto(0x0, 0x4008, 0xdf, 0x9b72, 0x0, 0x8000) ioprio_get$auto(0x2, 0x1) setsockopt$auto(0x3, 0x1, 0xe, 0x0, 0x8) clock_nanosleep$auto(0x1, 0x7fffffff, &(0x7f0000000000)={0xdc36}, &(0x7f0000000040)={0x6, 0xff}) getcwd$auto(0x0, 0xf) (async) getcwd$auto(0x0, 0xf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x92, 0x6, &(0x7f0000000080)=0xa, &(0x7f00000000c0)=0x6, 0x2) fcntl$auto(0x9, 0x9, 0x947) socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="fb3c614a8dda7ad722679db28181"}, 0x55) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) clone$auto(0x8, 0x0, &(0x7f0000000100), &(0x7f0000000180)=0x2, 0x2) (async) clone$auto(0x8, 0x0, &(0x7f0000000100), &(0x7f0000000180)=0x2, 0x2) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x10000000084, 0x77, 0x0, 0x8) 41.393124355s ago: executing program 2 (id=1057): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0xea7, 0x4, 0x400, 0x17, 0x3, 0x0) mmap$auto(0x80000001, 0x31c, 0x2, 0x1010, 0x4, 0x9) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000002000)={0x10, @sockaddr_1_1}, 0xf) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) 40.768392907s ago: executing program 2 (id=1061): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) utime$auto(0x0, 0x0) 38.1338543s ago: executing program 3 (id=1068): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) stat$auto(&(0x7f00000001c0)='..\x00\x00o\xf7\xb1\xbf~\x93\t\xef', 0x0) socket(0xa, 0x801, 0x84) getsockopt$auto(0x6, 0x84, 0x425, 0x0, &(0x7f00000000c0)=0x10001) tkill$auto(0x1, 0x7) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) socket(0x1, 0xa, 0xa) mq_open$auto(&(0x7f0000000200)='#)-\\&[}\x00', 0xde8, 0xb, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000180)={0xa, @sockaddr_1_1={"098976d76b8292"}}, 0x55) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f00000018c0)={0x2, @sa_data_min="915bac14140ba3df94bb303b2f9d"}, 0x55) shutdown$auto(0x200000003, 0x2) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001400c7274a08bf9779d790fb28"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x34000}, 0x4, 0x0, 0x1}, 0xed7138c}, 0x2, 0x9) write$auto(0x3, 0x0, 0x81) socket(0x1e, 0x5, 0x7) 36.791438952s ago: executing program 2 (id=1070): landlock_create_ruleset$auto(&(0x7f00000007c0)={0x1}, 0x8, 0x0) mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8000, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x8040) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x4, 0x0, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) timerfd_create$auto(0x1, 0x0) timerfd_gettime$auto(0x6, &(0x7f0000000200)={{0xfffffffffffffff9, 0x8000}, {0x81, 0x5}}) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) r0 = socket(0x2, 0x1, 0x0) r1 = syz_genetlink_get_family_id$auto_NLBL_UNLBL(&(0x7f0000000040), r0) sendmsg$auto_NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000a0", @ANYRES16=r1, @ANYBLOB="000326bd7000fcdbdf25060000000800040001000000a4000700fa5eb781c7652b53071e2ccc073471a377ca7454827be2a3504b24edaf576a5f7a20d735d0035652064194dc5789d3a5c407142e4cd6362e54a53b7612ca78bf319f3c58261a278744193712559f2f98baae78194d81ae6516393b214a22471c80fc319e6941547efa5bf81ac451fff40bd7776ecb1c5c988da7cddff1419800a21ac590c57f43408ef126aad6eccb63cbfb15a8b1a2d98696e1941c8350bdc60500010009000000"], 0xc8}, 0x1, 0x0, 0x0, 0x24004000}, 0x24008004) mmap$auto(0x0, 0xa, 0xdb, 0x9b73, 0x5, 0x800) prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x807) mmap$auto(0x0, 0x5000, 0xde, 0xfffffffffffffffb, 0x1000000000052, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xc, 0x9, 0x0, 0xfffffffffffffffe, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 34.389494242s ago: executing program 2 (id=1074): ioprio_set$auto(0x2, 0x800000000, 0x8) unshare$auto(0x40000080) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="010325bd70009ca0c8e415"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) clone3$auto(&(0x7f0000000340)={0x5, 0x0, 0x3, 0x6, 0xab4, 0x6, 0xfc, 0x10004, 0x0, 0x8000000002, 0x7}, 0x4000000000008) mmap$auto(0x0, 0x4, 0x5, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x4, 0xa, 0x401, 0x18, 0x7, 0x3a4) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) unshare$auto(0x40000080) io_cancel$auto(0x2, &(0x7f00000001c0)={0x5157, 0xb90, 0x80000, 0x7, 0x5, 0x0, 0x6, 0x3, 0xf, 0x0, 0x9, 0xffffffffffffffff}, &(0x7f0000000240)={0x100, 0xbe, 0x6, 0x7}) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={r1, 0x5}, 0x7) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x106) setsockopt$auto(0x3, 0x29, 0x1a, 0xffffffffffffffff, 0x3) socket(0xa, 0x5, 0x0) fcntl$auto(0xff80000000000000, 0x406, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x200) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(&(0x7f0000000200)='#)-\\&[}\x00', 0xde8, 0xb, 0x0) lseek$auto(0x7, 0x8000000000000000, 0x4) ioprio_get$auto(0x2000000002, 0x0) readv$auto(0x7860, &(0x7f0000000040)={&(0x7f0000000000)=[0x400, 0x1ff, 0x4, 0xf], 0x6}, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') socket(0xa, 0x2, 0x88) setsockopt$auto(0x400000000000003, 0x29, 0x48, 0xffffffffffffffff, 0x0) ioctl$NS_GET_PARENT(r2, 0xb701, 0x0) socket(0x1d, 0x2, 0x7) getsockname$auto(0x6, &(0x7f0000000100)={0x3, @sockaddr_1_1}, &(0x7f0000000180)=0x3) 33.547386873s ago: executing program 3 (id=1075): open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') getdents64$auto(r0, 0x0, 0x18) fcntl$auto(0x3, 0x4, 0xa553) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) (async) socket(0x15, 0x5, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (async) getdents64$auto(r0, 0x0, 0x18) (async) fcntl$auto(0x3, 0x4, 0xa553) (async) socket(0x2, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) (async) 20.481835898s ago: executing program 1 (id=1097): read$auto(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x7) mmap$auto(0x1000000, 0x6, 0xdf, 0x16, 0x2, 0x16) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) nanosleep$auto(&(0x7f0000000180)={0xffffffffffffff81, 0x6}, &(0x7f00000001c0)={0xffffffffffffffff, 0x5000000000000000}) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mincore$auto(0x0, 0x8000000000005a, 0x0) rmdir$auto(0x0) mmap$auto(0x0, 0x20007, 0x80000000000000dc, 0x10004000ebd, 0xaf, 0x8000) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) syslog$auto(0x3, &(0x7f0000000040)='\x9bY\x8e\xa2#\xc6+(\x86\nzI\xb3\x97\xe3I}\x00\x00\xf3\x82\"\xe4\xd2\xbf\x84\xfcl\x8a)\x1b;\xce\xf3\xaa\xbd\xfa\"\xdb]\xcbV\xd6\xf9\t\x00\xab\x9e\xf0m\xb6\xf16!', 0x3ff) syz_genetlink_get_family_id$auto_HSR(0x0, 0xffffffffffffffff) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x7, 0xffff, 0x19, 0x2, 0x3) mmap$auto(0x0, 0x400008, 0xe0, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x2010000000000) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') open(0x0, 0x4242, 0xe1d2b27bdc14aabc) open(0x0, 0x10677d, 0x37e5c9853cd1b999) fanotify_mark$auto(0x400000000000, 0x101, 0x10c, 0x4, 0x0) mknod$auto(&(0x7f0000000180)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e', 0x1, 0x4) acct$auto(&(0x7f0000000380)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') acct$auto(0x0) rseq$auto(&(0x7f0000000300)={0x7d, 0x5, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0xa, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) 14.211516194s ago: executing program 0 (id=1099): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) open(&(0x7f0000004080)='./file0\x00', 0x40, 0x23) getdents64$auto(0x0, 0x0, 0x2000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setitimer$auto(0x1, &(0x7f0000000000)={{0x2, 0x7f}, {0x800000004, 0x2}}, 0x0) bpf$auto(0x8, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x29c, 0xa, @old_map_fd=0x5}, 0xa3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) shutdown$auto(0x5, 0x1) r0 = socket(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) socket(0x2c, 0x80003, 0x0) ioctl$auto(0xc9, 0x100000002, 0x4000000005c8d) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r1) write$auto(r1, &(0x7f0000000000)='MAC80211_HWSIM\x00', 0x2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)={0x18, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x48010) syz_genetlink_get_family_id$auto_TASKSTATS(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x1ffd, 0x12) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xffffeffe) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 13.96154398s ago: executing program 1 (id=1100): keyctl$auto(0x3, 0xffffffffffffffff, 0x9b, 0x400000000004, 0x8) msync$auto(0x1ffff000, 0x1080100000000007, 0x400000004) 12.738779819s ago: executing program 1 (id=1101): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0xfffffffffffff000, 0x2) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) creat$auto(&(0x7f0000000040)='X))\x00', 0x5) ioctl$auto(0x3, 0x401870cb, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x6, 0x0) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) 11.273845235s ago: executing program 1 (id=1102): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r0, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) tee$auto(0x0, 0x1, 0x7, 0x8) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) bind$auto(0x3, 0x0, 0x5) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) 7.92251751s ago: executing program 1 (id=1103): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0x6) setresuid$auto(0x8, 0x8, 0x0) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x0, 0x41, 0xfffffffffffffffe, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r1) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fffffff}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x6f8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40040) 7.86141903s ago: executing program 0 (id=1104): capget$auto(&(0x7f0000000140)={0x9, 0xffffffffffffffff}, &(0x7f0000000200)={0x9, 0x3, 0x286}) syz_open_procfs$namespace(r0, &(0x7f0000000240)='ns/pid\x00') (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64$auto(0x0, 0x8, &(0x7f0000002740)={0xe2, 0xfffffffffffffffd}, &(0x7f0000002780)={0x80, 0x9}) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70020000", @ANYRES16=r2, @ANYBLOB="010029b57000fedbdf2502000000040001006e00010092e191e7263dbbb8a165cf4c551230b922db1d4c0096e0b088d50559d8481ae88a4a6b56a029e04e9ca3073b9ae6cfa334942acfd351c2e68cc9afcae7b9c4"], 0x270}}, 0x240008c4) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000280), r1) r3 = socket(0x2, 0x3, 0x6) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) (async) mprotect$auto(0x1ffff000, 0x7fffffffffffffff, 0x4) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x8, 0xffffffef, 0x18c, 0x6a, 0x0, 0x8, 0x3, 0x9, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", 0x0, 0x541, 0x4, 0x7, 0x3, 0x1009, 0x4, 0x2, 0xe, 0x5, @attach_btf_obj_fd=0x3, 0x166, 0x7ff, 0x6, 0x6, 0x48000000, 0xa7c2}, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) socket(0xa, 0x5, 0x0) (async) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), r3) sendmsg$auto_NFC_CMD_GET_TARGET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x58, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x3}, @NFC_ATTR_DEVICE_NAME={0x4}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3ff}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x8}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x69}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1ff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x96}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1c2}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000880}, 0x4000804) open(0x0, 0x22240, 0x154) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x2, 0x2, 0x9, 0x8, 0xc0f6) 7.476088701s ago: executing program 1 (id=1105): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x3, 0x73) setsockopt$auto(0x400000000000003, 0x29, 0x24, 0x0, 0x20056b) mlockall$auto(0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0x2a, 0x2, 0x6) read$auto(r0, 0x0, 0x7) socket(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_submit$auto(0x1, 0x5, &(0x7f0000000040)=&(0x7f0000000000)={0x4, 0xe6, 0x4, 0xf, 0xfeff, 0x1, 0x1, 0x6, 0x4, 0x0, 0x7, 0xffffffffffffffff}) memfd_create$auto(0x0, 0xe) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto(0x2, 0x5, 0x1) connect$auto(0x3, 0x0, 0x55) socket(0xa, 0x2, 0x0) getsockopt$auto(r1, 0x88, 0x1, 0xfffffffffffffffe, 0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) 7.07236581s ago: executing program 0 (id=1106): bpf$auto(0x9, &(0x7f00000000c0)=@query={@target_fd, 0x5, 0x7, 0x3, 0x5, @prog_cnt=0xffff, 0x0, 0x1771, 0x3, 0x8, 0x63e}, 0x9) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x9, 0x1f3, 0x9772, 0x1ff, 0x1, 0xee) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x20) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000140)={0x2, @sa_data_min="09ff7f0000000100"}, 0x55) sendto$auto(0x3, 0x0, 0x8, 0xe, &(0x7f0000000140)={0x2, @sockaddr_1_1}, 0x1c) pidfd_getfd$auto(r0, r0, 0x100000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fsconfig$auto(0x6, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x5) 5.466955058s ago: executing program 0 (id=1107): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) socket(0x15, 0x5, 0x0) (async) socket(0x15, 0x5, 0x0) socket(0xa, 0x5, 0x0) socket(0x2, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') socketpair$auto(0x3, 0x5, 0x7, 0x0) bpf$auto(0x0, 0x0, 0xaf1) mmap$auto(0x0, 0x400008, 0xdd, 0x38, 0x1, 0x8000000000000000) (async) mmap$auto(0x0, 0x400008, 0xdd, 0x38, 0x1, 0x8000000000000000) close_range$auto(0x0, 0x5, 0x0) (async) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) mmap$auto(0x5, 0xffffffffffffffff, 0x600000000000000, 0x14, 0x5, 0x7) inotify_init1$auto(0x3000000000000) fanotify_init$auto(0x2000005, 0xffff) (async) fanotify_init$auto(0x2000005, 0xffff) socket(0x15, 0x5, 0x0) msgctl$auto(0x2, 0x1, 0xffffffffffffffff) getsockopt$auto(0x2, 0x114, 0x271f, 0xfffffffffffffffc, 0x0) 5.226958986s ago: executing program 0 (id=1108): socket(0xa, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xc8, 0x800454df, 0xacf) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="00000000f5ffffffffffffff00"}, 0x55) (async) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x7, 0x7, 0x3, 0x6, 0x2, 0x0, 0x10000005e58296f, 0x1e, 0x7, 0x3, 0x200, 0x8, 0x6]}, 0x0, 0x0) (async) rename$auto(&(0x7f0000000000)=',\x00', &(0x7f0000000040)='\x00') (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async) write$auto(0x3, 0x0, 0xfdef) 0s ago: executing program 0 (id=1109): close_range$auto(0x0, 0xfffffffffffff000, 0x2) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') mmap$auto(0x0, 0x9, 0xdf, 0x40000000000eb1, 0x401, 0x8000) getdents64$auto(r0, 0x0, 0x3) mmap$auto(0xfffffffffffffffc, 0x1, 0x6, 0x9b72, 0xffffffffffffffff, 0x4) setrlimit$auto(0x1000000007, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001740)={'veth0_to_bond\x00'}) r2 = syz_genetlink_get_family_id$auto_NET_DM(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x3, 0x1) getsockopt$auto(0x6, 0x65, 0x3, 0xffffffffffffffff, 0x0) sendmsg$auto_NET_DM_CMD_START(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0df28a82d7d433991c0ef99c6f4e70c1fe03e3384f9f541a6692a58ff5e4284ac4b6f53ea4c2124754c5d54a5321bf06145933f8934a88d9c8873feb59ca20f6f3094656b017882d026c52f420ba24105d82446776a1efe5bf7d3161b6c45cc09dc2c0d5d736260523937e436188d6f57f32ba7208bcccec6f5bf6ba193a19b7d82b975a707c9d4d5c2ecc88be9ec2f1d729a7e6f582c59c8b410f", @ANYRES16=r2, @ANYBLOB="020026bd7000fcdbdf2503000000"], 0x14}}, 0x804) fcntl$auto(0x0, 0x404, 0x8001) socket(0x22, 0x2, 0x24) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. [ 70.721081][ T5226] cgroup: Unknown subsys name 'net' [ 70.833873][ T5226] cgroup: Unknown subsys name 'cpuset' [ 70.842867][ T5226] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.591611][ T5226] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.491051][ T5242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.500762][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.510322][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.518036][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.523276][ T5247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.534816][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.536021][ T5247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.550246][ T5247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.558849][ T5247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.561155][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.566744][ T5247] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.580512][ T5247] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.591153][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.599421][ T5252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.605397][ T5251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.609656][ T5252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.621116][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.628624][ T5251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.636448][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.644463][ T5251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.652881][ T4627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.671800][ T5251] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.674433][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.679249][ T5251] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.080289][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 75.185161][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 75.299002][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 75.323738][ T5245] chnl_net:caif_netlink_parms(): no params data found [ 75.348121][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.355515][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.363836][ T5244] bridge_slave_0: entered allmulticast mode [ 75.371169][ T5244] bridge_slave_0: entered promiscuous mode [ 75.384483][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.391713][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.399253][ T5244] bridge_slave_1: entered allmulticast mode [ 75.406636][ T5244] bridge_slave_1: entered promiscuous mode [ 75.471455][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.478734][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.486718][ T5239] bridge_slave_0: entered allmulticast mode [ 75.494897][ T5239] bridge_slave_0: entered promiscuous mode [ 75.553146][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.560608][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.567907][ T5239] bridge_slave_1: entered allmulticast mode [ 75.575004][ T5239] bridge_slave_1: entered promiscuous mode [ 75.608917][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.621267][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.665032][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.681434][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.733242][ T5244] team0: Port device team_slave_0 added [ 75.770839][ T5244] team0: Port device team_slave_1 added [ 75.776908][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.784767][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.792519][ T5245] bridge_slave_0: entered allmulticast mode [ 75.799516][ T5245] bridge_slave_0: entered promiscuous mode [ 75.807211][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.815111][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.822504][ T5237] bridge_slave_0: entered allmulticast mode [ 75.829371][ T5237] bridge_slave_0: entered promiscuous mode [ 75.837958][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.845218][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.852745][ T5237] bridge_slave_1: entered allmulticast mode [ 75.859759][ T5237] bridge_slave_1: entered promiscuous mode [ 75.869534][ T5239] team0: Port device team_slave_0 added [ 75.887061][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.894336][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.902035][ T5245] bridge_slave_1: entered allmulticast mode [ 75.908960][ T5245] bridge_slave_1: entered promiscuous mode [ 75.926788][ T5239] team0: Port device team_slave_1 added [ 75.987339][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.995768][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.022409][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.047642][ T5245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.065640][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.077491][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.087377][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.094804][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.121398][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.135721][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.142896][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.169189][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.190319][ T5245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.218139][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.225601][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.251920][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.312816][ T5245] team0: Port device team_slave_0 added [ 76.322385][ T5237] team0: Port device team_slave_0 added [ 76.349223][ T5245] team0: Port device team_slave_1 added [ 76.367503][ T5237] team0: Port device team_slave_1 added [ 76.389125][ T5244] hsr_slave_0: entered promiscuous mode [ 76.396680][ T5244] hsr_slave_1: entered promiscuous mode [ 76.427235][ T5239] hsr_slave_0: entered promiscuous mode [ 76.435633][ T5239] hsr_slave_1: entered promiscuous mode [ 76.442136][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.450548][ T5239] Cannot create hsr debugfs directory [ 76.466014][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.473312][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.499583][ T5245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.538175][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.545911][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.572881][ T5245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.585154][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.592173][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.618635][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.656482][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.663626][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.689717][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.700884][ T5251] Bluetooth: hci3: command tx timeout [ 76.711128][ T5251] Bluetooth: hci0: command tx timeout [ 76.766915][ T5245] hsr_slave_0: entered promiscuous mode [ 76.772833][ T5251] Bluetooth: hci2: command tx timeout [ 76.773134][ T5251] Bluetooth: hci1: command tx timeout [ 76.787041][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.792955][ T5245] hsr_slave_1: entered promiscuous mode [ 76.794213][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.805618][ T5245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.813483][ T5245] Cannot create hsr debugfs directory [ 76.861414][ T5237] hsr_slave_0: entered promiscuous mode [ 76.868336][ T5237] hsr_slave_1: entered promiscuous mode [ 76.875028][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.882884][ T5237] Cannot create hsr debugfs directory [ 77.154380][ T5239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.168140][ T5239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.178689][ T5239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.196863][ T5239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.232868][ T5244] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.271852][ T5244] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.299472][ T5244] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.314217][ T5244] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.326212][ T5237] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.339819][ T5237] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.350876][ T5237] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.387178][ T5237] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.427527][ T5245] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.455070][ T5245] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.466816][ T5245] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.478391][ T5245] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.570514][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.659851][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.695739][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.703775][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.714790][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.722020][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.749183][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.832661][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.848835][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.895544][ T5245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.917672][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.932709][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.939836][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.973850][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.981079][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.003507][ T5245] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.033885][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.041101][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.054861][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.062095][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.143730][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.151759][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.191974][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.199490][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.244532][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.437262][ T5239] veth0_vlan: entered promiscuous mode [ 78.466168][ T5239] veth1_vlan: entered promiscuous mode [ 78.594178][ T5239] veth0_macvtap: entered promiscuous mode [ 78.622800][ T5239] veth1_macvtap: entered promiscuous mode [ 78.655338][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.676057][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.689764][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.716520][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.757164][ T5239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.768474][ T5239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.771240][ T5251] Bluetooth: hci0: command tx timeout [ 78.779741][ T5243] Bluetooth: hci3: command tx timeout [ 78.790818][ T5239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.799698][ T5239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.851685][ T5243] Bluetooth: hci1: command tx timeout [ 78.857281][ T5243] Bluetooth: hci2: command tx timeout [ 78.921121][ T5237] veth0_vlan: entered promiscuous mode [ 78.951491][ T5244] veth0_vlan: entered promiscuous mode [ 78.986460][ T5245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.005729][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.020277][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.023159][ T5237] veth1_vlan: entered promiscuous mode [ 79.045107][ T5244] veth1_vlan: entered promiscuous mode [ 79.086742][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.098615][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.142629][ T5245] veth0_vlan: entered promiscuous mode [ 79.176969][ T5237] veth0_macvtap: entered promiscuous mode [ 79.189872][ T5239] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.211895][ T5245] veth1_vlan: entered promiscuous mode [ 79.218653][ T5244] veth0_macvtap: entered promiscuous mode [ 79.235061][ T5237] veth1_macvtap: entered promiscuous mode [ 79.247845][ T5244] veth1_macvtap: entered promiscuous mode [ 79.302540][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.313814][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.326055][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.357155][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.368433][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.381343][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.391867][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.403194][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.413966][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.424507][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.435957][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.462024][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.477523][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.489282][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.507023][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.526229][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.539852][ T5237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.549551][ T5237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.562302][ T5237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.571595][ T5237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.589400][ T5244] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.600464][ T5244] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.609347][ T5244] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.618711][ T5244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.639072][ T5245] veth0_macvtap: entered promiscuous mode [ 79.668834][ T5245] veth1_macvtap: entered promiscuous mode [ 79.738429][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.751463][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.762245][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.773475][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.784475][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.797442][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.809781][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.841195][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.859544][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.878351][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.890873][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.901124][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.920926][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.932758][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.966331][ T5245] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.978122][ T5245] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.992570][ T5245] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.001637][ T5245] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.143644][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.155859][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.184151][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.212099][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.275866][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.284870][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.370926][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.378938][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.428137][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.444046][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.451613][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.451660][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.850467][ T5243] Bluetooth: hci3: command tx timeout [ 80.852529][ T5251] Bluetooth: hci0: command tx timeout [ 80.938966][ T5251] Bluetooth: hci2: command tx timeout [ 80.941186][ T5243] Bluetooth: hci1: command tx timeout [ 81.872635][ T5335] netlink: 342 bytes leftover after parsing attributes in process `syz.1.7'. [ 81.909810][ T5335] mmap: syz.1.7 (5335) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.926448][ T5348] syz.2.11(5348): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 82.941326][ T5243] Bluetooth: hci0: command tx timeout [ 82.941369][ T5251] Bluetooth: hci3: command tx timeout [ 83.040679][ T5251] Bluetooth: hci2: command tx timeout [ 83.046179][ T5251] Bluetooth: hci1: command tx timeout [ 84.068325][ T5378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 84.128396][ T5378] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 85.342456][ T5386] Zero length message leads to an empty skb [ 86.135835][ T5419] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.866897][ T5432] ======================================================= [ 86.866897][ T5432] WARNING: The mand mount option has been deprecated and [ 86.866897][ T5432] and is ignored by this kernel. Remove the mand [ 86.866897][ T5432] option from the mount to silence this warning. [ 86.866897][ T5432] ======================================================= [ 88.016890][ T5437] block device autoloading is deprecated and will be removed. [ 88.245500][ T5441] netlink: 'syz.3.30': attribute type 2 has an invalid length. [ 88.294236][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 88.610802][ T5453] netlink: 330 bytes leftover after parsing attributes in process `syz.1.35'. [ 89.627862][ T5459] HSR: entered promiscuous mode [ 91.142076][ T5479] netlink: 330 bytes leftover after parsing attributes in process `syz.2.46'. [ 92.149277][ T1185] cfg80211: failed to load regulatory.db [ 92.365203][ T5508] syz.1.54 uses obsolete (PF_INET,SOCK_PACKET) [ 92.826471][ T5513] netlink: 330 bytes leftover after parsing attributes in process `syz.1.56'. [ 95.311313][ T5553] futex_wake_op: syz.1.63 tries to shift op by 64; fix this program [ 96.356019][ T5574] process 'syz.1.69' launched ':,' with NULL argv: empty string added [ 96.571280][ T5580] netlink: 330 bytes leftover after parsing attributes in process `syz.3.67'. [ 98.890101][ T5612] netlink: 330 bytes leftover after parsing attributes in process `syz.1.79'. [ 100.373135][ T5632] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.350150][ T5656] netlink: 330 bytes leftover after parsing attributes in process `syz.1.89'. [ 103.192938][ T5691] netlink: 330 bytes leftover after parsing attributes in process `syz.1.100'. [ 103.424323][ T5699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.101'. [ 105.684722][ T5740] netlink: 330 bytes leftover after parsing attributes in process `syz.0.110'. [ 106.139992][ T5747] svc: failed to register nfsdv3 RPC service (errno 111). [ 106.169699][ T5747] svc: failed to register nfsaclv3 RPC service (errno 111). [ 108.373309][ T29] audit: type=1326 audit(1729279826.550:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.1.122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe0e157dff9 code=0x0 [ 109.179571][ T5783] netlink: 330 bytes leftover after parsing attributes in process `syz.3.121'. [ 109.482702][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 111.813999][ T5846] netlink: 330 bytes leftover after parsing attributes in process `syz.2.140'. [ 113.796813][ T5869] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 114.306550][ T5880] netlink: 330 bytes leftover after parsing attributes in process `syz.0.150'. [ 115.321435][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.154'. [ 115.671271][ T5907] HSR: entered promiscuous mode [ 115.704788][ T5908] openvswitch: HSR: Dropping previously announced user features [ 116.537677][ T5922] netlink: 330 bytes leftover after parsing attributes in process `syz.1.159'. [ 116.602537][ T5939] HfR: entered promiscuous mode [ 116.625097][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 116.637280][ T5939] HfR: left promiscuous mode [ 117.987411][ T5977] netlink: 330 bytes leftover after parsing attributes in process `syz.1.175'. [ 118.248976][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 119.001144][ T6010] netlink: 330 bytes leftover after parsing attributes in process `syz.1.185'. [ 119.597021][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 121.485661][ T5960] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.585622][ T6061] netlink: 330 bytes leftover after parsing attributes in process `syz.1.197'. [ 121.869810][ T5960] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.049704][ T6080] netlink: 342 bytes leftover after parsing attributes in process `syz.2.203'. [ 122.220874][ T5960] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.404199][ T5960] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.721831][ T5960] bridge_slave_1: left allmulticast mode [ 122.759035][ T6095] svc: failed to register nfsdv3 RPC service (errno 111). [ 122.759141][ T5960] bridge_slave_1: left promiscuous mode [ 122.792277][ T6095] svc: failed to register nfsaclv3 RPC service (errno 111). [ 122.796539][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.862674][ T5960] bridge_slave_0: left allmulticast mode [ 122.868439][ T5960] bridge_slave_0: left promiscuous mode [ 122.904619][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.570985][ T5251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.598926][ T5251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.617094][ T5251] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.643685][ T5251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.653355][ T5251] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 123.713316][ T5251] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.071231][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.088281][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.141576][ T5960] bond0 (unregistering): Released all slaves [ 124.312483][ T5960] HSR: left promiscuous mode [ 124.400664][ T6129] netlink: 32 bytes leftover after parsing attributes in process `syz.0.218'. [ 124.450129][ T6126] HfR: entered promiscuous mode [ 125.706814][ T5960] hsr_slave_0: left promiscuous mode [ 125.752799][ T5960] hsr_slave_1: left promiscuous mode [ 125.788601][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.802891][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.859145][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.904933][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.946201][ T5960] veth1_macvtap: left promiscuous mode [ 125.975499][ T5960] veth0_macvtap: left promiscuous mode [ 125.984178][ T5960] veth1_vlan: left promiscuous mode [ 126.009831][ T5960] veth0_vlan: left promiscuous mode [ 126.090735][ T5251] Bluetooth: hci3: command tx timeout [ 126.967660][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 127.079578][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 127.682357][ T6107] chnl_net:caif_netlink_parms(): no params data found [ 128.022074][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 128.310251][ T6107] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.344283][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.360698][ T5251] Bluetooth: hci3: command tx timeout [ 128.399417][ T6107] bridge_slave_0: entered allmulticast mode [ 128.438380][ T6107] bridge_slave_0: entered promiscuous mode [ 128.533397][ T6107] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.557253][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.583047][ T6107] bridge_slave_1: entered allmulticast mode [ 128.590376][ T6107] bridge_slave_1: entered promiscuous mode [ 128.770113][ T6107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.818200][ T6107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.101725][ T6107] team0: Port device team_slave_0 added [ 129.145655][ T6107] team0: Port device team_slave_1 added [ 129.765048][ T6107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.786510][ T6107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.866647][ T6107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.879664][ T6107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.886662][ T6107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.913147][ T6107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.211602][ T6107] hsr_slave_0: entered promiscuous mode [ 130.230947][ T6107] hsr_slave_1: entered promiscuous mode [ 130.630627][ T5251] Bluetooth: hci3: command tx timeout [ 131.682806][ T6107] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 131.702891][ T6107] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 131.722455][ T6107] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 131.745163][ T6107] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 131.883573][ T6107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.919394][ T6107] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.956745][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.964074][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.007464][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.014645][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.488112][ T6107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.692178][ T6107] veth0_vlan: entered promiscuous mode [ 132.742581][ T6107] veth1_vlan: entered promiscuous mode [ 132.845714][ T6107] veth0_macvtap: entered promiscuous mode [ 132.884427][ T6107] veth1_macvtap: entered promiscuous mode [ 132.901140][ T5251] Bluetooth: hci3: command tx timeout [ 132.952532][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.020618][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.030516][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.078993][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.129753][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.140268][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.196941][ T6107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.224815][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.260797][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.298100][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.332319][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.353648][ T6107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.375562][ T6107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.394748][ T6107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.411987][ T6107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.421093][ T6107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.430949][ T6107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.440637][ T6107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.593657][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.630211][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.719415][ T5962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.730363][ T5962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.164034][ T6397] svc: failed to register nfsdv3 RPC service (errno 111). [ 136.226824][ T6397] svc: failed to register nfsaclv3 RPC service (errno 111). [ 136.683781][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 139.995031][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.001396][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.009645][ T6485] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ýÿÿÿÿÿÿÿ-œä¾ž6y“Õ¼Ÿ¦÷ k†Áa;« [ 143.358355][ T6539] svc: failed to register nfsdv3 RPC service (errno 111). [ 143.397220][ T6539] svc: failed to register nfsaclv3 RPC service (errno 111). [ 143.441645][ T6542] nbd: must specify at least one socket [ 151.822830][ T6644] ptrace attach of "./syz-executor exec"[5245] was attempted by "./syz-executor exec"[6644] [ 151.917771][ T6640] netlink: 40 bytes leftover after parsing attributes in process `syz.0.318'. [ 152.069687][ T6640] HSR: entered promiscuous mode [ 153.369777][ T6661] mmap: syz.1.322 (6661): VmData 37990400 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 155.203766][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 155.550787][ T2974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.721030][ T2974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.863591][ T2974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.095058][ T2974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.245239][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.254321][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.265682][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.274969][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.283103][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.291544][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.746014][ T2974] bridge_slave_1: left allmulticast mode [ 156.751961][ T2974] bridge_slave_1: left promiscuous mode [ 156.758729][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.797860][ T2974] bridge_slave_0: left allmulticast mode [ 156.812271][ T2974] bridge_slave_0: left promiscuous mode [ 156.829361][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.771859][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.841908][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.854721][ T2974] bond0 (unregistering): Released all slaves [ 157.899414][ T6715] chnl_net:caif_netlink_parms(): no params data found [ 158.329990][ T6761] ptrace attach of "./syz-executor exec"[5237] was attempted by "./syz-executor exec"[6761] [ 158.483831][ T6715] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.507367][ T6715] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.530195][ T6715] bridge_slave_0: entered allmulticast mode [ 158.550714][ T6715] bridge_slave_0: entered promiscuous mode [ 158.656775][ T54] Bluetooth: hci3: command tx timeout [ 158.672573][ T6715] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.694997][ T6715] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.720643][ T6715] bridge_slave_1: entered allmulticast mode [ 158.745151][ T6715] bridge_slave_1: entered promiscuous mode [ 158.757407][ T6771] netlink: 104 bytes leftover after parsing attributes in process `syz.1.342'. [ 158.870228][ T6715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.923150][ T2974] hsr_slave_0: left promiscuous mode [ 158.933172][ T2974] hsr_slave_1: left promiscuous mode [ 158.950672][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.974619][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.984936][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.992502][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.071173][ T2974] veth1_macvtap: left promiscuous mode [ 159.076802][ T2974] veth0_macvtap: left promiscuous mode [ 159.100722][ T2974] veth1_vlan: left promiscuous mode [ 159.107514][ T2974] veth0_vlan: left promiscuous mode [ 159.345432][ T6771] netlink: 104 bytes leftover after parsing attributes in process `syz.1.342'. [ 159.903894][ T2974] team0 (unregistering): Port device team_slave_1 removed [ 159.957073][ T2974] team0 (unregistering): Port device team_slave_0 removed [ 160.390974][ T6715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.462561][ T6715] team0: Port device team_slave_0 added [ 160.477282][ T6715] team0: Port device team_slave_1 added [ 160.560142][ T6715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.584519][ T6715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.623682][ T6715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.662326][ T6715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.671308][ T6715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.715440][ T6715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.930475][ T54] Bluetooth: hci3: command tx timeout [ 160.962243][ T6715] hsr_slave_0: entered promiscuous mode [ 160.989757][ T6715] hsr_slave_1: entered promiscuous mode [ 162.427568][ T6715] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.464337][ T6715] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 162.484581][ T6715] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 162.514269][ T6715] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 162.759610][ T6715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.817916][ T6715] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.841623][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.848822][ T5962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.861617][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.868777][ T5962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.196527][ T54] Bluetooth: hci3: command tx timeout [ 163.370318][ T6715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.434621][ T6715] veth0_vlan: entered promiscuous mode [ 163.502877][ T6715] veth1_vlan: entered promiscuous mode [ 163.528874][ T6715] veth0_macvtap: entered promiscuous mode [ 163.540355][ T6715] veth1_macvtap: entered promiscuous mode [ 163.560074][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.571030][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.581302][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.592094][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.602531][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.613674][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.628785][ T6715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.639523][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.650031][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.659946][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.670564][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.680514][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.691049][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.702564][ T6715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.717515][ T6715] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.726491][ T6715] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.735280][ T6715] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.744426][ T6715] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.912861][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.959498][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.040489][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.095642][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.466435][ T54] Bluetooth: hci3: command tx timeout [ 165.606760][ T6922] netlink: 342 bytes leftover after parsing attributes in process `syz.3.366'. [ 167.853238][ T7002] svc: failed to register nfsdv3 RPC service (errno 111). [ 167.863044][ T7006] nbd: must specify at least one socket [ 167.897223][ T7006] syz.2.370 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 167.906864][ T7002] svc: failed to register nfsaclv3 RPC service (errno 111). [ 167.936259][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 169.236051][ T7014] raw_sendmsg: syz.3.379 forgot to set AF_INET. Fix it! [ 172.183334][ T7074] Unable to find swap-space signature [ 175.348307][ T29] audit: type=1800 audit(257.319:3): pid=7147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.406" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 181.001592][ T7238] sctp: [Deprecated]: syz.0.427 (pid 7238) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.001592][ T7238] Use struct sctp_sack_info instead [ 182.383740][ T7262] netlink: 'syz.3.429': attribute type 11 has an invalid length. [ 182.391576][ T7262] netlink: 44 bytes leftover after parsing attributes in process `syz.3.429'. [ 184.897373][ T5960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.271063][ T5251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.284427][ T5251] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.301803][ T5251] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.320075][ T5251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.328509][ T5251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 185.336512][ T5251] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.429366][ T5960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.866337][ T5960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.325756][ T5960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.003764][ T7334] chnl_net:caif_netlink_parms(): no params data found [ 187.556109][ T54] Bluetooth: hci1: command tx timeout [ 187.719826][ T5960] bridge_slave_1: left allmulticast mode [ 187.725639][ T5960] bridge_slave_1: left promiscuous mode [ 187.762804][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.883550][ T5960] bridge_slave_0: left allmulticast mode [ 187.889263][ T5960] bridge_slave_0: left promiscuous mode [ 187.937292][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.825239][ T54] Bluetooth: hci1: command tx timeout [ 190.033749][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.054136][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.070146][ T5960] bond0 (unregistering): Released all slaves [ 190.150344][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.174850][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.188268][ T7334] bridge_slave_0: entered allmulticast mode [ 190.195495][ T7334] bridge_slave_0: entered promiscuous mode [ 190.242901][ T5960] HfR: left promiscuous mode [ 190.261169][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.269678][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.289731][ T7334] bridge_slave_1: entered allmulticast mode [ 190.307354][ T7334] bridge_slave_1: entered promiscuous mode [ 190.354135][ T5960] HSR: left promiscuous mode [ 190.544947][ T7334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.668628][ T7334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.811596][ T7334] team0: Port device team_slave_0 added [ 190.852299][ T7402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.460'. [ 190.971915][ T7334] team0: Port device team_slave_1 added [ 191.099295][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.119425][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.179709][ T7334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.301425][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.325581][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.406858][ T7334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.744307][ T5960] hsr_slave_0: left promiscuous mode [ 191.803245][ T5960] hsr_slave_1: left promiscuous mode [ 191.830628][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.858680][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.874659][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.884426][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.920201][ T5960] veth1_macvtap: left promiscuous mode [ 191.940755][ T5960] veth0_macvtap: left promiscuous mode [ 191.971298][ T5960] veth1_vlan: left promiscuous mode [ 191.986254][ T5960] veth0_vlan: left promiscuous mode [ 192.095517][ T54] Bluetooth: hci1: command tx timeout [ 193.896765][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 194.024753][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 194.366206][ T54] Bluetooth: hci1: command tx timeout [ 194.952416][ T7334] hsr_slave_0: entered promiscuous mode [ 194.974458][ T7334] hsr_slave_1: entered promiscuous mode [ 194.998307][ T7334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.023272][ T7334] Cannot create hsr debugfs directory [ 195.098334][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 195.132883][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 196.572133][ T7334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.604567][ T7334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.671417][ T7334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.694106][ T7334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.913527][ T7334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.963985][ T7334] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.000084][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.007294][ T5957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.056058][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.063306][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.647056][ T7334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.769279][ T7334] veth0_vlan: entered promiscuous mode [ 197.841794][ T7334] veth1_vlan: entered promiscuous mode [ 197.943322][ T7334] veth0_macvtap: entered promiscuous mode [ 198.008662][ T7334] veth1_macvtap: entered promiscuous mode [ 198.064334][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.098346][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.108242][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.163010][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.172949][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.203981][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.242456][ T7334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.267391][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.316645][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.326555][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.398092][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.434844][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.465112][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.500554][ T7334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.532087][ T7334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.562804][ T7334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.572346][ T7334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.592243][ T7334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.849383][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.873209][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.984712][ T5957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.032246][ T5957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.917170][ T7677] kernel read not supported for file /#)-\&[} (pid: 7677 comm: syz.2.499) [ 201.006271][ T29] audit: type=1800 audit(280.831:4): pid=7677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.499" name="#)-\&[}" dev="mqueue" ino=16918 res=0 errno=0 [ 202.226246][ T7707] Unable to find swap-space signature [ 203.313249][ T7713] sctp: [Deprecated]: syz.2.506 (pid 7713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.313249][ T7713] Use struct sctp_sack_info instead [ 203.919487][ T29] audit: type=1326 audit(283.461:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.2.510" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fadf917dff9 code=0x0 [ 207.031843][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.038631][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.939473][ T7796] netlink: 'syz.0.523': attribute type 11 has an invalid length. [ 209.382525][ T5251] Bluetooth: hci2: command 0x0406 tx timeout [ 209.389515][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 210.262044][ T5251] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.275297][ T5251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.283669][ T5251] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.292445][ T5251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.301390][ T5251] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 210.309353][ T5251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.965125][ T7811] chnl_net:caif_netlink_parms(): no params data found [ 211.176081][ T7792] netlink: 342 bytes leftover after parsing attributes in process `syz.2.522'. [ 211.287507][ T7811] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.310727][ T7811] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.330880][ T7811] bridge_slave_0: entered allmulticast mode [ 211.350966][ T7811] bridge_slave_0: entered promiscuous mode [ 211.378907][ T7811] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.407696][ T7811] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.432612][ T7811] bridge_slave_1: entered allmulticast mode [ 211.465756][ T7811] bridge_slave_1: entered promiscuous mode [ 211.576813][ T7811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.605938][ T7811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.857978][ T7811] team0: Port device team_slave_0 added [ 211.905330][ T7811] team0: Port device team_slave_1 added [ 212.319902][ T7811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.327082][ T7811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.426044][ T7811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.492521][ T7811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.519408][ T7811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.634226][ T7811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.685681][ T54] Bluetooth: hci4: command tx timeout [ 213.023107][ T7811] hsr_slave_0: entered promiscuous mode [ 213.082253][ T7811] hsr_slave_1: entered promiscuous mode [ 213.121078][ T7811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.147169][ T7811] Cannot create hsr debugfs directory [ 214.069659][ T7811] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.295326][ T7866] netlink: 121 bytes leftover after parsing attributes in process `syz.2.538'. [ 214.329612][ T7811] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.645484][ T7811] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.886915][ T54] Bluetooth: hci4: command tx timeout [ 214.896006][ T7811] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.240931][ T7811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 215.310194][ T7811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 215.338773][ T7811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 215.394196][ T7811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 215.687567][ T7811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.734099][ T7811] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.784982][ T3038] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.792240][ T3038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.872194][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.879507][ T5957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.550512][ T7811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.646269][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 216.806509][ T7811] veth0_vlan: entered promiscuous mode [ 216.869964][ T7811] veth1_vlan: entered promiscuous mode [ 216.958742][ T7811] veth0_macvtap: entered promiscuous mode [ 216.992018][ T7811] veth1_macvtap: entered promiscuous mode [ 217.047715][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.086979][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.120260][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.152571][ T54] Bluetooth: hci4: command tx timeout [ 217.189553][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.200462][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.211920][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.229105][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.255295][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.285637][ T7811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.344319][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.406433][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.447432][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.491107][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.501229][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.523537][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.533826][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.556201][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.569693][ T7811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.605562][ T7811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.625373][ T7811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.655362][ T7811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.664179][ T7811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.983672][ T5956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.009978][ T5956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.110547][ T3038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.134686][ T3038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.422816][ T54] Bluetooth: hci4: command tx timeout [ 221.866042][ T5251] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.888333][ T5251] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.896624][ T5251] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.908004][ T5251] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.918853][ T5251] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.929049][ T5251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.299070][ T136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.810248][ T136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.465893][ T136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.595469][ T7972] chnl_net:caif_netlink_parms(): no params data found [ 224.108095][ T136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.144125][ T54] Bluetooth: hci0: command tx timeout [ 224.616904][ T7972] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.628669][ T8005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.569'. [ 224.640202][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.659947][ T7972] bridge_slave_0: entered allmulticast mode [ 224.686642][ T7972] bridge_slave_0: entered promiscuous mode [ 225.098919][ T8005] openvswitch: HSR: Dropping previously announced user features [ 225.100298][ T7972] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.141579][ T7972] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.148869][ T7972] bridge_slave_1: entered allmulticast mode [ 225.178709][ T7972] bridge_slave_1: entered promiscuous mode [ 225.753567][ T7972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.866397][ T7972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.117042][ T7972] team0: Port device team_slave_0 added [ 226.150781][ T7972] team0: Port device team_slave_1 added [ 226.366962][ T136] bridge_slave_1: left allmulticast mode [ 226.372673][ T136] bridge_slave_1: left promiscuous mode [ 226.385482][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.407851][ T54] Bluetooth: hci0: command tx timeout [ 226.451736][ T136] bridge_slave_0: left allmulticast mode [ 226.460039][ T136] bridge_slave_0: left promiscuous mode [ 226.470917][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.603654][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.631597][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.721052][ T136] bond0 (unregistering): Released all slaves [ 227.757908][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.777957][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.825772][ T7972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.851229][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.858250][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.914880][ T7972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.709828][ T54] Bluetooth: hci0: command tx timeout [ 228.981725][ T7972] hsr_slave_0: entered promiscuous mode [ 228.988567][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.006404][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.018448][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.048371][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 229.058798][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 229.066466][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.086603][ T7972] hsr_slave_1: entered promiscuous mode [ 229.123616][ T7972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.150952][ T7972] Cannot create hsr debugfs directory [ 230.688783][ T136] hsr_slave_0: left promiscuous mode [ 230.718214][ T136] hsr_slave_1: left promiscuous mode [ 230.731903][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.745601][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.839795][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.866140][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.956034][ T5251] Bluetooth: hci0: command tx timeout [ 231.017020][ T136] veth1_macvtap: left promiscuous mode [ 231.022642][ T136] veth0_macvtap: left promiscuous mode [ 231.048026][ T136] veth1_vlan: left promiscuous mode [ 231.064474][ T136] veth0_vlan: left promiscuous mode [ 231.383804][ T5251] Bluetooth: hci2: command tx timeout [ 232.323232][ T136] team0 (unregistering): Port device team_slave_1 removed [ 232.402528][ T136] team0 (unregistering): Port device team_slave_0 removed [ 233.661106][ T5251] Bluetooth: hci2: command tx timeout [ 233.713494][ T8059] chnl_net:caif_netlink_parms(): no params data found [ 234.462992][ T8059] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.470171][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.488904][ T8059] bridge_slave_0: entered allmulticast mode [ 234.496379][ T8059] bridge_slave_0: entered promiscuous mode [ 234.510751][ T8059] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.518255][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.525635][ T8059] bridge_slave_1: entered allmulticast mode [ 234.533804][ T8059] bridge_slave_1: entered promiscuous mode [ 234.693307][ T8059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.757924][ T136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.811924][ T8059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.998939][ T136] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.046457][ T8059] team0: Port device team_slave_0 added [ 235.064926][ T8059] team0: Port device team_slave_1 added [ 235.184934][ T136] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.313157][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.320172][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.421875][ T8059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.489934][ T136] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.558951][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.584239][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.627690][ T8059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.780414][ T8059] hsr_slave_0: entered promiscuous mode [ 235.788994][ T8059] hsr_slave_1: entered promiscuous mode [ 235.801631][ T8059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.836488][ T8059] Cannot create hsr debugfs directory [ 235.903797][ T7972] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 235.922826][ T7972] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 235.923781][ T5251] Bluetooth: hci2: command tx timeout [ 235.958052][ T7972] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 236.080118][ T7972] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 236.324901][ T136] bridge_slave_1: left allmulticast mode [ 236.345318][ T136] bridge_slave_1: left promiscuous mode [ 236.361599][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.399860][ T136] bridge_slave_0: left allmulticast mode [ 236.418487][ T136] bridge_slave_0: left promiscuous mode [ 236.445315][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.970806][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.006341][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.037118][ T136] bond0 (unregistering): Released all slaves [ 238.215584][ T5251] Bluetooth: hci2: command tx timeout [ 238.248324][ T136] HSR: left promiscuous mode [ 238.704507][ T7972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.029224][ T7972] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.143708][ T136] hsr_slave_0: left promiscuous mode [ 239.178203][ T136] hsr_slave_1: left promiscuous mode [ 239.185480][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.193416][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.210982][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.242161][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.321029][ T136] veth1_macvtap: left promiscuous mode [ 239.329409][ T136] veth0_macvtap: left promiscuous mode [ 239.335075][ T136] veth1_vlan: left promiscuous mode [ 239.348232][ T136] veth0_vlan: left promiscuous mode [ 240.236349][ T136] team0 (unregistering): Port device team_slave_1 removed [ 240.281652][ T136] team0 (unregistering): Port device team_slave_0 removed [ 240.892250][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.899447][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.136698][ T7336] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.143956][ T7336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.296855][ T8059] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.348565][ T8059] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.395938][ T8059] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.438630][ T8059] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.647639][ T8059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.676306][ T8059] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.711529][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.718777][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.749560][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.756789][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.801137][ T8059] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.814124][ T8059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.190563][ T8265] netlink: 342 bytes leftover after parsing attributes in process `syz.3.608'. [ 242.536649][ T7972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.603045][ T8059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.806309][ T8059] veth0_vlan: entered promiscuous mode [ 242.883855][ T7972] veth0_vlan: entered promiscuous mode [ 242.915792][ T8059] veth1_vlan: entered promiscuous mode [ 242.939674][ T7972] veth1_vlan: entered promiscuous mode [ 243.019205][ T8059] veth0_macvtap: entered promiscuous mode [ 243.049128][ T7972] veth0_macvtap: entered promiscuous mode [ 243.102067][ T8059] veth1_macvtap: entered promiscuous mode [ 243.132279][ T7972] veth1_macvtap: entered promiscuous mode [ 243.174908][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.214894][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.245150][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.267214][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.277324][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.301398][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.313818][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.337202][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.372729][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.399497][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.418659][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.447213][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.457950][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.476487][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.490214][ T7972] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.506096][ T7972] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.520300][ T7972] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.529338][ T7972] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.573233][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.583906][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.602291][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.615771][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.640159][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.650869][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.661686][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.672339][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.685253][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.695441][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.706451][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.716774][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.727629][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.738038][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.748999][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.758891][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.769528][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.781508][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.855487][ T8059] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.875943][ T8059] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.884931][ T8059] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.893948][ T8059] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.116094][ T7338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.126496][ T7338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.177194][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.199954][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.314041][ T7336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.322378][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.331352][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.336780][ T7336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.904351][ T8330] kexec: Could not allocate control_code_buffer [ 248.015929][ T8339] netlink: 342 bytes leftover after parsing attributes in process `syz.3.623'. [ 249.434201][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.632'. [ 249.671441][ T8385] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 255.887819][ T8544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.664'. [ 256.113741][ T8535] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 256.141976][ T8535] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 257.684278][ T8548] delete_channel: no stack [ 261.134703][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'. [ 261.210591][ T8654] HSR: entered promiscuous mode [ 262.456557][ T8684] Invalid ELF header magic: != ELF [ 263.543981][ T8700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.697'. [ 264.166215][ T8703] Process accounting resumed [ 274.086259][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 274.097980][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 275.988204][ T8802] netlink: 330 bytes leftover after parsing attributes in process `syz.1.724'. [ 277.035407][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.047309][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.055649][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.064818][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.073817][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.081490][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.232863][ T8813] chnl_net:caif_netlink_parms(): no params data found [ 279.316269][ T54] Bluetooth: hci5: command tx timeout [ 279.793427][ T8813] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.817614][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.873578][ T8813] bridge_slave_0: entered allmulticast mode [ 279.910268][ T8813] bridge_slave_0: entered promiscuous mode [ 279.965234][ T8813] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.023812][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.073464][ T8813] bridge_slave_1: entered allmulticast mode [ 280.102271][ T8813] bridge_slave_1: entered promiscuous mode [ 280.401713][ T8813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.510347][ T8813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.283799][ T8813] team0: Port device team_slave_0 added [ 281.327762][ T8813] team0: Port device team_slave_1 added [ 281.585715][ T54] Bluetooth: hci5: command tx timeout [ 281.850490][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.912874][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.060883][ T8813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.142518][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.181061][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.327573][ T8813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.939054][ T8813] hsr_slave_0: entered promiscuous mode [ 283.027145][ T8813] hsr_slave_1: entered promiscuous mode [ 283.285964][ T8813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.328470][ T8813] Cannot create hsr debugfs directory [ 283.860725][ T54] Bluetooth: hci5: command tx timeout [ 285.042499][ T8813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.136403][ T54] Bluetooth: hci5: command tx timeout [ 286.768452][ T8813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.092845][ T8813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.866957][ T8813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.849112][ T8813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 289.992608][ T8813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 290.067233][ T8813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 290.176071][ T8906] delete_channel: no stack [ 290.338723][ T8813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 290.449885][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 290.954781][ T8813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.058774][ T8813] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.581482][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.588673][ T8732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.648180][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.655352][ T8732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.132226][ T5251] Bluetooth: hci3: command 0x0406 tx timeout [ 293.812206][ T8813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.018255][ T8813] veth0_vlan: entered promiscuous mode [ 294.128913][ T8813] veth1_vlan: entered promiscuous mode [ 294.303219][ T8813] veth0_macvtap: entered promiscuous mode [ 294.336819][ T8813] veth1_macvtap: entered promiscuous mode [ 294.422231][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.476784][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.519588][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.564882][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.605200][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.644631][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.692493][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.736545][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.746451][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.823625][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.870433][ T8813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.951854][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.009096][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.041829][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.052355][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.127554][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.183613][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.193518][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.280415][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.325475][ T8813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.335981][ T8813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.392455][ T8813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.459519][ T8813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.500211][ T8813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.509000][ T8813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.579632][ T8813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.937115][ T7338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.971844][ T7338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.074889][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.129008][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.083421][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 297.382626][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.755'. [ 297.642749][ T8953] nbd: must specify a device to reconfigure [ 298.787642][ T8950] svc: failed to register nfsdv3 RPC service (errno 111). [ 298.839033][ T8950] svc: failed to register nfsaclv3 RPC service (errno 512). [ 305.633310][ T9031] Process accounting resumed [ 307.849114][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 317.283160][ T9179] delete_channel: no stack [ 321.059225][ T5251] Bluetooth: hci1: command 0x0406 tx timeout [ 321.146340][ T9219] netlink: 15 bytes leftover after parsing attributes in process `syz.0.821'. [ 339.851362][ T9348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.855'. [ 341.151886][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.158876][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 344.726940][ T8967] syz.1.756 (8967) used greatest stack depth: 18608 bytes left [ 346.960751][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 348.997919][ T5251] Bluetooth: hci4: command 0x0406 tx timeout [ 355.933973][ T9537] HfR: entered promiscuous mode [ 356.092055][ T9536] openvswitch: HfR: Dropping previously announced user features [ 358.203072][ T9534] delete_channel: no stack [ 360.162818][ T5251] Bluetooth: hci0: command 0x0406 tx timeout [ 361.927984][ T9585] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 362.016102][ T9585] svc: failed to register nfsdv3 RPC service (errno 111). [ 362.041258][ T9585] svc: failed to register nfsaclv3 RPC service (errno 111). [ 362.531411][ T9588] ptrace attach of "./syz-executor exec"[8813] was attempted by "./syz-executor exec"[9588] [ 362.652062][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 363.054778][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 363.482806][ T9610] netlink: 'syz.0.923': attribute type 21 has an invalid length. [ 363.517704][ T9610] netlink: 334 bytes leftover after parsing attributes in process `syz.0.923'. [ 365.170455][ T9644] netlink: get zone limit has 4 unknown bytes [ 365.755859][ T5251] Bluetooth: hci2: command 0x0406 tx timeout [ 371.496697][ T9752] svc: failed to register nfsdv3 RPC service (errno 111). [ 371.535495][ T9752] svc: failed to register nfsaclv3 RPC service (errno 111). [ 374.299342][ T9780] Invalid ELF header magic: != ELF [ 384.817171][ T9908] HSR: entered promiscuous mode [ 384.823034][ T9908] openvswitch: HSR: Dropping previously announced user features [ 384.904391][ T9908] openvswitch: HSR: Dropping previously announced user features [ 384.913757][ T9908] openvswitch: HSR: Dropping previously announced user features [ 385.017614][ T9908] openvswitch: HSR: Dropping previously announced user features [ 385.067727][ T9908] openvswitch: HSR: Dropping previously announced user features [ 385.118347][ T9908] openvswitch: HSR: Dropping previously announced user features [ 385.177090][ T9908] openvswitch: HSR: Dropping previously announced user features [ 385.254716][ T9908] openvswitch: HSR: Dropping previously announced user features [ 385.338557][ T9908] openvswitch: HSR: Dropping previously announced user features [ 385.404304][ T9908] openvswitch: HSR: Dropping previously announced user features [ 385.453779][ T9908] openvswitch: HSR: Dropping previously announced user features [ 389.325034][ T9961] svc: failed to register nfsdv3 RPC service (errno 111). [ 389.518501][ T9961] svc: failed to register nfsaclv3 RPC service (errno 111). [ 397.028791][T10060] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1027'. [ 397.138575][T10041] netlink: 4 bytes leftover after parsing attributes in process `ÿÿòÿÿÿòÿÿÿ'. [ 407.477583][T10163] ptrace attach of "./syz-executor exec"[7334] was attempted by "./syz-executor exec"[10163] [ 408.193744][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.201993][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.454647][ T5251] Bluetooth: hci5: command 0x0406 tx timeout [ 413.049412][T10238] ptrace attach of ""[7811] was attempted by "./syz-executor exec"[10238] [ 418.416547][ T5251] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 418.427338][ T5251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 418.461791][ T5251] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 418.483140][ T5251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 418.495833][ T5251] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 418.505278][ T5251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 420.755043][ T54] Bluetooth: hci4: command tx timeout [ 420.864883][ T9844] syz.2.977 (9844) used greatest stack depth: 18096 bytes left [ 421.328046][ T7340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.147621][ T7340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.032833][ T54] Bluetooth: hci4: command tx timeout [ 423.870652][ T7340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.141679][T10276] chnl_net:caif_netlink_parms(): no params data found [ 425.295503][ T54] Bluetooth: hci4: command tx timeout [ 426.291845][ T7340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.559119][T10276] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.568526][ T54] Bluetooth: hci4: command tx timeout [ 427.856059][T10276] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.902386][T10276] bridge_slave_0: entered allmulticast mode [ 427.948073][T10276] bridge_slave_0: entered promiscuous mode [ 428.495790][T10276] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.530047][T10276] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.569984][T10276] bridge_slave_1: entered allmulticast mode [ 428.610086][T10276] bridge_slave_1: entered promiscuous mode [ 428.917952][ T54] Bluetooth: hci1: ISO packet too small [ 428.975563][ T5251] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 428.984891][ T5251] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 428.993668][ T5251] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 429.004858][ T5251] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 429.015815][ T5251] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 429.024416][ T5251] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 429.565255][T10276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.345187][ T5251] Bluetooth: hci6: command tx timeout [ 435.829229][T10276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.228446][T10276] team0: Port device team_slave_0 added [ 437.150071][T10276] team0: Port device team_slave_1 added [ 437.604331][ T54] Bluetooth: hci6: command tx timeout [ 438.831416][T10276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.859372][T10276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.982341][T10276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.057375][ T7340] bridge_slave_1: left allmulticast mode [ 439.274388][ T7340] bridge_slave_1: left promiscuous mode [ 439.284199][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.444762][ T7340] bridge_slave_0: left allmulticast mode [ 439.459434][ T7340] bridge_slave_0: left promiscuous mode [ 439.488216][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.874508][ T54] Bluetooth: hci6: command tx timeout [ 441.915798][ T7340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.969981][ T7340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.028312][ T7340] bond0 (unregistering): Released all slaves [ 442.107208][T10276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.144342][ T54] Bluetooth: hci6: command tx timeout [ 442.157716][T10276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.220619][T10276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.276623][ T7340] HfR: left promiscuous mode [ 442.715467][ T7340] HSR: left promiscuous mode [ 442.934658][T10276] hsr_slave_0: entered promiscuous mode [ 443.005417][T10276] hsr_slave_1: entered promiscuous mode [ 443.036169][T10418] netlink: 488 bytes leftover after parsing attributes in process `syz.0.1104'. [ 443.086776][T10276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.400593][T10418] netlink: zone id is out of range [ 443.418591][T10418] netlink: zone id is out of range [ 443.426197][T10418] netlink: zone id is out of range [ 443.432674][T10418] netlink: zone id is out of range [ 443.439602][T10418] netlink: zone id is out of range [ 443.446339][T10418] netlink: zone id is out of range [ 443.882296][T10276] Cannot create hsr debugfs directory [ 444.180043][T10362] chnl_net:caif_netlink_parms(): no params data found [ 450.158698][ T7340] hsr_slave_0: left promiscuous mode [ 450.191104][ T7340] hsr_slave_1: left promiscuous mode [ 450.237103][ T7340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.270215][ T7340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.353392][ T7340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.405370][ T7340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.501067][ T7340] veth1_macvtap: left promiscuous mode [ 450.537049][ T7340] veth0_macvtap: left promiscuous mode [ 450.543045][ T7340] veth1_vlan: left promiscuous mode [ 450.570389][ T7340] veth0_vlan: left promiscuous mode [ 450.803394][T10453] delete_channel: no stack [ 452.634585][ T7340] team0 (unregistering): Port device team_slave_1 removed [ 452.829213][ T7340] team0 (unregistering): Port device team_slave_0 removed [ 454.860838][T10362] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.891384][T10362] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.898713][T10362] bridge_slave_0: entered allmulticast mode [ 454.925779][T10362] bridge_slave_0: entered promiscuous mode [ 455.034133][T10362] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.087589][T10362] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.096732][T10362] bridge_slave_1: entered allmulticast mode [ 455.133839][T10362] bridge_slave_1: entered promiscuous mode [ 465.195853][ T5251] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 465.210039][ T5251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 465.226521][ T5251] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 465.236509][ T5251] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 465.251356][ T5251] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 465.262691][ T5251] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 465.656792][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 465.675156][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 465.689700][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 465.703497][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 465.713856][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 465.730341][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 466.564786][T10362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.614485][T10362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.725251][T10362] team0: Port device team_slave_0 added [ 466.748128][T10362] team0: Port device team_slave_1 added [ 467.128687][T10362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.174930][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.322629][T10362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.572683][ T5251] Bluetooth: hci2: command tx timeout [ 467.588926][T10362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.900268][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.986131][T10362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.009075][ T5251] Bluetooth: hci1: command tx timeout [ 468.740788][T10362] hsr_slave_0: entered promiscuous mode [ 468.915657][T10362] hsr_slave_1: entered promiscuous mode [ 468.923835][T10362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.932866][T10362] Cannot create hsr debugfs directory [ 469.823110][ T5251] Bluetooth: hci2: command tx timeout [ 470.121614][ T7340] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.261998][ T5251] Bluetooth: hci1: command tx timeout [ 470.639491][ T7340] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.795544][ T7340] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.178077][ T7340] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.404851][T10276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 471.451866][T10276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 471.600394][T10362] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.701426][T10459] chnl_net:caif_netlink_parms(): no params data found [ 471.785742][T10276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 471.819496][T10276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 471.987917][T10362] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.099161][ T5251] Bluetooth: hci2: command tx timeout [ 472.194306][T10461] chnl_net:caif_netlink_parms(): no params data found [ 472.367889][T10362] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.528137][ T5251] Bluetooth: hci1: command tx timeout [ 472.890255][T10362] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.507249][T10459] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.564793][T10459] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.608299][T10459] bridge_slave_0: entered allmulticast mode [ 473.655550][T10459] bridge_slave_0: entered promiscuous mode [ 473.697048][ T7340] bridge_slave_1: left allmulticast mode [ 473.702775][ T7340] bridge_slave_1: left promiscuous mode [ 473.726571][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.791293][ T7340] bridge_slave_0: left allmulticast mode [ 473.848376][ T7340] bridge_slave_0: left promiscuous mode [ 473.857209][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.952701][ T7340] bridge_slave_1: left allmulticast mode [ 473.979165][ T7340] bridge_slave_1: left promiscuous mode [ 473.986997][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.057092][ T7340] bridge_slave_0: left allmulticast mode [ 474.103210][ T7340] bridge_slave_0: left promiscuous mode [ 474.109413][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.360771][ T5251] Bluetooth: hci2: command tx timeout [ 474.808246][ T5251] Bluetooth: hci1: command tx timeout [ 475.256231][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.265546][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 478.050055][ T7340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.095886][ T7340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.140382][ T7340] bond0 (unregistering): Released all slaves [ 478.759833][ T7340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.913566][ T7340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.936838][ T7340] bond0 (unregistering): Released all slaves [ 479.047974][T10461] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.064588][T10461] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.090847][T10461] bridge_slave_0: entered allmulticast mode [ 479.120309][T10461] bridge_slave_0: entered promiscuous mode [ 479.153507][T10461] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.228477][T10461] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.235822][T10461] bridge_slave_1: entered allmulticast mode [ 479.305628][T10461] bridge_slave_1: entered promiscuous mode [ 479.559455][T10461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.601802][T10461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.798614][T10461] team0: Port device team_slave_0 added [ 479.831485][T10461] team0: Port device team_slave_1 added [ 479.958356][T10461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.995145][T10461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.079255][T10461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.125328][T10461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.155706][T10461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.245535][T10461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.379357][T10461] hsr_slave_0: entered promiscuous mode [ 480.408088][T10461] hsr_slave_1: entered promiscuous mode [ 480.414757][T10461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.438514][T10461] Cannot create hsr debugfs directory [ 480.831370][ C0] ================================================================== [ 480.839603][ C0] BUG: KASAN: slab-use-after-free in __rhashtable_lookup.constprop.0+0x426/0x550 [ 480.848799][ C0] Read of size 4 at addr ffff888030a90008 by task syz.3.489/7602 [ 480.858050][ C0] [ 480.860425][ C0] CPU: 0 UID: 0 PID: 7602 Comm: syz.3.489 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 480.871346][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 480.882400][ C0] Call Trace: [ 480.885718][ C0] [ 480.888602][ C0] dump_stack_lvl+0x116/0x1f0 [ 480.893363][ C0] print_report+0xc3/0x620 [ 480.897836][ C0] ? __virt_addr_valid+0x5e/0x590 [ 480.902903][ C0] ? __phys_addr+0xc6/0x150 [ 480.907450][ C0] kasan_report+0xd9/0x110 [ 480.911917][ C0] ? __rhashtable_lookup.constprop.0+0x426/0x550 [ 480.918286][ C0] ? __rhashtable_lookup.constprop.0+0x426/0x550 [ 480.924657][ C0] __rhashtable_lookup.constprop.0+0x426/0x550 [ 480.930853][ C0] ? lock_acquire+0x2f/0xb0 [ 480.935403][ C0] ? ila_nf_input+0x1bd/0x620 [ 480.943279][ C0] ila_nf_input+0x1ee/0x620 [ 480.949189][ C0] ? __pfx_ila_nf_input+0x10/0x10 [ 480.965533][ C0] nf_hook_slow+0xbb/0x200 [ 480.970193][ C0] nf_hook.constprop.0+0x42e/0x750 [ 480.975350][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 480.980591][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 480.986266][ C0] ? sock_wfree+0x46a/0x880 [ 480.990810][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 480.996054][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 481.000791][ C0] ipv6_rcv+0xa4/0x680 [ 481.004934][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 481.009673][ C0] __netif_receive_skb_one_core+0x12e/0x1e0 [ 481.015622][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 481.022092][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 481.027333][ C0] ? process_backlog+0x3f1/0x15f0 [ 481.032435][ C0] ? process_backlog+0x3f1/0x15f0 [ 481.037505][ C0] __netif_receive_skb+0x1d/0x160 [ 481.042579][ C0] process_backlog+0x443/0x15f0 [ 481.047480][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 481.052936][ C0] net_rx_action+0xa92/0x1010 [ 481.059357][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 481.069082][ C0] ? __pfx_mark_lock+0x10/0x10 [ 481.075148][ C0] ? lock_acquire+0x2f/0xb0 [ 481.080709][ C0] ? ktime_get+0xd9/0x1a0 [ 481.086446][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 481.092242][ C0] ? sched_clock+0x38/0x60 [ 481.096720][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 481.101641][ C0] ? mark_held_locks+0x9f/0xe0 [ 481.106550][ C0] handle_softirqs+0x213/0x8f0 [ 481.112241][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 481.119440][ C0] irq_exit_rcu+0xbb/0x120 [ 481.124268][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 481.130323][ C0] [ 481.133466][ C0] [ 481.136529][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 481.142775][ C0] RIP: 0010:sha256_transform_rorx+0x5e9/0x1120 [ 481.148978][ C0] Code: 3c 44 09 de c5 bd 72 d1 03 41 89 d7 c4 43 7b f0 e3 0d 45 31 f5 45 31 cf c4 43 7b f0 f0 06 45 31 f5 c4 43 7b f0 f3 16 45 21 c7 <44> 01 d1 c5 f5 72 f1 0e 21 c6 45 31 e6 c5 e5 ef d9 c4 43 7b f0 e3 [ 481.168632][ C0] RSP: 0018:ffffc9000d627200 EFLAGS: 00000202 [ 481.174736][ C0] RAX: 00000000d8b8a608 RBX: 00000000e5444cb5 RCX: 00000000da246335 [ 481.183129][ C0] RDX: 00000000fa8cedc6 RSI: 00000000effe7ef7 RDI: 0000000000000080 [ 481.191736][ C0] RBP: ffffc9000d627420 R08: 00000000f38f97af R09: 00000000e67fc038 [ 481.199936][ C0] R10: 0000000020d3917f R11: 000000008fba3a76 R12: 00000000d3b47dd1 [ 481.207975][ C0] R13: 000000008dfb9855 R14: 00000000e8e9da3e R15: 00000000108305ae [ 481.216530][ C0] ? __pfx___kernel_read+0x10/0x10 [ 481.221699][ C0] ? kernel_fpu_begin_mask+0x168/0x270 [ 481.227377][ C0] ? __pfx_kernel_fpu_begin_mask+0x10/0x10 [ 481.233235][ C0] ? integrity_kernel_read+0x7f/0xb0 [ 481.238571][ C0] _sha256_update+0x17e/0x220 [ 481.243293][ C0] ? __pfx_sha256_transform_rorx+0x10/0x10 [ 481.249138][ C0] ima_calc_file_hash_tfm+0x302/0x3e0 [ 481.254565][ C0] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 481.260520][ C0] ? hlock_class+0x4e/0x130 [ 481.265065][ C0] ? ima_alloc_tfm+0x21d/0x2d0 [ 481.269863][ C0] ? generic_fillattr+0x663/0x8c0 [ 481.274934][ C0] ima_calc_file_hash+0x1ba/0x490 [ 481.279997][ C0] ima_collect_measurement+0x8a7/0xa10 [ 481.285497][ C0] ? process_measurement+0x70a/0x2370 [ 481.290914][ C0] ? __pfx_ima_collect_measurement+0x10/0x10 [ 481.296936][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 481.302283][ C0] ? rcu_is_watching+0x12/0xc0 [ 481.307086][ C0] ? trace_contention_end+0xea/0x140 [ 481.312434][ C0] ? is_bad_inode+0xd/0x40 [ 481.316907][ C0] ? xattr_resolve_name+0x27b/0x3f0 [ 481.322158][ C0] ? vfs_getxattr_alloc+0xf1/0x340 [ 481.327335][ C0] ? ima_get_hash_algo+0x27d/0x410 [ 481.332509][ C0] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 481.338032][ C0] ? process_measurement+0x1271/0x2370 [ 481.343526][ C0] process_measurement+0x1271/0x2370 [ 481.349546][ C0] ? __pfx_process_measurement+0x10/0x10 [ 481.357236][ C0] ? kasan_save_track+0x14/0x30 [ 481.367464][ C0] ? find_held_lock+0x2d/0x110 [ 481.372582][ C0] ? aa_file_perm+0x4c6/0xfe0 [ 481.379416][ C0] ? __pfx_lock_release+0x10/0x10 [ 481.386099][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 481.392825][ C0] ? __pfx_aa_file_perm+0x10/0x10 [ 481.401637][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 481.410426][ C0] ima_file_mmap+0x1b1/0x1d0 [ 481.420125][ C0] ? __pfx_ima_file_mmap+0x10/0x10 [ 481.430050][ C0] security_mmap_file+0x8bd/0x990 [ 481.436512][ C0] vm_mmap_pgoff+0xdb/0x360 [ 481.441919][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 481.449411][ C0] ? hugetlbfs_get_inode+0x32d/0x530 [ 481.458189][ C0] ksys_mmap_pgoff+0x1c8/0x5c0 [ 481.464507][ C0] __x64_sys_mmap+0x125/0x190 [ 481.469767][ C0] do_syscall_64+0xcd/0x250 [ 481.478882][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.488498][ C0] RIP: 0033:0x7f39c877dff9 [ 481.494841][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.515245][ C0] RSP: 002b:00007f39c9608038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 481.523764][ C0] RAX: ffffffffffffffda RBX: 00007f39c8935f80 RCX: 00007f39c877dff9 [ 481.532213][ C0] RDX: 00004000000000df RSI: 0000002000000004 RDI: 0000000000000002 [ 481.540307][ C0] RBP: 00007f39c87f0296 R08: 0000000000000404 R09: 0000300000000000 [ 481.548319][ C0] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 481.556316][ C0] R13: 0000000000000000 R14: 00007f39c8935f80 R15: 00007ffe91505a58 [ 481.564323][ C0] [ 481.567356][ C0] [ 481.569714][ C0] Allocated by task 5960: [ 481.574050][ C0] kasan_save_stack+0x33/0x60 [ 481.578759][ C0] kasan_save_track+0x14/0x30 [ 481.583467][ C0] __kasan_kmalloc+0xaa/0xb0 [ 481.588084][ C0] __kmalloc_node_track_caller_noprof+0x20f/0x440 [ 481.594535][ C0] kmalloc_reserve+0xef/0x2c0 [ 481.599240][ C0] __alloc_skb+0x164/0x380 [ 481.603801][ C0] nsim_dev_trap_report_work+0x2a4/0xc90 [ 481.609858][ C0] process_one_work+0x958/0x1b30 [ 481.614967][ C0] worker_thread+0x6c8/0xf00 [ 481.619830][ C0] kthread+0x2c1/0x3a0 [ 481.623946][ C0] ret_from_fork+0x45/0x80 [ 481.628408][ C0] ret_from_fork_asm+0x1a/0x30 [ 481.633231][ C0] [ 481.635574][ C0] Freed by task 5960: [ 481.639582][ C0] kasan_save_stack+0x33/0x60 [ 481.644292][ C0] kasan_save_track+0x14/0x30 [ 481.649000][ C0] kasan_save_free_info+0x3b/0x60 [ 481.654052][ C0] __kasan_slab_free+0x51/0x70 [ 481.658854][ C0] kfree+0x14f/0x4b0 [ 481.662789][ C0] skb_free_head+0x108/0x1d0 [ 481.667883][ C0] skb_release_data+0x560/0x730 [ 481.674907][ C0] consume_skb+0xbf/0x100 [ 481.681624][ C0] nsim_dev_trap_report_work+0x878/0xc90 [ 481.694122][ C0] process_one_work+0x958/0x1b30 [ 481.702179][ C0] worker_thread+0x6c8/0xf00 [ 481.708181][ C0] kthread+0x2c1/0x3a0 [ 481.714095][ C0] ret_from_fork+0x45/0x80 [ 481.719809][ C0] ret_from_fork_asm+0x1a/0x30 [ 481.726561][ C0] [ 481.730179][ C0] The buggy address belongs to the object at ffff888030a90000 [ 481.730179][ C0] which belongs to the cache kmalloc-4k of size 4096 [ 481.746735][ C0] The buggy address is located 8 bytes inside of [ 481.746735][ C0] freed 4096-byte region [ffff888030a90000, ffff888030a91000) [ 481.764287][ C0] [ 481.767682][ C0] The buggy address belongs to the physical page: [ 481.774134][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30a90 [ 481.782930][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 481.791458][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 481.799050][ C0] page_type: f5(slab) [ 481.803074][ C0] raw: 00fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000 [ 481.811693][ C0] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 481.820311][ C0] head: 00fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000 [ 481.829012][ C0] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 481.837713][ C0] head: 00fff00000000003 ffffea0000c2a401 ffffffffffffffff 0000000000000000 [ 481.846421][ C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 481.855112][ C0] page dumped because: kasan: bad access detected [ 481.861555][ C0] page_owner tracks the page as allocated [ 481.867286][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5960, tgid 5960 (kworker/u8:18), ts 479993823284, free_ts 479338893162 [ 481.888351][ C0] post_alloc_hook+0x2d1/0x350 [ 481.893171][ C0] get_page_from_freelist+0x101e/0x3070 [ 481.898770][ C0] __alloc_pages_noprof+0x223/0x25a0 [ 481.904102][ C0] alloc_pages_mpol_noprof+0x2c9/0x610 [ 481.909612][ C0] new_slab+0x2ba/0x3f0 [ 481.913803][ C0] ___slab_alloc+0xd1d/0x16f0 [ 481.918515][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 481.923927][ C0] __kmalloc_node_track_caller_noprof+0x365/0x440 [ 481.930603][ C0] kmalloc_reserve+0xef/0x2c0 [ 481.935339][ C0] __alloc_skb+0x164/0x380 [ 481.939802][ C0] nsim_dev_trap_report_work+0x2a4/0xc90 [ 481.945478][ C0] process_one_work+0x958/0x1b30 [ 481.950488][ C0] worker_thread+0x6c8/0xf00 [ 481.955130][ C0] kthread+0x2c1/0x3a0 [ 481.959236][ C0] ret_from_fork+0x45/0x80 [ 481.963709][ C0] ret_from_fork_asm+0x1a/0x30 [ 481.968524][ C0] page last free pid 7340 tgid 7340 stack trace: [ 481.974870][ C0] free_unref_page+0x5f4/0xdc0 [ 481.979678][ C0] __folio_put+0x30d/0x3d0 [ 481.984141][ C0] kvfree+0x47/0x50 [ 481.987989][ C0] rhashtable_free_and_destroy+0x16c/0x990 [ 481.993836][ C0] ila_xlat_exit_net+0x59/0xa0 [ 481.998650][ C0] ops_exit_list+0xb0/0x180 [ 482.003210][ C0] cleanup_net+0x5b7/0xb40 [ 482.007949][ C0] process_one_work+0x958/0x1b30 [ 482.013462][ C0] worker_thread+0x6c8/0xf00 [ 482.018365][ C0] kthread+0x2c1/0x3a0 [ 482.023349][ C0] ret_from_fork+0x45/0x80 [ 482.028729][ C0] ret_from_fork_asm+0x1a/0x30 [ 482.034744][ C0] [ 482.038169][ C0] Memory state around the buggy address: [ 482.048546][ C0] ffff888030a8ff00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 482.059025][ C0] ffff888030a8ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 482.070252][ C0] >ffff888030a90000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 482.081604][ C0] ^ [ 482.088802][ C0] ffff888030a90080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 482.099138][ C0] ffff888030a90100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 482.109714][ C0] ================================================================== [ 482.121641][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 482.133032][ C0] CPU: 0 UID: 0 PID: 7602 Comm: syz.3.489 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 482.147671][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 482.158653][ C0] Call Trace: [ 482.162005][ C0] [ 482.165338][ C0] dump_stack_lvl+0x3d/0x1f0 [ 482.171403][ C0] panic+0x71d/0x800 [ 482.175497][ C0] ? __pfx_panic+0x10/0x10 [ 482.181790][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 482.187357][ C0] check_panic_on_warn+0xab/0xb0 [ 482.192396][ C0] end_report+0x117/0x180 [ 482.196827][ C0] kasan_report+0xe9/0x110 [ 482.201395][ C0] ? __rhashtable_lookup.constprop.0+0x426/0x550 [ 482.207793][ C0] ? __rhashtable_lookup.constprop.0+0x426/0x550 [ 482.214201][ C0] __rhashtable_lookup.constprop.0+0x426/0x550 [ 482.220868][ C0] ? lock_acquire+0x2f/0xb0 [ 482.225434][ C0] ? ila_nf_input+0x1bd/0x620 [ 482.230198][ C0] ila_nf_input+0x1ee/0x620 [ 482.235493][ C0] ? __pfx_ila_nf_input+0x10/0x10 [ 482.240935][ C0] nf_hook_slow+0xbb/0x200 [ 482.245426][ C0] nf_hook.constprop.0+0x42e/0x750 [ 482.251134][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 482.256610][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 482.263615][ C0] ? sock_wfree+0x46a/0x880 [ 482.272109][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 482.280617][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 482.287388][ C0] ipv6_rcv+0xa4/0x680 [ 482.292556][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 482.297589][ C0] __netif_receive_skb_one_core+0x12e/0x1e0 [ 482.304483][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 482.311197][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 482.318024][ C0] ? process_backlog+0x3f1/0x15f0 [ 482.323606][ C0] ? process_backlog+0x3f1/0x15f0 [ 482.329689][ C0] __netif_receive_skb+0x1d/0x160 [ 482.336763][ C0] process_backlog+0x443/0x15f0 [ 482.343859][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 482.352096][ C0] net_rx_action+0xa92/0x1010 [ 482.361068][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 482.368943][ C0] ? __pfx_mark_lock+0x10/0x10 [ 482.374668][ C0] ? lock_acquire+0x2f/0xb0 [ 482.379833][ C0] ? ktime_get+0xd9/0x1a0 [ 482.384234][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 482.390208][ C0] ? sched_clock+0x38/0x60 [ 482.394704][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 482.399723][ C0] ? mark_held_locks+0x9f/0xe0 [ 482.405010][ C0] handle_softirqs+0x213/0x8f0 [ 482.410338][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 482.415906][ C0] irq_exit_rcu+0xbb/0x120 [ 482.420559][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 482.426616][ C0] [ 482.429584][ C0] [ 482.432557][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 482.438768][ C0] RIP: 0010:sha256_transform_rorx+0x5e9/0x1120 [ 482.446485][ C0] Code: 3c 44 09 de c5 bd 72 d1 03 41 89 d7 c4 43 7b f0 e3 0d 45 31 f5 45 31 cf c4 43 7b f0 f0 06 45 31 f5 c4 43 7b f0 f3 16 45 21 c7 <44> 01 d1 c5 f5 72 f1 0e 21 c6 45 31 e6 c5 e5 ef d9 c4 43 7b f0 e3 [ 482.470265][ C0] RSP: 0018:ffffc9000d627200 EFLAGS: 00000202 [ 482.478464][ C0] RAX: 00000000d8b8a608 RBX: 00000000e5444cb5 RCX: 00000000da246335 [ 482.489039][ C0] RDX: 00000000fa8cedc6 RSI: 00000000effe7ef7 RDI: 0000000000000080 [ 482.500032][ C0] RBP: ffffc9000d627420 R08: 00000000f38f97af R09: 00000000e67fc038 [ 482.510235][ C0] R10: 0000000020d3917f R11: 000000008fba3a76 R12: 00000000d3b47dd1 [ 482.518627][ C0] R13: 000000008dfb9855 R14: 00000000e8e9da3e R15: 00000000108305ae [ 482.526674][ C0] ? __pfx___kernel_read+0x10/0x10 [ 482.531855][ C0] ? kernel_fpu_begin_mask+0x168/0x270 [ 482.537391][ C0] ? __pfx_kernel_fpu_begin_mask+0x10/0x10 [ 482.543279][ C0] ? integrity_kernel_read+0x7f/0xb0 [ 482.548678][ C0] _sha256_update+0x17e/0x220 [ 482.553439][ C0] ? __pfx_sha256_transform_rorx+0x10/0x10 [ 482.565524][ C0] ima_calc_file_hash_tfm+0x302/0x3e0 [ 482.572197][ C0] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 482.578186][ C0] ? hlock_class+0x4e/0x130 [ 482.583124][ C0] ? ima_alloc_tfm+0x21d/0x2d0 [ 482.588066][ C0] ? generic_fillattr+0x663/0x8c0 [ 482.594855][ C0] ima_calc_file_hash+0x1ba/0x490 [ 482.600737][ C0] ima_collect_measurement+0x8a7/0xa10 [ 482.606409][ C0] ? process_measurement+0x70a/0x2370 [ 482.612278][ C0] ? __pfx_ima_collect_measurement+0x10/0x10 [ 482.618322][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 482.623774][ C0] ? rcu_is_watching+0x12/0xc0 [ 482.628598][ C0] ? trace_contention_end+0xea/0x140 [ 482.633971][ C0] ? is_bad_inode+0xd/0x40 [ 482.638460][ C0] ? xattr_resolve_name+0x27b/0x3f0 [ 482.643740][ C0] ? vfs_getxattr_alloc+0xf1/0x340 [ 482.649040][ C0] ? ima_get_hash_algo+0x27d/0x410 [ 482.654257][ C0] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 482.659824][ C0] ? process_measurement+0x1271/0x2370 [ 482.665352][ C0] process_measurement+0x1271/0x2370 [ 482.670711][ C0] ? __pfx_process_measurement+0x10/0x10 [ 482.676498][ C0] ? kasan_save_track+0x14/0x30 [ 482.681446][ C0] ? find_held_lock+0x2d/0x110 [ 482.690297][ C0] ? aa_file_perm+0x4c6/0xfe0 [ 482.695687][ C0] ? __pfx_lock_release+0x10/0x10 [ 482.702890][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 482.709129][ C0] ? __pfx_aa_file_perm+0x10/0x10 [ 482.714416][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 482.720131][ C0] ima_file_mmap+0x1b1/0x1d0 [ 482.724784][ C0] ? __pfx_ima_file_mmap+0x10/0x10 [ 482.729964][ C0] security_mmap_file+0x8bd/0x990 [ 482.735063][ C0] vm_mmap_pgoff+0xdb/0x360 [ 482.739640][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 482.744819][ C0] ? hugetlbfs_get_inode+0x32d/0x530 [ 482.751462][ C0] ksys_mmap_pgoff+0x1c8/0x5c0 [ 482.757228][ C0] __x64_sys_mmap+0x125/0x190 [ 482.762270][ C0] do_syscall_64+0xcd/0x250 [ 482.767551][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.774579][ C0] RIP: 0033:0x7f39c877dff9 [ 482.784184][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.808746][ C0] RSP: 002b:00007f39c9608038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 482.817250][ C0] RAX: ffffffffffffffda RBX: 00007f39c8935f80 RCX: 00007f39c877dff9 [ 482.825303][ C0] RDX: 00004000000000df RSI: 0000002000000004 RDI: 0000000000000002 [ 482.833340][ C0] RBP: 00007f39c87f0296 R08: 0000000000000404 R09: 0000300000000000 [ 482.841350][ C0] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 482.849353][ C0] R13: 0000000000000000 R14: 00007f39c8935f80 R15: 00007ffe91505a58 [ 482.857375][ C0] [ 482.860759][ C0] Kernel Offset: disabled [ 482.865109][ C0] Rebooting in 86400 seconds..