last executing test programs: 5.851684378s ago: executing program 0 (id=1778): mmap$auto(0x0, 0x8, 0x6, 0x9b72, 0x2, 0x8000) ustat$auto(0x1, &(0x7f0000000000)={0xfff, 0x2, "be5705f65205", "184885ca64ad"}) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) mremap$auto(0x0, 0x2, 0x8, 0x3, 0x7effffffb000) socket(0x2, 0x80805, 0x0) read$auto(0x3, 0x0, 0x7) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100df140456bd3d3a619d007500"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8800) socket(0xa, 0x3, 0x3a) io_getevents$auto(0x3, 0x7fff, 0x3ff, 0xfffffffffffffffe, 0xfffffffffffffffd) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) socket(0x2, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) ioctl$NS_GET_PARENT(r1, 0xff03, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x13, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xe7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioperm$auto(0x3b, 0xf99b, 0x6) epoll_pwait$auto(0x100, 0x0, 0x2, 0x8, 0xfffffffffffffffd, 0x6) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c40900448dc7fe8000"}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) epoll_ctl$auto(0x0, 0xcb6, 0x3, &(0x7f0000000040)={0xffffff92, 0xf7a6}) sendmmsg$auto(0x23, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xfffffffd) 5.680851281s ago: executing program 1 (id=1782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000300), r0) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r1, 0xf15, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000010) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000940), r0) (fail_nth: 8) 5.421217703s ago: executing program 1 (id=1784): mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0xe) mlockall$auto(0x8000000000000001) mprotect$auto(0xa, 0x0, 0xed3) mprotect$auto(0x1ffff000, 0x100000002, 0x8) mprotect$auto(0x1ffff000, 0x810002, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 4.407199637s ago: executing program 0 (id=1790): mmap$auto(0xc7, 0x400008, 0xdc, 0x8000000000000010, 0x2, 0x4) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f00000003c0), r0) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc019}, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 3.676416252s ago: executing program 3 (id=1794): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x4, 0xa, 0x1000000004, 0x9b72, 0x8, 0x8000) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xf1, 0x10) clone$auto(0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x0, 0x3) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) timer_create$auto(0x7, 0x0, 0x0) mlockall$auto(0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000000), r0) mmap$auto(0xffffffffffffffff, 0xf3ce, 0x1000000004, 0x9b72, 0xf, 0x7) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x1020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7fd, 0x3, 0x9, 0x7, 0x7ff, 0x0, 0x4000000f}, 0x6f4) timerfd_settime$auto(0x7a, 0xffff, 0xfffffffffffffffc, 0x0) ioctl$auto(0xc8, 0x401054d5, 0x5c8d) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x400c002) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4010851}, 0x4000080) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000800), r3) 3.527731875s ago: executing program 0 (id=1796): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), r0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) 3.195447711s ago: executing program 3 (id=1797): socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x40000000084, 0x83, 0xfffffffffffffffe, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) socket(0x26, 0x6, 0x6) socket(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000002100), 0xffffffffffffffff) socket(0x11, 0x80000, 0x100) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250900000008000100", @ANYRES32=0x0, @ANYBLOB="2a409286f1a624"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004090) shutdown$auto(0x5, 0x0) recvfrom$auto(0x3, 0x0, 0x2, 0x6, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) 2.897510026s ago: executing program 2 (id=1798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000300), r0) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r1, 0xf15, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x100000000000000, 0x0, 0x4000090}, 0x4000010) 2.679986686s ago: executing program 3 (id=1799): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) set_mempolicy$auto(0x8, &(0x7f00000000c0)=0x1, 0xe283) set_mempolicy$auto(0x400, &(0x7f0000000080)=0x2, 0x9) open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x84) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) read$auto(0x3, 0x0, 0x7) set_mempolicy$auto(0x8b7, &(0x7f0000000040)=0xffffffffffff49c1, 0x5) bpf$auto(0x0, &(0x7f0000000100)=@link_detach={0x1}, 0x6f4) 2.617378363s ago: executing program 2 (id=1800): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000300), r0) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r1, 0xf15, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000010) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000940), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NFSD_A_POOL_MODE_MODE={0x7, 0x1, '!%\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4800) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x5}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x1}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xffffffff}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xfffffb70}, @NFSD_A_SERVER_SCOPE={0xb, 0x4, 'nlctrl\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xe24f}, @NFSD_A_SERVER_SCOPE={0xe, 0x4, 'handshake\x00'}, @NFSD_A_SERVER_SCOPE={0x8, 0x4, ')^-\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) syz_genetlink_get_family_id$auto_NLBL_UNLBL(&(0x7f0000000a80), r0) 2.488066396s ago: executing program 3 (id=1801): io_uring_enter$auto(0x8, 0x7ff, 0x1, 0x8, &(0x7f0000000000)="4bac152fbdfc9a128f1895091be76701b59c97d718003139fcc423b3644dfcab24c77fb058c0582e549e5b618c09048be4dbc5c62dade4a5ace8eff3caa4695298bdb86a404009", 0x4ae47f26) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setuid$auto(0xe) move_mount$auto(0xffffffffffffffff, 0xfffffffffffffffd, 0xb, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlock2$auto(0x1, 0x8001, 0x0) mremap$auto(0x0, 0x2, 0x8, 0x3, 0x7effffffb000) socket(0x1a, 0x2, 0x0) setsockopt$auto(0x6, 0x1, 0x2a, &(0x7f00000003c0)='ns/cgroup\x00', 0xc) 2.217752578s ago: executing program 1 (id=1802): mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) rt_sigtimedwait$auto(0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x5a63) socket(0x2, 0x1, 0x106) setsockopt$auto(0x3, 0x1, 0x28, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) fcntl$auto(0x2, 0x4, 0x2150fd80) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x1000084, 0x23, 0xfffffffffffffffd, 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x7, 0xfffffffffffffff8, 0x2) cachestat$auto(0x0, 0xfffffffffffffffc, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) pkey_mprotect$auto(0x8000000000000000, 0x80000000, 0x8, 0x2000000000000) fallocate$auto(0x1, 0x80, 0x14, 0x8) setsockopt$auto(0x4, 0x0, 0x1, &(0x7f0000000000)='!/*:(*\'\x00', 0xe) getsockopt$auto(0xffff7e18, 0x4, 0x4, &(0x7f0000000040)='\x00', &(0x7f0000000080)=0xb) mmap$auto(0x6, 0x1, 0xffffffffffffffff, 0x12, 0x80000001, 0x9) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="a963665ddc2fc681001520", @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) socket(0xf, 0x3, 0x2) socket(0xf, 0x3, 0x2) close_range$auto(0x2, 0x8000, 0x0) fanotify_mark$auto(0x4, 0x9, 0x7ff8ffff, 0x0, 0x0) close_range$auto(0x0, 0x7, 0x80000001) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x14) read$auto(0x40, 0x0, 0x7ff) 2.125155356s ago: executing program 0 (id=1803): r0 = socket(0x2, 0x1, 0x0) semctl$auto(0x1ff, 0x2, 0x8, 0x4) listen$auto(0x3, 0x9) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x40000000084, 0x72, 0xfffffffffffffffe, 0x0) memfd_create$auto(0xfffffffffffffffd, 0x8) socket(0x29, 0x5, 0x0) ioctl$auto(0x3, 0x89e1, 0xfffffffffffff4e0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) read$auto(0x3, 0x0, 0x7c) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x1, 0x21eb, 0x7ff, 0x3, 0x8, 0xb, 0x9, 0x0, 0xffffffff80000000}, 0x6f4) sendmsg$auto_NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9e}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4040010) 2.124977567s ago: executing program 2 (id=1804): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x40200000000, 0xffffffffffffefff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xc, 0x0, 0x300) socket(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000040)={0x2, @sockaddr_1_1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) syz_genetlink_get_family_id$auto_nl802154(0x0, r0) 1.756065883s ago: executing program 1 (id=1805): open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0008, 0x19) madvise$auto(0x0, 0x8000, 0xc) lstat$auto(&(0x7f0000000000)='*\x00', &(0x7f0000000040)={0x41, 0x2, 0x0, 0x8, 0x20d9, 0xfffffffa, 0x0, 0x7, 0xf, 0x3, 0x2d, 0x8001, 0x6, 0xca9, 0x4, 0xc, 0x1, [0x4, 0xa5e, 0xbf7]}) mremap$auto(0x4000, 0x800000000000fee0, 0x9f, 0x3, 0xfffff000) 1.581496914s ago: executing program 2 (id=1806): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) madvise$auto(0x1, 0x12c9, 0xff) splice$auto(0x3, 0x0, 0x3, 0x0, 0x8, 0x2) socket(0xa, 0x2, 0x73) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x2a, 0xa, 0x20000) sendmsg$auto_TIPC_NL_LINK_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB], 0x14}}, 0x20000000) r3 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02002abd7000fddbdf25020000000600010009000000060001000900000010245ca7f44c6b269d101011fb8385cf72b776b3a8a7354845d6e75bea552ad03d71eb2a6edd87848dd8ab1b8faf680c0f5fb56a630f78590626b2ef248af91e1838fe32ea6744df2c124489a20894bcc72c67a7875f6bc440fa3e6678aa64bcadc5e65bfafaf9ee66b843b40097c27f58dc85364daed3356af741bf8ce379efb3f5d83bdb0181923d"], 0x24}}, 0x20004000) 1.479626572s ago: executing program 1 (id=1807): mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (async, rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mlockall$auto(0x7) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) bpf$auto(0x6, &(0x7f0000000000)=@raw_tracepoint={0x200000, 0x7, 0x0, 0xe25}, 0x779) (async, rerun: 64) mincore$auto(0x1000, 0x8001, 0x0) (rerun: 64) 1.396020255s ago: executing program 3 (id=1808): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000300), r0) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40004000}, 0x40000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000002900), r2) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002940)={0x14, r3, 0x1d, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000004) setsockopt$auto(0x3, 0x29, 0x37, 0xffffffffffffffff, 0x90) (async) setsockopt$auto(0x3, 0x2a, 0xfffffffffffffffb, 0xfffffffffffffffe, 0xc0) (async) setsockopt$auto(0x5, 0x6, 0x2, 0x0, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) bind$auto(0x8, 0xfffffffffffffffd, 0x0) io_uring_setup$auto(0x5, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x5, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x7, 0x7, 0x5, 0x5, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfffff654, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) 1.257034261s ago: executing program 0 (id=1809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000300), r0) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r1, 0xf15, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x200000000000000, 0x0, 0x4000090}, 0x4000010) 1.139553427s ago: executing program 2 (id=1810): set_mempolicy$auto(0x4006, &(0x7f0000000000)=0xc, 0x7) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_7={@map_id=0x7, 0x3c0, 0x7}, 0x6f4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x10000000000, 0x20009, 0x4000000000df, 0x10, 0x401, 0x1000) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x7, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) newfstatat$auto(0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) io_setup$auto(0x2, 0xfffffffffffffffd) semget$auto(0x6, 0x10, 0x7fffffffffffffff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) inotify_init1$auto(0x3000000000000) ioctl$auto(0x3, 0x40044900, 0x38) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') socket(0x11, 0x80003, 0x300) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), 0xffffffffffffffff) ioctl$auto(0x1, 0x541b, 0x8) clock_getres$auto(0x0, 0xfffffffffffffffd) clock_nanosleep$auto(0x2, 0x543bae6e, 0x0, 0xfffffffffffffffd) get_mempolicy$auto(0xfffffffffffffffe, 0xfffffffffffffffd, 0x2, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01032bbd70007fdbdf2526000000b91c"], 0x14}, 0x1, 0x0, 0x0, 0x7}, 0x4010) sendmsg$auto_ETHTOOL_MSG_MODULE_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_MODULE_HEADER={0x7, 0x1, "9cf802"}, @ETHTOOL_A_MODULE_HEADER={0x7, 0x1, "2beb33"}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) 836.110604ms ago: executing program 3 (id=1811): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_TASKSTATS(&(0x7f0000000040), r0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) 721.005943ms ago: executing program 1 (id=1812): mmap$auto(0x800, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioperm$auto(0x800, 0x5, 0xd) faccessat$auto(0xc0, &(0x7f0000000000)='/\x00', 0x6) 709.65433ms ago: executing program 0 (id=1813): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) shmctl$auto(0x101, 0x1, 0x0) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) getdents$auto(0x600000000, 0xfffffffffffffffd, 0xd00) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) madvise$auto(0x148d, 0x8, 0x0) prctl$auto(0x1a, 0xfff, 0x3, 0x1000000000000fff, 0x1) socket(0xa, 0x2, 0x0) rt_sigpending$auto(0xfffffffffffffffe, 0x0) (async) r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) setsockopt$auto(0x3, 0x100000000029, 0x2, 0xfffffffffffffffc, 0x3) (async) socket(0xa, 0x3, 0x6) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) clone$auto(0x0, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x9) (async) pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x400008, 0x4000000df, 0xf1, 0x2, 0xfff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) socket(0x2, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r1, 0x0, 0x8010) (async) sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x4000000) (async) sendmsg$auto_NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004085}, 0x40000) (async) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) (async) cachestat$auto(0x29b, &(0x7f0000000000)={0x9, 0x5}, &(0x7f0000000040)={0x80004001, 0x7, 0x88c, 0x3, 0xfffffffffffff8de}, 0xf8) 0s ago: executing program 2 (id=1814): sendmmsg$auto(0x5, 0xfffffffffffffffd, 0xfff, 0x80000000) r0 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'veth0_to_bridge\x00'}) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0xcf28, 0x5) kernel console output (not intermixed with test programs): off+0x25b/0x360 [ 149.501933][ T7485] __mm_populate+0x1d6/0x380 [ 149.506560][ T7485] ? __pfx___mm_populate+0x10/0x10 [ 149.511713][ T7485] ? up_write+0x1b2/0x520 [ 149.516089][ T7485] vm_mmap_pgoff+0x293/0x360 [ 149.520717][ T7485] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 149.525861][ T7485] ? __fget_files+0x244/0x3f0 [ 149.530844][ T7485] ksys_mmap_pgoff+0x7d/0x5c0 [ 149.535549][ T7485] ? __pfx_ksys_write+0x10/0x10 [ 149.540443][ T7485] __x64_sys_mmap+0x125/0x190 [ 149.545149][ T7485] do_syscall_64+0xcd/0x250 [ 149.549685][ T7485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.555620][ T7485] RIP: 0033:0x7f4d6e77df39 [ 149.560056][ T7485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.579692][ T7485] RSP: 002b:00007f4d6f65a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 149.588134][ T7485] RAX: ffffffffffffffda RBX: 00007f4d6e935f80 RCX: 00007f4d6e77df39 [ 149.596127][ T7485] RDX: 0000000000000072 RSI: 0000001000000009 RDI: 0000000000000000 [ 149.604125][ T7485] RBP: 00007f4d6f65a090 R08: 0000000000000002 R09: 0000000000008000 [ 149.612122][ T7485] R10: 0000000000008b72 R11: 0000000000000246 R12: 0000000000000002 [ 149.620112][ T7485] R13: 0000000000000000 R14: 00007f4d6e935f80 R15: 00007ffc22dd03f8 [ 149.628471][ T7485] [ 150.002001][ T7503] netlink: 20 bytes leftover after parsing attributes in process `syz.3.587'. [ 150.024655][ T7502] netlink: 20 bytes leftover after parsing attributes in process `syz.3.587'. [ 150.764522][ T7535] delete_channel: no stack [ 152.066558][ T7543] kexec: Could not allocate control_code_buffer [ 153.215118][ T7580] netlink: 5 bytes leftover after parsing attributes in process `syz.1.612'. [ 153.872858][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'. [ 155.787048][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.802195][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.812775][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.836479][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.844518][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.853208][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.432908][ T7669] chnl_net:caif_netlink_parms(): no params data found [ 156.667354][ T7669] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.674643][ T7669] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.682178][ T7669] bridge_slave_0: entered allmulticast mode [ 156.689319][ T7669] bridge_slave_0: entered promiscuous mode [ 156.697125][ T7669] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.704265][ T7669] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.711751][ T7669] bridge_slave_1: entered allmulticast mode [ 156.718784][ T7669] bridge_slave_1: entered promiscuous mode [ 156.767921][ T7669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.791786][ T7669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.854714][ T7669] team0: Port device team_slave_0 added [ 156.892103][ T7669] team0: Port device team_slave_1 added [ 156.987175][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.001351][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.078910][ T7669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.092538][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.099652][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.125836][ T7669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.923366][ T5230] Bluetooth: hci0: command tx timeout [ 158.002910][ T7669] hsr_slave_0: entered promiscuous mode [ 158.056541][ T7669] hsr_slave_1: entered promiscuous mode [ 158.118470][ T7669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.136847][ T7669] Cannot create hsr debugfs directory [ 158.777007][ T7669] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.983377][ T7669] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.151521][ T7669] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.372728][ T7669] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.631880][ T7669] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 159.664548][ T7669] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.698498][ T7669] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.710459][ T7669] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.895635][ T7669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.979944][ T7669] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.007599][ T5232] Bluetooth: hci0: command tx timeout [ 160.092968][ T3979] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.100130][ T3979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.139647][ T3979] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.147581][ T3979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.220642][ T7669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.670148][ T7669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.748852][ T7669] veth0_vlan: entered promiscuous mode [ 160.780007][ T7669] veth1_vlan: entered promiscuous mode [ 160.843059][ T7669] veth0_macvtap: entered promiscuous mode [ 160.853037][ T7669] veth1_macvtap: entered promiscuous mode [ 160.883232][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.896989][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.917820][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.936985][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.966960][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.004589][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.041484][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.070055][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.094781][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.136874][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.159141][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.179395][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.211190][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.257533][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.296813][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.306661][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.346682][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.367632][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.386772][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.397016][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.413390][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.439417][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.452444][ T7669] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.466284][ T7669] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.508999][ T7669] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.519899][ T7669] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.708657][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 161.841775][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.874529][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.021244][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.051097][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.078275][ T5232] Bluetooth: hci0: command tx timeout [ 163.072757][ T7816] mmap: syz.0.667 (7816): VmData 37654528 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 163.925591][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 164.155637][ T5232] Bluetooth: hci0: command tx timeout [ 168.172461][ T7922] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 172.780478][ T7920] syz.2.686 (7920) used greatest stack depth: 20368 bytes left [ 174.306600][ T8008] raw_sendmsg: syz.2.705 forgot to set AF_INET. Fix it! [ 174.510563][ T8005] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 176.854443][ T8051] GUP no longer grows the stack in syz.3.725 (8051): f000-10000 (1000) [ 176.870048][ T8051] CPU: 0 UID: 0 PID: 8051 Comm: syz.3.725 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 176.880341][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 176.890419][ T8051] Call Trace: [ 176.893722][ T8051] [ 176.896677][ T8051] dump_stack_lvl+0x16c/0x1f0 [ 176.901397][ T8051] gup_vma_lookup+0x1d2/0x220 [ 176.906118][ T8051] __get_user_pages+0x26c/0x3b90 [ 176.911101][ T8051] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 176.916700][ T8051] ? __pfx___lock_acquire+0x10/0x10 [ 176.921949][ T8051] ? __pfx___get_user_pages+0x10/0x10 [ 176.927364][ T8051] ? down_read_killable+0xcc/0x380 [ 176.932516][ T8051] ? __pfx_down_read_killable+0x10/0x10 [ 176.938097][ T8051] ? find_held_lock+0x2d/0x110 [ 176.942901][ T8051] ? __pfx_mark_lock+0x10/0x10 [ 176.947717][ T8051] __gup_longterm_locked+0x22e/0x1b30 [ 176.953140][ T8051] ? __pfx_lock_release+0x10/0x10 [ 176.958205][ T8051] ? __pfx___gup_longterm_locked+0x10/0x10 [ 176.964053][ T8051] ? mark_held_locks+0x9f/0xe0 [ 176.968866][ T8051] gup_fast_fallback+0x180b/0x2690 [ 176.974031][ T8051] ? __pfx_gup_fast_fallback+0x10/0x10 [ 176.979527][ T8051] ? __pfx___lock_acquire+0x10/0x10 [ 176.984759][ T8051] ? hlock_class+0x4e/0x130 [ 176.989276][ T8051] ? __lock_acquire+0xbdd/0x3ce0 [ 176.994231][ T8051] get_user_pages_fast+0xa8/0x100 [ 176.999268][ T8051] ? __pfx_get_user_pages_fast+0x10/0x10 [ 177.004914][ T8051] ? iov_iter_advance+0x1e3/0x6c0 [ 177.009953][ T8051] __iov_iter_get_pages_alloc+0x8e8/0x2230 [ 177.015779][ T8051] ? rcu_is_watching+0x12/0xc0 [ 177.020553][ T8051] ? trace_contention_end+0xea/0x140 [ 177.025861][ T8051] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 177.032124][ T8051] ? copy_iovec_from_user+0x12d/0x170 [ 177.037509][ T8051] ? pipe_lock+0x64/0x80 [ 177.041767][ T8051] ? __pfx___mutex_lock+0x10/0x10 [ 177.046810][ T8051] iov_iter_get_pages2+0xa4/0x100 [ 177.051847][ T8051] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 177.057502][ T8051] ? wait_for_space+0x224/0x2d0 [ 177.062371][ T8051] ? add_to_pipe+0x1c0/0x3c0 [ 177.066976][ T8051] __do_sys_vmsplice+0x7c3/0xef0 [ 177.071938][ T8051] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 177.077424][ T8051] ? __pfx_futex_wait+0x10/0x10 [ 177.082290][ T8051] ? kmem_cache_free+0x152/0x4b0 [ 177.087245][ T8051] ? fcntl_getlk+0x243/0x8f0 [ 177.091844][ T8051] ? __pfx___might_resched+0x10/0x10 [ 177.097182][ T8051] ? do_syscall_64+0xcd/0x250 [ 177.101873][ T8051] do_syscall_64+0xcd/0x250 [ 177.106383][ T8051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.112293][ T8051] RIP: 0033:0x7f4d6e77df39 [ 177.116712][ T8051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.136326][ T8051] RSP: 002b:00007f4d6f65a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 177.144747][ T8051] RAX: ffffffffffffffda RBX: 00007f4d6e935f80 RCX: 00007f4d6e77df39 [ 177.152721][ T8051] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000001 [ 177.160694][ T8051] RBP: 00007f4d6e7f0216 R08: 0000000000000000 R09: 0000000000000000 [ 177.168664][ T8051] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 177.176637][ T8051] R13: 0000000000000000 R14: 00007f4d6e935f80 R15: 00007ffc22dd03f8 [ 177.184626][ T8051] [ 180.158912][ T8081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.190455][ T5230] Bluetooth: hci3: command 0x0406 tx timeout [ 189.157249][ T8191] unsupported nlmsg_type 40 [ 190.460906][ T8208] svc: failed to register nfsdv3 RPC service (errno 111). [ 190.504417][ T8208] svc: failed to register nfsaclv3 RPC service (errno 111). [ 191.435726][ T5230] Bluetooth: hci2: command 0x0406 tx timeout [ 191.525901][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 191.704868][ T8224] Invalid ELF header magic: != ELF [ 192.009283][ T8229] can: request_module (can-proto-4) failed. [ 192.618558][ T8208] syz.0.756 (8208) used greatest stack depth: 19456 bytes left [ 193.961094][ T8262] netlink: zone id is out of range [ 193.966529][ T8262] netlink: zone id is out of range [ 193.971734][ T8262] netlink: zone id is out of range [ 193.976856][ T8262] netlink: del zone limit has 4 unknown bytes [ 194.468183][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.474642][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.834992][ T29] audit: type=1326 audit(8277292043.464:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.1.790" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54a7b7df39 code=0x0 [ 198.889759][ T29] audit: type=1326 audit(8277292043.514:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8321 comm="syz.1.790" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54a7b7df39 code=0x0 [ 202.676632][ T8384] netlink: 32 bytes leftover after parsing attributes in process `syz.1.806'. [ 204.586429][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.595429][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.604897][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.617041][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.632192][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 204.639635][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.322927][ T8408] chnl_net:caif_netlink_parms(): no params data found [ 205.798288][ T8408] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.805892][ T8408] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.813101][ T8408] bridge_slave_0: entered allmulticast mode [ 205.820571][ T8408] bridge_slave_0: entered promiscuous mode [ 205.828831][ T8408] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.835984][ T8408] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.843480][ T8408] bridge_slave_1: entered allmulticast mode [ 205.850805][ T8408] bridge_slave_1: entered promiscuous mode [ 205.898895][ T8408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.910892][ T8408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.951862][ T8408] team0: Port device team_slave_0 added [ 205.962009][ T8408] team0: Port device team_slave_1 added [ 206.357111][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.364093][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.431860][ T8408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.665469][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.692888][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.720603][ T5232] Bluetooth: hci1: command tx timeout [ 206.810714][ T8408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.875786][ T7940] syz.0.690 (7940) used greatest stack depth: 18720 bytes left [ 207.247104][ T8408] hsr_slave_0: entered promiscuous mode [ 207.254639][ T8408] hsr_slave_1: entered promiscuous mode [ 207.278146][ T8408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.316222][ T8408] Cannot create hsr debugfs directory [ 207.928303][ T8408] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.207071][ T8408] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.306553][ T8408] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.587987][ T8408] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.773247][ T5232] Bluetooth: hci1: command tx timeout [ 208.975064][ T8408] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.015955][ T8408] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.042509][ T8408] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 209.105971][ T8408] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 209.311793][ T8408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.367958][ T8408] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.415619][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.422795][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.457817][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.465016][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.609682][ T8408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.633040][ T8408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.137341][ T8408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.260266][ T8408] veth0_vlan: entered promiscuous mode [ 210.395555][ T8408] veth1_vlan: entered promiscuous mode [ 210.650947][ T8408] veth0_macvtap: entered promiscuous mode [ 210.671943][ T12] bridge_slave_1: left allmulticast mode [ 210.679051][ T12] bridge_slave_1: left promiscuous mode [ 210.703236][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.733853][ T12] bridge_slave_0: left allmulticast mode [ 210.773205][ T12] bridge_slave_0: left promiscuous mode [ 210.778977][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.852249][ T5232] Bluetooth: hci1: command tx timeout [ 212.105523][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.152990][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.185291][ T12] bond0 (unregistering): Released all slaves [ 212.251009][ T8408] veth1_macvtap: entered promiscuous mode [ 212.393638][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.419921][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.456170][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.481175][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.512342][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.550052][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.571244][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.591120][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.611399][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.631132][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.651097][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.671135][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.682658][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.830629][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.854403][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.880462][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.931953][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.941878][ T5232] Bluetooth: hci1: command tx timeout [ 212.951109][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.963393][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.001321][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.059205][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.101042][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.139048][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.181472][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.249856][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.292238][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.334436][ T8408] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.364140][ T8408] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.394670][ T8408] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.434286][ T8408] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.073758][ T12] hsr_slave_0: left promiscuous mode [ 214.101593][ T12] hsr_slave_1: left promiscuous mode [ 214.111718][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.119151][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.137441][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.157203][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.282450][ T12] veth1_macvtap: left promiscuous mode [ 214.289874][ T12] veth0_macvtap: left promiscuous mode [ 214.304343][ T12] veth1_vlan: left promiscuous mode [ 214.330500][ T12] veth0_vlan: left promiscuous mode [ 215.970791][ T12] team0 (unregistering): Port device team_slave_1 removed [ 216.111707][ T12] team0 (unregistering): Port device team_slave_0 removed [ 217.663203][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.720247][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.784100][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.793297][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.126893][ T8569] svc: failed to register nfsdv3 RPC service (errno 111). [ 220.297868][ T8569] svc: failed to register nfsaclv3 RPC service (errno 111). [ 224.419109][ T8659] netlink: zone id is out of range [ 224.437822][ T8659] netlink: zone id is out of range [ 224.448522][ T8659] netlink: zone id is out of range [ 224.453678][ T8659] netlink: del zone limit has 4 unknown bytes [ 233.475942][ T8847] futex_wake_op: syz.1.924 tries to shift op by 64; fix this program [ 233.497810][ T8846] futex_wake_op: syz.1.924 tries to shift op by 64; fix this program [ 236.283679][ T8878] Invalid ELF header magic: != ELF [ 240.169941][ T8959] ptrace attach of "./syz-executor exec"[6770] was attempted by "./syz-executor exec"[8959] [ 242.108346][ T9000] delete_channel: no stack [ 242.609521][ T5230] Bluetooth: hci4: command 0x0406 tx timeout [ 244.265065][ T9055] netlink: 'syz.0.983': attribute type 11 has an invalid length. [ 244.303383][ T9055] netlink: 'syz.0.983': attribute type 11 has an invalid length. [ 249.568162][ T9143] cgroup: fork rejected by pids controller in /syz0 [ 251.832854][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.851415][ T5230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.873357][ T5230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 251.885235][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 251.895995][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 251.909277][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.752817][ T8766] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.664555][ T8766] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.968148][ T5230] Bluetooth: hci0: command tx timeout [ 253.985225][ T9300] chnl_net:caif_netlink_parms(): no params data found [ 255.210464][ T8766] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.889794][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.896980][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.047857][ T5230] Bluetooth: hci0: command tx timeout [ 256.294058][ T8766] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.468313][ T9300] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.477251][ T9300] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.496234][ T9300] bridge_slave_0: entered allmulticast mode [ 256.503502][ T9300] bridge_slave_0: entered promiscuous mode [ 256.887468][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.894911][ T9300] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.923002][ T9300] bridge_slave_1: entered allmulticast mode [ 256.943720][ T9300] bridge_slave_1: entered promiscuous mode [ 257.062108][ T9300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.211172][ T9300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.632666][ T9300] team0: Port device team_slave_0 added [ 257.641084][ T9300] team0: Port device team_slave_1 added [ 257.837897][ T8766] bridge_slave_1: left allmulticast mode [ 257.843592][ T8766] bridge_slave_1: left promiscuous mode [ 257.849592][ T8766] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.098391][ T8766] bridge_slave_0: left allmulticast mode [ 258.104088][ T8766] bridge_slave_0: left promiscuous mode [ 258.109894][ T8766] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.127787][ T5230] Bluetooth: hci0: command tx timeout [ 260.028113][ T8766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.063188][ T8766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.105263][ T8766] bond0 (unregistering): Released all slaves [ 260.209566][ T5230] Bluetooth: hci0: command tx timeout [ 260.228227][ T9300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.236868][ T9300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.341873][ T9300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.618657][ T9300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.664231][ T9300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.737830][ T9300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.231197][ T9300] hsr_slave_0: entered promiscuous mode [ 261.248166][ T9300] hsr_slave_1: entered promiscuous mode [ 261.277706][ T9300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.285306][ T9300] Cannot create hsr debugfs directory [ 263.520405][ T8766] hsr_slave_0: left promiscuous mode [ 263.550120][ T8766] hsr_slave_1: left promiscuous mode [ 263.567570][ T8766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.598083][ T8766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.627546][ T8766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.666160][ T8766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.737403][ T8766] veth1_macvtap: left promiscuous mode [ 263.778951][ T8766] veth0_macvtap: left promiscuous mode [ 263.784590][ T8766] veth1_vlan: left promiscuous mode [ 263.819811][ T8766] veth0_vlan: left promiscuous mode [ 265.263509][ T8766] team0 (unregistering): Port device team_slave_1 removed [ 265.339240][ T8766] team0 (unregistering): Port device team_slave_0 removed [ 266.598840][ T9300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 266.625368][ T9300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 266.708095][ T9300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 266.792581][ T9300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 267.149467][ T9300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.221477][ T9300] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.245387][ T8771] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.252545][ T8771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.419704][ T9300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.467780][ T9300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.484962][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.492115][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.970953][ T9300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.093977][ T9300] veth0_vlan: entered promiscuous mode [ 268.113192][ T9300] veth1_vlan: entered promiscuous mode [ 268.143477][ T9300] veth0_macvtap: entered promiscuous mode [ 268.154802][ T9300] veth1_macvtap: entered promiscuous mode [ 268.205477][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.247880][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.268448][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.297843][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.329592][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.368393][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.387805][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.407819][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.428553][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.450797][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.479030][ T9300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.596930][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.627773][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.661559][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.682490][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.707707][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.728050][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.747704][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.777389][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.800055][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.828381][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.859660][ T9300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.904987][ T9300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.958726][ T9300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.989386][ T9300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.017724][ T9300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.346270][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.484509][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.495942][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.518774][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.541352][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.560110][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 269.579494][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.832783][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.936872][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.947262][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.955323][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.974620][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.982576][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.992692][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.428967][ T8762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.445474][ T8762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.515058][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.664250][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.729319][ T9546] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1051'. [ 270.802137][ T8766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.824978][ T8766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.412580][ T9542] chnl_net:caif_netlink_parms(): no params data found [ 271.647810][ T5230] Bluetooth: hci2: command tx timeout [ 271.934357][ T9535] chnl_net:caif_netlink_parms(): no params data found [ 272.056314][ T5230] Bluetooth: hci4: command tx timeout [ 272.717903][ T9542] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.725028][ T9542] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.758842][ T9542] bridge_slave_0: entered allmulticast mode [ 272.765992][ T9542] bridge_slave_0: entered promiscuous mode [ 272.796145][ T9542] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.813915][ T9542] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.837862][ T9542] bridge_slave_1: entered allmulticast mode [ 272.858861][ T9542] bridge_slave_1: entered promiscuous mode [ 272.921686][ T9535] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.940040][ T9535] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.947504][ T9535] bridge_slave_0: entered allmulticast mode [ 272.989293][ T9535] bridge_slave_0: entered promiscuous mode [ 273.181499][ T9535] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.197805][ T9535] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.205045][ T9535] bridge_slave_1: entered allmulticast mode [ 273.248948][ T9535] bridge_slave_1: entered promiscuous mode [ 273.330670][ T35] bridge_slave_1: left allmulticast mode [ 273.336359][ T35] bridge_slave_1: left promiscuous mode [ 273.347912][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.380109][ T35] bridge_slave_0: left allmulticast mode [ 273.385800][ T35] bridge_slave_0: left promiscuous mode [ 273.407556][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.728109][ T5230] Bluetooth: hci2: command tx timeout [ 274.132160][ T5230] Bluetooth: hci4: command tx timeout [ 274.446508][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.478139][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.494518][ T35] bond0 (unregistering): Released all slaves [ 274.656927][ T9542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.687148][ T9535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.759727][ T9542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.910379][ T9535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.013092][ T9542] team0: Port device team_slave_0 added [ 275.038737][ T9542] team0: Port device team_slave_1 added [ 275.282809][ T9535] team0: Port device team_slave_0 added [ 275.576207][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.585192][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.593393][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.601567][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.610339][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.622148][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.707461][ T9535] team0: Port device team_slave_1 added [ 275.788818][ T9542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.795802][ T9542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.828960][ T5232] Bluetooth: hci2: command tx timeout [ 275.839836][ T9542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.078134][ T35] hsr_slave_0: left promiscuous mode [ 276.086001][ T35] hsr_slave_1: left promiscuous mode [ 276.107249][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.127780][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.138053][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.145483][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.197431][ T35] veth1_macvtap: left promiscuous mode [ 276.215943][ T5232] Bluetooth: hci4: command tx timeout [ 276.222607][ T35] veth0_macvtap: left promiscuous mode [ 276.228765][ T35] veth1_vlan: left promiscuous mode [ 276.234075][ T35] veth0_vlan: left promiscuous mode [ 277.211396][ T35] team0 (unregistering): Port device team_slave_1 removed [ 277.290762][ T35] team0 (unregistering): Port device team_slave_0 removed [ 277.649223][ T5232] Bluetooth: hci1: command tx timeout [ 277.711666][ T9542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.720555][ T9542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.747164][ T9542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.770155][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.786832][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.840021][ T9535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.862728][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.867477][ T29] audit: type=1326 audit(4294967360.201:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.3.1066" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7852b7df39 code=0x0 [ 277.870315][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.917749][ T5232] Bluetooth: hci2: command tx timeout [ 277.925357][ T9535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.012896][ T9542] hsr_slave_0: entered promiscuous mode [ 278.020124][ T9542] hsr_slave_1: entered promiscuous mode [ 278.089688][ T9535] hsr_slave_0: entered promiscuous mode [ 278.096222][ T9535] hsr_slave_1: entered promiscuous mode [ 278.104295][ T9535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.112425][ T9535] Cannot create hsr debugfs directory [ 278.297031][ T5232] Bluetooth: hci4: command tx timeout [ 278.567096][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.613054][ T9600] chnl_net:caif_netlink_parms(): no params data found [ 278.651228][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.800265][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.953604][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.976880][ T9600] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.986967][ T9600] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.002168][ T9600] bridge_slave_0: entered allmulticast mode [ 279.012086][ T9600] bridge_slave_0: entered promiscuous mode [ 279.041589][ T9600] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.058889][ T9600] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.066120][ T9600] bridge_slave_1: entered allmulticast mode [ 279.083445][ T9600] bridge_slave_1: entered promiscuous mode [ 279.146147][ T9600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.191806][ T9600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.250470][ T9542] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 279.289946][ T9600] team0: Port device team_slave_0 added [ 279.313238][ T9542] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 279.333676][ T9542] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 279.351659][ T9600] team0: Port device team_slave_1 added [ 279.391172][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.456422][ T9542] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 279.494012][ T9600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.517704][ T9600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.544011][ T9600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.586892][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.659009][ T9600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.665998][ T9600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.709943][ T9600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.727819][ T5232] Bluetooth: hci1: command tx timeout [ 279.831576][ T9542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.887525][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.940801][ T9600] hsr_slave_0: entered promiscuous mode [ 279.952303][ T9600] hsr_slave_1: entered promiscuous mode [ 279.962904][ T9600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.986742][ T9600] Cannot create hsr debugfs directory [ 280.082406][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.251969][ T9542] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.301734][ T8771] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.308972][ T8771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.351990][ T8771] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.359172][ T8771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.382501][ T9677] svc: failed to register nfsdv3 RPC service (errno 111). [ 280.433095][ T9677] svc: failed to register nfsaclv3 RPC service (errno 111). [ 280.773264][ T9535] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 280.800657][ T9535] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 280.820790][ T35] bridge_slave_1: left allmulticast mode [ 280.838801][ T35] bridge_slave_1: left promiscuous mode [ 280.845401][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.908476][ T35] bridge_slave_0: left allmulticast mode [ 280.914167][ T35] bridge_slave_0: left promiscuous mode [ 280.935740][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.971450][ T35] bridge_slave_1: left allmulticast mode [ 280.977146][ T35] bridge_slave_1: left promiscuous mode [ 280.992852][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.019903][ T35] bridge_slave_0: left allmulticast mode [ 281.025593][ T35] bridge_slave_0: left promiscuous mode [ 281.059725][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.807752][ T5232] Bluetooth: hci1: command tx timeout [ 281.997569][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.010877][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.021997][ T35] bond0 (unregistering): Released all slaves [ 282.113096][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.124327][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.136655][ T35] bond0 (unregistering): Released all slaves [ 282.169308][ T9535] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 282.179404][ T9535] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 282.540357][ T9535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.582899][ T9542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.833305][ T9535] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.968241][ T9600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 283.012703][ T8766] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.019881][ T8766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.066404][ T9600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 283.076010][ T9600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 283.115851][ T9542] veth0_vlan: entered promiscuous mode [ 283.126871][ T9600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 283.149543][ T8771] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.156642][ T8771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.210140][ T9542] veth1_vlan: entered promiscuous mode [ 283.384221][ T9542] veth0_macvtap: entered promiscuous mode [ 283.479760][ T9600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.500922][ T9542] veth1_macvtap: entered promiscuous mode [ 283.664835][ T35] hsr_slave_0: left promiscuous mode [ 283.679266][ T35] hsr_slave_1: left promiscuous mode [ 283.707311][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.728008][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.758583][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.766054][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.792380][ T35] hsr_slave_0: left promiscuous mode [ 283.798603][ T35] hsr_slave_1: left promiscuous mode [ 283.805262][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.814888][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.833844][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.845907][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.888159][ T5232] Bluetooth: hci1: command tx timeout [ 283.905141][ T35] veth1_macvtap: left promiscuous mode [ 283.917361][ T35] veth0_macvtap: left promiscuous mode [ 283.926990][ T35] veth1_vlan: left promiscuous mode [ 283.934820][ T35] veth0_vlan: left promiscuous mode [ 283.948844][ T35] veth1_macvtap: left promiscuous mode [ 283.954415][ T35] veth0_macvtap: left promiscuous mode [ 283.968835][ T35] veth1_vlan: left promiscuous mode [ 283.975241][ T35] veth0_vlan: left promiscuous mode [ 284.924330][ T35] team0 (unregistering): Port device team_slave_1 removed [ 285.004363][ T35] team0 (unregistering): Port device team_slave_0 removed [ 286.119759][ T35] team0 (unregistering): Port device team_slave_1 removed [ 286.158246][ T35] team0 (unregistering): Port device team_slave_0 removed [ 286.516792][ T9600] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.552411][ T8772] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.559579][ T8772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.602926][ T9542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.637839][ T9542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.666788][ T9542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.685374][ T9542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.695982][ T9542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.707075][ T9542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.724381][ T9542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.734891][ T8772] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.742067][ T8772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.779761][ T9542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.791677][ T9542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.813235][ T9542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.824049][ T9542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.843366][ T9542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.854423][ T9542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.866528][ T9542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.925943][ T9542] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.934887][ T9542] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.945104][ T9542] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.953917][ T9542] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.007348][ T9535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.033306][ T9600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.165604][ T8762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.216824][ T8762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.260114][ T9535] veth0_vlan: entered promiscuous mode [ 287.312242][ T9535] veth1_vlan: entered promiscuous mode [ 287.331911][ T8763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.380165][ T8763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.439090][ T9535] veth0_macvtap: entered promiscuous mode [ 287.495816][ T9535] veth1_macvtap: entered promiscuous mode [ 287.523247][ T9600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.565596][ T9535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.576758][ T9535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.586886][ T9535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.597519][ T9535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.607733][ T9535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.618883][ T9535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.628819][ T9535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.639352][ T9535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.651479][ T9535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.668491][ T9535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.679905][ T9535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.698538][ T9535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.716307][ T9535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.728112][ T9535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.747664][ T9535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.757493][ T9535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.768764][ T9535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.798065][ T9535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.834309][ T9535] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.865532][ T9535] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.874587][ T9535] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.892432][ T9535] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.175620][ T8766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.185469][ T8772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.193465][ T8766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.200846][ T8772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.220649][ T9600] veth0_vlan: entered promiscuous mode [ 288.341975][ T9600] veth1_vlan: entered promiscuous mode [ 288.474272][ T9600] veth0_macvtap: entered promiscuous mode [ 288.524821][ T9600] veth1_macvtap: entered promiscuous mode [ 288.587136][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.613328][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.647774][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.681386][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.708494][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.723943][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.745528][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.756100][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.766202][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.777033][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.788710][ T9600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.818489][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.837723][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.856601][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.867560][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.877764][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.888552][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.898776][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.909659][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.919714][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.930595][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.946119][ T9600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.957529][ T9600] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.966644][ T9600] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.975718][ T9600] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.984801][ T9600] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.150461][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.176334][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.225916][ T8766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.243355][ T8766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.655436][ T9811] kexec: Could not allocate control_code_buffer [ 289.667939][ T9839] svc: failed to register nfsdv3 RPC service (errno 111). [ 289.715860][ T9839] svc: failed to register nfsaclv3 RPC service (errno 111). [ 290.061245][ T9840] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1086'. [ 290.308364][ T9851] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 290.339763][ T9851] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 295.440166][ T29] audit: type=1326 audit(31037.680:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.1.1125" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e1937df39 code=0x0 [ 296.125273][ T9997] nbd: illegal input index 50331648 [ 303.711273][T10188] netlink: 'syz.2.1176': attribute type 11 has an invalid length. [ 306.208139][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.363992][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.541650][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.700543][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.993061][ T35] bridge_slave_1: left allmulticast mode [ 306.999711][ T35] bridge_slave_1: left promiscuous mode [ 307.006657][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.116296][ T35] bridge_slave_0: left allmulticast mode [ 307.176816][ T35] bridge_slave_0: left promiscuous mode [ 307.197833][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.595746][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 307.607365][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 307.615351][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 307.623317][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 307.631127][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 307.638503][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 307.904009][T10277] delete_channel: no stack [ 308.321225][T10307] Invalid ELF header magic: != ELF [ 308.632264][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.652060][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.675480][ T35] bond0 (unregistering): Released all slaves [ 309.727797][ T5230] Bluetooth: hci1: command tx timeout [ 309.821335][ T35] hsr_slave_0: left promiscuous mode [ 309.926370][ T35] hsr_slave_1: left promiscuous mode [ 309.952562][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.968317][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.015291][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.026068][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.087479][ T35] veth1_macvtap: left promiscuous mode [ 310.093673][ T29] audit: type=1326 audit(4294967306.789:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10361 comm="syz.0.1218" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcadc97df39 code=0x0 [ 310.097299][ T35] veth0_macvtap: left promiscuous mode [ 310.132384][ T35] veth1_vlan: left promiscuous mode [ 310.149115][ T35] veth0_vlan: left promiscuous mode [ 311.563380][ T35] team0 (unregistering): Port device team_slave_1 removed [ 311.663914][ T35] team0 (unregistering): Port device team_slave_0 removed [ 311.818959][ T5230] Bluetooth: hci1: command tx timeout [ 312.907014][T10295] chnl_net:caif_netlink_parms(): no params data found [ 313.189554][T10295] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.196696][T10295] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.204599][T10295] bridge_slave_0: entered allmulticast mode [ 313.211755][T10295] bridge_slave_0: entered promiscuous mode [ 313.229842][T10295] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.236964][T10295] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.244307][T10295] bridge_slave_1: entered allmulticast mode [ 313.251402][T10295] bridge_slave_1: entered promiscuous mode [ 313.493107][T10295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.529190][T10295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.689673][T10295] team0: Port device team_slave_0 added [ 313.725892][T10295] team0: Port device team_slave_1 added [ 313.863928][T10295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.887443][T10295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.888900][ T5230] Bluetooth: hci1: command tx timeout [ 313.928850][T10295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.942164][T10295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.949264][T10295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.053526][T10295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.612375][T10295] hsr_slave_0: entered promiscuous mode [ 314.648316][T10295] hsr_slave_1: entered promiscuous mode [ 314.665139][T10295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.673438][T10295] Cannot create hsr debugfs directory [ 314.830822][T10465] netlink: 7432 bytes leftover after parsing attributes in process `syz.1.1240'. [ 315.968630][ T5230] Bluetooth: hci1: command tx timeout [ 316.494919][T10295] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 316.576782][T10295] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 316.621173][T10295] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 316.672240][T10295] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 316.962049][T10295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.020812][T10295] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.079375][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.086500][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.124686][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.131876][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.207491][T10295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.240461][T10295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.332213][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.338766][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.631153][T10295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.753611][T10295] veth0_vlan: entered promiscuous mode [ 317.786431][T10295] veth1_vlan: entered promiscuous mode [ 317.832736][T10295] veth0_macvtap: entered promiscuous mode [ 317.880004][T10295] veth1_macvtap: entered promiscuous mode [ 317.937134][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.958104][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.998772][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.068137][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.126129][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.191793][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.257736][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.307824][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.366118][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.399762][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.429161][T10295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.439196][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.449844][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.459748][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.470336][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.480219][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.490745][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.500793][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.511319][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.521382][T10295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.532183][T10295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.543593][T10295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.694386][T10295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.711979][T10295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.720903][T10295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.729808][T10295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.066656][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.104753][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.156988][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.178026][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.737731][ T29] audit: type=1326 audit(3606.100:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.1.1287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e1937df39 code=0x0 [ 329.000250][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1289'. [ 329.064738][T10791] openvswitch: netlink: Flow key attr not present in new flow. [ 330.405400][ T8763] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.626528][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 330.636163][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 330.653657][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 330.674732][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 330.687138][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 330.695020][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.010104][ T8763] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.496579][ T8763] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.779780][ T8763] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.826521][T10824] chnl_net:caif_netlink_parms(): no params data found [ 332.296614][T10824] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.316805][T10824] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.341765][T10824] bridge_slave_0: entered allmulticast mode [ 332.361380][T10824] bridge_slave_0: entered promiscuous mode [ 332.381536][T10824] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.401105][T10824] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.421671][T10824] bridge_slave_1: entered allmulticast mode [ 332.432758][T10824] bridge_slave_1: entered promiscuous mode [ 332.600260][T10824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.641575][T10824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.743497][ T8763] bridge_slave_1: left allmulticast mode [ 332.757902][ T8763] bridge_slave_1: left promiscuous mode [ 332.767806][ T5232] Bluetooth: hci0: command tx timeout [ 332.778703][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.038881][ T8763] bridge_slave_0: left allmulticast mode [ 333.054756][ T8763] bridge_slave_0: left promiscuous mode [ 333.088531][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.697178][ T8763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.771015][ T8763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.802681][ T8763] bond0 (unregistering): Released all slaves [ 334.847863][ T5232] Bluetooth: hci0: command tx timeout [ 334.891809][T10824] team0: Port device team_slave_0 added [ 335.109544][T10824] team0: Port device team_slave_1 added [ 335.229595][T10824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.247330][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.337399][T10824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.369602][T10824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.376570][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.479417][T10824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.725875][T10824] hsr_slave_0: entered promiscuous mode [ 335.758091][T10824] hsr_slave_1: entered promiscuous mode [ 335.764666][T10824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.772827][T10824] Cannot create hsr debugfs directory [ 336.246229][ T8763] hsr_slave_0: left promiscuous mode [ 336.268132][ T8763] hsr_slave_1: left promiscuous mode [ 336.304085][ T8763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.322942][ T8763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.358181][ T8763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.377888][ T8763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.450472][ T8763] veth1_macvtap: left promiscuous mode [ 336.456049][ T8763] veth0_macvtap: left promiscuous mode [ 336.497827][ T8763] veth1_vlan: left promiscuous mode [ 336.507802][ T8763] veth0_vlan: left promiscuous mode [ 336.929351][ T5232] Bluetooth: hci0: command tx timeout [ 338.358847][ T8763] team0 (unregistering): Port device team_slave_1 removed [ 338.474742][ T8763] team0 (unregistering): Port device team_slave_0 removed [ 339.008377][ T5232] Bluetooth: hci0: command tx timeout [ 340.974908][T10824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 341.031824][T10824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 341.053708][T10824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 341.089325][T10824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 341.286209][T10824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.344188][T10824] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.399600][ T8766] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.406725][ T8766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.444393][ T8766] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.451564][ T8766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.529460][T10978] nbd: must specify an index to disconnect [ 341.583325][T10824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.058540][T10824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.180204][T10824] veth0_vlan: entered promiscuous mode [ 342.221707][T10824] veth1_vlan: entered promiscuous mode [ 342.314190][T10824] veth0_macvtap: entered promiscuous mode [ 342.356190][T10824] veth1_macvtap: entered promiscuous mode [ 342.424840][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.467637][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.477497][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.507676][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.517548][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.547695][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.568184][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.587658][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.607810][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.627698][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.649428][T10824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.800948][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.864708][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.897668][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.947777][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.987094][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.044678][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.115968][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.141420][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.181143][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.207888][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.244031][T10824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.334480][T10824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.396580][T10824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.430191][T10824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.487995][T10824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.645673][T11026] netlink: 'syz.0.1326': attribute type 11 has an invalid length. [ 344.286665][ T8763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.345347][ T8763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.457333][ T8772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.499728][ T8772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.969927][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.980017][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.988147][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.996828][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 346.006115][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 346.013735][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 346.497411][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 346.539032][T11088] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 347.154681][T11072] chnl_net:caif_netlink_parms(): no params data found [ 347.750673][T11072] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.776443][T11072] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.803836][T11072] bridge_slave_0: entered allmulticast mode [ 347.828256][T11072] bridge_slave_0: entered promiscuous mode [ 347.869986][T11072] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.884385][T11072] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.916594][T11072] bridge_slave_1: entered allmulticast mode [ 347.946838][T11072] bridge_slave_1: entered promiscuous mode [ 348.057104][ T5230] Bluetooth: hci3: command tx timeout [ 348.160578][ T8771] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.481206][T11124] kernel read not supported for file /#)-\&[} (pid: 11124 comm: syz.2.1342) [ 348.512304][ T8771] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.528091][ T29] audit: type=1800 audit(8277292044.850:9): pid=11124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1342" name="#)-\&[}" dev="mqueue" ino=34270 res=0 errno=0 [ 348.574156][T11072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.622039][T11072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.708467][ T8771] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.885204][ T8771] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.948931][T11072] team0: Port device team_slave_0 added [ 348.957353][T11072] team0: Port device team_slave_1 added [ 349.099349][T11072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.118928][T11072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.150811][T11151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1347'. [ 349.187345][T11072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.210749][T11072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.255217][T11072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.313065][T11072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.494172][T11072] hsr_slave_0: entered promiscuous mode [ 349.516205][T11072] hsr_slave_1: entered promiscuous mode [ 349.522991][T11072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.531073][T11072] Cannot create hsr debugfs directory [ 349.590680][ T8771] bridge_slave_1: left allmulticast mode [ 349.596368][ T8771] bridge_slave_1: left promiscuous mode [ 349.603818][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.626400][ T8771] bridge_slave_0: left allmulticast mode [ 349.637878][ T8771] bridge_slave_0: left promiscuous mode [ 349.644483][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.138013][ T5230] Bluetooth: hci3: command tx timeout [ 350.841257][ T8771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.938318][ T8771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.008395][ T8771] bond0 (unregistering): Released all slaves [ 352.207661][ T5230] Bluetooth: hci3: command tx timeout [ 352.384784][ T8771] hsr_slave_0: left promiscuous mode [ 352.528501][ T8771] hsr_slave_1: left promiscuous mode [ 352.578941][ T8771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.598569][ T8771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.609573][ T8771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.638982][ T8771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.709853][ T8771] veth1_macvtap: left promiscuous mode [ 352.739604][ T8771] veth0_macvtap: left promiscuous mode [ 352.777189][ T8771] veth1_vlan: left promiscuous mode [ 352.796081][ T8771] veth0_vlan: left promiscuous mode [ 354.299849][ T5230] Bluetooth: hci3: command tx timeout [ 355.092429][ T8771] team0 (unregistering): Port device team_slave_1 removed [ 355.303772][ T8771] team0 (unregistering): Port device team_slave_0 removed [ 356.218653][T11286] Invalid ELF header magic: != ELF [ 356.228230][T11285] Invalid ELF header magic: != ELF [ 358.079183][T11072] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 358.210457][T11072] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 358.284824][T11072] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 358.428678][T11072] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 358.594769][T11072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.610813][T11072] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.643749][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.650928][ T8763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.711343][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.718541][ T8763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.100880][T11072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.276376][T11072] veth0_vlan: entered promiscuous mode [ 359.324098][T11072] veth1_vlan: entered promiscuous mode [ 359.516785][T11072] veth0_macvtap: entered promiscuous mode [ 359.548464][T11072] veth1_macvtap: entered promiscuous mode [ 359.589938][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.624901][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.659990][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.690160][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.726157][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.777693][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.818167][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.841665][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.868621][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.908087][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.929013][T11072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.950130][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.967876][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.990926][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.023689][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.037349][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.057805][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.075922][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.097934][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.135244][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.159219][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.188899][T11072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.224069][T11072] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.257652][T11072] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.266411][T11072] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.283610][T11072] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.803657][ T8766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.822490][ T8766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.882179][ T8762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.896274][ T8762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.657132][T11417] coredump: 16(syz.1.1405): Core dump to core aborted: cannot preserve file permissions [ 363.734075][T11467] could not allocate digest TFM handle [ 363.803380][T11478] delete_channel: no stack [ 366.089176][ T29] audit: type=1326 audit(4294967312.049:10): auid=4294967295 uid=1 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.3.1434" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc13c37df39 code=0x0 [ 367.462193][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 367.509731][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 367.518071][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 367.526618][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 367.534540][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 367.541909][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 367.895319][ T8772] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.618807][ T8772] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.787493][ T29] audit: type=1326 audit(4294967314.739:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11582 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcadc97df39 code=0x0 [ 369.056616][ T8772] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.537267][ T8772] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.567702][ T5230] Bluetooth: hci3: command tx timeout [ 369.964596][T11554] chnl_net:caif_netlink_parms(): no params data found [ 370.692990][ T8772] bridge_slave_1: left allmulticast mode [ 370.698884][ T8772] bridge_slave_1: left promiscuous mode [ 370.704630][ T8772] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.851073][ T8772] bridge_slave_0: left allmulticast mode [ 370.875346][ T8772] bridge_slave_0: left promiscuous mode [ 370.888336][ T8772] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.648956][ T5230] Bluetooth: hci3: command tx timeout [ 371.869539][T11662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1462'. [ 371.906233][T11661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1462'. [ 372.618257][ T8772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.676446][ T8772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.721023][ T8772] bond0 (unregistering): Released all slaves [ 372.758071][T11554] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.765761][T11554] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.777883][T11554] bridge_slave_0: entered allmulticast mode [ 372.796976][T11554] bridge_slave_0: entered promiscuous mode [ 372.938739][T11554] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.960502][T11554] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.003161][T11554] bridge_slave_1: entered allmulticast mode [ 373.077923][T11554] bridge_slave_1: entered promiscuous mode [ 373.266353][T11673] delete_channel: no stack [ 373.514306][T11684] netlink: 'syz.3.1469': attribute type 11 has an invalid length. [ 373.727769][ T5230] Bluetooth: hci3: command tx timeout [ 373.759713][T11554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.794788][T11554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.880896][T11697] futex_wake_op: syz.3.1472 tries to shift op by -256; fix this program [ 374.069693][T11554] team0: Port device team_slave_0 added [ 374.327788][T11554] team0: Port device team_slave_1 added [ 374.526528][T11554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.545444][T11554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.587720][T11554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.663193][T11554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.678321][T11554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.747620][T11554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.954475][ T8772] hsr_slave_0: left promiscuous mode [ 375.031309][ T8772] hsr_slave_1: left promiscuous mode [ 375.222155][ T8772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.242019][ T8772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.348485][ T8772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.356038][ T8772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.479931][ T8772] veth1_macvtap: left promiscuous mode [ 375.501623][ T8772] veth0_macvtap: left promiscuous mode [ 375.515186][ T8772] veth1_vlan: left promiscuous mode [ 375.544706][ T8772] veth0_vlan: left promiscuous mode [ 375.807808][ T5230] Bluetooth: hci3: command tx timeout [ 377.334861][T11776] block nbd0: not configured, cannot reconfigure [ 377.606210][ T8772] team0 (unregistering): Port device team_slave_1 removed [ 377.658980][ T8772] team0 (unregistering): Port device team_slave_0 removed [ 378.371173][T11784] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 378.381022][T11784] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 378.680333][T11554] hsr_slave_0: entered promiscuous mode [ 378.732359][T11803] Process accounting resumed [ 378.770035][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.784395][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.833727][T11554] hsr_slave_1: entered promiscuous mode [ 380.046029][T11554] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 380.070942][T11554] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 380.095575][T11554] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 380.123107][T11554] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 380.382606][T11554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.400072][T11554] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.414291][ T8772] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.421478][ T8772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.476410][ T8772] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.483611][ T8772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.587533][T11554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 380.665092][T11554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.118945][T11554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.238450][T11554] veth0_vlan: entered promiscuous mode [ 381.281193][T11554] veth1_vlan: entered promiscuous mode [ 381.381568][T11554] veth0_macvtap: entered promiscuous mode [ 381.410018][T11554] veth1_macvtap: entered promiscuous mode [ 381.458562][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.483542][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.522351][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.576600][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.597280][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.620419][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.638388][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.669483][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.697635][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.735108][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.768982][T11554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.857538][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.914637][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.955453][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.003643][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.048698][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.063999][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.087930][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.118460][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.135670][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.178633][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.198939][T11554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.261100][T11554] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.300475][T11554] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.327704][T11554] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.362292][T11554] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.538245][ T8772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.576050][ T8772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.634195][ T8762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.647189][ T8762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.560936][T11962] delete_channel: no stack [ 387.945132][T12105] Process accounting resumed [ 388.430718][T12111] Invalid ELF header magic: != ELF [ 391.574801][T12191] FAULT_INJECTION: forcing a failure. [ 391.574801][T12191] name failslab, interval 1, probability 0, space 0, times 0 [ 391.617958][T12191] CPU: 0 UID: 0 PID: 12191 Comm: syz.2.1575 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 391.628434][T12191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 391.638530][T12191] Call Trace: [ 391.641829][T12191] [ 391.644777][T12191] dump_stack_lvl+0x16c/0x1f0 [ 391.649491][T12191] should_fail_ex+0x497/0x5b0 [ 391.654197][T12191] ? fs_reclaim_acquire+0xae/0x160 [ 391.659337][T12191] should_failslab+0xc2/0x120 [ 391.664051][T12191] kmem_cache_alloc_node_noprof+0x71/0x310 [ 391.669898][T12191] ? __alloc_skb+0x2b3/0x380 [ 391.674529][T12191] __alloc_skb+0x2b3/0x380 [ 391.678979][T12191] ? __pfx___alloc_skb+0x10/0x10 [ 391.683959][T12191] netlink_alloc_large_skb+0x69/0x130 [ 391.689353][T12191] netlink_sendmsg+0x689/0xd70 [ 391.694126][T12191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.699426][T12191] ____sys_sendmsg+0x9ae/0xb40 [ 391.704199][T12191] ? copy_msghdr_from_user+0x10b/0x160 [ 391.709674][T12191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.714971][T12191] ? find_held_lock+0x2d/0x110 [ 391.719748][T12191] ? __pfx___lock_acquire+0x10/0x10 [ 391.724960][T12191] ___sys_sendmsg+0x135/0x1e0 [ 391.729650][T12191] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.734867][T12191] ? ksys_write+0x21e/0x260 [ 391.739372][T12191] ? __pfx_lock_release+0x10/0x10 [ 391.744416][T12191] ? fdget+0x176/0x210 [ 391.748512][T12191] __sys_sendmsg+0x117/0x1f0 [ 391.753114][T12191] ? __pfx___sys_sendmsg+0x10/0x10 [ 391.758232][T12191] ? __fget_files+0x244/0x3f0 [ 391.762939][T12191] do_syscall_64+0xcd/0x250 [ 391.767449][T12191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.773351][T12191] RIP: 0033:0x7f50f277df39 [ 391.777770][T12191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.797406][T12191] RSP: 002b:00007f50f352f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.805827][T12191] RAX: ffffffffffffffda RBX: 00007f50f2935f80 RCX: 00007f50f277df39 [ 391.813810][T12191] RDX: 0000000004000010 RSI: 00000000200006c0 RDI: 0000000000000003 [ 391.821785][T12191] RBP: 00007f50f352f090 R08: 0000000000000000 R09: 0000000000000000 [ 391.829756][T12191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.837732][T12191] R13: 0000000000000000 R14: 00007f50f2935f80 R15: 00007fffb5753668 [ 391.845725][T12191] [ 393.242687][T12225] kernel read not supported for file /ÿ)-\&[} (pid: 12225 comm: syz.1.1587) [ 393.314588][ T29] audit: type=1800 audit(4294967339.269:12): pid=12225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1587" name=FF292D5C265B7D dev="mqueue" ino=39151 res=0 errno=0 [ 394.237508][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 394.766970][T12255] svc: failed to register nfsdv3 RPC service (errno 111). [ 394.833850][T12255] svc: failed to register nfsaclv3 RPC service (errno 512). [ 396.217662][ T5232] Bluetooth: hci2: command 0x0406 tx timeout [ 398.815250][T12371] FAULT_INJECTION: forcing a failure. [ 398.815250][T12371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.890109][T12371] CPU: 0 UID: 0 PID: 12371 Comm: syz.2.1627 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 398.900606][T12371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 398.910687][T12371] Call Trace: [ 398.913988][T12371] [ 398.916939][T12371] dump_stack_lvl+0x16c/0x1f0 [ 398.921654][T12371] should_fail_ex+0x497/0x5b0 [ 398.926358][T12371] _copy_from_user+0x30/0xf0 [ 398.930971][T12371] sk_setsockopt+0x1f2/0x3e40 [ 398.935687][T12371] ? __pfx_sk_setsockopt+0x10/0x10 [ 398.940829][T12371] ? __might_fault+0x13b/0x190 [ 398.945630][T12371] ? __pfx___lock_acquire+0x10/0x10 [ 398.950868][T12371] ? __lock_acquire+0xbdd/0x3ce0 [ 398.955854][T12371] udp_lib_setsockopt+0x2ee/0x1030 [ 398.960996][T12371] ? __pfx_udp_push_pending_frames+0x10/0x10 [ 398.967006][T12371] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 398.972586][T12371] ? aa_sk_perm+0x2f5/0xb20 [ 398.977132][T12371] ? __pfx_aa_sk_perm+0x10/0x10 [ 398.982019][T12371] udp_setsockopt+0xbc/0xd0 [ 398.986548][T12371] ? __pfx_udp_push_pending_frames+0x10/0x10 [ 398.992582][T12371] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 398.998506][T12371] do_sock_setsockopt+0x222/0x480 [ 399.003554][T12371] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 399.009149][T12371] ? fdget+0x176/0x210 [ 399.013254][T12371] __sys_setsockopt+0x1a4/0x270 [ 399.018136][T12371] ? __pfx___sys_setsockopt+0x10/0x10 [ 399.023538][T12371] ? fput+0x30/0x390 [ 399.027462][T12371] ? ksys_write+0x1ad/0x260 [ 399.031982][T12371] ? __pfx_ksys_write+0x10/0x10 [ 399.036866][T12371] __x64_sys_setsockopt+0xbd/0x160 [ 399.042003][T12371] ? do_syscall_64+0x91/0x250 [ 399.046699][T12371] ? lockdep_hardirqs_on+0x7c/0x110 [ 399.051916][T12371] do_syscall_64+0xcd/0x250 [ 399.056448][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.062380][T12371] RIP: 0033:0x7f50f277df39 [ 399.066815][T12371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.086453][T12371] RSP: 002b:00007f50f352f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 399.094895][T12371] RAX: ffffffffffffffda RBX: 00007f50f2935f80 RCX: 00007f50f277df39 [ 399.102891][T12371] RDX: 000000000000002a RSI: 0000000000000001 RDI: 0000000000000006 [ 399.110881][T12371] RBP: 00007f50f352f090 R08: 000000000000000c R09: 0000000000000000 [ 399.118873][T12371] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 399.126865][T12371] R13: 0000000000000000 R14: 00007f50f2935f80 R15: 00007fffb5753668 [ 399.134874][T12371] [ 400.952656][T12407] FAULT_INJECTION: forcing a failure. [ 400.952656][T12407] name failslab, interval 1, probability 0, space 0, times 0 [ 401.027732][T12407] CPU: 1 UID: 0 PID: 12407 Comm: syz.0.1636 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 401.038204][T12407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 401.048264][T12407] Call Trace: [ 401.051545][T12407] [ 401.054483][T12407] dump_stack_lvl+0x16c/0x1f0 [ 401.059171][T12407] should_fail_ex+0x497/0x5b0 [ 401.063853][T12407] ? fs_reclaim_acquire+0xae/0x160 [ 401.068973][T12407] should_failslab+0xc2/0x120 [ 401.073659][T12407] __kmalloc_cache_noprof+0x6b/0x310 [ 401.078949][T12407] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 401.086328][T12407] ? genl_start+0x1e7/0x950 [ 401.090851][T12407] genl_start+0x1e7/0x950 [ 401.095191][T12407] __netlink_dump_start+0x615/0x980 [ 401.100407][T12407] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 401.106135][T12407] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 401.112391][T12407] ? __pfx_genl_get_cmd+0x10/0x10 [ 401.117415][T12407] ? __pfx_genl_start+0x10/0x10 [ 401.122266][T12407] ? __pfx_genl_dumpit+0x10/0x10 [ 401.127207][T12407] ? __pfx_genl_done+0x10/0x10 [ 401.131986][T12407] ? __radix_tree_lookup+0x21f/0x2c0 [ 401.137284][T12407] genl_rcv_msg+0x470/0x800 [ 401.141796][T12407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 401.146913][T12407] ? __pfx_ctrl_dumpfamily+0x10/0x10 [ 401.152216][T12407] netlink_rcv_skb+0x165/0x410 [ 401.156983][T12407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 401.162013][T12407] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 401.167312][T12407] ? down_read+0xc9/0x330 [ 401.171655][T12407] ? __pfx_down_read+0x10/0x10 [ 401.176426][T12407] ? netlink_deliver_tap+0x1ae/0xcf0 [ 401.181731][T12407] genl_rcv+0x28/0x40 [ 401.185716][T12407] netlink_unicast+0x53c/0x7f0 [ 401.190487][T12407] ? __pfx_netlink_unicast+0x10/0x10 [ 401.195775][T12407] ? __phys_addr_symbol+0x30/0x80 [ 401.200807][T12407] ? __check_object_size+0x488/0x710 [ 401.206106][T12407] netlink_sendmsg+0x8b8/0xd70 [ 401.210878][T12407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.216179][T12407] ____sys_sendmsg+0x9ae/0xb40 [ 401.221036][T12407] ? copy_msghdr_from_user+0x10b/0x160 [ 401.226519][T12407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.231821][T12407] ? find_held_lock+0x2d/0x110 [ 401.236591][T12407] ? __pfx___lock_acquire+0x10/0x10 [ 401.241806][T12407] ___sys_sendmsg+0x135/0x1e0 [ 401.246499][T12407] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.251720][T12407] ? ksys_write+0x21e/0x260 [ 401.256226][T12407] ? __pfx_lock_release+0x10/0x10 [ 401.261270][T12407] ? fdget+0x176/0x210 [ 401.265357][T12407] __sys_sendmsg+0x117/0x1f0 [ 401.269960][T12407] ? __pfx___sys_sendmsg+0x10/0x10 [ 401.275078][T12407] ? __fget_files+0x244/0x3f0 [ 401.279788][T12407] do_syscall_64+0xcd/0x250 [ 401.284307][T12407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.290219][T12407] RIP: 0033:0x7fcadc97df39 [ 401.294638][T12407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.314251][T12407] RSP: 002b:00007fcadd6bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.322676][T12407] RAX: ffffffffffffffda RBX: 00007fcadcb35f80 RCX: 00007fcadc97df39 [ 401.330648][T12407] RDX: 0000000004000010 RSI: 00000000200006c0 RDI: 0000000000000003 [ 401.338711][T12407] RBP: 00007fcadd6bd090 R08: 0000000000000000 R09: 0000000000000000 [ 401.346688][T12407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.354660][T12407] R13: 0000000000000000 R14: 00007fcadcb35f80 R15: 00007ffc6c27ed98 [ 401.362648][T12407] [ 402.261693][T12419] Invalid ELF header magic: != ELF [ 406.704147][T12473] delete_channel: no stack [ 407.414765][T12503] netlink: 400 bytes leftover after parsing attributes in process `syz.3.1660'. [ 408.791009][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.063100][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 409.071735][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 409.080037][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 409.097938][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 409.105769][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 409.113399][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 409.582621][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.006301][T12534] chnl_net:caif_netlink_parms(): no params data found [ 410.364005][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.069405][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.167782][ T5230] Bluetooth: hci3: command tx timeout [ 411.460392][T12534] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.485734][T12534] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.493204][T12534] bridge_slave_0: entered allmulticast mode [ 411.509035][T12534] bridge_slave_0: entered promiscuous mode [ 411.529168][T12534] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.536279][T12534] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.557850][T12534] bridge_slave_1: entered allmulticast mode [ 411.564969][T12534] bridge_slave_1: entered promiscuous mode [ 411.850412][T12534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.893284][T12534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.228762][T12534] team0: Port device team_slave_0 added [ 412.376056][T12534] team0: Port device team_slave_1 added [ 412.652863][T12534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.665134][T12534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.736956][T12534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.761542][T12534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.779970][T12534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.817781][T12534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.846967][ T12] bridge_slave_1: left allmulticast mode [ 412.853107][ T12] bridge_slave_1: left promiscuous mode [ 412.867816][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.998588][ T12] bridge_slave_0: left allmulticast mode [ 413.004282][ T12] bridge_slave_0: left promiscuous mode [ 413.025694][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.247757][ T5230] Bluetooth: hci3: command tx timeout [ 415.135396][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.214365][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.279817][ T12] bond0 (unregistering): Released all slaves [ 415.327845][ T5230] Bluetooth: hci3: command tx timeout [ 415.362767][T12639] Invalid ELF header magic: != ELF [ 415.480785][T12640] Invalid ELF header magic: != ELF [ 415.644417][T12534] hsr_slave_0: entered promiscuous mode [ 415.688191][T12534] hsr_slave_1: entered promiscuous mode [ 415.723637][T12534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.740397][T12534] Cannot create hsr debugfs directory [ 417.269756][ T12] hsr_slave_0: left promiscuous mode [ 417.297046][ T12] hsr_slave_1: left promiscuous mode [ 417.407681][ T5230] Bluetooth: hci3: command tx timeout [ 417.413298][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.443710][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.528617][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.563878][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.686040][ T12] veth1_macvtap: left promiscuous mode [ 417.732276][ T12] veth0_macvtap: left promiscuous mode [ 417.739275][ T12] veth1_vlan: left promiscuous mode [ 417.744608][ T12] veth0_vlan: left promiscuous mode [ 420.444857][ T12] team0 (unregistering): Port device team_slave_1 removed [ 420.668373][ T12] team0 (unregistering): Port device team_slave_0 removed [ 421.926389][T12534] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 421.948903][T12534] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 421.960406][T12534] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 421.986529][T12534] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 422.212798][T12534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.263406][T12534] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.295804][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.302990][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.359966][T11653] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.367173][T11653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.477045][T12534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.919898][T12534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.050861][T12534] veth0_vlan: entered promiscuous mode [ 423.119768][T12534] veth1_vlan: entered promiscuous mode [ 423.227167][T12534] veth0_macvtap: entered promiscuous mode [ 423.280771][T12534] veth1_macvtap: entered promiscuous mode [ 423.359529][T12534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.403423][T12534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.449911][T12534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.477641][T12534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.492963][T12534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.505751][T12534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.515988][T12534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.547600][T12534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.557449][T12534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.582965][T12534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.606473][T12534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.665786][T12534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.704333][T12534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.747658][T12534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.777617][T12534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.817301][T12534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.854167][T12534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.897165][T12534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.925780][T12534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.952288][T12534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.966917][T12534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.999047][T12534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.037121][T12534] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.084567][T12534] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.102541][T12534] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.127885][T12534] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.437762][T11653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.470824][T11653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.560050][ T8772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.568488][ T8772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.278865][T12930] FAULT_INJECTION: forcing a failure. [ 427.278865][T12930] name failslab, interval 1, probability 0, space 0, times 0 [ 427.349368][T12930] CPU: 0 UID: 0 PID: 12930 Comm: syz.1.1756 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 427.359838][T12930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 427.369922][T12930] Call Trace: [ 427.373223][T12930] [ 427.376178][T12930] dump_stack_lvl+0x16c/0x1f0 [ 427.380888][T12930] should_fail_ex+0x497/0x5b0 [ 427.385589][T12930] ? fs_reclaim_acquire+0xae/0x160 [ 427.390729][T12930] should_failslab+0xc2/0x120 [ 427.395437][T12930] __kmalloc_noprof+0xcb/0x410 [ 427.400240][T12930] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 427.407391][T12930] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 427.412887][T12930] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 427.418983][T12930] ? __radix_tree_lookup+0x21f/0x2c0 [ 427.424280][T12930] genl_rcv_msg+0x565/0x800 [ 427.428792][T12930] ? __pfx_genl_rcv_msg+0x10/0x10 [ 427.433821][T12930] ? __pfx_ctrl_getfamily+0x10/0x10 [ 427.439034][T12930] netlink_rcv_skb+0x165/0x410 [ 427.443805][T12930] ? __pfx_genl_rcv_msg+0x10/0x10 [ 427.448841][T12930] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 427.454140][T12930] ? down_read+0xc9/0x330 [ 427.458482][T12930] ? __pfx_down_read+0x10/0x10 [ 427.463252][T12930] ? netlink_deliver_tap+0x1ae/0xcf0 [ 427.468557][T12930] genl_rcv+0x28/0x40 [ 427.472543][T12930] netlink_unicast+0x53c/0x7f0 [ 427.477312][T12930] ? __pfx_netlink_unicast+0x10/0x10 [ 427.482600][T12930] ? __phys_addr_symbol+0x30/0x80 [ 427.487634][T12930] ? __check_object_size+0x488/0x710 [ 427.492936][T12930] netlink_sendmsg+0x8b8/0xd70 [ 427.497715][T12930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.503012][T12930] __sys_sendto+0x479/0x4d0 [ 427.507522][T12930] ? __pfx___sys_sendto+0x10/0x10 [ 427.512587][T12930] ? ksys_write+0x1ad/0x260 [ 427.517094][T12930] ? __pfx_ksys_write+0x10/0x10 [ 427.521965][T12930] __x64_sys_sendto+0xe0/0x1c0 [ 427.526739][T12930] ? do_syscall_64+0x91/0x250 [ 427.531422][T12930] ? lockdep_hardirqs_on+0x7c/0x110 [ 427.536621][T12930] do_syscall_64+0xcd/0x250 [ 427.541130][T12930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.547043][T12930] RIP: 0033:0x7f818797fdcc [ 427.551460][T12930] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 427.571070][T12930] RSP: 002b:00007f8188859ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 427.579488][T12930] RAX: ffffffffffffffda RBX: 00007f8188859fc0 RCX: 00007f818797fdcc [ 427.587460][T12930] RDX: 0000000000000024 RSI: 00007f818885a010 RDI: 0000000000000003 [ 427.595432][T12930] RBP: 0000000000000000 R08: 00007f8188859f14 R09: 000000000000000c [ 427.603403][T12930] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 427.611373][T12930] R13: 00007f8188859f68 R14: 00007f818885a010 R15: 0000000000000000 [ 427.619363][T12930] [ 428.296399][T12946] could not allocate digest TFM handle [ 429.181156][T12976] FAULT_INJECTION: forcing a failure. [ 429.181156][T12976] name failslab, interval 1, probability 0, space 0, times 0 [ 429.267654][T12976] CPU: 0 UID: 0 PID: 12976 Comm: syz.0.1769 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 429.278121][T12976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 429.288197][T12976] Call Trace: [ 429.291497][T12976] [ 429.294445][T12976] dump_stack_lvl+0x16c/0x1f0 [ 429.299159][T12976] should_fail_ex+0x497/0x5b0 [ 429.303861][T12976] ? fs_reclaim_acquire+0xae/0x160 [ 429.309001][T12976] should_failslab+0xc2/0x120 [ 429.313708][T12976] kmem_cache_alloc_node_noprof+0x71/0x310 [ 429.319542][T12976] ? __alloc_skb+0x2b3/0x380 [ 429.324155][T12976] __alloc_skb+0x2b3/0x380 [ 429.328586][T12976] ? __pfx___alloc_skb+0x10/0x10 [ 429.333536][T12976] ? idr_get_next+0xed/0x150 [ 429.338130][T12976] ? __pfx_idr_get_next+0x10/0x10 [ 429.343160][T12976] ctrl_build_family_msg+0x36/0xa0 [ 429.348281][T12976] ctrl_getfamily+0x355/0x540 [ 429.352968][T12976] ? __pfx_ctrl_getfamily+0x10/0x10 [ 429.358179][T12976] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 429.365558][T12976] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 429.372942][T12976] genl_family_rcv_msg_doit+0x202/0x2f0 [ 429.378505][T12976] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 429.384587][T12976] ? __radix_tree_lookup+0x21f/0x2c0 [ 429.389888][T12976] genl_rcv_msg+0x565/0x800 [ 429.394404][T12976] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.399436][T12976] ? __pfx_ctrl_getfamily+0x10/0x10 [ 429.404658][T12976] netlink_rcv_skb+0x165/0x410 [ 429.409426][T12976] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.414460][T12976] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.419765][T12976] ? down_read+0xc9/0x330 [ 429.424105][T12976] ? __pfx_down_read+0x10/0x10 [ 429.428878][T12976] ? netlink_deliver_tap+0x1ae/0xcf0 [ 429.434185][T12976] genl_rcv+0x28/0x40 [ 429.438171][T12976] netlink_unicast+0x53c/0x7f0 [ 429.442942][T12976] ? __pfx_netlink_unicast+0x10/0x10 [ 429.448234][T12976] ? __phys_addr_symbol+0x30/0x80 [ 429.453262][T12976] ? __check_object_size+0x488/0x710 [ 429.458557][T12976] netlink_sendmsg+0x8b8/0xd70 [ 429.463331][T12976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.468630][T12976] __sys_sendto+0x479/0x4d0 [ 429.473145][T12976] ? __pfx___sys_sendto+0x10/0x10 [ 429.478205][T12976] ? ksys_write+0x1ad/0x260 [ 429.482709][T12976] ? __pfx_ksys_write+0x10/0x10 [ 429.487577][T12976] __x64_sys_sendto+0xe0/0x1c0 [ 429.492369][T12976] ? do_syscall_64+0x91/0x250 [ 429.497057][T12976] ? lockdep_hardirqs_on+0x7c/0x110 [ 429.502260][T12976] do_syscall_64+0xcd/0x250 [ 429.506770][T12976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.512678][T12976] RIP: 0033:0x7fcadc97fdcc [ 429.517098][T12976] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 429.536713][T12976] RSP: 002b:00007fcadd6bbec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 429.545131][T12976] RAX: ffffffffffffffda RBX: 00007fcadd6bbfc0 RCX: 00007fcadc97fdcc [ 429.553104][T12976] RDX: 0000000000000024 RSI: 00007fcadd6bc010 RDI: 0000000000000003 [ 429.561081][T12976] RBP: 0000000000000000 R08: 00007fcadd6bbf14 R09: 000000000000000c [ 429.569053][T12976] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 429.577025][T12976] R13: 00007fcadd6bbf68 R14: 00007fcadd6bc010 R15: 0000000000000000 [ 429.585012][T12976] [ 431.683826][T13034] nbd: must specify at least one socket [ 432.069903][ T5232] Bluetooth: hci1: command 0x0406 tx timeout [ 435.984904][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 435.996394][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 436.004651][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 436.013367][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 436.021383][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 436.029834][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 436.190468][ T8762] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.438186][T13115] ------------[ cut here ]------------ [ 436.444466][T13115] WARNING: CPU: 0 PID: 13115 at mm/huge_memory.c:1602 copy_huge_pmd+0x16dd/0x2500 [ 436.453878][T13115] Modules linked in: [ 436.458021][T13115] CPU: 0 UID: 0 PID: 13115 Comm: syz.0.1813 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 436.468704][T13115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 436.478846][T13115] RIP: 0010:copy_huge_pmd+0x16dd/0x2500 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 436.484437][T13115] Code: 01 e9 dd f5 ff ff e8 72 be 9a ff 4c 89 e3 31 ff 83 e3 02 48 89 de e8 d2 c0 9a ff 48 85 db 0f 84 a0 07 00 00 e8 54 be 9a ff 90 <0f> 0b 90 e9 88 ef ff ff e8 46 be 9a ff 49 89 ec 31 ff 41 81 e4 ff [ 436.504440][T13115] RSP: 0018:ffffc90004217640 EFLAGS: 00010293 [ 436.511278][T13115] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff81f16abe [ 436.519710][T13115] RDX: ffff888036bebc00 RSI: ffffffff81f16acc RDI: 0000000000000007 [ 436.527813][T13115] RBP: ffffea0001bca040 R08: 0000000000000007 R09: 0000000000000000 [ 436.535815][T13115] R10: 0000000000000002 R11: 0000000000000000 R12: d7f0000000000e02 [ 436.543906][T13115] R13: d7ffe7ffee77fe02 R14: 0000000000000200 R15: ffff888031642d90 [ 436.551956][T13115] FS: 00007fcadd6bd6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 436.561395][T13115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 436.568261][T13115] CR2: 0000000020000000 CR3: 0000000071e92000 CR4: 00000000003506f0 [ 436.576268][T13115] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 436.584347][T13115] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 436.592430][T13115] Call Trace: [ 436.595968][T13115] [ 436.599242][T13115] ? __warn+0xea/0x3d0 [ 436.603353][T13115] ? copy_huge_pmd+0x16dd/0x2500 [ 436.608635][T13115] ? report_bug+0x3c0/0x580 [ 436.613180][T13115] ? handle_bug+0x54/0xa0 [ 436.617878][T13115] ? exc_invalid_op+0x17/0x50 [ 436.623206][T13115] ? asm_exc_invalid_op+0x1a/0x20 [ 436.628360][T13115] ? copy_huge_pmd+0x16ce/0x2500 [ 436.633338][T13115] ? copy_huge_pmd+0x16dc/0x2500 [ 436.638380][T13115] ? copy_huge_pmd+0x16dd/0x2500 [ 436.643366][T13115] ? __pfx_lock_release+0x10/0x10 [ 436.648477][T13115] ? __pfx_copy_huge_pmd+0x10/0x10 [ 436.653626][T13115] ? hlock_class+0x4e/0x130 [ 436.658244][T13115] ? __pfx___might_resched+0x10/0x10 [ 436.663728][T13115] copy_page_range+0xa66/0x5a20 [ 436.668847][T13115] ? mas_wr_store_entry+0x4e5/0x31a0 [ 436.674176][T13115] ? __pfx_copy_page_range+0x10/0x10 [ 436.679722][T13115] ? mas_store+0x53b/0xad0 [ 436.684181][T13115] ? __pfx_mas_store+0x10/0x10 [ 436.689034][T13115] ? down_write+0x14e/0x200 [ 436.693581][T13115] ? up_write+0x1b2/0x520 [ 436.698284][T13115] copy_mm+0x134f/0x2550 [ 436.702579][T13115] ? __pfx_copy_mm+0x10/0x10 [ 436.707205][T13115] ? copy_process+0x38ef/0x6f00 [ 436.712446][T13115] ? __raw_spin_lock_init+0x3a/0x110 [ 436.718122][T13115] copy_process+0x3ab9/0x6f00 [ 436.722850][T13115] ? __pfx_copy_process+0x10/0x10 [ 436.728223][T13115] ? futex_wait+0x121/0x380 [ 436.732757][T13115] kernel_clone+0xfd/0x960 [ 436.737168][T13115] ? __pfx_kernel_clone+0x10/0x10 [ 436.742245][T13115] ? do_futex+0x123/0x350 [ 436.746595][T13115] ? __pfx_do_futex+0x10/0x10 [ 436.751287][T13115] ? 0xffffffff81000000 [ 436.755427][T13115] ? 0xffffffffff600000 [ 436.759655][T13115] __do_sys_clone+0xba/0x100 [ 436.764340][T13115] ? __pfx___do_sys_clone+0x10/0x10 [ 436.769639][T13115] ? 0xffffffffff600000 [ 436.773781][T13115] ? 0xffffffff81000000 [ 436.778048][T13115] ? 0xffffffffff600000 [ 436.782210][T13115] do_syscall_64+0xcd/0x250 [ 436.786709][T13115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.792647][T13115] RIP: 0033:0x7fcadc97df39 [ 436.797052][T13115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.817040][T13115] RSP: 002b:00007fcadd6bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 436.825731][T13115] RAX: ffffffffffffffda RBX: 00007fcadcb35f80 RCX: 00007fcadc97df39 [ 436.833748][T13115] RDX: ffffffffff600000 RSI: 0000000000000005 RDI: 0000000000000000 [ 436.841796][T13115] RBP: 00007fcadc9f0216 R08: 0000000000000009 R09: 0000000000000000 [ 436.849823][T13115] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.857820][T13115] R13: 0000000000000000 R14: 00007fcadcb35f80 R15: 00007ffc6c27ed98 [ 436.865884][T13115] ? 0xffffffff81000000 [ 436.870207][T13115] ? 0xffffffffff600000 [ 436.874358][T13115] [ 436.877364][T13115] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 436.884625][T13115] CPU: 0 UID: 0 PID: 13115 Comm: syz.0.1813 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 436.895023][T13115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 436.905064][T13115] Call Trace: [ 436.908332][T13115] [ 436.911255][T13115] dump_stack_lvl+0x3d/0x1f0 [ 436.915839][T13115] panic+0x71d/0x800 [ 436.919724][T13115] ? __pfx_panic+0x10/0x10 [ 436.924130][T13115] ? show_trace_log_lvl+0x29d/0x3d0 [ 436.929327][T13115] ? check_panic_on_warn+0x1f/0xb0 [ 436.934430][T13115] ? copy_huge_pmd+0x16dd/0x2500 [ 436.939363][T13115] check_panic_on_warn+0xab/0xb0 [ 436.944292][T13115] __warn+0xf6/0x3d0 [ 436.948179][T13115] ? copy_huge_pmd+0x16dd/0x2500 [ 436.953119][T13115] report_bug+0x3c0/0x580 [ 436.957437][T13115] handle_bug+0x54/0xa0 [ 436.961581][T13115] exc_invalid_op+0x17/0x50 [ 436.966073][T13115] asm_exc_invalid_op+0x1a/0x20 [ 436.970912][T13115] RIP: 0010:copy_huge_pmd+0x16dd/0x2500 [ 436.976449][T13115] Code: 01 e9 dd f5 ff ff e8 72 be 9a ff 4c 89 e3 31 ff 83 e3 02 48 89 de e8 d2 c0 9a ff 48 85 db 0f 84 a0 07 00 00 e8 54 be 9a ff 90 <0f> 0b 90 e9 88 ef ff ff e8 46 be 9a ff 49 89 ec 31 ff 41 81 e4 ff [ 436.996042][T13115] RSP: 0018:ffffc90004217640 EFLAGS: 00010293 [ 437.002098][T13115] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff81f16abe [ 437.010055][T13115] RDX: ffff888036bebc00 RSI: ffffffff81f16acc RDI: 0000000000000007 [ 437.018016][T13115] RBP: ffffea0001bca040 R08: 0000000000000007 R09: 0000000000000000 [ 437.025994][T13115] R10: 0000000000000002 R11: 0000000000000000 R12: d7f0000000000e02 [ 437.033952][T13115] R13: d7ffe7ffee77fe02 R14: 0000000000000200 R15: ffff888031642d90 [ 437.041923][T13115] ? copy_huge_pmd+0x16ce/0x2500 [ 437.046856][T13115] ? copy_huge_pmd+0x16dc/0x2500 [ 437.051796][T13115] ? __pfx_lock_release+0x10/0x10 [ 437.056810][T13115] ? __pfx_copy_huge_pmd+0x10/0x10 [ 437.061911][T13115] ? hlock_class+0x4e/0x130 [ 437.066399][T13115] ? __pfx___might_resched+0x10/0x10 [ 437.071685][T13115] copy_page_range+0xa66/0x5a20 [ 437.076538][T13115] ? mas_wr_store_entry+0x4e5/0x31a0 [ 437.081818][T13115] ? __pfx_copy_page_range+0x10/0x10 [ 437.087088][T13115] ? mas_store+0x53b/0xad0 [ 437.091496][T13115] ? __pfx_mas_store+0x10/0x10 [ 437.096249][T13115] ? down_write+0x14e/0x200 [ 437.100749][T13115] ? up_write+0x1b2/0x520 [ 437.105076][T13115] copy_mm+0x134f/0x2550 [ 437.109319][T13115] ? __pfx_copy_mm+0x10/0x10 [ 437.113897][T13115] ? copy_process+0x38ef/0x6f00 [ 437.118738][T13115] ? __raw_spin_lock_init+0x3a/0x110 [ 437.124011][T13115] copy_process+0x3ab9/0x6f00 [ 437.128684][T13115] ? __pfx_copy_process+0x10/0x10 [ 437.133698][T13115] ? futex_wait+0x121/0x380 [ 437.138202][T13115] kernel_clone+0xfd/0x960 [ 437.142621][T13115] ? __pfx_kernel_clone+0x10/0x10 [ 437.147648][T13115] ? do_futex+0x123/0x350 [ 437.151984][T13115] ? __pfx_do_futex+0x10/0x10 [ 437.156650][T13115] ? 0xffffffff81000000 [ 437.160788][T13115] ? 0xffffffffff600000 [ 437.164924][T13115] __do_sys_clone+0xba/0x100 [ 437.169504][T13115] ? __pfx___do_sys_clone+0x10/0x10 [ 437.174692][T13115] ? 0xffffffffff600000 [ 437.178833][T13115] ? 0xffffffff81000000 [ 437.182971][T13115] ? 0xffffffffff600000 [ 437.187119][T13115] do_syscall_64+0xcd/0x250 [ 437.191612][T13115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.197526][T13115] RIP: 0033:0x7fcadc97df39 [ 437.201944][T13115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.221544][T13115] RSP: 002b:00007fcadd6bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 437.229944][T13115] RAX: ffffffffffffffda RBX: 00007fcadcb35f80 RCX: 00007fcadc97df39 [ 437.237909][T13115] RDX: ffffffffff600000 RSI: 0000000000000005 RDI: 0000000000000000 [ 437.245871][T13115] RBP: 00007fcadc9f0216 R08: 0000000000000009 R09: 0000000000000000 [ 437.253828][T13115] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.261782][T13115] R13: 0000000000000000 R14: 00007fcadcb35f80 R15: 00007ffc6c27ed98 [ 437.269741][T13115] ? 0xffffffff81000000 [ 437.273890][T13115] ? 0xffffffffff600000 [ 437.278045][T13115] [ 437.281182][T13115] Kernel Offset: disabled [ 437.285785][T13115] Rebooting in 86400 seconds..