last executing test programs: 30.494129911s ago: executing program 2 (id=4517): socket(0x23, 0x80805, 0x0) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0xfffffffffffffffe, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x1, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x5, 0x400008, 0xada, 0x80018, 0x9, 0x8003) clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) mmap$auto(0xd, 0x2000000040009, 0xdf, 0x9b71, 0x6, 0x5) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) wait4$auto(0x2, 0x0, 0xb21, &(0x7f0000000100)={{0xffff, 0x10}, {0xfffffffffffffff7, 0x3}, 0x7, 0xc, 0x2, 0x2, 0x120, 0x6, 0x2, 0x3, 0x1, 0x5, 0x0, 0x8, 0x5, 0x2}) clock_nanosleep$auto(0x3, 0x8, 0x0, 0x0) memfd_create$auto(&(0x7f00000002c0)='IPVS\x00', 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x88) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, 0x0, 0x55) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x8000000004) sendto$auto(0x3, 0x0, 0xf, 0x101, &(0x7f0000000140)={0x2, @sockaddr_1_1}, 0x1c) ftruncate$auto(0x3, 0x0) mmap$auto(0x0, 0x8, 0x72, 0x8b72, 0x8f1, 0x8000) socket(0x23, 0x5, 0x0) write$auto(0x3, 0x0, 0x81) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000480), 0xffffffffffffffff) 29.442767282s ago: executing program 2 (id=4523): mmap$auto(0x0, 0x20009, 0xe2, 0x17, 0x403, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xc, 0x0, 0x7f) setfsuid$auto(0x3) 29.002501269s ago: executing program 2 (id=4526): openat2$auto(0x7, &(0x7f0000000040)='%', &(0x7f0000000080)={0x0, 0x1, 0x6}, 0x7fff) (async) socket(0x15, 0x5, 0x0) (async) socket(0x2, 0x1, 0x106) (async, rerun: 32) setsockopt$auto(0xab, 0x579, 0x4, &(0x7f00000004c0)='%\xba\x9f\xf0\x1et\xd8\x7f\xbeq?\xc0)Um\xaa\xa0e\x95\x91\xd3_\xb6S6Q\xfb\x1c\xed\x9a\x95\x8a63\xd0V\x1dT\x03\x18\xe0\xb8\xb0\xebm\xaf\xd7\x94zl&\xe9m\xf3!m\xb9\xac\x12.\x15\b fS\xb7cN\x0f!\xbcy\x93A\xed}\xd9\x0f^p\xb0\xc7\xfer$\x97\x9c\x99\xa2\xb7\xb9`\x04\x8c\xc0\n\x19\x9esSS\xdeN\xb5K\xf9z:r(\"\xaa\x9d\xfb\xeb_\x8d\xe4\xfa\x883\xbaA,`\xef\x0f\x02o\xf6rp\'\xf4\xfe\xff\x98J\x8f\xf9\xf30\xe9\x812Ds~B\x94\xfe\xd3\xdf7\x18\x8c\xda([\x05\a\x19C\rdG\xde\x95\x91\xb4IbC\x87\xd3\xecL\xd2\xcb\xb1\xbf\xaa\x18\xbe\x12\xa2*B\xe7\xe3&\xf0\xda@\x1af\xdf\xa9\f\x9ba\xb4\xeb!\xa8\xc3\xe2\xa4\x04\x99\xb3\x06\xc6K\xf8\xe8M;XcN\x86\xb0q@l}N\x02\'y\x1f\xd54\x1d\xa8B\xd3!%WLf\xbc\xbe\xf5\xbb\xad\x15\x81)\xa9<]^\xff\xabL\x91\x95\xbb\f\xe69\x88P\xc6b$\xea\xaf92O\aq \xc2D\xf6\xa6H\xa0\x85;\x16@\xf2\t\xa6=\xdf\xa6\x9d\xea\xe7S\xe2\xeb\x1f\xbf\x17\xd2\xd3\xb0\x98f\xa3(3\x0fN\xc7\xcaQ\f\xba\xe6\xbfWa\xe9\x0e\xba|\xd8m\'|6z\x89\xc4\xd4#\xb6\t\xe5z\xa3T\x1bO\x8b\x14\xb8\x04Jt\xc9\xfa\xb8\xb0\n5~\x8a*4<\xcd\xae\x04\xc6\xb6yz\xb4B/\xaekh', 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x20000000008, 0x10, 0xfffffffffffffffa, 0x100000008000) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) mq_open$auto(&(0x7f00000000c0)='\xff)-\\&[}\x00\x8b\xa5\x1f\x04< rU\xcf<,!\xc1\xa7\xcb\xedB\x1a\xc3P@V\xbbO\x86\xe6\x92}q\x92\x12\xff\x8a\xa1(\xa2\xc4Y\x88\tc', 0xde8, 0xf, 0x0) (async) r0 = socket(0xa, 0x2, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) adjtimex$auto(0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/pid_for_children\x00') (async) socket(0xa, 0x3, 0x3a) (async) ioctl$auto(0x1, 0x890b, 0x3) (async) setsockopt$auto(0x3, 0x29, 0x14, 0xffffffffffffffff, 0x3) (async) setsockopt$auto(0x1, 0x780b0d0f, 0x7, &(0x7f00000000c0)='\\[)-!\xe1)%.[@(&-&\x00', 0x0) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) (async) mknod$auto(&(0x7f0000000040)='Vq\xf4\xc4z6\xb9\x00', 0x2, 0x401) (async) mmap$auto(0x0, 0x20009, 0x10000000000dc, 0xeb2, 0x401, 0x8000) r1 = socket(0x23, 0x80805, 0x0) setsockopt$auto(0x3, 0x29, 0x7, 0xffffffffffffffff, 0x3) (async) socket(0x28, 0x5, 0x0) r2 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000280), r1) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x240400c5) (async) settimeofday$auto(&(0x7f0000000180)={0x1ed5d7403, 0x1}, 0x0) connect$auto(0x4, &(0x7f0000000180)={0x28, @sockaddr_1_1}, 0x54) (async, rerun: 64) close_range$auto(0x2, 0x8000, 0x0) (rerun: 64) socket(0x10, 0x2, 0x14) 28.52612686s ago: executing program 2 (id=4528): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x6, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x14, r1, 0x8ff972b65c311bf5, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000780)={0x14, r2, 0x323, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x488d0}, 0x48054) 28.09976225s ago: executing program 2 (id=4534): madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0xa59a, 0x15) open(&(0x7f0000000040)='./file1\x00', 0x4263c2, 0x3) (async) open(&(0x7f0000000040)='./file1\x00', 0x4263c2, 0x3) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) madvise$auto(0x0, 0x2000040080000004, 0xe) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002240), 0xffffffffffffffff) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) connect$auto(0xa0cb, &(0x7f0000000000)={0x6, @sa_data_min="37788c9e9b6e551fd34c824ab613"}, 0x1) (async) connect$auto(0xa0cb, &(0x7f0000000000)={0x6, @sa_data_min="37788c9e9b6e551fd34c824ab613"}, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0xeffe, 0x1, 0x4, 0x0, 0x7fff, 0x2) mmap$auto(0x2, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x2, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0xfbe8, 0xc) mlock$auto(0x7, 0x5) clone$auto(0x6, 0x401, 0xffffffffffffffff, 0xfffffffffffffffc, 0xa31b) mlock$auto(0x81, 0xffff) (async) mlock$auto(0x81, 0xffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0xfffffffffffbfffd, 0x40, 0x8) semctl$auto(0x2, 0x4, 0x400, 0xd2b) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4, 0x0) (async) sysfs$auto(0x2, 0x4, 0x0) fsopen$auto(0x0, 0x1) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) (async) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) fsmount$auto(0x4, 0x0, 0x200003) mmap$auto(0x0, 0x1000000009, 0x72, 0x8b72, 0x2, 0x8000) memfd_secret$auto(0x0) (async) memfd_secret$auto(0x0) 24.911290522s ago: executing program 2 (id=4558): mmap$auto(0x0, 0x20009, 0x400, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x400, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x401, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x2000000000b7, 0x9, 0x6a45ed6a) (async) madvise$auto(0x2000000000b7, 0x9, 0x6a45ed6a) ioperm$auto(0x3, 0x5, 0x149) mincore$auto(0x1000, 0x1, 0x0) mmap$auto(0xfffffffffffffffe, 0x2, 0x1000000004, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) ioperm$auto(0xb2, 0x9, 0x500402) (async) ioperm$auto(0xb2, 0x9, 0x500402) timer_settime$auto(0x5, 0xffff8000, 0x0, 0x0) (async) timer_settime$auto(0x5, 0xffff8000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) (async) socket(0x2, 0x801, 0x100) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x0) socket(0x1, 0x5, 0x0) socket(0x2, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socketpair$auto(0x3, 0x5, 0x7, 0x0) bpf$auto(0x0, 0x0, 0xaf1) pipe2$auto(0x0, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="fafeffff", @ANYRES16=r1, @ANYBLOB="000868faffffffffffffff6761cf61c6df2508000001bbd07960755a0153b863aa9d12c9d55b9237981812f3"], 0x14}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x4000080) (async) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="fafeffff", @ANYRES16=r1, @ANYBLOB="000868faffffffffffffff6761cf61c6df2508000001bbd07960755a0153b863aa9d12c9d55b9237981812f3"], 0x14}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x4000080) mmap$auto(0x0, 0xfff, 0x4000000000df, 0x40eb1, 0x1, 0x200000000008000) fcntl$auto(0x1, 0x9, 0x1000) 13.0781121s ago: executing program 3 (id=4592): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x6, 0x0) io_uring_setup$auto(0x6, 0x0) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x974, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x0, 0x9, 0x3, 0x200, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) close_range$auto(0x2, 0x8000, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c000) 12.343064417s ago: executing program 3 (id=4594): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001e80), r1) socket(0x2, 0x1, 0x106) setsockopt$auto(0x3, 0x1, 0x28, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000240)=ANY=[@ANYBLOB="e02ee0f02f54aa4700b8", @ANYRES16=r2, @ANYBLOB="090326bd7000fddbdf251f00000008000300020000000800020008000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000804) syz_genetlink_get_family_id$auto_ila(&(0x7f00000002c0), r0) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) listen$auto(0x3, 0x81) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x155) open(&(0x7f0000000000)='./file0\x00', 0xa240, 0x1de) socket(0xa, 0x6, 0x0) connect$auto(0x5, 0xfffffffffffffffc, 0x17) rt_sigsuspend$auto(0x0, 0x8) r3 = syz_genetlink_get_family_id$auto_MAC802154_HWSIM(&(0x7f0000000340), r0) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r0) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, "3918f08a3187"}, @BATADV_ATTR_TPMETER_COOKIE={0x8}, @BATADV_ATTR_BLA_CRC={0x6, 0x22, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x4000800) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x1, 0x5, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8209c, 0xe9e, 0x7, 0x15, 0x9, 0x100000001, 0x7, 0xf, 0x0, 0x0, 0xe, 0x8000000000d59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf263a9eeebceadbd12501000000"], 0x14}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000080) signalfd$auto(0x100, &(0x7f0000000200)={0x3ff}, 0x8) 9.740037242s ago: executing program 3 (id=4601): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x2) fanotify_init$auto(0x2, 0x2) sendfile$auto(0x6, 0x3, 0x0, 0xc01) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) futex$auto(0x0, 0xd, 0x1, 0x0, 0x0, 0xfffffffc) getsockopt$auto(0x6, 0x40000000084, 0x4, 0xfffffffffffffffe, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f00000001c0)={0xec4, 0x0, 0x334, 0x70bd29, 0x25dfdbfe, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0xead, 0x3, "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"}]}, 0xec4}, 0x1, 0x0, 0x0, 0x15}, 0x14) socket(0xa, 0x801, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x34000}, 0x4, 0x0, 0x1}, 0xed7138c}, 0x2, 0x9) socket(0x10, 0x2, 0xc) fcntl$auto(0x3, 0x4, 0xa553) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) 9.555593509s ago: executing program 1 (id=4603): setresuid$auto(0xa59c, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f0000000200)={0x1}, 0x7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="08000000e0000000c1728d2af766"}, 0x55) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setsockopt$auto(0x53, 0x1, 0x2, &(0x7f0000000080)='ns/cgroup\x00', 0x1) mseal$auto(0x1ffff000, 0x7dda, 0x0) munmap$auto(0x0, 0x6d50) madvise$auto(0x8f5, 0xa, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x6, 0x1, 0x14) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) mq_open$auto(&(0x7f00000000c0)='\xff)-\\&[}\x00\x8b\xa5\x1f\x04< rU\xcf<,!\xc1\xa7\xcb\xedB\x1a\xc3P@V\xbbO\x86\xe6\x92}q\x92\x12\xff\x8a\xa1(\xa2\xc4Y\x88\tc\x00\x00\x01\x00'/281, 0x8, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) ioctl$NS_GET_PARENT(r1, 0xff08, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="110000001200"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) read$auto(0x3, 0x0, 0x80) clone$auto(0x4, 0x400, 0xfffffffffffffffe, 0xfffffffffffffffc, 0xd1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffff, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 8.779054979s ago: executing program 3 (id=4605): exit$auto(0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) bpf$auto(0x0, 0x0, 0x6f4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) clone$auto(0x5, 0xffffffff80000001, &(0x7f0000000000)=0xfffffe01, &(0x7f0000000040)=0x1, 0x100000001) close_range$auto(0x2, 0x8000, 0x0) 5.982102988s ago: executing program 0 (id=4607): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xf, 0x4, 0x4) 5.410924017s ago: executing program 1 (id=4608): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x2010000000000) socket(0x26, 0x80805, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x12) socket(0x10, 0x3, 0x6) socket(0x2, 0x801, 0x100) socket(0x21, 0x2, 0x2) sendmmsg$auto(0x6, &(0x7f0000000400)={{0x0, 0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x1, &(0x7f0000000300), 0x10, 0x8000000}, 0xed7138c}, 0x6, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) open(&(0x7f0000000040)='./file1\x00', 0x40000, 0x40) socket(0x2, 0x1, 0x0) fanotify_mark$auto(0x730, 0x101, 0x9, 0x5, 0x0) 5.159726614s ago: executing program 0 (id=4609): setresgid$auto(0x81, 0x800000a0, 0x8) socket(0x2, 0x2, 0x1) exit$auto(0x7) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd) io_uring_setup$auto(0x6, 0x0) ioperm$auto(0x1000, 0x3e, 0x6) pkey_free$auto(0x89) read$auto(0x3, 0x0, 0xffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_HSR(&(0x7f0000000080), 0xffffffffffffffff) ioctl$auto(0x8, 0x3ff, 0x0) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x8000, 0x26, 0x8) fcntl$auto(0x8000000000000001, 0x24, 0x8) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0x22240, 0x155) 4.818752063s ago: executing program 3 (id=4610): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r1, 0x81, 0x9c, 0x7b2, 0x1, @relative_fd=0x7, 0x80}, 0x96) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2b, 0x80001, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x103c40, 0x50) unshare$auto(0x200) unshare$auto(0x200) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x5, 0x10e, 0x4, 0xfffffffffffffffd, 0xfffffffffffffffd) r2 = socket(0x18, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0xb101, 0x0) ioperm$auto(0x7, 0x6, 0x2) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7020fddbdf251400000008000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40080) keyctl$auto(0x4, 0xfffff7ffffffffff, 0x8081, 0xa, 0x8) mlock2$auto(0x1, 0x8001, 0x0) syslog$auto(0x2, 0xfffffffffffffffe, 0xffffffff) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) 4.717305774s ago: executing program 1 (id=4611): madvise$auto(0x0, 0x2, 0xe) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002240), 0xffffffffffffffff) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01002d50e1346e8ace8d0900000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x803}, 0x80) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r2) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98d40a3774176e4f4e7524d2321f0265628778e5884248d8bc2d9e8deccc40fc3e2ae4e85bfdb04decebc550c2a3c68504a4ffabc71091d24a2c385eb50d265abc4a550869cb73355129e973afdf279fbc9a5a4eb0e7f9fefbbe07bdaf677b07e8cfe1129d56aeef63d997647d1918f6d5d1", @ANYRES16=r4, @ANYBLOB="00042cbd7000ffdbdf2515000000810018008a63c5785be3f5f4d4a2fd41e8d13b09b7aed56f0632c84c0fddf73938f1d39f22e4443f426fdd4664a2df9582f0bc852081e79679357011ed46244a6d989c8f8519f86d46959ea0bca7a3e549be37ddc79c352e20182c029077c82fbc5c204f64cee0f9900aa836f3a63fec0b677e05a7059b9e7bb34459223b1bc803000000"], 0x98}, 0x1, 0x0, 0x0, 0x24000820}, 0x8841) clone$auto(0x1002, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xfffffffffffffffa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x7fffffffe001, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2, 0xe) (async) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002240), 0xffffffffffffffff) (async) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01002d50e1346e8ace8d0900000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x803}, 0x80) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r2) (async) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98d40a3774176e4f4e7524d2321f0265628778e5884248d8bc2d9e8deccc40fc3e2ae4e85bfdb04decebc550c2a3c68504a4ffabc71091d24a2c385eb50d265abc4a550869cb73355129e973afdf279fbc9a5a4eb0e7f9fefbbe07bdaf677b07e8cfe1129d56aeef63d997647d1918f6d5d1", @ANYRES16=r4, @ANYBLOB="00042cbd7000ffdbdf2515000000810018008a63c5785be3f5f4d4a2fd41e8d13b09b7aed56f0632c84c0fddf73938f1d39f22e4443f426fdd4664a2df9582f0bc852081e79679357011ed46244a6d989c8f8519f86d46959ea0bca7a3e549be37ddc79c352e20182c029077c82fbc5c204f64cee0f9900aa836f3a63fec0b677e05a7059b9e7bb34459223b1bc803000000"], 0x98}, 0x1, 0x0, 0x0, 0x24000820}, 0x8841) (async) clone$auto(0x1002, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xfffffffffffffffa) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x7fffffffe001, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) 3.799715285s ago: executing program 3 (id=4612): socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) open(0x0, 0x161342, 0x100) unshare$auto(0x40000080) socket(0xa, 0x806, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4ff0700"}, 0x55) syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x15, 0x1000, 0x47, 0xc, 0xf, 0xfffffffffffffffc, 0x0, 0xe, 0xd59, 0x8, 0xff, 0x2, 0x2]}, 0x0, 0x0) vmsplice$auto(0x3, &(0x7f0000000080)={0x0, 0x6}, 0x9, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ustat$auto(0x6, 0xfffffffffffffffd) ioctl$auto(0x3, 0x40085400, 0x5) socket(0xa, 0x801, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2) clone$auto(0xfffffffe00000, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x4) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) swapon$auto(0xfffffffffffffffc, 0x7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendto$auto(0x3, 0x0, 0xf, 0x101, &(0x7f0000000140)={0x2, @sockaddr_1_1}, 0x1c) 3.181735811s ago: executing program 1 (id=4613): close_range$auto(0xd0, 0x3c, 0x3) close_range$auto(0x1000, 0xbd, 0x7699) r0 = socket(0x1e, 0x6, 0x80) sendmsg$auto_NL80211_CMD_SET_REG(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x120, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x6, 0x127, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4c1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0xd8}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x40000c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_SMC_GEN_NETLINK(&(0x7f0000000100), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x400, 0x70bd26, 0x800, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x4081) write$auto(0x8, &(0x7f00000002c0)='SMC_GEN_NETLINK\x00', 0x7) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'pim6reg1\x00', 0x0}) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_COORDINATOR={0x62, 0x1e, "4fc8d8c470a8051a41dedafd4a7ab40bd83b8c852207fdbbdf9654a28082cbdce4d2a115a2ff5c8aaa94763db05f16111c13b898db28c3f665e1ccf2ae81cf763c40b295c9b7d7d1c47be917f798e0c761a54cbb8d8ddfc02562431137af"}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) getsockopt$auto(0xacd, 0x6b, 0x0, &(0x7f00000004c0)='$+$+(%$-^}\\[\x00', &(0x7f0000000500)=0x9) chmod$auto(&(0x7f0000000540)='$+$+(%$-^}\\[\x00', 0x164) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000005c0), r1) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x6}, @NFSD_A_SERVER_SCOPE={0xd, 0x4, 'pim6reg1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) syz_genetlink_get_family_id$auto_HSR(&(0x7f00000006c0), r0) fsopen$auto(&(0x7f0000000700)='nl80211\x00', 0x4b) msync$auto(0x10b, 0x7, 0xb) io_uring_setup$auto(0x6, &(0x7f0000000740)={0xd, 0x5, 0x2ab0, 0x6, 0x807, 0x1, 0x3, [0x2, 0x4, 0x7], {0xe, 0x800, 0x9, 0x1, 0x2, 0x6ea8, 0x1, 0x1, 0x6}, {0x6, 0x5, 0x3, 0x100, 0x7, 0x6, 0x33c, 0x6, 0x9f8}}) fsopen$auto(&(0x7f00000007c0)='pim6reg1\x00', 0x8) fspick$auto(0x80000000, &(0x7f0000000800)='$+$+(%$-^}\\[\x00', 0x4) r7 = syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000000880), r2) sendmsg$auto_SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x44000a10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, r7, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x11, 0x3, '$+$+(%$-^}\\[\x00'}, @SMC_PNETID_IBNAME={0x5, 0x3, '\x00'}, @SMC_PNETID_IBNAME={0xc, 0x3, 'nl80211\x00'}, @SMC_PNETID_IBNAME={0x14, 0x3, 'SMC_GEN_NETLINK\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x4a}, @SMC_PNETID_IBNAME={0x14, 0x3, 'SMC_GEN_NETLINK\x00'}, @SMC_PNETID_IBNAME={0x8, 0x3, '@(@\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000014) sendmmsg$auto(0x8, &(0x7f0000000c80)={{&(0x7f00000009c0)="77f1e0963eb042d1bcf31f6f3f990c3d6e40d6715c87a64a095cd0825ec33bb5a9e0741391729c980dd6dcf4ac6c3a279226b6362b19273e90e2788ddc8bf1db4b6440b0b64f951031649ca3a92d07eceb073460bd0b62a5e4978152c3f466d7a5870d5447ac9a24acff87f1b301c0d64a6e9922990a742ef3a0ae0ce8f5ee213f04a3996bb5560c4408a59fb512511905a68ef47a3dffac775b874dda153bcfa7873901c9f2c0186efde49fd8486f6f704d2d6dfabeb8069e86df7942b32f3cf94fefa9a1d57597201e625df1a65e4559a50753b212", 0xfffffffd, &(0x7f0000000b80)={&(0x7f0000000ac0)="300dedf4bf1e5df700eff34327306372a126f9cf88f822aafe7c1442e11b6195efd89a3e7cb9ff2c587f081ec3c05b2aa74891bf8ac314f985a14c7332e3fb144d15a5609fbdc6fae03e2d9609bb5b24cad1632fef0934a79b0f5ac65048302e285e90fb7283c3be3d871953f7291d392be411df75097015f04ed94290622b0eb9e39c3e", 0x8}, 0xffffffffffffffff, &(0x7f0000000bc0)="b5f7f51d627205579fb16e426f9e4e114200dbb7ffc89725d9d183226f969c79749a241af6c2a1d7ef65a72cf6a2f8025f3f23610cf6ae4f3f0892f6a762327ba7fd199fb9ace9b9d7b837ce45109204f1b3fe2589d5bec7c4c050bce4812da437c17e33f9c125626efd9795b489ada6ee14de3883f035dc8f12196f7ae3f643d7444ea10ed19eb02a6020664035f8", 0x80, 0x2}, 0xf35}, 0x10000000, 0x6) r8 = open(&(0x7f0000000cc0)='./file0\x00', 0x20200, 0x146) r9 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000d40), r8) sendmsg$auto_HWSIM_CMD_GET_RADIO(r8, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xd4, r9, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x7}, @HWSIM_ATTR_FREQ={0x8, 0x13, 0xfe}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x8000}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_SIGNAL={0x8}, @HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_CIPHER_SUPPORT={0x91, 0x18, "ff37c0fc2fc4b2da45d091cb875d7e08ba88fc44c539dd58e940c86b398f1c5a009d144c099ab8c85f75d1a945aa06c03148d02d348906052d070eb2a9e6cd8e5435e28e1b382f689163ddec2fab4a8a7e7cd80e416226409c95c93968d5b0a645486ffc69fcf5bf7f20f0a815dded11fdea26537e74be0ca79c2a0e9b97a028abaf1477dffb01399c4951ff8f"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x81}, 0x4000084) 3.1770759s ago: executing program 0 (id=4614): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x14, r1, 0x201, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) 1.865049514s ago: executing program 1 (id=4615): epoll_pwait2$auto(0x1, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd, 0xffffffffffffffff, 0x6) r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) ioperm$auto(0x3, 0x5, 0x149) mlockall$auto(0x6) socket(0xa, 0x2, 0x0) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x9, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x4000000000000000, 0x9, 0x3, 0x200, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) sendto$auto(0x1, &(0x7f0000000300)="c3985b22b27328da4bf3e29a1244e65186b6c50e3a6a23811c5b236777a687e0fdfe2d3edef2b2cb86782d66cdfa8184273c1e8b66143b354ba34c44a31620c7bc07d7892d6038201eaa27d59f12f4632460d91f8f54e3e5332759253a72ba3b47c1ea0c3537a2022091148930d6133bc8e4fc53105a7a6a6b6e73dd5bf0822124116c44cd9bdc84c6d80cc78cecf091b1e618ccf76cf7adb5c5449c263b128d8ee6d4aa5080c6a69eb0492e0201e86e886560042de9d9ac3c7697244587175a1e8c2299f8be4559cfa2bf383d9f88ec258a0169ee4ee26471c2318a62414fa149a005cf6d57a52281d665afc109", 0x9, 0x6, &(0x7f0000000000)={0x4, @sa_data_min="adc35b56067a310d27a14f0ce72d"}, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_802_15_4_MAC(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) bind$auto(0x7, &(0x7f0000000000)={0x11, @sockaddr_1_1}, 0x3e) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) ioctl$NS_GET_PARENT(r2, 0xff08, 0x0) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r1, 0x1f5, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xa00}}, 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) 1.307884714s ago: executing program 0 (id=4616): mmap$auto(0xfffffffffffffffd, 0x3, 0x200000000e, 0x14, 0x7ff, 0x7ffd) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) recvmsg$auto(0x8, &(0x7f00000001c0)={&(0x7f0000000000)="1ce8794a92adce85efef54c6b655c8989ade479de567ccc6872fffbbae88b66dc336ac9dc2b1", 0x8, &(0x7f0000000080)={&(0x7f0000000040)="94ed3b342c62dc3512a4876d4c4d4acb1b7ceb6971492d2440d831f985", 0x76e}, 0x4, &(0x7f00000000c0)="945ed5374bae4cf6f060039684578d661b716b92380b20c961f3c31c1bff25012aa90f0f257ceaaf92d6460f67bfcfc67d9d724d67ab4695e077e98192f8d5745dfa714f2e7ee67a0b14a401e987a4d03d3929fe757ca1905988a8c0c2a68fd55f2259791a2dcd6fdb81b49b42c4ac85fd6524f118a59045e1d1d946a9e3689e04282723b830347d205221b51562292b30bb225c3dd0b7594d90428cf24b86778e9b088c7c1f31d832d11fa15dac59a57679f3deaf9d72d84152318129ebd036e2e6c3ddc470dcc7a31e46662701c397bb98248070c44aad1fa99f630ab42400c6b88c71d716136d832cfc9ada87ccadefaa259e67626387", 0x4, 0xfffff4ee}, 0xe) utime$auto(&(0x7f0000000200)='#\x00', &(0x7f0000000240)={0x2, 0x7ff}) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 882.927832ms ago: executing program 0 (id=4617): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) (async) open(&(0x7f0000000000)='./file0\x00', 0xc0, 0x2) (async) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async) pipe$auto(0x0) write$auto(0x3, 0x0, 0x81) (async) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01002d50e1346e8ace8d0900000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x803}, 0x80) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0x15, 0x5, 0x0) (async) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x8, &(0x7f0000000080)={0x0, 0x8}, 0x400, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x3, 0x0) (async) clock_settime$auto(0xa9, &(0x7f0000000000)={0xa, 0x73}) ioctl$auto(0x3, 0x8903, 0x400000000000001) 18.031474ms ago: executing program 0 (id=4618): mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x1, 0x106) (async) read$auto(0x3, 0xffffffffffffffff, 0xc218) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f0000000000)={0x2, @sa_data_min="0800e00000000000c1728d2af766"}, 0x55) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) prlimit64$auto(0x0, 0x8, &(0x7f0000002740)={0xe2, 0xfffffffffffffffd}, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x2, 0x697b}, 0xed7138c}, 0x9a6, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) socket(0xa, 0x3, 0x0) (async) mmap$auto(0x0, 0x4, 0xf0df, 0x40eb1, 0x9, 0x300000000000) (async, rerun: 32) move_pages$auto(0x0, 0xd0, &(0x7f0000001100), 0x0, 0x0, 0x2) (async, rerun: 32) r0 = socket(0x2, 0x6, 0x0) (async) mlockall$auto(0x7) (async) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1={'Y'}}, 0x6b) (async) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8000, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mmap$auto(0x0, 0x8, 0x72, 0x8b72, 0x8f1, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x6) (async) open(0x0, 0x121342, 0x1) (async) io_destroy$auto(0xfffffffffffffffa) r1 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f00000001c0), r0) sendmsg$auto_VDPA_CMD_MGMTDEV_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000009a496cad752e5f2a3bfb25c0ef9bd5a8e1895b59c806c0d1ddcd9fedcae2404eece2ae3bb3c9788adcc512292bb2687b7a437c4fce35b72003c8b5b97c07b874b46ee58e83fa0fb3830e975b37dcd177f7f454820c03b8c9738170d5e215fb2767cfb584c71ac7c691a68e434f7289fcad14d39521d78fa03a7e583d3a32c650244b3d11623f3abdf79801413aabcedf80d8a6172e1460c4e4d2ecfceef2603bff990ab0fc7c69264bf0b6fc67ef1ea039bfccd8b9b484c78f9bc15c587d0c6a4b46a2572e6883c61a83454a3c69aa3cc9b33751165405308194c746765fee3b942f907aa4d4fce93c055e362a58a4dc78a950", @ANYRES16=r1, @ANYBLOB="000126bd7000ffdbdf250200000008001100850c00000c001400fbffffffffffffff06000d000104000008001100000000000b0001007d5b2c262a7d0000060002002c2d00000c0014000000000001000000"], 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) (async) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x73, 0x0) (async) madvise$auto(0x0, 0xf1, 0x10) 0s ago: executing program 1 (id=4619): mmap$auto(0x800000000, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) select$auto(0x1, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x15, &(0x7f0000000100)={{0x0, 0x6, 0x0, 0x7f, 0x0, 0x8000, 0x2}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) socket(0xa, 0x801, 0x106) mlock2$auto(0x1, 0x6, 0x43) mprotect$auto(0x8505, 0x5, 0x1) socket(0x18, 0x4, 0x1) getsockname$auto(0x3, 0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x1, 0x2, 0x0, 0x9) kernel console output (not intermixed with test programs): sim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.312179][T21504] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3431'. [ 943.391640][ T7322] bridge_slave_1: left allmulticast mode [ 943.416848][ T7322] bridge_slave_1: left promiscuous mode [ 943.432532][ T7322] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.526242][ T7322] bridge_slave_0: left allmulticast mode [ 943.539427][ T7322] bridge_slave_0: left promiscuous mode [ 943.567128][ T7322] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.752290][ T5232] Bluetooth: hci0: command tx timeout [ 945.080307][ T7322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.155244][ T7322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.224303][ T7322] bond0 (unregistering): Released all slaves [ 945.842187][ T5232] Bluetooth: hci0: command tx timeout [ 946.902097][ T7322] hsr_slave_0: left promiscuous mode [ 946.975943][ T7322] hsr_slave_1: left promiscuous mode [ 947.003438][ T7322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 947.017153][ T7322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.034848][ T7322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 947.052050][ T7322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.105589][ T7322] veth1_macvtap: left promiscuous mode [ 947.131513][ T7322] veth0_macvtap: left promiscuous mode [ 947.141697][ T7322] veth1_vlan: left promiscuous mode [ 947.155554][ T7322] veth0_vlan: left promiscuous mode [ 947.912239][ T5232] Bluetooth: hci0: command tx timeout [ 948.192471][ T7322] team0 (unregistering): Port device team_slave_1 removed [ 948.263352][ T7322] team0 (unregistering): Port device team_slave_0 removed [ 949.250153][T21434] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 949.317201][T21434] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 949.369514][T21434] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 949.484589][T21434] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 949.771073][T21434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.843711][T21434] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.872657][T15526] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.879809][T15526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.925252][T15522] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.932438][T15522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.369984][T21644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3454'. [ 950.583843][T21434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.650349][T21653] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 950.720168][T21653] svc: failed to register nfsdv3 RPC service (errno 111). [ 950.729668][T21434] veth0_vlan: entered promiscuous mode [ 950.749858][T21653] svc: failed to register nfsaclv3 RPC service (errno 111). [ 950.765940][T21434] veth1_vlan: entered promiscuous mode [ 950.838286][T21434] veth0_macvtap: entered promiscuous mode [ 950.861657][T21434] veth1_macvtap: entered promiscuous mode [ 950.899590][T21434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.926951][T21434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.955369][T21434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.975334][T21434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.998706][T21434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.020236][T21434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.041330][T21434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.079881][T21434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.103670][T21434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 951.146995][T21434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.166015][T21675] can: request_module (can-proto-0) failed. [ 951.193976][T21434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.222711][T21434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.237223][T21675] can: request_module (can-proto-0) failed. [ 951.242732][T21434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.262014][T21434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.276848][T21434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.287016][T21434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.297678][T21434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.309132][T21434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 951.318555][T21675] can: request_module (can-proto-0) failed. [ 951.321953][T21434] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.333441][T21434] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.342238][T21434] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.350951][T21434] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.407386][T21675] can: request_module (can-proto-0) failed. [ 951.464807][T21675] can: request_module (can-proto-0) failed. [ 951.583792][T15528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.605442][T21675] can: request_module (can-proto-0) failed. [ 951.637191][T15528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.666692][T21675] can: request_module (can-proto-0) failed. [ 951.741959][ T7330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.750524][ T7330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.851098][T21675] can: request_module (can-proto-0) failed. [ 951.898194][T21675] can: request_module (can-proto-0) failed. [ 952.877900][T21731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3465'. [ 956.754086][T21842] sctp: [Deprecated]: syz.1.3487 (pid 21842) Use of struct sctp_assoc_value in delayed_ack socket option. [ 956.754086][T21842] Use struct sctp_sack_info instead [ 959.074258][T21888] netlink: 'syz.1.3501': attribute type 2 has an invalid length. [ 962.751656][T21997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3529'. [ 965.747008][ T7328] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.265302][ T7328] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.646644][ T7328] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.959047][T18243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 966.970465][T18243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 966.978652][T18243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 966.987681][T18243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 966.996894][T18243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 967.005384][T18243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 967.029468][T22056] svc: failed to register nfsdv3 RPC service (errno 111). [ 967.078990][ T7328] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.114561][T22056] svc: failed to register nfsaclv3 RPC service (errno 111). [ 967.582276][ T7328] bridge_slave_1: left allmulticast mode [ 967.588324][ T7328] bridge_slave_1: left promiscuous mode [ 967.603217][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.705234][ T7328] bridge_slave_0: left allmulticast mode [ 967.710936][ T7328] bridge_slave_0: left promiscuous mode [ 967.762165][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.112825][T18243] Bluetooth: hci3: command tx timeout [ 969.442918][T22128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3563'. [ 970.442772][ T7328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.612542][ T7328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.735237][ T7328] bond0 (unregistering): Released all slaves [ 971.192469][T18243] Bluetooth: hci3: command tx timeout [ 971.860892][T22061] chnl_net:caif_netlink_parms(): no params data found [ 973.282035][T18243] Bluetooth: hci3: command tx timeout [ 975.352085][T18243] Bluetooth: hci3: command tx timeout [ 975.723471][T22061] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.730666][T22061] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.742958][T22061] bridge_slave_0: entered allmulticast mode [ 975.760437][T22061] bridge_slave_0: entered promiscuous mode [ 976.169300][T22061] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.195722][T22061] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.228019][T22061] bridge_slave_1: entered allmulticast mode [ 976.256631][T22061] bridge_slave_1: entered promiscuous mode [ 976.869625][ T7328] hsr_slave_0: left promiscuous mode [ 976.925451][ T7328] hsr_slave_1: left promiscuous mode [ 976.991599][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 977.002091][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 977.031004][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 977.062300][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.104810][ T7328] veth1_macvtap: left promiscuous mode [ 977.142931][ T7328] veth0_macvtap: left promiscuous mode [ 977.149825][ T7328] veth1_vlan: left promiscuous mode [ 977.176833][ T7328] veth0_vlan: left promiscuous mode [ 977.525122][T22196] delete_channel: no stack [ 979.319404][ T7328] team0 (unregistering): Port device team_slave_1 removed [ 979.498617][ T7328] team0 (unregistering): Port device team_slave_0 removed [ 981.539369][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 981.548172][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 981.556339][ T5232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 981.565499][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 981.574011][ T5232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 981.585581][ T5232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 981.705602][ T5232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 981.724122][ T5232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 981.732439][ T5232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 981.741039][ T5232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 981.748826][ T5232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 981.756219][ T5232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 981.953894][T22061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.052576][T22061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 982.448700][T22061] team0: Port device team_slave_0 added [ 982.503197][T22061] team0: Port device team_slave_1 added [ 982.831704][T22061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.872017][T22061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.061983][T22061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.146113][T22061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 983.232013][T22061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.406271][T22061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.672302][ T5232] Bluetooth: hci5: command tx timeout [ 983.770512][T22061] hsr_slave_0: entered promiscuous mode [ 983.812999][T22061] hsr_slave_1: entered promiscuous mode [ 983.833688][ T5232] Bluetooth: hci6: command tx timeout [ 984.447952][T22206] chnl_net:caif_netlink_parms(): no params data found [ 984.598953][T22210] chnl_net:caif_netlink_parms(): no params data found [ 984.778402][T22210] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.786311][T22210] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.794434][T22210] bridge_slave_0: entered allmulticast mode [ 984.801533][T22210] bridge_slave_0: entered promiscuous mode [ 984.810587][T22210] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.832901][T22210] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.840154][T22210] bridge_slave_1: entered allmulticast mode [ 984.882499][T22210] bridge_slave_1: entered promiscuous mode [ 985.049573][T22206] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.074095][T22206] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.095854][T22206] bridge_slave_0: entered allmulticast mode [ 985.117273][T22206] bridge_slave_0: entered promiscuous mode [ 985.164088][T22210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.199857][T22210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.245144][T22206] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.270219][T22206] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.302671][T22206] bridge_slave_1: entered allmulticast mode [ 985.332302][T22206] bridge_slave_1: entered promiscuous mode [ 985.544318][T22210] team0: Port device team_slave_0 added [ 985.581231][T22206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.625854][T22206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.664094][T22210] team0: Port device team_slave_1 added [ 985.752508][ T5232] Bluetooth: hci5: command tx timeout [ 985.880317][T22210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.910090][T22210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.944558][ T5232] Bluetooth: hci6: command tx timeout [ 985.992872][T22270] netlink: 'syz.3.3577': attribute type 1 has an invalid length. [ 986.000810][T22210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.031158][T22206] team0: Port device team_slave_0 added [ 986.064441][T22206] team0: Port device team_slave_1 added [ 986.127461][T22210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.152879][T22210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.233509][T22210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.344274][T22206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.351249][T22206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.447555][T22206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.667189][T22206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.689598][T22206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.780226][T22206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.973024][T22210] hsr_slave_0: entered promiscuous mode [ 987.037128][T22210] hsr_slave_1: entered promiscuous mode [ 987.058092][T22210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 987.089678][T22210] Cannot create hsr debugfs directory [ 987.475658][T22206] hsr_slave_0: entered promiscuous mode [ 987.510752][T22206] hsr_slave_1: entered promiscuous mode [ 987.592268][T22206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 987.599870][T22206] Cannot create hsr debugfs directory [ 987.832393][ T5232] Bluetooth: hci5: command tx timeout [ 987.940424][ T7328] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.992931][ T5232] Bluetooth: hci6: command tx timeout [ 988.275957][ T7328] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.482709][ T7328] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.622171][ T7328] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.756215][T22061] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 988.819704][T22210] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.896433][T22061] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 988.916273][T22061] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 988.967504][T22210] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.999287][T22061] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 989.117200][T22210] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.220179][T22210] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.468831][ T7328] bridge_slave_1: left allmulticast mode [ 989.498786][ T7328] bridge_slave_1: left promiscuous mode [ 989.537230][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.602409][ T7328] bridge_slave_0: left allmulticast mode [ 989.608111][ T7328] bridge_slave_0: left promiscuous mode [ 989.664073][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.700832][ T7328] bridge_slave_1: left allmulticast mode [ 989.740720][ T7328] bridge_slave_1: left promiscuous mode [ 989.758465][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.803337][ T7328] bridge_slave_0: left allmulticast mode [ 989.824353][T22302] netlink: 'syz.3.3581': attribute type 11 has an invalid length. [ 989.840491][ T7328] bridge_slave_0: left promiscuous mode [ 989.858678][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.912313][ T5232] Bluetooth: hci5: command tx timeout [ 990.072187][ T5232] Bluetooth: hci6: command tx timeout [ 991.481374][ T7328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.500746][ T7328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.515159][ T7328] bond0 (unregistering): Released all slaves [ 991.740597][ T7328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.759305][ T7328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.775922][ T7328] bond0 (unregistering): Released all slaves [ 992.083165][T22210] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 992.103425][T22210] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 992.244654][T22210] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 992.290580][T22210] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 992.437139][T22061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.541805][T22061] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.668675][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.675901][ T7330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.696071][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.703259][ T7330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.058007][ T7328] hsr_slave_0: left promiscuous mode [ 993.087988][ T7328] hsr_slave_1: left promiscuous mode [ 993.101063][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 993.126858][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.162997][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 993.170467][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.193637][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.200015][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.238298][ T7328] hsr_slave_0: left promiscuous mode [ 993.263149][ T7328] hsr_slave_1: left promiscuous mode [ 993.277755][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 993.302021][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.324025][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 993.331503][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.415829][ T7328] veth1_macvtap: left promiscuous mode [ 993.421405][ T7328] veth0_macvtap: left promiscuous mode [ 993.460056][ T7328] veth1_vlan: left promiscuous mode [ 993.472822][ T7328] veth0_vlan: left promiscuous mode [ 993.500690][ T7328] veth1_macvtap: left promiscuous mode [ 993.507216][ T7328] veth0_macvtap: left promiscuous mode [ 993.523586][ T7328] veth1_vlan: left promiscuous mode [ 993.528969][ T7328] veth0_vlan: left promiscuous mode [ 994.807426][ T7328] team0 (unregistering): Port device team_slave_1 removed [ 994.945523][ T7328] team0 (unregistering): Port device team_slave_0 removed [ 995.307802][T22367] futex_wake_op: syz.3.3587 tries to shift op by -256; fix this program [ 997.093342][ T7328] team0 (unregistering): Port device team_slave_1 removed [ 997.181042][ T7328] team0 (unregistering): Port device team_slave_0 removed [ 998.244899][T22206] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 998.340158][T22210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.405584][T22206] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 998.466032][T22206] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 998.494795][T22206] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 998.575439][T22210] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.743962][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.751119][ T6085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.813216][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.820420][ T6085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.919633][T22061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.048802][T22210] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 999.097440][T22210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 999.246700][T22206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.403527][T22206] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.536162][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.543334][ T6085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.575532][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.582685][ T6085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.681159][T22061] veth0_vlan: entered promiscuous mode [ 999.746963][T22061] veth1_vlan: entered promiscuous mode [ 999.810371][T22206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 999.947532][T22061] veth0_macvtap: entered promiscuous mode [ 999.970461][T22061] veth1_macvtap: entered promiscuous mode [ 1000.097173][T22061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.126150][T22061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.143106][T22061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.160367][T22061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.189236][T22061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.240356][T22061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.307072][T22061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.338207][T22061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.371917][T22061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.419813][T22061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.461000][T22061] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.492206][T22061] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.500953][T22061] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.559505][T22061] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.882927][T15526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.890774][T15526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.975309][T15526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.997033][T22206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.021685][T15526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.178488][T22206] veth0_vlan: entered promiscuous mode [ 1001.270544][T22206] veth1_vlan: entered promiscuous mode [ 1001.337140][T22206] veth0_macvtap: entered promiscuous mode [ 1001.464119][T22206] veth1_macvtap: entered promiscuous mode [ 1001.480311][T22206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.490868][T22206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.500951][T22206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.511814][T22206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.522169][T22206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.533320][T22206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.545557][T22206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.574053][T22210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.619453][T22206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.630018][T22206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.639967][T22206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.650476][T22206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.660417][T22206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.670915][T22206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.682436][T22206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.745457][T22206] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.754299][T22206] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.763089][T22206] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.772002][T22206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.994162][T15534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.015834][T22210] veth0_vlan: entered promiscuous mode [ 1002.042453][T15534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.077266][T22210] veth1_vlan: entered promiscuous mode [ 1002.140242][ T7330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.140597][T22210] veth0_macvtap: entered promiscuous mode [ 1002.178553][ T7330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.214341][T22210] veth1_macvtap: entered promiscuous mode [ 1002.281700][T22210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.295414][T22210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.321969][T22210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.352878][T22210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.369555][T22210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.396699][T22210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.419503][T22210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.440315][T22210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.470036][T22210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.521290][T22210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.554427][T22210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.582054][T22210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.603691][T22210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.636816][T22210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.660159][T22210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.670554][T22210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.701774][T22210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.741463][T22210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.771400][T22210] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.791515][T22210] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.806317][T22210] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.822704][T22210] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.995071][ T7330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.027159][ T7330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.084607][ T7330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.114378][ T7330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.532081][T22517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3611'. [ 1008.621046][T22591] Process accounting resumed [ 1008.629995][T22591] RDS: rds_bind could not find a transport for ::ffff:172.20.20.52, load rds_tcp or rds_rdma? [ 1011.222180][ T29] audit: type=1326 audit(8277292095.270:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22658 comm="syz.2.3646" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce17b7dff9 code=0x0 [ 1011.928264][T22675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3651'. [ 1019.498003][T22825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3687'. [ 1025.130845][T22910] netlink: get zone limit has 4 unknown bytes [ 1025.773834][T22925] Process accounting resumed [ 1026.076437][ T5232] Bluetooth: hci6: ISO packet too small [ 1026.350384][T22942] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 1026.490341][T22942] svc: failed to register nfsdv3 RPC service (errno 111). [ 1026.595733][T22942] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1032.835025][T23042] Process accounting resumed [ 1037.631416][T23153] nfsd: Unknown parameter '¿ß' [ 1038.095694][T23166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3771'. [ 1038.292502][T23141] delete_channel: no stack [ 1040.932619][T23237] delete_channel: no stack [ 1042.152649][T23258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3795'. [ 1046.219523][T23334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3812'. [ 1046.902771][T23344] nfsd: Unknown parameter '¿ß' [ 1048.516304][T23370] FAULT_INJECTION: forcing a failure. [ 1048.516304][T23370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1048.557944][T23370] CPU: 1 UID: 0 PID: 23370 Comm: syz.0.3824 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1048.569633][T23370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1048.580498][T23370] Call Trace: [ 1048.584155][T23370] [ 1048.587135][T23370] dump_stack_lvl+0x16c/0x1f0 [ 1048.591964][T23370] should_fail_ex+0x497/0x5b0 [ 1048.596761][T23370] _copy_from_user+0x30/0xf0 [ 1048.601373][T23370] do_sys_poll+0x1d6/0xde0 [ 1048.605833][T23370] ? __pfx_mark_lock+0x10/0x10 [ 1048.610642][T23370] ? __pfx_do_sys_poll+0x10/0x10 [ 1048.615694][T23370] ? __pfx___lock_acquire+0x10/0x10 [ 1048.620933][T23370] ? __pfx_mark_lock+0x10/0x10 [ 1048.625792][T23370] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1048.631452][T23370] ? ktime_get_ts64+0x1ad/0x2a0 [ 1048.636330][T23370] __x64_sys_poll+0x1a8/0x450 [ 1048.641022][T23370] ? __pfx___x64_sys_poll+0x10/0x10 [ 1048.646240][T23370] do_syscall_64+0xcd/0x250 [ 1048.650760][T23370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.656665][T23370] RIP: 0033:0x7f89e737dff9 [ 1048.661094][T23370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.680725][T23370] RSP: 002b:00007f89e8101038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1048.689161][T23370] RAX: ffffffffffffffda RBX: 00007f89e7535f80 RCX: 00007f89e737dff9 [ 1048.697151][T23370] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000020002340 [ 1048.705132][T23370] RBP: 00007f89e8101090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.713105][T23370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.721251][T23370] R13: 0000000000000000 R14: 00007f89e7535f80 R15: 00007ffff099c1c8 [ 1048.729239][T23370] [ 1049.506440][T23390] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3829'. [ 1049.571467][ T29] audit: type=1326 audit(4294967326.399:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23381 comm="syz.0.3826" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89e737dff9 code=0x0 [ 1049.830227][T23401] futex_wake_op: syz.1.3832 tries to shift op by 64; fix this program [ 1050.228686][T23423] FAULT_INJECTION: forcing a failure. [ 1050.228686][T23423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1050.282067][T23423] CPU: 1 UID: 0 PID: 23423 Comm: syz.0.3834 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1050.292893][T23423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1050.302966][T23423] Call Trace: [ 1050.306252][T23423] [ 1050.309185][T23423] dump_stack_lvl+0x16c/0x1f0 [ 1050.313884][T23423] should_fail_ex+0x497/0x5b0 [ 1050.318579][T23423] _copy_to_user+0x30/0xc0 [ 1050.323006][T23423] simple_read_from_buffer+0xd0/0x160 [ 1050.328406][T23423] proc_fail_nth_read+0x198/0x270 [ 1050.333445][T23423] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1050.339004][T23423] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1050.344563][T23423] vfs_read+0x1ce/0xbd0 [ 1050.348733][T23423] ? __pfx_vfs_read+0x10/0x10 [ 1050.353416][T23423] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1050.359069][T23423] ? ktime_get_ts64+0x1ad/0x2a0 [ 1050.363937][T23423] ksys_read+0x12f/0x260 [ 1050.368184][T23423] ? __pfx_ksys_read+0x10/0x10 [ 1050.372963][T23423] do_syscall_64+0xcd/0x250 [ 1050.377482][T23423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.383385][T23423] RIP: 0033:0x7f89e737ca3c [ 1050.387807][T23423] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1050.407423][T23423] RSP: 002b:00007f89e8101030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1050.415868][T23423] RAX: ffffffffffffffda RBX: 00007f89e7535f80 RCX: 00007f89e737ca3c [ 1050.423863][T23423] RDX: 000000000000000f RSI: 00007f89e81010a0 RDI: 0000000000000003 [ 1050.431840][T23423] RBP: 00007f89e8101090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.439819][T23423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1050.447795][T23423] R13: 0000000000000000 R14: 00007f89e7535f80 R15: 00007ffff099c1c8 [ 1050.455785][T23423] [ 1052.325361][ T6085] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.830207][ T6085] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.141184][T23491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'. [ 1053.185259][ T6085] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.295869][T18243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1053.305564][T18243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1053.316297][T18243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1053.325237][T18243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1053.333086][T18243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1053.340540][T18243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1053.585921][ T6085] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.039791][T23496] chnl_net:caif_netlink_parms(): no params data found [ 1054.094548][ T6085] bridge_slave_1: left allmulticast mode [ 1054.100240][ T6085] bridge_slave_1: left promiscuous mode [ 1054.106126][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.319572][ T6085] bridge_slave_0: left allmulticast mode [ 1054.325508][ T6085] bridge_slave_0: left promiscuous mode [ 1054.359120][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.633587][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.639921][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.432023][T18243] Bluetooth: hci0: command tx timeout [ 1056.162045][ T6085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.204085][ T6085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.221123][ T6085] bond0 (unregistering): Released all slaves [ 1056.543211][T23496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.553854][T23496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.565167][T23496] bridge_slave_0: entered allmulticast mode [ 1056.578275][T23496] bridge_slave_0: entered promiscuous mode [ 1056.662229][T23496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.679923][T23496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.702052][T23496] bridge_slave_1: entered allmulticast mode [ 1056.733194][T23496] bridge_slave_1: entered promiscuous mode [ 1056.998734][T23496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.125559][T23496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.246602][T23496] team0: Port device team_slave_0 added [ 1057.285029][T23496] team0: Port device team_slave_1 added [ 1057.516343][T18243] Bluetooth: hci0: command tx timeout [ 1057.560336][T23496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.605766][T23496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.672878][T23496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.698885][T23624] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3879'. [ 1057.729361][ T6085] hsr_slave_0: left promiscuous mode [ 1057.756845][ T6085] hsr_slave_1: left promiscuous mode [ 1057.782066][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.802059][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.840567][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.873629][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.918558][ T6085] veth1_macvtap: left promiscuous mode [ 1057.926613][ T6085] veth0_macvtap: left promiscuous mode [ 1057.944268][ T6085] veth1_vlan: left promiscuous mode [ 1057.956353][ T6085] veth0_vlan: left promiscuous mode [ 1058.684818][ T6085] team0 (unregistering): Port device team_slave_1 removed [ 1058.742310][ T6085] team0 (unregistering): Port device team_slave_0 removed [ 1059.592336][T18243] Bluetooth: hci0: command tx timeout [ 1059.793156][T23496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.801899][T23496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.872659][T23496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.101549][T23496] hsr_slave_0: entered promiscuous mode [ 1060.119195][T23496] hsr_slave_1: entered promiscuous mode [ 1060.130748][T23496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1060.148771][T23496] Cannot create hsr debugfs directory [ 1061.493077][T23689] sctp: [Deprecated]: syz.2.3891 (pid 23689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1061.493077][T23689] Use struct sctp_sack_info instead [ 1061.672384][T18243] Bluetooth: hci0: command tx timeout [ 1061.880914][T23496] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1061.916166][T23496] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1061.967474][T23496] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1062.104473][T23496] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1062.328468][T23496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.389268][T23496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.418047][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.425274][ T6085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.516921][T15534] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.524166][T15534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.988663][T23496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.188282][T23496] veth0_vlan: entered promiscuous mode [ 1063.219774][T23496] veth1_vlan: entered promiscuous mode [ 1063.304346][T23496] veth0_macvtap: entered promiscuous mode [ 1063.334019][T23496] veth1_macvtap: entered promiscuous mode [ 1063.370963][T23496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.396443][T23496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.414545][T23496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.454511][T23496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.486867][T23496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.529378][T23496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.558146][T23496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.621950][T23496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.641801][T23496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.671645][T23496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.702022][T23496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.719273][T23496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.757863][T23496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.790379][T23496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.838497][T23496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.863289][T23496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.898149][T23496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.913668][T23496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.948984][T23496] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.011963][T23496] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.034867][T23496] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.074254][T23496] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.256309][T15534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.299791][T15534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.366281][ T6085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.374506][ T6085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.218647][T23865] kexec: Could not allocate control_code_buffer [ 1067.987020][T23910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3931'. [ 1070.382521][T23962] Process accounting resumed [ 1070.443158][T23962] RDS: rds_bind could not find a transport for ::ffff:172.20.20.52, load rds_tcp or rds_rdma? [ 1070.983657][T23981] Invalid ELF header magic: != ELF [ 1074.173680][T24046] could not allocate digest TFM handle [ 1074.396419][T24053] could not allocate digest TFM handle [ 1074.537091][T24067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3966'. [ 1075.834283][T24112] futex_wake_op: syz.1.3976 tries to shift op by -1; fix this program [ 1076.282198][T24121] Invalid ELF header magic: != ELF [ 1086.337297][T24286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4022'. [ 1086.741795][T24286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4022'. [ 1086.893769][ T7328] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.078890][ T7328] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.400424][ T7328] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.627316][ T7328] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.927718][T18243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1087.936981][T18243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1087.955767][T18243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1087.985389][T18243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1088.004088][T18243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1088.022536][T18243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1088.358900][ T7328] bridge_slave_1: left allmulticast mode [ 1088.369038][ T7328] bridge_slave_1: left promiscuous mode [ 1088.376783][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.478497][T24317] Process accounting resumed [ 1088.487923][ T7328] bridge_slave_0: left allmulticast mode [ 1088.501613][ T7328] bridge_slave_0: left promiscuous mode [ 1088.511957][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.591347][T24317] RDS: rds_bind could not find a transport for ::ffff:172.20.20.52, load rds_tcp or rds_rdma? [ 1090.072064][ T5232] Bluetooth: hci0: command tx timeout [ 1090.237505][ T7328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1090.298825][ T7328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1090.338194][ T7328] bond0 (unregistering): Released all slaves [ 1090.975675][T24323] chnl_net:caif_netlink_parms(): no params data found [ 1091.439466][T23500] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1091.462306][T23500] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1091.472166][T23500] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1091.500926][T23500] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1091.509739][T23500] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1091.517535][T23500] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1091.999566][ T7328] hsr_slave_0: left promiscuous mode [ 1092.142169][ T7328] hsr_slave_1: left promiscuous mode [ 1092.154680][T18243] Bluetooth: hci0: command tx timeout [ 1092.154745][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1092.198087][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1092.269360][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1092.297342][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.371348][ T7328] veth1_macvtap: left promiscuous mode [ 1092.384441][ T7328] veth0_macvtap: left promiscuous mode [ 1092.392568][ T7328] veth1_vlan: left promiscuous mode [ 1092.397905][ T7328] veth0_vlan: left promiscuous mode [ 1092.562891][T18243] Bluetooth: hci3: command 0x0406 tx timeout [ 1093.592219][ T5232] Bluetooth: hci1: command tx timeout [ 1094.242437][ T5232] Bluetooth: hci0: command tx timeout [ 1094.455304][ T7328] team0 (unregistering): Port device team_slave_1 removed [ 1094.671668][ T7328] team0 (unregistering): Port device team_slave_0 removed [ 1095.673730][ T5232] Bluetooth: hci1: command tx timeout [ 1096.312008][ T5232] Bluetooth: hci0: command tx timeout [ 1096.743360][T24323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.750555][T24323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.787670][T24323] bridge_slave_0: entered allmulticast mode [ 1096.820402][T24323] bridge_slave_0: entered promiscuous mode [ 1096.843866][T24323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.850986][T24323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.877281][T24323] bridge_slave_1: entered allmulticast mode [ 1096.912272][T24323] bridge_slave_1: entered promiscuous mode [ 1097.345653][T24323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.367656][T24323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.536419][T24323] team0: Port device team_slave_0 added [ 1097.571007][T24323] team0: Port device team_slave_1 added [ 1097.757763][ T5232] Bluetooth: hci1: command tx timeout [ 1097.769871][T24323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1097.801893][T24323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1097.874354][T24323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1097.911991][T24323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1097.920486][T24323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1097.998008][T24323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.335641][T24323] hsr_slave_0: entered promiscuous mode [ 1098.351065][T24323] hsr_slave_1: entered promiscuous mode [ 1098.362915][T24323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1098.392005][T24323] Cannot create hsr debugfs directory [ 1098.574042][ T7328] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.650127][T24390] chnl_net:caif_netlink_parms(): no params data found [ 1098.814570][ T7328] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.976185][ T7328] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.246774][ T7328] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.538897][T24390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.575585][T24390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.600900][T24390] bridge_slave_0: entered allmulticast mode [ 1099.618504][T24390] bridge_slave_0: entered promiscuous mode [ 1099.833883][ T5232] Bluetooth: hci1: command tx timeout [ 1099.840381][T24390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.860617][T24390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.880597][T24390] bridge_slave_1: entered allmulticast mode [ 1099.949000][T24390] bridge_slave_1: entered promiscuous mode [ 1100.206191][T24390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.332908][T24390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.456115][T24390] team0: Port device team_slave_0 added [ 1100.573525][ T7328] bridge_slave_1: left allmulticast mode [ 1100.579213][ T7328] bridge_slave_1: left promiscuous mode [ 1100.587575][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.645658][ T7328] bridge_slave_0: left allmulticast mode [ 1100.651355][ T7328] bridge_slave_0: left promiscuous mode [ 1100.672128][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.606320][ T7328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.625521][ T7328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1101.643332][ T7328] bond0 (unregistering): Released all slaves [ 1101.671234][T24390] team0: Port device team_slave_1 added [ 1101.827136][T24390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.844326][T24390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.889167][T24390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.948271][T24390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.973451][T24390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.025449][T24390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.287782][T24323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1102.307906][T24323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1102.341403][T24390] hsr_slave_0: entered promiscuous mode [ 1102.379833][T24390] hsr_slave_1: entered promiscuous mode [ 1102.386679][T24390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1102.401884][T24390] Cannot create hsr debugfs directory [ 1102.421423][T24323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1102.452340][T24323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1102.526435][ T7328] hsr_slave_0: left promiscuous mode [ 1102.542043][ T7328] hsr_slave_1: left promiscuous mode [ 1102.552564][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1102.560018][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1102.600494][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1102.611959][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1102.661097][ T7328] veth1_macvtap: left promiscuous mode [ 1102.670379][ T7328] veth0_macvtap: left promiscuous mode [ 1102.678380][ T7328] veth1_vlan: left promiscuous mode [ 1102.687438][ T7328] veth0_vlan: left promiscuous mode [ 1103.733688][ T7328] team0 (unregistering): Port device team_slave_1 removed [ 1103.835749][ T7328] team0 (unregistering): Port device team_slave_0 removed [ 1105.503787][T24323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.574888][T24323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.645902][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.653074][ T6077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.749888][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.757075][ T6085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.936398][T24323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1106.182144][T24390] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1106.203281][T24390] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1106.222259][T24390] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1106.243726][T24599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4078'. [ 1106.254462][T24390] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1106.406246][T24323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1106.447554][T24390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.483077][T24390] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.544514][T24323] veth0_vlan: entered promiscuous mode [ 1106.559875][ T7328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.567034][ T7328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.586264][ T7328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.593533][ T7328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.615908][T24323] veth1_vlan: entered promiscuous mode [ 1106.737720][T24323] veth0_macvtap: entered promiscuous mode [ 1106.758247][T24323] veth1_macvtap: entered promiscuous mode [ 1106.806740][T24323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.828668][T24323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.847993][T24323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.885720][T24323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.911878][T24323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.935497][T24323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.964006][T24323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.997502][T24323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.040550][T24323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.060492][T24323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.102449][T24323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.122797][T24323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.150800][T24323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.173552][T24323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1107.204726][T24323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.228007][T24323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.252936][T24323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.263073][T24323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.331017][T24390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.416685][ T6085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.452476][ T6085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.543426][ T6077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.561332][T24390] veth0_vlan: entered promiscuous mode [ 1107.584458][ T6077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.608044][T24390] veth1_vlan: entered promiscuous mode [ 1107.712683][T24390] veth0_macvtap: entered promiscuous mode [ 1107.775825][T24390] veth1_macvtap: entered promiscuous mode [ 1107.806985][T24390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.840991][T24390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.868460][T24390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.897687][T24390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.917789][T24390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.932577][T18243] Bluetooth: hci6: command 0x0406 tx timeout [ 1107.958731][T24390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.027843][T24390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.062966][T24390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.103568][T24390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.155119][T24390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.166446][T24390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.181334][T24390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.193379][T24390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.205759][T24390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.216402][T24390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.227458][T24390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.255343][T24390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.273567][T24390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.294607][T24390] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.314210][T24390] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.332582][T24390] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.341326][T24390] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.544112][ T6085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.566309][ T6085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.636711][ T7328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.682599][ T7328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.993248][T24726] nbd: must specify an index to disconnect [ 1111.503169][T24728] Process accounting resumed [ 1111.917050][T24757] netlink: 146 bytes leftover after parsing attributes in process `syz.3.4098'. [ 1113.106277][T18243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1113.124235][T18243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1113.133030][T18243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1113.140920][T18243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1113.150207][T18243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1113.157855][T18243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1113.500378][ T29] audit: type=1326 audit(8277292097.448:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24763 comm="syz.0.4102" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a42d7dff9 code=0x0 [ 1113.596824][T24777] chnl_net:caif_netlink_parms(): no params data found [ 1113.825150][T24777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.842032][T24777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.849271][T24777] bridge_slave_0: entered allmulticast mode [ 1113.875483][T24777] bridge_slave_0: entered promiscuous mode [ 1113.889601][T24777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.915387][T24777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.932286][T24777] bridge_slave_1: entered allmulticast mode [ 1113.945532][T24777] bridge_slave_1: entered promiscuous mode [ 1114.063660][T24777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.096222][T24777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.199063][T24777] team0: Port device team_slave_0 added [ 1114.225593][T24777] team0: Port device team_slave_1 added [ 1114.370626][T24777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.393522][T24802] svc: failed to register nfsdv3 RPC service (errno 111). [ 1114.415801][T24777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.444775][T24802] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1114.480493][T24777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.514555][T24777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.542172][T24777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.601868][T24777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.825052][T24777] hsr_slave_0: entered promiscuous mode [ 1114.875300][T24777] hsr_slave_1: entered promiscuous mode [ 1114.939957][T24777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1114.960713][T24777] Cannot create hsr debugfs directory [ 1115.357899][ T5232] Bluetooth: hci4: command tx timeout [ 1115.836411][T24777] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.093986][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.100311][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.751140][T24777] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.881696][T24777] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.036955][T24777] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.355882][T24777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1117.416283][T24777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1117.432278][ T5232] Bluetooth: hci4: command tx timeout [ 1118.033147][T24777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1118.076481][T24777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1118.694009][T24777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.764598][T24777] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.845869][T24777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1118.872053][T24777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1119.283157][T15526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.290337][T15526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.363691][T15526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.370877][T15526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.533960][ T5232] Bluetooth: hci4: command tx timeout [ 1119.676390][T24777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.780907][T24777] veth0_vlan: entered promiscuous mode [ 1119.793919][T24777] veth1_vlan: entered promiscuous mode [ 1119.903983][T24777] veth0_macvtap: entered promiscuous mode [ 1119.971059][T24777] veth1_macvtap: entered promiscuous mode [ 1120.017867][T24777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1120.062072][T24777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.091991][T24777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1120.126843][T24777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.161932][T24777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1120.191931][T24777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.221891][T24777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1120.252465][T24777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.291977][T24777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1120.322175][T24777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.353325][T24777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1120.378219][T24777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.411956][T24777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.427328][T24777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.470124][T24777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.506188][T24777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.531907][T24777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.555865][T24777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.576875][T24777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.602125][T24777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.631966][T24777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.664406][T24777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.706405][T24777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.741896][T24777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.773327][T24777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.819179][T24777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.182085][T15534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.212540][T15534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.416452][ T6002] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.501381][ T7328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.541985][ T7328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.594228][ T5232] Bluetooth: hci4: command tx timeout [ 1121.626747][ T6002] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.850239][ T6002] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.909553][T18243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1121.928963][T18243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1121.938408][T18243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1121.946841][T18243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1121.956655][T18243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1121.964482][T18243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1122.060202][T24923] FAULT_INJECTION: forcing a failure. [ 1122.060202][T24923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1122.121240][ T6002] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.135768][T24923] CPU: 1 UID: 0 PID: 24923 Comm: syz.3.4137 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1122.146568][T24923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1122.156640][T24923] Call Trace: [ 1122.159931][T24923] [ 1122.162880][T24923] dump_stack_lvl+0x16c/0x1f0 [ 1122.167593][T24923] should_fail_ex+0x497/0x5b0 [ 1122.172311][T24923] _copy_to_user+0x30/0xc0 [ 1122.176757][T24923] __do_sys_newuname+0x17a/0x2e0 [ 1122.181737][T24923] ? __pfx___do_sys_newuname+0x10/0x10 [ 1122.187265][T24923] ? syscall_user_dispatch+0x77/0x140 [ 1122.192676][T24923] do_syscall_64+0xcd/0x250 [ 1122.197209][T24923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.203126][T24923] RIP: 0033:0x7f5c0657dff9 [ 1122.207558][T24923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1122.227193][T24923] RSP: 002b:00007f5c072f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000003f [ 1122.235630][T24923] RAX: ffffffffffffffda RBX: 00007f5c06735f80 RCX: 00007f5c0657dff9 [ 1122.243617][T24923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000340 [ 1122.251607][T24923] RBP: 00007f5c072f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1122.259599][T24923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1122.267593][T24923] R13: 0000000000000000 R14: 00007f5c06735f80 R15: 00007ffc99e55228 [ 1122.275601][T24923] [ 1122.844429][ T6002] bridge_slave_1: left allmulticast mode [ 1122.850124][ T6002] bridge_slave_1: left promiscuous mode [ 1122.900953][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.937181][ T6002] bridge_slave_0: left allmulticast mode [ 1122.944812][ T6002] bridge_slave_0: left promiscuous mode [ 1122.984293][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.267637][T24945] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4140'. [ 1123.962887][ T6002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.984132][ T6002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1124.010121][ T6002] bond0 (unregistering): Released all slaves [ 1124.072363][ T5232] Bluetooth: hci5: command tx timeout [ 1124.146032][T24920] chnl_net:caif_netlink_parms(): no params data found [ 1124.321302][T24969] FAULT_INJECTION: forcing a failure. [ 1124.321302][T24969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.344368][T24969] CPU: 1 UID: 0 PID: 24969 Comm: syz.3.4146 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1124.355191][T24969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1124.365269][T24969] Call Trace: [ 1124.368568][T24969] [ 1124.371515][T24969] dump_stack_lvl+0x16c/0x1f0 [ 1124.376226][T24969] should_fail_ex+0x497/0x5b0 [ 1124.380950][T24969] _copy_to_user+0x30/0xc0 [ 1124.385404][T24969] simple_read_from_buffer+0xd0/0x160 [ 1124.390817][T24969] proc_fail_nth_read+0x198/0x270 [ 1124.395925][T24969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1124.401937][T24969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1124.407518][T24969] vfs_read+0x1ce/0xbd0 [ 1124.411699][T24969] ? __fget_files+0x23a/0x3f0 [ 1124.416399][T24969] ? fdget_pos+0x24c/0x360 [ 1124.420835][T24969] ? __pfx_lock_release+0x10/0x10 [ 1124.425890][T24969] ? trace_lock_acquire+0x14a/0x1d0 [ 1124.431111][T24969] ? __pfx_vfs_read+0x10/0x10 [ 1124.435816][T24969] ? __pfx___mutex_lock+0x10/0x10 [ 1124.440879][T24969] ? __fget_files+0x244/0x3f0 [ 1124.445587][T24969] ksys_read+0x12f/0x260 [ 1124.449853][T24969] ? __pfx_ksys_read+0x10/0x10 [ 1124.454641][T24969] ? syscall_user_dispatch+0x77/0x140 [ 1124.460061][T24969] do_syscall_64+0xcd/0x250 [ 1124.464600][T24969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.470525][T24969] RIP: 0033:0x7f5c0657ca3c [ 1124.474958][T24969] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1124.494593][T24969] RSP: 002b:00007f5c072f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1124.503042][T24969] RAX: ffffffffffffffda RBX: 00007f5c06735f80 RCX: 00007f5c0657ca3c [ 1124.511041][T24969] RDX: 000000000000000f RSI: 00007f5c072f60a0 RDI: 0000000000000003 [ 1124.519042][T24969] RBP: 00007f5c072f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.527043][T24969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.535040][T24969] R13: 0000000000000000 R14: 00007f5c06735f80 R15: 00007ffc99e55228 [ 1124.543057][T24969] [ 1125.151235][T24920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.172021][T24920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.179502][T24920] bridge_slave_0: entered allmulticast mode [ 1125.213054][T24920] bridge_slave_0: entered promiscuous mode [ 1125.258498][T25003] )zV: entered promiscuous mode [ 1125.317037][ T6002] hsr_slave_0: left promiscuous mode [ 1125.368323][ T6002] hsr_slave_1: left promiscuous mode [ 1125.387524][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1125.402387][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1125.440197][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1125.462096][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.486967][ T6002] veth1_macvtap: left promiscuous mode [ 1125.501994][ T6002] veth0_macvtap: left promiscuous mode [ 1125.517907][ T6002] veth1_vlan: left promiscuous mode [ 1125.531976][ T6002] veth0_vlan: left promiscuous mode [ 1125.803286][T24998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4150'. [ 1125.882749][T25014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4156'. [ 1125.925820][ T29] audit: type=1326 audit(8277292109.878:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25013 comm=093D exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a42d7dff9 code=0x0 [ 1126.152260][ T5232] Bluetooth: hci5: command tx timeout [ 1126.190143][T25018] svc: failed to register nfsdv3 RPC service (errno 111). [ 1126.281972][T25018] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1127.494486][ T6002] team0 (unregistering): Port device team_slave_1 removed [ 1127.683602][ T6002] team0 (unregistering): Port device team_slave_0 removed [ 1128.232397][ T5232] Bluetooth: hci5: command tx timeout [ 1129.507849][T24920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.526864][T24920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.535081][T24920] bridge_slave_1: entered allmulticast mode [ 1129.544505][T24920] bridge_slave_1: entered promiscuous mode [ 1129.721435][T24920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.868698][T24920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.066754][T24920] team0: Port device team_slave_0 added [ 1130.150840][T24920] team0: Port device team_slave_1 added [ 1130.312393][ T5232] Bluetooth: hci5: command tx timeout [ 1130.506350][T24920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.542800][T24920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.591949][T24920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.925307][T24920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.943888][T24920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1131.020361][T24920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.383924][T24920] hsr_slave_0: entered promiscuous mode [ 1131.465016][T24920] hsr_slave_1: entered promiscuous mode [ 1131.479292][T24920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1131.487277][T24920] Cannot create hsr debugfs directory [ 1133.108823][ T29] audit: type=1326 audit(8277292117.061:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25138 comm="syz.3.4179" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c0657dff9 code=0x0 [ 1133.280039][T24920] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1133.305749][T24920] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1133.318205][T24920] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1133.343368][T24920] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1133.557352][T24920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.617219][T24920] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.638403][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.645632][ T7330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.698702][ T7328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.705885][ T7328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.238190][T24920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.393785][T24920] veth0_vlan: entered promiscuous mode [ 1134.411986][T24920] veth1_vlan: entered promiscuous mode [ 1134.434462][T24920] veth0_macvtap: entered promiscuous mode [ 1134.443601][T24920] veth1_macvtap: entered promiscuous mode [ 1134.490618][T24920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.521991][T24920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.542606][T24920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.571986][T24920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.592125][T24920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.621498][T24920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.641991][T24920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.662168][T24920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.685502][T24920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.731476][T24920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.753561][T24920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.774947][T24920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.819552][T24920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.842808][T24920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.874358][T24920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.904705][T24920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.931897][T24920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.964228][T24920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.998930][T24920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.041142][T24920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.077512][T24920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.103246][T24920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.155613][T24920] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.172171][T24920] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.201945][T24920] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.211010][T24920] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.455900][ T7328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.467615][ T7328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.639175][T25180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4181'. [ 1135.654703][ T7330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.687506][ T7330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.076960][ T7328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.227765][T25339] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4208'. [ 1140.487870][T18243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1140.498414][T18243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1140.508364][T18243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1140.518752][T18243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1140.527934][T18243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1140.536039][T18243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1140.608829][ T7328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.071323][ T7328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.114522][T25347] svc: failed to register nfsdv3 RPC service (errno 111). [ 1141.185094][T25347] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1141.277820][ T7328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.919361][T25341] chnl_net:caif_netlink_parms(): no params data found [ 1141.960413][ T7328] bridge_slave_1: left allmulticast mode [ 1141.994047][ T7328] bridge_slave_1: left promiscuous mode [ 1141.999826][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.127427][ T7328] bridge_slave_0: left allmulticast mode [ 1142.168790][ T7328] bridge_slave_0: left promiscuous mode [ 1142.199965][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.619968][T25375] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4214'. [ 1142.633384][ T5232] Bluetooth: hci5: command tx timeout [ 1144.722096][ T5232] Bluetooth: hci5: command tx timeout [ 1144.971320][T25404] delete_channel: no stack [ 1145.366343][ T7328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.114207][ T7328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.793025][ T5232] Bluetooth: hci5: command tx timeout [ 1147.694209][ T7328] bond0 (unregistering): Released all slaves [ 1148.881965][ T5232] Bluetooth: hci5: command tx timeout [ 1149.905112][T25341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.926555][T25341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.948045][T25341] bridge_slave_0: entered allmulticast mode [ 1149.964291][T25341] bridge_slave_0: entered promiscuous mode [ 1150.052387][T25341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.069625][T25341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.087648][T25341] bridge_slave_1: entered allmulticast mode [ 1150.114015][T25341] bridge_slave_1: entered promiscuous mode [ 1150.226129][ T7328] hsr_slave_0: left promiscuous mode [ 1150.235329][ T7328] hsr_slave_1: left promiscuous mode [ 1150.247045][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1150.268038][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1150.303675][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1150.311145][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.351377][ T7328] veth1_macvtap: left promiscuous mode [ 1150.374478][ T7328] veth0_macvtap: left promiscuous mode [ 1150.380120][ T7328] veth1_vlan: left promiscuous mode [ 1150.412101][ T7328] veth0_vlan: left promiscuous mode [ 1153.123128][ T7328] team0 (unregistering): Port device team_slave_1 removed [ 1153.237907][ T7328] team0 (unregistering): Port device team_slave_0 removed [ 1154.216120][T25341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.275412][T25341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.396831][T25341] team0: Port device team_slave_0 added [ 1154.437585][T25341] team0: Port device team_slave_1 added [ 1154.563048][T25341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1154.570499][T25341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.691380][T25341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.724021][T25341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1154.731004][T25341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.849931][T25341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.146155][T25341] hsr_slave_0: entered promiscuous mode [ 1155.172313][T25341] hsr_slave_1: entered promiscuous mode [ 1155.198655][T25341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1155.222768][T25341] Cannot create hsr debugfs directory [ 1155.664721][T25549] netlink: 229 bytes leftover after parsing attributes in process `syz.3.4253'. [ 1156.729050][T25581] futex_wake_op: syz.0.4258 tries to shift op by -1; fix this program [ 1156.926700][T25584] sctp: [Deprecated]: syz.3.4260 (pid 25584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1156.926700][T25584] Use struct sctp_sack_info instead [ 1157.004653][T25341] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1157.045491][T25341] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1157.073284][T25341] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1157.094666][T25341] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1157.288018][T25341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.305746][T25341] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.323613][ T7328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.330775][ T7328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.378212][ T7328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.385440][ T7328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.525570][T25341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1157.558337][T25341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1157.987109][T25341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.187675][T25341] veth0_vlan: entered promiscuous mode [ 1158.242518][T25341] veth1_vlan: entered promiscuous mode [ 1158.355630][T25341] veth0_macvtap: entered promiscuous mode [ 1158.399775][T25341] veth1_macvtap: entered promiscuous mode [ 1158.454886][T25341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.465493][T25341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.475868][T25341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.486398][T25341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.496349][T25341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.506835][T25341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.517012][T25341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.528313][T25341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.539232][T25341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.550094][T25341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.573938][T25341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1158.583616][T25341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.594193][T25341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.604077][T25341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.614801][T25341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.624949][T25341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.635725][T25341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.646485][T25341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.657721][T25341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.667971][T25341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.678828][T25341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.690028][T25341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1158.702749][T25341] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.711490][T25341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.720667][T25341] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.729567][T25341] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.110952][ T7328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.140095][ T7328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.198851][T15526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.222186][T15526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.640432][T25664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4271'. [ 1159.994807][T25675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4271'. [ 1161.282472][T25710] Process accounting resumed [ 1161.322812][T25710] RDS: rds_bind could not find a transport for ::ffff:172.20.20.52, load rds_tcp or rds_rdma? [ 1164.341965][T25809] Process accounting resumed [ 1165.782454][T25831] nbd: couldn't find device at index 914048202 [ 1170.333390][T18243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1170.351516][T18243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1170.359963][T18243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1170.370980][T18243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1170.391497][T18243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1170.399114][T18243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1171.596185][ T6002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.389641][ T29] audit: type=1326 audit(8277292073.165:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25913 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c0657dff9 code=0x0 [ 1172.481956][ T5232] Bluetooth: hci1: command tx timeout [ 1172.625256][ T6002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.237620][ T6002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.368824][T25893] chnl_net:caif_netlink_parms(): no params data found [ 1174.166946][ T6002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.552000][ T5232] Bluetooth: hci1: command tx timeout [ 1175.063861][T25893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.071070][T25893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.092192][T25893] bridge_slave_0: entered allmulticast mode [ 1175.099349][T25893] bridge_slave_0: entered promiscuous mode [ 1175.234669][T25893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.251925][T25893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.259193][T25893] bridge_slave_1: entered allmulticast mode [ 1175.283017][T25893] bridge_slave_1: entered promiscuous mode [ 1175.455427][T25893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1175.603405][ T6002] bridge_slave_1: left allmulticast mode [ 1175.609107][ T6002] bridge_slave_1: left promiscuous mode [ 1175.625966][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.636939][ T6002] bridge_slave_0: left allmulticast mode [ 1175.644750][ T6002] bridge_slave_0: left promiscuous mode [ 1175.650511][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.631995][ T5232] Bluetooth: hci1: command tx timeout [ 1177.414789][ T6002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.492419][ T6002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.515694][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.522579][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.560512][ T6002] bond0 (unregistering): Released all slaves [ 1177.614688][T25893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.904144][T25957] HSR: entered promiscuous mode [ 1177.920343][T25893] team0: Port device team_slave_0 added [ 1177.945168][T25893] team0: Port device team_slave_1 added [ 1178.278107][T25893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1178.321914][T25893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1178.414908][T25893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1178.474457][T25893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1178.481590][T25893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1178.601879][T25893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.712022][ T5232] Bluetooth: hci1: command tx timeout [ 1179.040907][T25893] hsr_slave_0: entered promiscuous mode [ 1179.069873][T25893] hsr_slave_1: entered promiscuous mode [ 1179.086625][T25893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1179.101888][T25893] Cannot create hsr debugfs directory [ 1180.846207][ T6002] hsr_slave_0: left promiscuous mode [ 1180.870106][ T6002] hsr_slave_1: left promiscuous mode [ 1180.912541][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1180.938093][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1181.072777][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1181.080238][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.251365][ T6002] veth1_macvtap: left promiscuous mode [ 1181.261958][ T6002] veth0_macvtap: left promiscuous mode [ 1181.267594][ T6002] veth1_vlan: left promiscuous mode [ 1181.291987][ T6002] veth0_vlan: left promiscuous mode [ 1183.683055][ T6002] team0 (unregistering): Port device team_slave_1 removed [ 1183.923184][ T6002] team0 (unregistering): Port device team_slave_0 removed [ 1185.770679][T26021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4330'. [ 1187.331880][T25893] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1187.377031][T25893] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1187.419663][T25893] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1187.458745][T25893] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1187.746012][T25893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.825273][T25893] 8021q: adding VLAN 0 to HW filter on device team0 [ 1187.903106][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.910249][ T6085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.953516][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.960644][ T6085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1188.091593][T25893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1188.699318][T25893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.892976][T25893] veth0_vlan: entered promiscuous mode [ 1188.935059][T25893] veth1_vlan: entered promiscuous mode [ 1189.015011][T26129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4345'. [ 1189.030731][T26129] veth0_macvtap: left promiscuous mode [ 1189.169327][T25893] veth0_macvtap: entered promiscuous mode [ 1189.242753][T25893] veth1_macvtap: entered promiscuous mode [ 1189.320074][T25893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1189.334944][T25893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.361964][T25893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1189.381005][T25893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.441246][T25893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1189.463371][T25893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.474296][T25893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1189.512505][T25893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.532160][T25893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1189.561826][T25893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.593573][T25893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.679705][T25893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1189.723208][T25893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.752098][T25893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1189.776543][T25893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.822039][T25893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1189.860498][T25893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.883116][T25893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1189.912305][T25893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.940032][T25893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1189.969751][T25893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.020351][T25893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1190.054682][T25893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.084592][T25893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.136623][T25893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.168253][T25893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.471590][ T6085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.500808][ T6085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.594020][T15526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.614820][T15526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.605287][ T29] audit: type=1326 audit(8277292050.490:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26313 comm="syz.0.4373" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9abf7dff9 code=0x0 [ 1195.652082][ T29] audit: type=1326 audit(8277292050.510:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26313 comm="syz.0.4373" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9abf7dff9 code=0x0 [ 1196.094488][T26309] Process accounting resumed [ 1196.731430][T26355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4378'. [ 1197.328845][T26360] svc: failed to register nfsdv3 RPC service (errno 111). [ 1197.347021][T26360] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1199.966944][T26455] ptrace attach of "./syz-executor exec"[25341] was attempted by "./syz-executor exec"[26455] [ 1200.789189][T26481] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1201.519418][T26500] svc: failed to register nfsdv3 RPC service (errno 111). [ 1201.549026][T26500] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1202.731698][T26532] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1203.034173][T26539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4426'. [ 1208.346216][ T7328] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.501743][ T7328] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.656351][ T7328] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.714772][T23500] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1208.724620][T23500] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1208.732825][T23500] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1208.740695][T23500] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1208.749283][T23500] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1208.757497][T23500] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1208.920833][ T7328] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.307978][ T7328] bridge_slave_1: left allmulticast mode [ 1209.333495][ T7328] bridge_slave_1: left promiscuous mode [ 1209.339261][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.398957][ T7328] bridge_slave_0: left allmulticast mode [ 1209.419844][ T7328] bridge_slave_0: left promiscuous mode [ 1209.467225][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.312534][T23500] Bluetooth: hci0: command 0x0406 tx timeout [ 1210.886335][ T5232] Bluetooth: hci1: command tx timeout [ 1211.161141][ T7328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1211.178138][ T7328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1211.211658][ T7328] bond0 (unregistering): Released all slaves [ 1212.165562][T26636] chnl_net:caif_netlink_parms(): no params data found [ 1212.866347][ T7328] hsr_slave_0: left promiscuous mode [ 1212.872794][ T7328] hsr_slave_1: left promiscuous mode [ 1212.883433][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1212.890886][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1212.952134][ T5232] Bluetooth: hci1: command tx timeout [ 1213.001181][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1213.022892][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.099560][ T7328] veth1_macvtap: left promiscuous mode [ 1213.124114][ T7328] veth0_macvtap: left promiscuous mode [ 1213.140029][ T7328] veth1_vlan: left promiscuous mode [ 1213.150157][ T7328] veth0_vlan: left promiscuous mode [ 1215.031993][ T5232] Bluetooth: hci1: command tx timeout [ 1215.440383][ T7328] team0 (unregistering): Port device team_slave_1 removed [ 1215.564673][ T7328] team0 (unregistering): Port device team_slave_0 removed [ 1217.112051][ T5232] Bluetooth: hci1: command tx timeout [ 1217.548612][T26636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.581935][T26636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.599436][T26636] bridge_slave_0: entered allmulticast mode [ 1217.641337][T26636] bridge_slave_0: entered promiscuous mode [ 1217.664550][T26636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.671700][T26636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.701631][T26636] bridge_slave_1: entered allmulticast mode [ 1217.709421][T26636] bridge_slave_1: entered promiscuous mode [ 1218.174570][T26636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.210669][T26636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.490847][T26636] team0: Port device team_slave_0 added [ 1218.510645][T26636] team0: Port device team_slave_1 added [ 1218.642514][T26636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.677036][T26636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1218.750738][T26636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1218.769592][T26636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1218.811866][T26636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1218.858476][T26636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.058675][T26636] hsr_slave_0: entered promiscuous mode [ 1219.083698][T26636] hsr_slave_1: entered promiscuous mode [ 1219.108700][T26636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1219.138646][T26636] Cannot create hsr debugfs directory [ 1221.300611][T26636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1221.331023][T26636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1221.348096][T26636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1221.378574][T26636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1221.581351][T26636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.667377][T26636] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.704345][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.711466][ T6085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.770963][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.778136][ T6085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.865973][T26636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1221.884660][T26636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1222.290517][T26636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.403796][T26636] veth0_vlan: entered promiscuous mode [ 1222.444658][T26636] veth1_vlan: entered promiscuous mode [ 1222.538400][T26636] veth0_macvtap: entered promiscuous mode [ 1222.564347][T26636] veth1_macvtap: entered promiscuous mode [ 1222.660955][T26636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1222.735343][T26636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.760861][T26636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1222.782145][T26636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.799165][T26636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1222.809723][T26636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.820098][T26636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1222.830657][T26636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.840555][T26636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1222.851212][T26636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.863462][T26636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1222.874050][T26636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1222.884735][T26636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.894612][T26636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1222.905169][T26636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.915135][T26636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1222.925595][T26636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.935481][T26636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1222.945978][T26636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.956459][T26636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1222.967470][T26636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.979131][T26636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1223.027983][T26636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.037100][T26636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.051466][T26636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.060426][T26636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.294069][ T6085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.334656][ T6085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.379585][ T7330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.394238][ T7330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.989958][T26993] svc: failed to register nfsdv3 RPC service (errno 111). [ 1227.008853][T26998] nbd: must specify at least one socket [ 1227.043754][T26993] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1231.701671][T27162] openvswitch: netlink: Flow key attribute not present in set flow. [ 1232.530769][T27182] netlink: zone id is out of range [ 1232.538051][T27182] netlink: zone id is out of range [ 1232.572001][T27182] netlink: zone id is out of range [ 1232.577437][T27182] netlink: zone id is out of range [ 1232.611939][T27182] netlink: zone id is out of range [ 1232.617098][T27182] netlink: set zone limit has 4 unknown bytes [ 1233.091905][T27188] netlink: 'syz.3.4550': attribute type 282 has an invalid length. [ 1233.716728][ T6085] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.900310][ T6085] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.176533][ T6085] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.536134][ T6085] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.662665][T27229] ptrace attach of "./syz-executor exec"[24323] was attempted by "./syz-executor exec"[27229] [ 1234.905743][T23500] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1234.914951][T23500] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1234.925877][T23500] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1234.934188][T23500] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1234.941813][T23500] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1234.949800][T23500] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1235.088017][T27231] chnl_net:caif_netlink_parms(): no params data found [ 1235.591402][T27231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.602080][T27231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.609323][T27231] bridge_slave_0: entered allmulticast mode [ 1235.632938][T27231] bridge_slave_0: entered promiscuous mode [ 1235.664597][T27231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.688052][T27231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.708740][T27231] bridge_slave_1: entered allmulticast mode [ 1235.729660][T27231] bridge_slave_1: entered promiscuous mode [ 1235.938881][T27231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.994694][T27231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1236.135664][T27264] Process accounting resumed [ 1236.245360][T27231] team0: Port device team_slave_0 added [ 1236.267083][T27231] team0: Port device team_slave_1 added [ 1236.535402][T27263] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4567'. [ 1236.626150][ T6085] bridge_slave_1: left allmulticast mode [ 1236.651818][ T6085] bridge_slave_1: left promiscuous mode [ 1236.657601][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.782579][ T6085] bridge_slave_0: left allmulticast mode [ 1236.788282][ T6085] bridge_slave_0: left promiscuous mode [ 1236.823654][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.192352][T23500] Bluetooth: hci4: command tx timeout [ 1238.962682][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.969118][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.282063][T23500] Bluetooth: hci4: command tx timeout [ 1241.215670][ T6085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1241.274223][ T6085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1241.382178][T23500] Bluetooth: hci4: command tx timeout [ 1241.532049][ T29] audit: type=1326 audit(8277292043.600:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27329 comm="syz.3.4579" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c0657dff9 code=0x0 [ 1241.994435][ T6085] bond0 (unregistering): Released all slaves [ 1242.007768][T27231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.015198][T27231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1242.042172][T27231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.056136][T27231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.063335][T27231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1242.092230][T27231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.458004][T27231] hsr_slave_0: entered promiscuous mode [ 1242.513458][T27231] hsr_slave_1: entered promiscuous mode [ 1242.617484][T27231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1242.641832][T27231] Cannot create hsr debugfs directory [ 1242.992049][ T6085] hsr_slave_0: left promiscuous mode [ 1243.007261][ T6085] hsr_slave_1: left promiscuous mode [ 1243.023678][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1243.031144][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1243.072652][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1243.096277][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1243.154559][ T6085] veth1_macvtap: left promiscuous mode [ 1243.160406][ T6085] veth0_macvtap: left promiscuous mode [ 1243.166732][ T6085] veth1_vlan: left promiscuous mode [ 1243.172301][ T6085] veth0_vlan: left promiscuous mode [ 1243.441938][T23500] Bluetooth: hci4: command tx timeout [ 1245.718723][ T6085] team0 (unregistering): Port device team_slave_1 removed [ 1245.900448][ T6085] team0 (unregistering): Port device team_slave_0 removed [ 1252.463865][T27231] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1253.006137][T27231] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1253.138935][T27231] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1253.269583][T27231] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1253.589717][T27231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1253.641343][T27231] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.693759][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.700924][ T7330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.847408][T15521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.854597][T15521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.329770][T27231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1254.348593][T27532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4610'. [ 1254.421925][T27231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1255.076261][T27231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1255.230207][T27231] veth0_vlan: entered promiscuous mode [ 1255.273668][T27231] veth1_vlan: entered promiscuous mode [ 1255.374226][T27231] veth0_macvtap: entered promiscuous mode [ 1255.413057][T27231] veth1_macvtap: entered promiscuous mode [ 1255.477448][T27231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.542447][T27231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.594112][T27231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.627749][T27231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.661914][T27231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.681897][T27231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.731892][T27231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.768920][T27231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.823429][T27231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.851312][T27231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.886014][T27231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.902221][T27566] nbd: must specify an index to disconnect [ 1255.921280][T27231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.973157][T27231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.021844][T27231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1256.061815][T27231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.071680][T27231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1256.131827][T27231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.179977][T27231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1256.232002][T27231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.261457][T27231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1256.281979][T27231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.293691][T27231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1256.317980][T27231] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.327316][T27231] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.341980][T27231] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.351019][T27231] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.452034][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.459902][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.792640][ T30] INFO: task syz.2.4071:24553 blocked for more than 143 seconds. [ 1258.800692][ T30] Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1258.809213][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1258.818378][ T30] task:syz.2.4071 state:D stack:28592 pid:24553 tgid:24550 ppid:22061 flags:0x00004004 [ 1258.829042][ T30] Call Trace: [ 1258.832579][ T30] [ 1258.835538][ T30] __schedule+0xef5/0x5750 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1258.839988][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1258.846079][ T30] ? __pfx___schedule+0x10/0x10 [ 1258.851148][ T30] ? schedule+0x298/0x350 [ 1258.857294][ T30] ? __pfx_lock_release+0x10/0x10 [ 1258.862593][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 1258.867836][ T30] ? lock_acquire+0x2f/0xb0 [ 1258.872735][ T30] ? schedule+0x1fd/0x350 [ 1258.877101][ T30] schedule+0xe7/0x350 [ 1258.881605][ T30] schedule_timeout+0x258/0x2a0 [ 1258.886781][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1258.892736][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1258.897991][ T30] __wait_for_common+0x3e1/0x600 [ 1258.903755][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1258.912410][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 1258.921817][ T30] ? __pfx_try_to_wake_up+0x10/0x10 [ 1258.927319][ T30] wait_for_completion_state+0x1c/0x40 [ 1258.971889][ T30] do_coredump+0x82f/0x4160 [ 1258.976477][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 1259.001856][ T30] ? __pfx_do_coredump+0x10/0x10 [ 1259.006872][ T30] ? __switch_to+0x749/0x1180 [ 1259.030225][ T30] ? __schedule+0xefd/0x5750 [ 1259.054941][ T30] get_signal+0x237c/0x26d0 [ 1259.059513][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1259.091840][ T30] ? __pfx_get_signal+0x10/0x10 [ 1259.096983][ T30] ? force_sig_info_to_task+0x3a0/0x660 [ 1259.124603][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 1259.130234][ T30] ? __pfx_force_exit_sig+0x10/0x10 [ 1259.171918][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1259.192212][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 1259.197931][ T30] do_syscall_64+0xda/0x250 [ 1259.251577][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.261893][ T30] RIP: 0033:0x7fce17b7dff9 [ 1259.266364][ T30] RSP: 002b:00007fce175de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1259.301866][ T30] RAX: ffffffffffffffda RBX: 00007fce17d36060 RCX: 00007fce17b7dff9 [ 1259.342119][ T30] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fce17d36064 [ 1259.350167][ T30] RBP: 00007fce17d36058 R08: 00007fce1887e080 R09: 0000000000000000 [ 1259.425129][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce17d36064 [ 1259.454585][ T30] R13: 0000000000000000 R14: 00007ffd13ad2590 R15: 00007ffd13ad2678 [ 1259.489473][ T30] [ 1259.502896][ T30] [ 1259.502896][ T30] Showing all locks held in the system: [ 1259.526822][ T30] 1 lock held by khungtaskd/30: [ 1259.531835][ T30] #0: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 1259.580216][ T30] 2 locks held by getty/4984: [ 1259.598536][ T30] #0: ffff88802e67c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1259.629914][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 1259.661879][ T30] 1 lock held by syz-executor/5215: [ 1259.691880][ T30] 5 locks held by kworker/u8:29/6085: [ 1259.697771][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 1259.748867][ T30] #1: ffffc900043b7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 1259.820669][ T30] #2: ffffffff8faad510 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 1259.843395][ T30] #3: ffffffff8fac3128 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0x8f/0x9b0 [ 1259.861890][ T30] #4: ffffffff8ddc30f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1259.881841][ T30] 3 locks held by kworker/u8:42/7328: [ 1259.887361][ T30] #0: ffff88802dc17148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 1259.902618][ T30] #1: ffffc9000d3a7d80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 1259.932113][ T30] #2: ffffffff8fac3128 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcf/0x14d0 [ 1259.941706][ T30] 1 lock held by syz.2.1004/9665: [ 1259.971913][ T30] 3 locks held by kworker/1:5/15235: [ 1259.977246][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 1260.031867][ T30] #1: ffffc90009647d80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 1260.063292][ T30] #2: ffffffff8fac3128 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1260.109789][ T30] 1 lock held by syz.2.4071/24551: [ 1260.120783][ T30] 2 locks held by syz-executor/27231: [ 1260.127280][ T30] #0: ffffffff8fb61190 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1260.152135][ T30] #1: ffffffff8fac3128 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0xb4/0xb10 [ 1260.161728][ T30] 2 locks held by syz.3.4583/27363: [ 1260.189081][ T30] 1 lock held by syz.1.4598/27435: [ 1260.202069][ T30] 2 locks held by syz.3.4605/27484: [ 1260.207306][ T30] 2 locks held by syz.0.4606/27490: [ 1260.231934][ T30] 2 locks held by syz.0.4606/27491: [ 1260.237185][ T30] 2 locks held by syz.0.4606/27499: [ 1260.271869][ T30] 3 locks held by syz.1.4603/27503: [ 1260.277119][ T30] 2 locks held by syz.3.4605/27505: [ 1260.292204][ T30] 2 locks held by syz.3.4612/27552: [ 1260.297435][ T30] #0: ffffffff8faad510 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 1260.346704][ T30] #1: ffffffff8fac3128 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x40b/0x860 [ 1260.362566][ T30] 1 lock held by dhcpcd/27619: [ 1260.367375][ T30] #0: ffff88803b2bd608 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x270 [ 1260.414659][ T30] 2 locks held by dhcpcd/27622: [ 1260.419565][ T30] #0: ffff88805460e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1260.462025][ T30] #1: ffffffff8ddc30f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1260.502005][ T30] 1 lock held by dhcpcd/27623: [ 1260.506818][ T30] #0: ffff88804efa0258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1260.551902][ T30] [ 1260.554278][ T30] ============================================= [ 1260.554278][ T30] [ 1260.604096][ T30] NMI backtrace for cpu 0 [ 1260.608477][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1260.619006][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1260.629093][ T30] Call Trace: [ 1260.632391][ T30] [ 1260.635342][ T30] dump_stack_lvl+0x116/0x1f0 [ 1260.640065][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1260.645032][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1260.651047][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1260.657066][ T30] watchdog+0xf0c/0x1240 [ 1260.661354][ T30] ? __pfx_watchdog+0x10/0x10 [ 1260.666061][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1260.671284][ T30] ? __kthread_parkme+0x148/0x220 [ 1260.676326][ T30] ? __pfx_watchdog+0x10/0x10 [ 1260.681029][ T30] kthread+0x2c1/0x3a0 [ 1260.685107][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1260.690404][ T30] ? __pfx_kthread+0x10/0x10 [ 1260.695006][ T30] ret_from_fork+0x45/0x80 [ 1260.699428][ T30] ? __pfx_kthread+0x10/0x10 [ 1260.704027][ T30] ret_from_fork_asm+0x1a/0x30 [ 1260.708815][ T30] [ 1260.712838][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1260.718087][ C1] NMI backtrace for cpu 1 [ 1260.718100][ C1] CPU: 1 UID: 0 PID: 15528 Comm: kworker/u8:49 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1260.718129][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1260.718144][ C1] Workqueue: bat_events batadv_nc_worker [ 1260.718174][ C1] RIP: 0010:__lock_acquire+0x2b3/0x3ce0 [ 1260.718211][ C1] Code: 04 02 84 c0 74 08 3c 03 0f 8e e6 2c 00 00 41 0f b7 45 20 49 8d 7d 08 48 89 fa 48 c1 ea 03 66 25 00 e0 44 09 f0 66 41 89 45 20 <48> b8 00 00 00 00 00 fc ff df 80 3c 02 00 0f 85 02 2c 00 00 48 8b [ 1260.718234][ C1] RSP: 0018:ffffc900046af960 EFLAGS: 00000006 [ 1260.718252][ C1] RAX: 0000000000000022 RBX: 0000000000000000 RCX: 1ffff110111688e5 [ 1260.718268][ C1] RDX: 1ffff110111688e7 RSI: 0000000000000022 RDI: ffff888088b44738 [ 1260.718284][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1260.718298][ C1] R10: 000000000000000a R11: 0000000000000002 R12: ffffffff8ddb7800 [ 1260.718313][ C1] R13: ffff888088b44730 R14: 0000000000000022 R15: ffff888088b43c00 [ 1260.718329][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1260.718352][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1260.718366][ C1] CR2: 0000560451b93600 CR3: 000000000db7c000 CR4: 00000000003526f0 [ 1260.718379][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1260.718393][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1260.718408][ C1] Call Trace: [ 1260.718415][ C1] [ 1260.718424][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1260.718451][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1260.718486][ C1] ? nmi_handle+0x1a9/0x5c0 [ 1260.718510][ C1] ? __lock_acquire+0x2b3/0x3ce0 [ 1260.718544][ C1] ? default_do_nmi+0x6a/0x160 [ 1260.718565][ C1] ? exc_nmi+0x170/0x1e0 [ 1260.718585][ C1] ? end_repeat_nmi+0xf/0x53 [ 1260.718630][ C1] ? __lock_acquire+0x2b3/0x3ce0 [ 1260.718663][ C1] ? __lock_acquire+0x2b3/0x3ce0 [ 1260.718697][ C1] ? __lock_acquire+0x2b3/0x3ce0 [ 1260.718730][ C1] [ 1260.718737][ C1] [ 1260.718749][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1260.718782][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 1260.718817][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1260.718853][ C1] lock_acquire.part.0+0x11b/0x380 [ 1260.718888][ C1] ? batadv_nc_worker+0x164/0x1060 [ 1260.718915][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1260.718950][ C1] ? rcu_is_watching+0x12/0xc0 [ 1260.718976][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 1260.719003][ C1] ? batadv_nc_worker+0x164/0x1060 [ 1260.719030][ C1] ? lock_acquire+0x2f/0xb0 [ 1260.719061][ C1] ? batadv_nc_worker+0x164/0x1060 [ 1260.719089][ C1] batadv_nc_worker+0x16a/0x1060 [ 1260.719115][ C1] ? batadv_nc_worker+0x164/0x1060 [ 1260.719143][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1260.719169][ C1] ? rcu_is_watching+0x12/0xc0 [ 1260.719194][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 1260.719221][ C1] ? process_one_work+0x8bb/0x1b30 [ 1260.719256][ C1] ? lock_acquire+0x2f/0xb0 [ 1260.719288][ C1] ? process_one_work+0x8bb/0x1b30 [ 1260.719324][ C1] process_one_work+0x958/0x1b30 [ 1260.719361][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1260.719387][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1260.719425][ C1] ? assign_work+0x1a0/0x250 [ 1260.719457][ C1] worker_thread+0x6c8/0xf00 [ 1260.719496][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1260.719529][ C1] kthread+0x2c1/0x3a0 [ 1260.719554][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1260.719579][ C1] ? __pfx_kthread+0x10/0x10 [ 1260.719609][ C1] ret_from_fork+0x45/0x80 [ 1260.719629][ C1] ? __pfx_kthread+0x10/0x10 [ 1260.719654][ C1] ret_from_fork_asm+0x1a/0x30 [ 1260.719694][ C1] [ 1260.941816][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1260.941835][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 1260.941862][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1260.941876][ T30] Call Trace: [ 1260.941883][ T30] [ 1260.941892][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1260.941929][ T30] panic+0x71d/0x800 [ 1260.941958][ T30] ? __pfx_panic+0x10/0x10 [ 1260.941987][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1260.942014][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1260.942046][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1260.942071][ T30] ? watchdog+0xd76/0x1240 [ 1260.942100][ T30] ? watchdog+0xd69/0x1240 [ 1260.942133][ T30] watchdog+0xd87/0x1240 [ 1260.942168][ T30] ? __pfx_watchdog+0x10/0x10 [ 1260.942196][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1260.942224][ T30] ? __kthread_parkme+0x148/0x220 [ 1260.942252][ T30] ? __pfx_watchdog+0x10/0x10 [ 1260.942281][ T30] kthread+0x2c1/0x3a0 [ 1260.942305][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1260.942329][ T30] ? __pfx_kthread+0x10/0x10 [ 1260.942361][ T30] ret_from_fork+0x45/0x80 [ 1260.942382][ T30] ? __pfx_kthread+0x10/0x10 [ 1260.942407][ T30] ret_from_fork_asm+0x1a/0x30 [ 1260.942449][ T30] [ 1261.206832][ T30] Kernel Offset: disabled [ 1261.211145][ T30] Rebooting in 86400 seconds..