last executing test programs: 10.944861717s ago: executing program 1 (id=1461): io_uring_register$auto(0x4, 0x0, &(0x7f0000000000)="9981b41721bdc384a7", 0x1ff) 10.144811477s ago: executing program 1 (id=1464): mmap$auto(0x4000002, 0x1, 0x3d2, 0xeb4, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x800, 0x0) setresgid$auto(0x81, 0x800000a0, 0x8) socket(0x3, 0x2, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) exit$auto(0x7) unshare$auto(0x40000080) exit$auto(0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mknod$auto(&(0x7f0000000180)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e', 0x1, 0x4) acct$auto(&(0x7f0000000380)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') acct$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) socket(0xb, 0x2, 0x40010) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) socket(0x15, 0x5, 0x0) bpf$auto(0x0, 0x0, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x3, 0x0) bind$auto(0x27, &(0x7f0000000280)={0x0, @sa_data_min="fc0400"}, 0x71) getsockopt$auto(0x3, 0xff, 0x99, 0xfffffffffffffffe, 0xfffffffffffffffd) sendto$auto(0x4, &(0x7f0000000480)="18f9a2c3f461c254acf5db45f3f087108b7746a1af579e94dcab22c28b4b28ce953fc355464ca7f92b728532d207606cb29c09118e71e9524d9b0cf3ac032f96bcc24ee5d839ca063a650b669f0ececcce71dde1b772b890404cfc5765b4ad22829ea7ee7354d2a6a269bdb9b0dd6df3bed129adf64f72923f1de6a2af5a64026211cf002d2c7100e6180c74475c337ef58e6380009d060babef5efb30fcc6e65c57324a46d005fe69340893b046f2bde6c8d6fad0b88a9f6403dd7e13744ec3a37f7757d5b14af9d14aec50158b9e9ffc6fc1394d94cbfa988a7d9377254dd6c89931c218dab6bc25997e76044c12eef68d08ef2c201b127cf40285", 0x6, 0x5, &(0x7f0000000040)={0x6, @sa_data_min="4c13be94d04b473ce828061172e2"}, 0x1) mmap$auto(0x5, 0x8, 0xffff, 0x9b72, 0x9, 0x7ffc) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) socket(0x2b, 0x3, 0x2) 7.508015173s ago: executing program 1 (id=1477): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0x4000000e1, 0xeb1, 0x401, 0x8000) mq_open$auto(&(0x7f0000000100)='{+-%{},]%**!]\x00', 0x3ff, 0x7, &(0x7f0000000140)={0x7, 0x2f05, 0xa509, 0x4, [0x3e86, 0x1, 0xf, 0x8000000000]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mq_getsetattr$auto(0x0, &(0x7f0000000000)={0x2, 0x567f527d, 0x8, 0xa40, [0x5, 0xcec1, 0x3, 0x8]}, &(0x7f0000000040)={0x2, 0x5, 0x6, 0x0, [0x7fff, 0x7, 0x81, 0x80]}) 6.999949782s ago: executing program 0 (id=1479): setsockopt$auto(0x4, 0x0, 0x20, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b75, 0x5, 0x8000) mlock$auto(0xfbe8, 0x4) mlock$auto(0xf70a, 0x0) clone$auto(0xffff, 0x0, &(0x7f0000000040)=0x80000000, 0x0, 0x5) mlock$auto(0x7c88, 0x7fff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004010}, 0x0) setgroups$auto(0xe32, &(0x7f0000000040)=0x9) sched_setaffinity$auto(0x0, 0x80000000, &(0x7f0000000040)=0x1b26a056) socket(0x2, 0xa, 0xe57a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) cachestat$auto(0x0, &(0x7f00000000c0)={0x5, 0x427370f5}, &(0x7f0000000100)={0x3, 0x7, 0x9, 0x2, 0x7}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) exit$auto(0x4) waitid$auto(0x0, 0x1009, 0x0, 0x7, 0xfffffffffffffffc) mincore$auto(0x0, 0x8000000000005b, 0xfffffffffffffffc) mknod$auto(0xfffffffffffffffc, 0x3, 0x2) request_key$auto(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syslog$auto(0x4, &(0x7f0000000040)='..\x00', 0x7) socket$nl_generic(0x10, 0x3, 0x10) 6.660824516s ago: executing program 2 (id=1482): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x30, 0x3, 0x6) listen$auto(0x3, 0x81) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) socket(0xa, 0x1, 0x6) setsockopt$auto(0x3, 0x0, 0xb, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0x22240, 0x155) mmap$auto(0x0, 0x8, 0x1000000004, 0x20009b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x4, 0x0, &(0x7f0000000000)="9981b41721bdc384a7", 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) getsockopt$auto(0x6, 0x40000000029, 0x1, 0xfffffffffffffffe, 0x0) 5.808469666s ago: executing program 0 (id=1483): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) utime$auto(0x0, 0x0) mknod$auto(0x0, 0x1, 0x8) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) brk$auto(0x7fffffffffffffff) 5.5392283s ago: executing program 1 (id=1485): getgroups$auto(0x5, &(0x7f0000000180)=0x3) r0 = socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r0) sendmsg$auto_ETHTOOL_MSG_MM_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x2080) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) socket(0xa, 0x3, 0x6) socket(0xa, 0x2, 0x0) socket(0x11, 0x2, 0x300) sendmmsg$auto(0x8, &(0x7f0000000080)={{&(0x7f0000000100)="b151e6595b11e8be63e5c0e4", 0x10001, &(0x7f0000000040)={0x0, 0x5}, 0x9, &(0x7f0000000300), 0x6, 0xfffffffb}, 0x4}, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) connect$auto(0x226, &(0x7f0000000000)={0x19, @sockaddr_1_1={"909341009a1542ae5ee0df363e9be29fde038ddefccc6921e8194e4c64549560809aed7148db84db7f4321d62fdb1f4c76cbae23"}}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x6, &(0x7f0000000400)={{0x0, 0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x1, &(0x7f0000000300), 0x20, 0x8000000}, 0xed7138c}, 0x6, 0x0) 5.431082056s ago: executing program 3 (id=1486): mmap$auto(0x4000002, 0x1, 0x3d2, 0xeb4, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x800, 0x0) setresgid$auto(0x81, 0x800000a0, 0x8) socket(0x3, 0x2, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) exit$auto(0x7) unshare$auto(0x40000080) exit$auto(0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mknod$auto(&(0x7f0000000180)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e', 0x1, 0x4) acct$auto(&(0x7f0000000380)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') acct$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) socket(0xb, 0x2, 0x40010) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) socket(0x15, 0x5, 0x0) bpf$auto(0x0, 0x0, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x3, 0x0) bind$auto(0x27, &(0x7f0000000280)={0x0, @sa_data_min="fc0400"}, 0x71) getsockopt$auto(0x3, 0xff, 0x99, 0xfffffffffffffffe, 0xfffffffffffffffd) sendto$auto(0x4, &(0x7f0000000480)="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", 0x6, 0x5, &(0x7f0000000040)={0x6, @sa_data_min="4c13be94d04b473ce828061172e2"}, 0x1) mmap$auto(0x5, 0x8, 0xffff, 0x9b72, 0x9, 0x7ffc) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) socket(0x2b, 0x3, 0x2) 5.167121661s ago: executing program 2 (id=1487): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24004141) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x8, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xc57138c}, 0x9a6, 0xe000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) unlinkat$auto(0x6, 0xfffffffffffffffe, 0xa5d) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="11", @ANYRES16=r1, @ANYBLOB="010326bd7000fedbdf250c00000008000100", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 4.791459288s ago: executing program 1 (id=1488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x301, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (fail_nth: 1) 4.386637658s ago: executing program 3 (id=1489): close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioperm$auto(0x7, 0x6, 0x2) ioperm$auto(0x3, 0xa1, 0x0) r0 = socket(0x28, 0x5, 0x0) mmap$auto(0xb, 0x20009, 0x200, 0xeb1, 0x2, 0x7ffc) io_uring_setup$auto(0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r0) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="83000000", @ANYRES16=r2, @ANYBLOB="380425bd7000fbdbdf250f00000007000100db474600070001004bb7680007000100de08f10007000100547aa30007000100fd447400"], 0x3c}}, 0x24000005) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r3 = socket(0x2, 0x6, 0x0) r4 = socket(0x10, 0x3, 0x6) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="00012bbd7000fbdbdf250d000000ef4e3b417b4dc867c4488a46a9b379a0b8d45fe890f56379d087767b0fb1b9fe9b7fb6590ebe4cd4c22a58e7c19a7667cd270172dde43e1317325ebc685d7378b9e5138418a9eb"], 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0x4004880) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) sysfs$auto(0x1, 0xffffffffffffffff, 0x20400000000003) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x0, 0x1, 0x0) fanotify_init$auto(0x8000000000000000, 0x1) fanotify_mark$auto(0x400000000000, 0x102, 0x9, 0x0, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x4000000, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) ioprio_set$auto(0x664c, 0x800000000, 0x8) clone$auto(0x80007ffe, 0x8000000000400004, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mmap$auto(0x0, 0x8, 0xfffffffffffffff6, 0x19, 0x7, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 4.330576077s ago: executing program 0 (id=1490): renameat$auto(0x5, &(0x7f0000000000)='/\x00', 0x6, &(0x7f0000000040)='/\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) clone$auto(0x1, 0x8ea2, 0xfffffffffffffffe, 0xfffffffffffffffc, 0xffffffffffffffff) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) keyctl$auto(0x8, 0x3a7, 0x4, 0x1, 0x7) clock_nanosleep$auto(0x2, 0xd43bae6e, 0x0, 0xfffffffffffffffc) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) bpf$auto(0x0, &(0x7f0000000100)=@query={@target_ifindex, 0x100, 0xb20, 0xc, 0xffffffffffffffff, @prog_cnt=0x1, 0x0, 0xffffffffeae75901, 0x7fffffffffffffff, 0xffffffffffff7fff, 0x1}, 0xa5) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x0, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xffff, 0xffff7fff, 0x2, 0x2, 0x200, 0x3, 0x0, 0x3}}) 3.880772975s ago: executing program 1 (id=1491): unshare$auto(0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) truncate$auto(0x0, 0xa) (async, rerun: 64) socket(0x27, 0x4, 0xe9) (rerun: 64) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async, rerun: 32) socket(0x15, 0x5, 0x0) (async, rerun: 32) r0 = socket(0x10, 0x4, 0x0) close_range$auto(0x2, 0x8000, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r1 = socket(0xa, 0x5, 0x0) (async, rerun: 32) fcntl$auto(0xff80000000000000, 0x406, 0x1) r2 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000100), r0) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x33a8, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xb6, 0x3, "33bbeb94e0a7fe7de977869b1955de85b2fd489c3848d68e614c246d13cbddb6deb9c2324bb142126af119ffe95915479621f6c9083451212ad0f8b02b68b3abf4c87aa18e9c84af56e68eb1199304c30b10b304ce452711016a9b240e1f0923c8e7611bfdd8143e8f7119d7701b356352592191cb7d0f7d0e8f85ec962ddf311761164fa84600a3e26321056e5634e9880b2eabb1799a45e728fed7bb74531a2e0278058c28091be326288c048816f755aa"}, @TIPC_NLA_SOCK={0x1004, 0x2, "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"}, @TIPC_NLA_PUBL={0x9b, 0x3, "9cde15da34680c08e2c808976c35bd102a74aa57e9faa32cb07c6b0bd344c243481389b79b72838aff34f2b39ae9b5c10c0de6ab10d35342a8bedc73d6aa1282134f7d168004ea7c6903cea45aca43c4217a6cf6169d46a34d6b129eb0ecde65acbcb400be6baa56eefa823ce2813fe84ee3233f2f2996dd6b0de407dc3914bed71ea0a2251ea7aa52751aa0a7d1f06a0200f661e45e1c"}, @TIPC_NLA_MEDIA={0x91, 0x5, "c81260430f43a91aad5eebf7570b098e3a24c24fe2aabf9f07d69d3a0a28840b8c204b23b06922bba37f2511a43b02238696538fca89a0db50db6b4dc034f9078e396e011b8f42464833b3c2736aa60babc8bf705753a18d4872cf39aaa92b4e9cd67fce358f355d7bee27d6973f9b6f5c0d9d7af92cea74b1eb25d23b31cb45597f4828f3239010a2c9b1824b"}, @TIPC_NLA_PUBL={0xfb, 0x3, "6d68687478c814acf5239e3005f9add5605fbf331d366312f31c4eed405d96953b91274ed8951d1139789b0c4cef8414a2ef93ab5fbe92b96eaa268cb3a6e42d5bf54350d458755f5c047c86d57f47682847336173871751ebf62069a1b9d18b3fadd3a204606a35e4d4582885e516b503d757cf80ed37a08c048b4e20f1858501e96bee115e2953676a3a4cf49adf0f3bf75b7aa234479203205cde984332fe6d1b5f91aeaaf7f1e655f4ffb9c04a3f64737518dc0963bf1d753d6735fb53e182de5a3a839bde4eb0a007b41051ad3b2ea0f0ed032c2432b3b8a70769417765ac30dc605fbca70acccbe606ad3c95204fdfb1aee38fac"}, @TIPC_NLA_BEARER={0x6, 0x1, "c2b5"}, @TIPC_NLA_NODE={0x1004, 0x6, "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"}, @TIPC_NLA_PUBL={0x1004, 0x3, "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"}, @TIPC_NLA_NODE={0x9a, 0x6, "43edce91f376528c3ca832d4399c629d2758fc68fc0508a4d7ee77a181ad42a0c741490ba97a1c44bdc5ac81f896ac1e04cdb4c481ead949d687ddbf940f1652d1c0cf104c606f5efd742f1b9dbf1cf171f8abc0ea2055a8243493d66388ef0d926aa81712c74dc92266dee5153ef711d02b75d70fba1ae0a355a5804c5569b3f2d752070aa774c8d1afc45989ddb89c76292571ab6b"}]}, 0x33a8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000881) socket$nl_generic(0x10, 0x3, 0x10) (async) futex$auto(&(0x7f0000000240)=0x2948, 0x0, 0x2948, &(0x7f00000000c0)={0x225c17d04, 0x8}, 0x0, 0x5) futex$auto(&(0x7f0000000000)=0xf0fe, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) (async) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x2000000c) (async, rerun: 64) semctl$auto(0x1ff, 0x2, 0x13, 0x1) (async, rerun: 64) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) socket(0xa, 0x2, 0x200) (async) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(&(0x7f0000000080)='#)-\\&[}\x00', 0xde8, 0x1, 0x0) mq_open$auto(&(0x7f0000000280)='#)-\\&[}\x00', 0x5, 0x10, 0x0) (async) unshare$auto(0x9) mq_getsetattr$auto(0x7, &(0x7f0000000140)={0x200000000000, 0x2, 0x7, 0x1, [0x4, 0x2007, 0x4, 0x1]}, &(0x7f0000000180)={0x0, 0x4, 0x9, 0xfffffffffffffd3e, [0x6, 0x7, 0xffffffffffffffff]}) mq_open$auto(&(0x7f0000000000)='#)-\\&[}\x00', 0x8, 0x1, &(0x7f0000000040)={0x8, 0x9, 0xfffffffffffffff7, 0x9, [0x3, 0x4, 0x3, 0x9]}) 3.482108708s ago: executing program 3 (id=1492): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_MAC802154_HWSIM(0x0, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) madvise$auto(0x0, 0x8000000000000002, 0x9) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x3, 0x0, 0x9, 0x0, 0x4) 3.000738557s ago: executing program 2 (id=1493): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0x4000000e1, 0xeb1, 0x401, 0x8000) mq_open$auto(&(0x7f0000000100)='{+-%{},]%**!]\x00', 0x3ff, 0x7, &(0x7f0000000140)={0x7, 0x2f05, 0xa509, 0x4, [0x3e86, 0x1, 0xf, 0x8000000000]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mq_getsetattr$auto(0x0, &(0x7f0000000000)={0x2, 0x567f527d, 0x8, 0xa40, [0x5, 0xcec1, 0x3, 0x8]}, &(0x7f0000000040)={0x2, 0x5, 0x6, 0x0, [0x7fff, 0x7, 0x81, 0x80]}) 2.80111741s ago: executing program 0 (id=1494): madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mmap$auto(0x0, 0x3, 0x4, 0x9b72, 0x5, 0x8000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2, 0x3ff57697, 0x19, 0x8000002, 0x6) io_uring_setup$auto(0x6, 0x0) bpf$auto(0x800000000000001f, 0xfffffffffffffffe, 0x0) tgkill$auto(0x8000000000005, 0xffffffffffffffe9, 0x100000000) pipe2$auto(&(0x7f0000000000)=0x3, 0x7) mmap$auto(0x2000000000000000, 0x8, 0x1000000000dc, 0x9b72, 0x7, 0x8003) ptrace$auto(0x6, 0x1, 0x3, 0x180000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) setresuid$auto(0x3, 0x2, 0x6) madvise$auto(0x0, 0x8000000000000002, 0xd) bpf$auto(0x15, &(0x7f00000000c0)=@bpf_attr_1={0x7, 0xfffffffffffffff4, @value=0x8000000000000000, 0x8000400000000000}, 0xcf) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 2.033791501s ago: executing program 3 (id=1495): mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) socket(0xa, 0x801, 0x84) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_11={0x21, 0x7, 0x9, 0x2, 0x301, 0x6b, 0x9ddb, 0xe98e}, 0x6f4) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x8, 0xffffffef, 0x18c, 0x6a, 0x0, 0x8, 0x3, 0x9, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", 0x0, 0x541, 0x4, 0x7, 0x3, 0x1009, 0x4, 0x2, 0xe, 0x5, @attach_btf_obj_fd=0x3, 0x166, 0x7ff, 0x6, 0x6, 0x48000000, 0xa7c2}, 0x7) connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1={"d9ef7f"}}, 0x55) listen$auto(0x3, 0x9) accept$auto(0x3, &(0x7f0000000100)={0xf40, @sockaddr_1_1}, &(0x7f0000000140)=0x7) socket(0xa, 0x801, 0x106) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) shmctl$auto(0x0, 0x1, &(0x7f0000000300)={{0x19d6, 0x0, 0xfffffffe, 0x9, 0x3, 0x8, 0x5}, 0x7, 0xffffffffffffff67, 0x2, 0x9, 0x5, 0x8, 0x1db3, 0x0, 0x0, 0x0}) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x75, 0x0, 0x8) socket(0x2a, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) clone$auto(0x2020003b46, 0x2, 0x0, 0x0, 0x8000000000000001) ioperm$auto(0x3, 0x5, 0x149) mlockall$auto(0x6) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x8) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) mknod$auto(&(0x7f0000000280)='$}\x00', 0x0, 0xfffffffd) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000000)='$}\x00') mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendfile$auto(0x401, 0x9, &(0x7f00000002c0)=0x80000000, 0x100000) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x8) 1.770153315s ago: executing program 3 (id=1496): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x30, 0x3, 0x6) listen$auto(0x3, 0x81) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) socket(0xa, 0x1, 0x6) setsockopt$auto(0x3, 0x0, 0xb, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0x22240, 0x155) mmap$auto(0x0, 0x8, 0x1000000004, 0x20009b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x4, 0x0, &(0x7f0000000000)="9981b41721bdc384a7", 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) 1.75137177s ago: executing program 0 (id=1497): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket(0x2, 0x1, 0x0) r0 = socket(0xf, 0x2, 0xfffffffd) (async) renameat$auto(0x5, &(0x7f0000000000)='/\x00', 0x6, &(0x7f0000000040)='/\x00') (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) clone$auto(0x1, 0x8ea2, 0xfffffffffffffffe, 0xfffffffffffffffc, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x9, 0x72, 0x8b74, 0x2, 0x8000) (async) keyctl$auto(0x8, 0x3a7, 0x4, 0x1, 0x7) clock_nanosleep$auto(0x2, 0x543bae6e, 0x0, 0xfffffffffffffffc) (async) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x0, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xffff, 0xffff7fff, 0x2, 0x2, 0x200, 0x3, 0x0, 0x3}}) (async) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) (async) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) (async) ioperm$auto(0x3, 0x5, 0x149) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mount_setattr$auto(0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x20) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8800) (async) fchown$auto(0x2, 0xffffffff, 0xa1a9) (async) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20020000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000405}, 0x8010) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xa4, r1, 0x57e63da72c774082, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xe}, @NL802154_ATTR_CCA_MODE={0x8}, @NL802154_ATTR_SEC_KEY={0x79, 0x30, "4de5a8072df13ece95b0b50145e123518e01396f28de599904d42e7ebdc01371a3bca1ceabe906fa39019347faaf889f8fff923367635a130ccb0f99102fad1c718200e9c2d4a4f24c857d20ea70a1fb0c2145d436f906948281deec2e180877b5859162a6e9433066ce7744b3973d71b4a225c99c"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44010}, 0x4000) r2 = syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$auto_IEEE802154_DEL_IFACE(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f40), 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x4c, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x32}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x27240}, @IEEE802154_ATTR_CSMA_RETRIES={0x5}, @IEEE802154_ATTR_CCA_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4049}, 0xc011) (async) sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x4}, @IEEE802154_ATTR_DEV_NAME={0x6, 0x1, '/\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000800) (async) vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x2}, 0x2, 0x5) (async) read$auto(0x3, 0x0, 0x80) 1.701086633s ago: executing program 2 (id=1498): r0 = socket$nl_generic(0x10, 0x3, 0x10) personality$auto(0x40004010410ffc) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) r1 = syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001840), r2) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x14, r3, 0xf09, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x8}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24048094) 1.498964866s ago: executing program 2 (id=1499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x301, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (fail_nth: 2) 960.680649ms ago: executing program 2 (id=1500): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = socket(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x9, 0x4, 0x8, 0x17, 0x401, 0x4) sendmsg$auto_SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x20000040) exit$auto(0x7) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x2, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x14c, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0x3b}, @NL80211_ATTR_MLO_TTLM_ULINK={0xf8, 0x149, "d37b4a70a7e7f181cbb0846e7415f66c43c7627a87bb48b6caa982a408f7e1e81b675485bc443d8cc67bd635d23be3999ec7699392320c3c68da278d92585ca741970d7691a8ea53823b648cd9dbae55f43292dbaee6485d18fad1337c297b7d98aa39c3e26fb7784c6de6794bf4e640a9b83eb14185a50a7cee94f2da3d5888f6630b92f83b9b9e1c0a698f4df2e3136851a52d7a0098416189c6fac6a9d3773bab3d69be8f8b4cd9b7a6aa492206789dac9cf698fe23a0b575f4e175b58937fe10337e23c1dd3e8309246970928290e36e794cbd38c0b663f6a91bf99d790f753bd68bafe92d535c491ffc8012462b4872bc80"}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1000}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_SSID={0x24, 0x34, "9fa59b009ec33e187bd93ea96c3175dbffb5f461328ae8b2c09bc22d5ef2f841"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) connect$auto(0x3, 0x0, 0x55) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) madvise$auto(0xfffffffe00000000, 0x2, 0xc7) write$auto(0x1, 0x0, 0x1) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r3) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="414af7af", @ANYRESHEX=r2, @ANYBLOB="01002dbd7000fadbdf2502000000080001008d6f"], 0x1c}, 0x1, 0x0, 0x0, 0x40000021}, 0x8845) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0xe985, 0xdf, 0xeb1, 0x2, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7ffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x3, 0x5, 0x4) mincore$auto(0x0, 0x8000000000005a, 0x0) mkdir$auto(0x0, 0x40) 859.898475ms ago: executing program 3 (id=1501): socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x2, @new_prog_fd=0x4, 0x7, @old_prog_fd=0x8000}, 0xa3) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x7, 0x207, 0x7, 0x7, 0x9, 0x0, 0x8000000000000001, 0x2800000000000002, 0x9, 0xde582974, 0xff, 0xa, 0x4, 0x7, 0x8, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) socket(0x1, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 0s ago: executing program 0 (id=1502): syz_open_procfs$namespace(0x0, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc9, 0x0, 0x567) socket(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x20000000) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000940), r0) syz_genetlink_get_family_id$auto_NLBL_UNLBL(&(0x7f0000000a80), r0) setsockopt$auto(0x3, 0x1, 0x28, 0xffffffffffffffff, 0x0) close_range$auto(0x81, 0xfffffffffffff000, 0x2) socket(0xa, 0x3, 0xff) close_range$auto(0x1, 0x9, 0x2) kernel console output (not intermixed with test programs): 50:50:50:50:50 [ 80.695002][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.875664][ T5296] mmap: syz.0.1 (5296) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.919459][ T5304] process 'syz.2.3' launched ':,' with NULL argv: empty string added [ 81.328044][ T5233] Bluetooth: hci1: command tx timeout [ 81.330996][ T54] Bluetooth: hci2: command tx timeout [ 81.334170][ T5233] Bluetooth: hci0: command tx timeout [ 81.407524][ T54] Bluetooth: hci3: command tx timeout [ 82.697940][ T5347] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.399315][ T54] Bluetooth: hci2: command tx timeout [ 83.404804][ T54] Bluetooth: hci0: command tx timeout [ 83.410592][ T5239] Bluetooth: hci1: command tx timeout [ 83.479372][ T54] Bluetooth: hci3: command tx timeout [ 83.676595][ T5359] syz.3.20 (5359) used greatest stack depth: 21488 bytes left [ 84.119577][ T5375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24'. [ 84.223380][ T5376] svc: failed to register nfsdv3 RPC service (errno 111). [ 84.247656][ T5376] svc: failed to register nfsaclv3 RPC service (errno 111). [ 84.515494][ T54] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 84.518659][ T5381] gre0: entered allmulticast mode [ 85.025979][ T5392] mmap: syz.2.27 (5392): VmData 20746240 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 85.738080][ T5398] Zero length message leads to an empty skb [ 86.971529][ T54] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 87.141033][ T5421] gre0: entered allmulticast mode [ 87.647344][ T5432] svc: failed to register nfsdv3 RPC service (errno 111). [ 87.688717][ T5436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.38'. [ 87.716622][ T5432] svc: failed to register nfsaclv3 RPC service (errno 111). [ 90.110038][ T54] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 90.112486][ T5467] gre0: entered allmulticast mode [ 90.525692][ T5475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.51'. [ 92.138833][ T46] cfg80211: failed to load regulatory.db [ 100.768097][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.112'. [ 100.802038][ T5719] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 101.416126][ T5735] ======================================================= [ 101.416126][ T5735] WARNING: The mand mount option has been deprecated and [ 101.416126][ T5735] and is ignored by this kernel. Remove the mand [ 101.416126][ T5735] option from the mount to silence this warning. [ 101.416126][ T5735] ======================================================= [ 105.259086][ T5763] netlink: 172 bytes leftover after parsing attributes in process `syz.3.124'. [ 107.123035][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 107.437252][ T29] audit: type=1326 audit(1728474445.734:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.1.140" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53e117dff9 code=0x0 [ 111.078563][ T5894] Process accounting resumed [ 111.456928][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.941735][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.957002][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.980445][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.996100][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.017954][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 112.026295][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.349884][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.658337][ T5911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.154'. [ 112.766115][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.155966][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.677063][ T5904] chnl_net:caif_netlink_parms(): no params data found [ 113.936489][ T62] bridge_slave_1: left allmulticast mode [ 113.944182][ T62] bridge_slave_1: left promiscuous mode [ 113.981374][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.122333][ T54] Bluetooth: hci3: command tx timeout [ 114.176764][ T62] bridge_slave_0: left allmulticast mode [ 114.187381][ T62] bridge_slave_0: left promiscuous mode [ 114.193847][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.197389][ T54] Bluetooth: hci3: command tx timeout [ 116.553874][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.594383][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.676197][ T62] bond0 (unregistering): Released all slaves [ 117.375734][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.387687][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.403122][ T5904] bridge_slave_0: entered allmulticast mode [ 117.420491][ T5904] bridge_slave_0: entered promiscuous mode [ 118.139386][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.163868][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.181569][ T5904] bridge_slave_1: entered allmulticast mode [ 118.192650][ T5904] bridge_slave_1: entered promiscuous mode [ 118.277444][ T54] Bluetooth: hci3: command tx timeout [ 118.879335][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.916817][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.125642][ T62] hsr_slave_0: left promiscuous mode [ 119.153229][ T62] hsr_slave_1: left promiscuous mode [ 119.165840][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.193046][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.220346][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.247446][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.303914][ T62] veth1_macvtap: left promiscuous mode [ 119.327482][ T62] veth0_macvtap: left promiscuous mode [ 119.333802][ T62] veth1_vlan: left promiscuous mode [ 119.347531][ T62] veth0_vlan: left promiscuous mode [ 119.423100][ T6031] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.358256][ T54] Bluetooth: hci3: command tx timeout [ 121.074489][ T62] team0 (unregistering): Port device team_slave_1 removed [ 121.261405][ T62] team0 (unregistering): Port device team_slave_0 removed [ 121.270314][ T6076] syz.1.187 uses obsolete (PF_INET,SOCK_PACKET) [ 121.708643][ T5904] team0: Port device team_slave_0 added [ 121.787034][ T5904] team0: Port device team_slave_1 added [ 121.876526][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.889721][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.922776][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.945390][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.971139][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.012455][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.132153][ T5904] hsr_slave_0: entered promiscuous mode [ 122.175464][ T5904] hsr_slave_1: entered promiscuous mode [ 122.201947][ T5904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.229681][ T5904] Cannot create hsr debugfs directory [ 123.401935][ T5904] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 123.468018][ T5904] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 123.518574][ T5904] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 123.539689][ T6125] Invalid ELF header magic: != ELF [ 123.561618][ T5904] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 123.744973][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.809467][ T5904] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.846054][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.853264][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.878734][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.885896][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.560321][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.597800][ T5904] veth0_vlan: entered promiscuous mode [ 124.613281][ T5904] veth1_vlan: entered promiscuous mode [ 124.713876][ T5904] veth0_macvtap: entered promiscuous mode [ 124.733449][ T5904] veth1_macvtap: entered promiscuous mode [ 124.906677][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.966758][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.994122][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.015132][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.037241][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.063610][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.098668][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.181813][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.200407][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.227195][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.242722][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.263919][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.303303][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.324209][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.439178][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.585286][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.650045][ T5904] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.684710][ T5904] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.715303][ T5904] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.752923][ T5904] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.755681][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 125.779042][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 125.792608][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 125.811828][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 125.837567][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 125.846514][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 125.975037][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.345147][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.057430][ T3034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.065316][ T3034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.116546][ T11] bridge_slave_1: left allmulticast mode [ 127.125688][ T11] bridge_slave_1: left promiscuous mode [ 127.144705][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.190143][ T11] bridge_slave_0: left allmulticast mode [ 127.195868][ T11] bridge_slave_0: left promiscuous mode [ 127.212498][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.957379][ T5239] Bluetooth: hci1: command tx timeout [ 128.368526][ T11] gre0 (unregistering): left allmulticast mode [ 129.929363][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.037731][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.042627][ T5239] Bluetooth: hci1: command tx timeout [ 130.056006][ T11] bond0 (unregistering): Released all slaves [ 130.159344][ T6287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.201356][ T6287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.335642][ T6192] chnl_net:caif_netlink_parms(): no params data found [ 131.159151][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.166448][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.188834][ T6192] bridge_slave_0: entered allmulticast mode [ 131.206401][ T6192] bridge_slave_0: entered promiscuous mode [ 131.217543][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.232094][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.261394][ T6192] bridge_slave_1: entered allmulticast mode [ 131.302094][ T6192] bridge_slave_1: entered promiscuous mode [ 131.707426][ T11] hsr_slave_0: left promiscuous mode [ 131.757291][ T11] hsr_slave_1: left promiscuous mode [ 131.867410][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.874900][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.927980][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.935452][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.006496][ T11] veth1_macvtap: left promiscuous mode [ 132.020740][ T11] veth0_macvtap: left promiscuous mode [ 132.027099][ T11] veth1_vlan: left promiscuous mode [ 132.032610][ T11] veth0_vlan: left promiscuous mode [ 132.046464][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.056072][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.072088][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.092812][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.109705][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 132.118065][ T5233] Bluetooth: hci1: command tx timeout [ 132.123863][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.639519][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.222'. [ 133.560752][ T11] team0 (unregistering): Port device team_slave_1 removed [ 133.671800][ T11] team0 (unregistering): Port device team_slave_0 removed [ 134.197825][ T5239] Bluetooth: hci1: command tx timeout [ 134.197866][ T54] Bluetooth: hci0: command tx timeout [ 135.275731][ T6192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.351163][ T6192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.602511][ T6192] team0: Port device team_slave_0 added [ 135.658229][ T6192] team0: Port device team_slave_1 added [ 135.726016][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.747442][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.802342][ T6192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.819950][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.827048][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.861937][ T6192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.977133][ T6192] hsr_slave_0: entered promiscuous mode [ 135.988394][ T6192] hsr_slave_1: entered promiscuous mode [ 136.007660][ T6192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.015267][ T6192] Cannot create hsr debugfs directory [ 136.277887][ T54] Bluetooth: hci0: command tx timeout [ 136.397986][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.475114][ T6334] chnl_net:caif_netlink_parms(): no params data found [ 136.560528][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.624266][ T6388] netlink: 16 bytes leftover after parsing attributes in process `syz.3.228'. [ 136.746071][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.950721][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.147598][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.160651][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.183619][ T6334] bridge_slave_0: entered allmulticast mode [ 137.193119][ T6406] can: request_module (can-proto-0) failed. [ 137.208644][ T6334] bridge_slave_0: entered promiscuous mode [ 137.278302][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.298828][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.314412][ T6334] bridge_slave_1: entered allmulticast mode [ 137.324056][ T6334] bridge_slave_1: entered promiscuous mode [ 137.475831][ T6334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.633331][ T6334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.744485][ T11] bridge_slave_1: left allmulticast mode [ 137.754327][ T11] bridge_slave_1: left promiscuous mode [ 137.762279][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.775094][ T11] bridge_slave_0: left allmulticast mode [ 137.781322][ T11] bridge_slave_0: left promiscuous mode [ 137.792672][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.160318][ T11] gre0 (unregistering): left allmulticast mode [ 138.203214][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.210565][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.256427][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.265400][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.273890][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.282753][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.290959][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 138.303239][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.357921][ T54] Bluetooth: hci0: command tx timeout [ 138.386398][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.398677][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.411816][ T11] bond0 (unregistering): Released all slaves [ 138.428765][ T6334] team0: Port device team_slave_0 added [ 138.441721][ T6334] team0: Port device team_slave_1 added [ 138.579019][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.594584][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.630516][ T6334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.746358][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.770938][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.818066][ T6334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.043048][ T6334] hsr_slave_0: entered promiscuous mode [ 139.067061][ T6334] hsr_slave_1: entered promiscuous mode [ 139.085585][ T6334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.103287][ T6334] Cannot create hsr debugfs directory [ 139.220608][ T11] hsr_slave_0: left promiscuous mode [ 139.231537][ T11] hsr_slave_1: left promiscuous mode [ 139.242623][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.253096][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.268229][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.275712][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.310180][ T11] veth1_macvtap: left promiscuous mode [ 139.316113][ T11] veth0_macvtap: left promiscuous mode [ 139.322418][ T11] veth1_vlan: left promiscuous mode [ 139.328319][ T11] veth0_vlan: left promiscuous mode [ 139.852221][ T11] team0 (unregistering): Port device team_slave_1 removed [ 139.891823][ T11] team0 (unregistering): Port device team_slave_0 removed [ 140.234676][ T6192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 140.253920][ T6192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 140.323758][ T6192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 140.343230][ T6192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 140.358496][ T54] Bluetooth: hci3: command tx timeout [ 140.442767][ T54] Bluetooth: hci0: command tx timeout [ 140.806573][ T6435] chnl_net:caif_netlink_parms(): no params data found [ 141.193517][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.206283][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.225193][ T6435] bridge_slave_0: entered allmulticast mode [ 141.234006][ T6435] bridge_slave_0: entered promiscuous mode [ 141.314734][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.361266][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.374151][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.382757][ T6435] bridge_slave_1: entered allmulticast mode [ 141.396393][ T6435] bridge_slave_1: entered promiscuous mode [ 141.487720][ T6192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.524214][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.570095][ T6435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.592033][ T6435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.708856][ T6435] team0: Port device team_slave_0 added [ 141.747410][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.824004][ T6435] team0: Port device team_slave_1 added [ 141.929532][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.990108][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.001945][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.041383][ T6435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.126400][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.157393][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.218066][ T6435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.254361][ T6334] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.276013][ T6334] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 142.316828][ T6192] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.399418][ T6334] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 142.430352][ T6334] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 142.441192][ T54] Bluetooth: hci3: command tx timeout [ 142.476832][ T6435] hsr_slave_0: entered promiscuous mode [ 142.486729][ T6435] hsr_slave_1: entered promiscuous mode [ 142.502368][ T6435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.527599][ T6435] Cannot create hsr debugfs directory [ 142.539292][ T6283] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.547237][ T6283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.765997][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.773174][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.814164][ T11] bridge_slave_1: left allmulticast mode [ 142.820154][ T11] bridge_slave_1: left promiscuous mode [ 142.831204][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.859393][ T11] bridge_slave_0: left allmulticast mode [ 142.865111][ T11] bridge_slave_0: left promiscuous mode [ 142.878722][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.646592][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.717909][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.758373][ T11] bond0 (unregistering): Released all slaves [ 144.137093][ T6192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.167226][ T6192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.337510][ T11] hsr_slave_0: left promiscuous mode [ 144.393403][ T11] hsr_slave_1: left promiscuous mode [ 144.405207][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.417389][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.437811][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.445281][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.492926][ T11] veth1_macvtap: left promiscuous mode [ 144.507770][ T11] veth0_macvtap: left promiscuous mode [ 144.513543][ T11] veth1_vlan: left promiscuous mode [ 144.519043][ T54] Bluetooth: hci3: command tx timeout [ 144.531951][ T11] veth0_vlan: left promiscuous mode [ 145.101494][ T11] team0 (unregistering): Port device team_slave_1 removed [ 145.140690][ T11] team0 (unregistering): Port device team_slave_0 removed [ 145.549931][ T6334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.661366][ T6334] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.693816][ T6192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.708823][ T29] audit: type=1326 audit(1728474484.034:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.0.253" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35d537dff9 code=0x0 [ 145.764237][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.253'. [ 145.792130][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.799343][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.998818][ T1061] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.005972][ T1061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.052925][ T6192] veth0_vlan: entered promiscuous mode [ 146.069464][ T6192] veth1_vlan: entered promiscuous mode [ 146.097895][ T6192] veth0_macvtap: entered promiscuous mode [ 146.122330][ T6192] veth1_macvtap: entered promiscuous mode [ 146.223496][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.259678][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.289141][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.321839][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.350359][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.383829][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.429919][ T6192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.457306][ T6192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.477115][ T6192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.490655][ T6192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.597542][ T54] Bluetooth: hci3: command tx timeout [ 146.699361][ T6334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.722679][ T6435] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.786988][ T6435] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.827820][ T6435] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.883663][ T6435] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.958395][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.966280][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.017007][ T6334] veth0_vlan: entered promiscuous mode [ 147.075331][ T6334] veth1_vlan: entered promiscuous mode [ 147.223208][ T6295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.239854][ T6334] veth0_macvtap: entered promiscuous mode [ 147.259609][ T6295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.282444][ T6435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.294870][ T6334] veth1_macvtap: entered promiscuous mode [ 147.342974][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.376093][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.398758][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.430888][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.488350][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.500909][ T6435] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.532426][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.545501][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.560183][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.570791][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.581961][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.596386][ T6334] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.609969][ T6334] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.618990][ T6334] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.628132][ T6334] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.691017][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.698246][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.731267][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.738483][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.952021][ T6283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.979053][ T6283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.035116][ T6295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.077204][ T6295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.501997][ T6435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.681048][ T6435] veth0_vlan: entered promiscuous mode [ 148.727463][ T6435] veth1_vlan: entered promiscuous mode [ 148.865496][ T6435] veth0_macvtap: entered promiscuous mode [ 148.902757][ T6435] veth1_macvtap: entered promiscuous mode [ 148.956918][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.018898][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.067199][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.127429][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.157495][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.187213][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.208652][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.458941][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.514161][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.524201][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.534739][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.544802][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.555448][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.566830][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.649771][ T6435] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.668215][ T6435] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.690480][ T6435] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.707675][ T6435] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.215626][ T6683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.241538][ T6683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.296186][ T6683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.318454][ T6696] Invalid ELF header magic: != ELF [ 150.323959][ T6683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.883440][ T6788] futex_wake_op: syz.1.279 tries to shift op by 64; fix this program [ 163.873549][ T6994] netlink: 'syz.0.329': attribute type 11 has an invalid length. [ 164.149787][ T6291] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.256132][ T6291] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.330182][ T6291] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.423334][ T6291] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.551603][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.588207][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.602768][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.611984][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.620055][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 164.659924][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.831776][ T6291] bridge_slave_1: left allmulticast mode [ 164.847459][ T6291] bridge_slave_1: left promiscuous mode [ 164.853231][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.908279][ T6291] bridge_slave_0: left allmulticast mode [ 164.917349][ T6291] bridge_slave_0: left promiscuous mode [ 164.923140][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.296945][ T6291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.357666][ T6291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.425610][ T6291] bond0 (unregistering): Released all slaves [ 166.757521][ T5239] Bluetooth: hci3: command tx timeout [ 167.861589][ T7012] chnl_net:caif_netlink_parms(): no params data found [ 168.185194][ T6291] hsr_slave_0: left promiscuous mode [ 168.247305][ T6291] hsr_slave_1: left promiscuous mode [ 168.333533][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.347307][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.376292][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.417340][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.509189][ T6291] veth1_macvtap: left promiscuous mode [ 168.515677][ T6291] veth0_macvtap: left promiscuous mode [ 168.538198][ T6291] veth1_vlan: left promiscuous mode [ 168.543578][ T6291] veth0_vlan: left promiscuous mode [ 168.837285][ T5239] Bluetooth: hci3: command tx timeout [ 170.088166][ T6291] team0 (unregistering): Port device team_slave_1 removed [ 170.307022][ T6291] team0 (unregistering): Port device team_slave_0 removed [ 170.917212][ T5239] Bluetooth: hci3: command tx timeout [ 172.101418][ T7012] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.132352][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.173438][ T7012] bridge_slave_0: entered allmulticast mode [ 172.181165][ T7012] bridge_slave_0: entered promiscuous mode [ 172.196948][ T7012] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.205376][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.212979][ T7012] bridge_slave_1: entered allmulticast mode [ 172.220296][ T7012] bridge_slave_1: entered promiscuous mode [ 173.897376][ T5239] Bluetooth: hci3: command tx timeout [ 173.962185][ T7012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.125473][ T7012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.300524][ T7012] team0: Port device team_slave_0 added [ 174.334122][ T7012] team0: Port device team_slave_1 added [ 174.721326][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.753688][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.831288][ T7012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.865221][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.897206][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.943670][ T7012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.302195][ T7012] hsr_slave_0: entered promiscuous mode [ 175.368544][ T7012] hsr_slave_1: entered promiscuous mode [ 175.448883][ T7012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.456522][ T7012] Cannot create hsr debugfs directory [ 177.988371][ T7012] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 178.036293][ T7012] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.064895][ T7012] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.082012][ T7012] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.321967][ T7012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.348794][ T7012] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.360443][ T6295] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.367611][ T6295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.426867][ T6295] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.434063][ T6295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.556234][ T7012] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.590539][ T7012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.123225][ T7012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.312911][ T7012] veth0_vlan: entered promiscuous mode [ 179.352270][ T7012] veth1_vlan: entered promiscuous mode [ 179.450660][ T7012] veth0_macvtap: entered promiscuous mode [ 179.479914][ T7012] veth1_macvtap: entered promiscuous mode [ 179.526324][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.591289][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.641000][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.663960][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.711161][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.747340][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.798952][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.835062][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.891772][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.924818][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.962620][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.000120][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.042855][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.090993][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.257595][ T7012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.266682][ T7012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.533660][ T7012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.572457][ T7012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.738814][ T6279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.749945][ T6279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.815542][ T6959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.872706][ T6959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.404462][ T7344] kernel read not supported for file /#)-\&[} (pid: 7344 comm: syz.2.394) [ 183.490557][ T29] audit: type=1800 audit(4294967325.210:4): pid=7344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.394" name="#)-\&[}" dev="mqueue" ino=16630 res=0 errno=0 [ 190.970664][ T7474] netlink: 'syz.3.414': attribute type 11 has an invalid length. [ 190.978801][ T7474] netlink: 'syz.3.414': attribute type 11 has an invalid length. [ 191.073103][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.083215][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.091639][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.101172][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.109224][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 191.118741][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.775536][ T7269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.215434][ T7269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.439839][ T7269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.714054][ T7269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.242830][ T5239] Bluetooth: hci4: command tx timeout [ 194.375925][ T7469] chnl_net:caif_netlink_parms(): no params data found [ 194.768727][ T7469] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.776113][ T7469] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.803457][ T7469] bridge_slave_0: entered allmulticast mode [ 194.818575][ T7469] bridge_slave_0: entered promiscuous mode [ 194.905945][ T7469] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.938211][ T7469] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.983635][ T7469] bridge_slave_1: entered allmulticast mode [ 194.996616][ T7469] bridge_slave_1: entered promiscuous mode [ 195.175659][ T7532] could not allocate digest TFM handle [ 195.317482][ T5239] Bluetooth: hci4: command tx timeout [ 195.533477][ T7469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.571003][ T7539] could not allocate digest TFM handle [ 195.601610][ T7469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.708550][ T7269] bridge_slave_1: left allmulticast mode [ 195.715107][ T7269] bridge_slave_1: left promiscuous mode [ 195.747341][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.852128][ T7269] bridge_slave_0: left allmulticast mode [ 195.887200][ T7269] bridge_slave_0: left promiscuous mode [ 195.893048][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.169531][ T7269] gre0 (unregistering): left allmulticast mode [ 197.397286][ T5239] Bluetooth: hci4: command tx timeout [ 198.116447][ T7269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.166110][ T7269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.188787][ T7269] bond0 (unregistering): Released all slaves [ 198.301619][ T7469] team0: Port device team_slave_0 added [ 198.325414][ T7469] team0: Port device team_slave_1 added [ 198.857960][ T7469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.864973][ T7469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.907282][ T7469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.920259][ T7469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.927521][ T7469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.953733][ T7469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.270674][ T7469] hsr_slave_0: entered promiscuous mode [ 199.317721][ T7469] hsr_slave_1: entered promiscuous mode [ 199.339510][ T7469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.367256][ T7469] Cannot create hsr debugfs directory [ 199.479256][ T5239] Bluetooth: hci4: command tx timeout [ 199.641178][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.652943][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.212249][ T7638] Process accounting resumed [ 201.330250][ T7269] hsr_slave_0: left promiscuous mode [ 201.350635][ T7269] hsr_slave_1: left promiscuous mode [ 201.367033][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.374676][ T7269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.398025][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.412406][ T7269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.471091][ T7269] veth1_macvtap: left promiscuous mode [ 201.476694][ T7269] veth0_macvtap: left promiscuous mode [ 201.504083][ T7269] veth1_vlan: left promiscuous mode [ 201.517465][ T7269] veth0_vlan: left promiscuous mode [ 202.430559][ T7269] team0 (unregistering): Port device team_slave_1 removed [ 202.480419][ T7269] team0 (unregistering): Port device team_slave_0 removed [ 204.417928][ T7469] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.449385][ T7469] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.483424][ T7469] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.515518][ T7469] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.773624][ T7469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.817225][ T7469] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.829015][ T6953] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.836165][ T6953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.894941][ T6953] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.902137][ T6953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.953368][ T7469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.983442][ T7469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.385852][ T6686] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.631889][ T6686] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.830210][ T6686] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.909431][ T7469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.070034][ T6686] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.189513][ T7469] veth0_vlan: entered promiscuous mode [ 206.249399][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.269494][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.278319][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.289741][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.298667][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 206.306325][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.382523][ T7469] veth1_vlan: entered promiscuous mode [ 206.549178][ T6686] bridge_slave_1: left allmulticast mode [ 206.555010][ T6686] bridge_slave_1: left promiscuous mode [ 206.567327][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.594152][ T6686] bridge_slave_0: left allmulticast mode [ 206.607259][ T6686] bridge_slave_0: left promiscuous mode [ 206.617947][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.598551][ T6686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.644116][ T6686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.680345][ T6686] bond0 (unregistering): Released all slaves [ 207.746406][ T7469] veth0_macvtap: entered promiscuous mode [ 207.820437][ T7469] veth1_macvtap: entered promiscuous mode [ 207.988476][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.018084][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.052367][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.077131][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.087031][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.107554][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.134563][ T7469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.183716][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.213091][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.247307][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.292231][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.332272][ T7469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.350020][ T7469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.360281][ T5239] Bluetooth: hci2: command tx timeout [ 208.374326][ T7469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.546508][ T7469] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.565545][ T7469] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.576683][ T7469] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.592954][ T7469] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.860134][ T6686] hsr_slave_0: left promiscuous mode [ 208.869473][ T6686] hsr_slave_1: left promiscuous mode [ 208.891583][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.913788][ T6686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.934899][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.944257][ T6686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.987777][ T6686] veth1_macvtap: left promiscuous mode [ 209.000305][ T6686] veth0_macvtap: left promiscuous mode [ 209.018565][ T6686] veth1_vlan: left promiscuous mode [ 209.035712][ T6686] veth0_vlan: left promiscuous mode [ 209.482468][ T6686] team0 (unregistering): Port device team_slave_1 removed [ 209.519229][ T6686] team0 (unregistering): Port device team_slave_0 removed [ 209.992060][ T7767] chnl_net:caif_netlink_parms(): no params data found [ 210.435072][ T6683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.444846][ T5239] Bluetooth: hci2: command tx timeout [ 210.458196][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.461433][ T6683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.465330][ T7767] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.536425][ T7767] bridge_slave_0: entered allmulticast mode [ 210.557788][ T7767] bridge_slave_0: entered promiscuous mode [ 210.594666][ T7767] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.621668][ T7767] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.639635][ T7767] bridge_slave_1: entered allmulticast mode [ 210.677320][ T7767] bridge_slave_1: entered promiscuous mode [ 210.812012][ T7767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.828330][ T6959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.878136][ T6959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.887736][ T7767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.024673][ T7767] team0: Port device team_slave_0 added [ 211.068376][ T7767] team0: Port device team_slave_1 added [ 211.280906][ T7767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.316744][ T7767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.397324][ T7767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.429006][ T7767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.436015][ T7767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.529169][ T7767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.643744][ T7767] hsr_slave_0: entered promiscuous mode [ 211.655256][ T7767] hsr_slave_1: entered promiscuous mode [ 211.679451][ T7886] GUP no longer grows the stack in syz.2.484 (7886): 14000-401000 (4000) [ 211.705656][ T7886] CPU: 0 UID: 0 PID: 7886 Comm: syz.2.484 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 211.716353][ T7886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 211.726473][ T7886] Call Trace: [ 211.729798][ T7886] [ 211.732770][ T7886] dump_stack_lvl+0x16c/0x1f0 [ 211.737526][ T7886] gup_vma_lookup+0x1d2/0x220 [ 211.742293][ T7886] __get_user_pages+0x26c/0x3b90 [ 211.747312][ T7886] ? __gup_longterm_locked+0x126/0x1b30 [ 211.752940][ T7886] ? __pfx___get_user_pages+0x10/0x10 [ 211.758377][ T7886] ? down_read_killable+0xcc/0x380 [ 211.763548][ T7886] ? __pfx_down_read_killable+0x10/0x10 [ 211.769138][ T7886] ? find_held_lock+0x2d/0x110 [ 211.773936][ T7886] ? __pfx_mark_lock+0x10/0x10 [ 211.778746][ T7886] __gup_longterm_locked+0x22e/0x1b30 [ 211.784170][ T7886] ? __pfx_lock_release+0x10/0x10 [ 211.789269][ T7886] ? __pfx___gup_longterm_locked+0x10/0x10 [ 211.795119][ T7886] ? mark_held_locks+0x9f/0xe0 [ 211.799934][ T7886] gup_fast_fallback+0x180b/0x2690 [ 211.805197][ T7886] ? __pfx_gup_fast_fallback+0x10/0x10 [ 211.810701][ T7886] ? __pfx___lock_acquire+0x10/0x10 [ 211.815939][ T7886] ? hlock_class+0x4e/0x130 [ 211.820478][ T7886] ? __lock_acquire+0xbdd/0x3ce0 [ 211.825459][ T7886] get_user_pages_fast+0xa8/0x100 [ 211.830525][ T7886] ? __pfx_get_user_pages_fast+0x10/0x10 [ 211.836218][ T7886] ? iov_iter_advance+0x1e3/0x6c0 [ 211.841276][ T7886] __iov_iter_get_pages_alloc+0x8e5/0x2220 [ 211.847141][ T7886] ? rcu_is_watching+0x12/0xc0 [ 211.851940][ T7886] ? trace_contention_end+0xea/0x140 [ 211.857271][ T7886] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 211.863540][ T7886] ? copy_iovec_from_user+0x12d/0x170 [ 211.868952][ T7886] ? pipe_lock+0x64/0x80 [ 211.873242][ T7886] ? __pfx___mutex_lock+0x10/0x10 [ 211.878311][ T7886] iov_iter_get_pages2+0xa4/0x100 [ 211.883366][ T7886] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 211.889023][ T7886] ? wait_for_space+0x224/0x2d0 [ 211.893943][ T7886] ? add_to_pipe+0x1c0/0x3c0 [ 211.898580][ T7886] __do_sys_vmsplice+0x7c3/0xef0 [ 211.903572][ T7886] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 211.909086][ T7886] ? __pfx_futex_wait+0x10/0x10 [ 211.914021][ T7886] ? rcu_is_watching+0x12/0xc0 [ 211.918860][ T7886] ? do_syscall_64+0xcd/0x250 [ 211.923573][ T7886] do_syscall_64+0xcd/0x250 [ 211.928117][ T7886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.934047][ T7886] RIP: 0033:0x7f407d57dff9 [ 211.938503][ T7886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.958135][ T7886] RSP: 002b:00007f407e333038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 211.966603][ T7886] RAX: ffffffffffffffda RBX: 00007f407d735f80 RCX: 00007f407d57dff9 [ 211.974618][ T7886] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000001 [ 211.982619][ T7886] RBP: 00007f407d5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 211.990643][ T7886] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 211.998636][ T7886] R13: 0000000000000000 R14: 00007f407d735f80 R15: 00007fff46ee5858 [ 212.006648][ T7886] [ 212.518878][ T5239] Bluetooth: hci2: command tx timeout [ 212.833290][ T7767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.855298][ T7767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.882745][ T7767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.905474][ T7767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.131572][ T7767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.176264][ T7767] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.201072][ T6953] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.208277][ T6953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.258392][ T6953] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.265573][ T6953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.661622][ T7949] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 213.752852][ T7767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.863006][ T7767] veth0_vlan: entered promiscuous mode [ 213.901165][ T7767] veth1_vlan: entered promiscuous mode [ 213.970254][ T7767] veth0_macvtap: entered promiscuous mode [ 214.004713][ T7767] veth1_macvtap: entered promiscuous mode [ 214.055856][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.087296][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.128949][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.167274][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.197231][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.226612][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.259722][ T7767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.293152][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.337266][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.367327][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.382391][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.413287][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.467283][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.504743][ T7767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.543451][ T7767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.563561][ T7767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.594996][ T7767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.616200][ T5239] Bluetooth: hci2: command tx timeout [ 214.617288][ T7767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.946439][ T6953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.967264][ T6953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.062604][ T6953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.070940][ T6953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.056691][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 216.227605][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 216.651392][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 218.153871][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.517'. [ 218.193188][ T8063] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 220.544641][ T29] audit: type=1326 audit(4294967362.300:5): auid=4294967295 uid=3 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.2.535" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f407d57dff9 code=0x0 [ 221.014718][ T8138] netlink: 172 bytes leftover after parsing attributes in process `syz.1.544'. [ 221.653546][ T8150] svc: failed to register nfsdv3 RPC service (errno 111). [ 221.663879][ T8150] svc: failed to register nfsaclv3 RPC service (errno 111). [ 226.246015][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 227.586084][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.580'. [ 232.008114][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.597'. [ 240.221861][ T8555] syz.2.642 (8555): attempted to duplicate a private mapping with mremap. This is not supported. [ 247.436781][ T8705] netlink: 172 bytes leftover after parsing attributes in process `syz.1.677'. [ 247.618496][ T8709] netlink: 172 bytes leftover after parsing attributes in process `syz.1.677'. [ 250.937648][ T8794] netlink: 172 bytes leftover after parsing attributes in process `syz.2.696'. [ 250.960758][ T8798] netlink: 172 bytes leftover after parsing attributes in process `syz.2.696'. [ 251.549461][ T8821] Invalid ELF header magic: != ELF [ 252.917449][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 255.650123][ T8925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.723'. [ 256.735451][ T8942] RDS: rds_bind could not find a transport for ::ffff:172.20.20.52, load rds_tcp or rds_rdma? [ 256.736743][ T8920] svc: failed to register nfsdv3 RPC service (errno 111). [ 256.801660][ T8920] svc: failed to register nfsaclv3 RPC service (errno 512). [ 258.037299][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 258.647610][ T8987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.740'. [ 261.087538][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.094011][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.872029][ T9121] nfsd: Unknown parameter 'g]ߓ%r.`kT1NNF$A3' [ 269.633440][ T9156] delete_channel: no stack [ 269.649934][ T9155] delete_channel: no stack [ 276.191588][ T9237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.036139][ T9277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.813'. [ 283.266432][ T9040] syz.3.756 (9040) used greatest stack depth: 20704 bytes left [ 283.712226][ T9071] syz.3.764 (9071) used greatest stack depth: 19952 bytes left [ 285.497999][ T9421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.713228][ T9439] gre0: entered allmulticast mode [ 286.801286][ T9446] svc: failed to register nfsdv3 RPC service (errno 111). [ 286.826796][ T9446] svc: failed to register nfsaclv3 RPC service (errno 111). [ 287.052363][ T6684] gre0 (unregistering): left allmulticast mode [ 291.085639][ T9506] svc: failed to register nfsdv3 RPC service (errno 111). [ 291.129299][ T9506] svc: failed to register nfsaclv3 RPC service (errno 111). [ 293.795690][ T6278] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.876936][ T6278] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.078983][ T6278] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.387626][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.420333][ T6278] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.431100][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.439391][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.481350][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.489374][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 294.496838][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.153580][ T9586] chnl_net:caif_netlink_parms(): no params data found [ 295.195780][ T6278] bridge_slave_1: left allmulticast mode [ 295.207214][ T6278] bridge_slave_1: left promiscuous mode [ 295.223349][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.251037][ T6278] bridge_slave_0: left allmulticast mode [ 295.256777][ T6278] bridge_slave_0: left promiscuous mode [ 295.271503][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.597283][ T5239] Bluetooth: hci0: command tx timeout [ 296.757565][ T6278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.832585][ T6278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.941554][ T6278] bond0 (unregistering): Released all slaves [ 298.428473][ T9586] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.435633][ T9586] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.467313][ T9586] bridge_slave_0: entered allmulticast mode [ 298.474529][ T9586] bridge_slave_0: entered promiscuous mode [ 298.688636][ T5239] Bluetooth: hci0: command tx timeout [ 298.916584][ T9586] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.924854][ T9586] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.950296][ T9586] bridge_slave_1: entered allmulticast mode [ 298.968063][ T9586] bridge_slave_1: entered promiscuous mode [ 299.182494][ T6278] hsr_slave_0: left promiscuous mode [ 299.207856][ T6278] hsr_slave_1: left promiscuous mode [ 299.253922][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.283544][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.299760][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.327426][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.410092][ T6278] veth1_macvtap: left promiscuous mode [ 299.415779][ T6278] veth0_macvtap: left promiscuous mode [ 299.450313][ T6278] veth1_vlan: left promiscuous mode [ 299.465913][ T6278] veth0_vlan: left promiscuous mode [ 300.787325][ T5239] Bluetooth: hci0: command tx timeout [ 300.955452][ T9668] delete_channel: no stack [ 301.159584][ T6278] team0 (unregistering): Port device team_slave_1 removed [ 301.278803][ T9675] netlink: zone id is out of range [ 301.283995][ T9675] netlink: zone id is out of range [ 301.298776][ T9675] netlink: zone id is out of range [ 301.307550][ T9675] netlink: zone id is out of range [ 301.317463][ T9675] netlink: zone id is out of range [ 301.322624][ T9675] netlink: zone id is out of range [ 301.337581][ T9675] netlink: zone id is out of range [ 301.343726][ T6278] team0 (unregistering): Port device team_slave_0 removed [ 301.357415][ T9675] netlink: zone id is out of range [ 301.364109][ T9675] netlink: zone id is out of range [ 301.377530][ T9675] netlink: zone id is out of range [ 302.729500][ T9586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.766698][ T9586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.837439][ T5239] Bluetooth: hci0: command tx timeout [ 303.036659][ T9586] team0: Port device team_slave_0 added [ 303.079730][ T9586] team0: Port device team_slave_1 added [ 303.194768][ T9586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.225111][ T9586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.304068][ T9586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.334319][ T9586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.341467][ T9586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.367519][ T9586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.542018][ T9586] hsr_slave_0: entered promiscuous mode [ 303.577493][ T9586] hsr_slave_1: entered promiscuous mode [ 303.593313][ T9586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.607393][ T9586] Cannot create hsr debugfs directory [ 304.768986][ T9586] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 304.798535][ T9586] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 304.822783][ T9586] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 304.851497][ T9586] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 305.234474][ T9586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.300771][ T9586] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.351491][ T6681] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.358683][ T6681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.396392][ T6960] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.403570][ T6960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.585103][ T9586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.060709][ T9586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.180592][ T9586] veth0_vlan: entered promiscuous mode [ 306.222888][ T9586] veth1_vlan: entered promiscuous mode [ 306.360147][ T9586] veth0_macvtap: entered promiscuous mode [ 306.506218][ T9586] veth1_macvtap: entered promiscuous mode [ 306.606040][ T9586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.640909][ T9586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.667189][ T9586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.699187][ T9586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.729893][ T9586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.767090][ T9586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.798615][ T9586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.878950][ T9586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.907391][ T9586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.943559][ T9586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.967172][ T9586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.997174][ T9586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.017107][ T9586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.048531][ T9586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.166760][ T9586] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.197286][ T9586] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.206070][ T9586] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.257137][ T9586] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.647341][ T6680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.655293][ T6680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.792223][ T2453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.819796][ T2453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.306036][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.886'. [ 308.360782][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.886'. [ 310.982726][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.930'. [ 314.357839][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 315.105401][ T9956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.955'. [ 318.373724][ T9997] svc: failed to register nfsdv3 RPC service (errno 111). [ 318.431616][ T9997] svc: failed to register nfsaclv3 RPC service (errno 111). [ 319.751109][T10018] svc: failed to register nfsdv3 RPC service (errno 111). [ 319.792337][T10018] svc: failed to register nfsaclv3 RPC service (errno 111). [ 321.976140][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.974'. [ 322.519361][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.526124][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.747803][T10074] sctp: [Deprecated]: syz.3.985 (pid 10074) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.747803][T10074] Use struct sctp_sack_info instead [ 324.976088][T10111] kernel read not supported for file /#E-\yċF B|ctpL#kZrV]Le- m,oOɧ (pid: 10111 comm: syz.0.994) [ 325.085155][ T29] audit: type=1800 audit(8277292134.989:6): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.994" name=23452D5CF886C079018CC48BB4CA46A30B427C08A3A663917418DE704C23A8FD90F26B5AA17256B65D4C652D0C1A6DBE2CE66F4FC9A7 dev="mqueue" ino=28787 res=0 errno=0 [ 329.717138][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 335.432731][T10293] ptrace attach of "./syz-executor exec"[7469] was attempted by "./syz-executor exec"[10293] [ 336.811424][T10304] svc: failed to register nfsdv3 RPC service (errno 111). [ 336.834416][T10304] svc: failed to register nfsaclv3 RPC service (errno 111). [ 339.028548][T10326] delete_channel: no stack [ 347.474468][T10455] Process accounting resumed [ 353.375178][T10591] can: request_module (can-proto-0) failed. [ 355.115300][ T6285] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.395738][ T6285] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.640495][ T6285] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.900417][ T6285] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.365834][ T6285] bridge_slave_1: left allmulticast mode [ 356.407123][ T6285] bridge_slave_1: left promiscuous mode [ 356.412913][ T6285] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.517309][ T6285] bridge_slave_0: left allmulticast mode [ 356.523243][ T6285] bridge_slave_0: left promiscuous mode [ 356.578039][ T6285] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.883552][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.898044][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.906358][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.914953][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.923555][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 357.930976][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.257778][ T6285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.397551][ T6285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.460999][ T6285] bond0 (unregistering): Released all slaves [ 359.721171][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.758426][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 359.768792][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 359.888879][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 359.917237][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 359.925328][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 359.983334][T10678] chnl_net:caif_netlink_parms(): no params data found [ 360.039109][ T5233] Bluetooth: hci2: command tx timeout [ 360.719540][T10710] svc: failed to register nfsdv3 RPC service (errno 111). [ 360.736415][T10710] svc: failed to register nfsaclv3 RPC service (errno 111). [ 360.933423][ T6285] hsr_slave_0: left promiscuous mode [ 360.954545][ T6285] hsr_slave_1: left promiscuous mode [ 360.973706][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.016103][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.053949][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.077287][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.143920][ T6285] veth1_macvtap: left promiscuous mode [ 361.155787][ T6285] veth0_macvtap: left promiscuous mode [ 361.170056][ T6285] veth1_vlan: left promiscuous mode [ 361.187232][ T6285] veth0_vlan: left promiscuous mode [ 362.037307][ T5233] Bluetooth: hci3: command tx timeout [ 362.118844][ T5233] Bluetooth: hci2: command tx timeout [ 364.117777][ T5233] Bluetooth: hci3: command tx timeout [ 364.197361][ T5233] Bluetooth: hci2: command tx timeout [ 364.880293][ T6285] team0 (unregistering): Port device team_slave_1 removed [ 365.074261][ T6285] team0 (unregistering): Port device team_slave_0 removed [ 366.198349][ T5233] Bluetooth: hci3: command tx timeout [ 366.277270][ T5233] Bluetooth: hci2: command tx timeout [ 367.839185][T10678] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.846326][T10678] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.897329][T10678] bridge_slave_0: entered allmulticast mode [ 367.918356][T10678] bridge_slave_0: entered promiscuous mode [ 367.940712][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1127'. [ 368.018576][T10678] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.025735][T10678] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.085186][T10678] bridge_slave_1: entered allmulticast mode [ 368.107263][T10678] bridge_slave_1: entered promiscuous mode [ 368.284616][ T5233] Bluetooth: hci3: command tx timeout [ 369.569485][T10678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.670272][T10678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.027569][T10678] team0: Port device team_slave_0 added [ 370.055350][T10678] team0: Port device team_slave_1 added [ 370.479748][T10678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.486754][T10678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.629773][T10678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.677177][T10678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.684176][T10678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.804323][T10678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.866730][T10684] chnl_net:caif_netlink_parms(): no params data found [ 372.268326][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.278129][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.286652][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.295977][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.307411][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 372.314760][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 372.370630][T10678] hsr_slave_0: entered promiscuous mode [ 372.424003][T10678] hsr_slave_1: entered promiscuous mode [ 373.354473][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.452274][T10684] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.482297][T10684] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.497450][T10684] bridge_slave_0: entered allmulticast mode [ 373.525998][T10684] bridge_slave_0: entered promiscuous mode [ 373.553606][T10684] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.597180][T10684] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.604451][T10684] bridge_slave_1: entered allmulticast mode [ 373.643883][T10684] bridge_slave_1: entered promiscuous mode [ 374.438915][ T5233] Bluetooth: hci0: command tx timeout [ 374.514114][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.659104][T10795] net_ratelimit: 18 callbacks suppressed [ 374.659128][T10795] Dead loop on virtual device ip6_vti0, fix it urgently! [ 374.774835][T10795] Dead loop on virtual device ip6_vti0, fix it urgently! [ 374.828458][T10795] Dead loop on virtual device ip6_vti0, fix it urgently! [ 374.878466][T10795] Dead loop on virtual device ip6_vti0, fix it urgently! [ 374.949668][T10795] Dead loop on virtual device ip6_vti0, fix it urgently! [ 375.027642][T10795] Dead loop on virtual device ip6_vti0, fix it urgently! [ 375.087471][T10795] Dead loop on virtual device ip6_vti0, fix it urgently! [ 375.164556][T10795] Dead loop on virtual device ip6_vti0, fix it urgently! [ 375.352584][T10684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.925192][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.000141][T10684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.212249][T10684] team0: Port device team_slave_0 added [ 376.221485][T10684] team0: Port device team_slave_1 added [ 376.329841][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.522588][ T5233] Bluetooth: hci0: command tx timeout [ 376.552406][T10684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.559724][T10684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.586045][T10684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.641914][T10684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.651137][T10684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.688163][T10684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.003907][T10684] hsr_slave_0: entered promiscuous mode [ 377.030463][T10684] hsr_slave_1: entered promiscuous mode [ 377.047491][T10684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.064967][T10684] Cannot create hsr debugfs directory [ 377.812661][ T62] bridge_slave_1: left allmulticast mode [ 377.827167][ T62] bridge_slave_1: left promiscuous mode [ 377.833017][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.867568][ T62] bridge_slave_0: left allmulticast mode [ 377.873830][ T62] bridge_slave_0: left promiscuous mode [ 377.898036][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.609388][ T5233] Bluetooth: hci0: command tx timeout [ 378.893107][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.929313][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.950178][ T62] bond0 (unregistering): Released all slaves [ 379.130060][T10774] chnl_net:caif_netlink_parms(): no params data found [ 379.602881][ T62] hsr_slave_0: left promiscuous mode [ 379.646100][ T62] hsr_slave_1: left promiscuous mode [ 379.814617][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.822703][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.010168][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.017879][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.080117][ T62] veth1_macvtap: left promiscuous mode [ 380.085708][ T62] veth0_macvtap: left promiscuous mode [ 380.113227][ T62] veth1_vlan: left promiscuous mode [ 380.124118][ T62] veth0_vlan: left promiscuous mode [ 380.681023][ T5233] Bluetooth: hci0: command tx timeout [ 381.263084][ T62] team0 (unregistering): Port device team_slave_1 removed [ 381.348722][ T62] team0 (unregistering): Port device team_slave_0 removed [ 382.723570][T10678] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 382.755243][T10678] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.037788][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.044152][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.109661][T10774] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.116837][T10774] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.125105][T10774] bridge_slave_0: entered allmulticast mode [ 384.132749][T10774] bridge_slave_0: entered promiscuous mode [ 384.141515][T10774] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.148965][T10774] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.156192][T10774] bridge_slave_1: entered allmulticast mode [ 384.163886][T10774] bridge_slave_1: entered promiscuous mode [ 384.231473][T10684] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.299841][T10678] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.341442][T10774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.545887][T10678] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 384.766623][T10684] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.800764][T10774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.919800][T10684] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.028026][T10774] team0: Port device team_slave_0 added [ 385.059716][T10774] team0: Port device team_slave_1 added [ 385.313782][T10684] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.360430][T10774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.377904][T10774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.427276][T10774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.493107][T10678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.516815][T10774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.547943][T10774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.604511][T10774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.725584][T10678] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.774964][T10774] hsr_slave_0: entered promiscuous mode [ 385.802817][T10774] hsr_slave_1: entered promiscuous mode [ 385.811252][T10774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.825157][T10774] Cannot create hsr debugfs directory [ 385.869043][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.876298][ T6278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.948681][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.955923][ T6278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.053848][T10684] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 386.112141][T10684] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 386.147227][T10684] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 386.182329][T10684] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 386.824534][T10684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.919528][T10684] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.952341][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.959617][ T6278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.030187][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.037388][ T6278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.170566][T10684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 387.325604][T10678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.361349][T10774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 387.448440][T10774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 387.470613][T10774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 387.523064][T10774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 387.760234][T10678] veth0_vlan: entered promiscuous mode [ 387.794696][T10678] veth1_vlan: entered promiscuous mode [ 387.811485][T10684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.989409][T10678] veth0_macvtap: entered promiscuous mode [ 388.031807][T10684] veth0_vlan: entered promiscuous mode [ 388.053011][T10678] veth1_macvtap: entered promiscuous mode [ 388.095261][T10774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.180933][T10684] veth1_vlan: entered promiscuous mode [ 388.240100][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.259436][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.287143][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.307804][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.319379][T10678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.339443][T10774] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.360884][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.373369][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.384774][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.403598][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.422734][T10678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.473478][ T6279] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.480671][ T6279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.570913][T10678] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.598119][T10678] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.623601][T10678] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.637633][T10678] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.672854][T10684] veth0_macvtap: entered promiscuous mode [ 388.694904][ T6279] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.702115][ T6279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.762638][T10684] veth1_macvtap: entered promiscuous mode [ 388.836617][T10684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.862529][T10684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.895958][T10684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.926518][T10684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.955544][T10684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.025161][T10684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.068653][T10684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.096637][T10684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.173312][T10684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.194096][T10684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.231752][T10684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.263288][T10684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.307354][T10684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.359589][T10684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.402765][T10684] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.422922][T10684] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.447173][T10684] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.455939][T10684] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.689970][ T6960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.700292][ T6960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.841012][ T6285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.853527][ T6279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.889519][ T6279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.897710][ T6285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.031220][ T6960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.080804][ T6960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.393936][T10774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.545655][T10774] veth0_vlan: entered promiscuous mode [ 390.580934][T10774] veth1_vlan: entered promiscuous mode [ 390.703736][T10774] veth0_macvtap: entered promiscuous mode [ 390.729510][T10774] veth1_macvtap: entered promiscuous mode [ 390.791521][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.806970][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.823877][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.857410][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.868981][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.897229][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.926395][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.947102][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.989044][T10774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.029726][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.069074][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.097531][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.132912][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.143345][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.166753][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.186752][T10774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.208275][T10774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.228742][T10774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.253881][T10774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.288992][T10774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.315637][T10774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.354288][T10774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.628714][ T6285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.697211][ T6285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.758269][ T6279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.766731][ T6279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.590840][T11014] svc: failed to register nfsdv3 RPC service (errno 101). [ 398.693657][T11014] svc: failed to register nfsaclv3 RPC service (errno 101). [ 401.308152][ T29] audit: type=1326 audit(8277292211.219:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11074 comm="syz.2.1167" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f133fd7dff9 code=0x0 [ 405.568854][T11138] kernel read not supported for file /)-\&[} (pid: 11138 comm: syz.3.1183) [ 405.598193][ T29] audit: type=1800 audit(8277292215.509:8): pid=11138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1183" name=FF292D5C265B7D dev="mqueue" ino=34425 res=0 errno=0 [ 411.023252][T11205] svc: failed to register nfsdv3 RPC service (errno 101). [ 411.066840][T11205] svc: failed to register nfsaclv3 RPC service (errno 101). [ 411.698324][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 411.727236][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 411.737329][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 411.749365][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 411.759222][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 411.773166][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 413.140511][T11224] chnl_net:caif_netlink_parms(): no params data found [ 413.877296][ T54] Bluetooth: hci1: command tx timeout [ 414.150286][T11224] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.167178][T11224] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.174527][T11224] bridge_slave_0: entered allmulticast mode [ 414.259108][T11224] bridge_slave_0: entered promiscuous mode [ 414.364733][T11224] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.411565][T11224] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.437345][T11224] bridge_slave_1: entered allmulticast mode [ 414.489384][T11224] bridge_slave_1: entered promiscuous mode [ 415.451774][T11224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.711739][T11224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.748027][T10726] syz.0.1126 (10726) used greatest stack depth: 18832 bytes left [ 415.967525][ T54] Bluetooth: hci1: command tx timeout [ 416.137322][T11224] team0: Port device team_slave_0 added [ 416.156153][T11224] team0: Port device team_slave_1 added [ 416.677116][T11224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.684153][T11224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.797059][T11224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.139865][T10724] syz.0.1126 (10724) used greatest stack depth: 18752 bytes left [ 417.837674][T11224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.863758][T11224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.931281][T11224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.039823][ T54] Bluetooth: hci1: command tx timeout [ 418.662908][ T6285] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.807643][T10723] syz.0.1126 (10723) used greatest stack depth: 17712 bytes left [ 419.141463][ T6285] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.239729][T11224] hsr_slave_0: entered promiscuous mode [ 419.263820][T11224] hsr_slave_1: entered promiscuous mode [ 419.327087][T11224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.334703][T11224] Cannot create hsr debugfs directory [ 419.766358][ T6285] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.059628][ T6285] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.117557][ T54] Bluetooth: hci1: command tx timeout [ 420.630554][ T6285] bridge_slave_1: left allmulticast mode [ 420.636282][ T6285] bridge_slave_1: left promiscuous mode [ 420.662040][ T6285] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.786873][ T6285] bridge_slave_0: left allmulticast mode [ 420.802951][ T6285] bridge_slave_0: left promiscuous mode [ 420.815017][ T6285] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.171536][ T6285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.237698][ T6285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.261694][ T6285] bond0 (unregistering): Released all slaves [ 423.572704][ T6285] hsr_slave_0: left promiscuous mode [ 423.605589][ T6285] hsr_slave_1: left promiscuous mode [ 423.709305][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.724939][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.789286][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.796793][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.851540][ T6285] veth1_macvtap: left promiscuous mode [ 423.868060][ T6285] veth0_macvtap: left promiscuous mode [ 423.873743][ T6285] veth1_vlan: left promiscuous mode [ 423.897282][ T6285] veth0_vlan: left promiscuous mode [ 424.567122][ T29] audit: type=1326 audit(8277292044.450:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11359 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f133fd7dff9 code=0x0 [ 426.558542][ T6285] team0 (unregistering): Port device team_slave_1 removed [ 426.769467][ T6285] team0 (unregistering): Port device team_slave_0 removed [ 429.207676][T11422] Invalid ELF header magic: != ELF [ 429.515436][T11224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 429.610874][T11224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 429.958539][T11224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 429.981582][T11224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 430.246522][T11224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.352992][T11224] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.381016][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.388208][ T6278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.459036][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.466195][ T6278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.033655][T11224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.204043][T11224] veth0_vlan: entered promiscuous mode [ 431.238228][T11224] veth1_vlan: entered promiscuous mode [ 431.321948][T11224] veth0_macvtap: entered promiscuous mode [ 431.361713][T11224] veth1_macvtap: entered promiscuous mode [ 431.395126][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.427077][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.436957][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.467125][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.486194][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.509884][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.527316][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.538050][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.549691][T11224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.560651][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.571488][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.581690][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.592528][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.603113][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.614020][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.623948][T11224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.634464][T11224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.646229][T11224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.659728][T11224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.668539][T11224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.677383][T11224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.686162][T11224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.955592][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.008931][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.118326][ T6681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.126235][ T6681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.088270][T11488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1258'. [ 435.810043][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.005046][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.115633][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 436.125553][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 436.133705][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 436.142963][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 436.157419][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 436.164798][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 436.391419][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.752439][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.598527][ T62] bridge_slave_1: left allmulticast mode [ 437.617309][ T62] bridge_slave_1: left promiscuous mode [ 437.623076][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.686162][ T62] bridge_slave_0: left allmulticast mode [ 437.707950][ T62] bridge_slave_0: left promiscuous mode [ 437.718304][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.208957][ T54] Bluetooth: hci1: command tx timeout [ 439.230901][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.289871][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.315609][ T62] bond0 (unregistering): Released all slaves [ 439.405576][T11530] chnl_net:caif_netlink_parms(): no params data found [ 440.159001][T11530] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.166260][T11530] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.194848][T11530] bridge_slave_0: entered allmulticast mode [ 440.228280][T11530] bridge_slave_0: entered promiscuous mode [ 440.262850][T11530] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.278065][ T54] Bluetooth: hci1: command tx timeout [ 440.292641][T11530] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.322119][T11530] bridge_slave_1: entered allmulticast mode [ 440.358505][T11530] bridge_slave_1: entered promiscuous mode [ 440.486545][ T62] hsr_slave_0: left promiscuous mode [ 440.513426][ T62] hsr_slave_1: left promiscuous mode [ 440.524615][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.547409][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.564218][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.583617][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.634467][ T62] veth1_macvtap: left promiscuous mode [ 440.652261][ T62] veth0_macvtap: left promiscuous mode [ 440.667397][ T62] veth1_vlan: left promiscuous mode [ 440.675755][ T62] veth0_vlan: left promiscuous mode [ 442.306759][ T62] team0 (unregistering): Port device team_slave_1 removed [ 442.360991][ T54] Bluetooth: hci1: command tx timeout [ 442.578118][ T62] team0 (unregistering): Port device team_slave_0 removed [ 443.878297][T11530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.917263][T11658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'. [ 443.941029][T11530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.042093][T11530] team0: Port device team_slave_0 added [ 444.061738][T11530] team0: Port device team_slave_1 added [ 444.251425][T11530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.286579][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.357075][T11530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.399835][T11530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.406845][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.447125][ T54] Bluetooth: hci1: command tx timeout [ 444.457254][T11530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.654162][T11530] hsr_slave_0: entered promiscuous mode [ 444.672674][T11530] hsr_slave_1: entered promiscuous mode [ 444.727802][T11530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.754546][T11530] Cannot create hsr debugfs directory [ 445.399174][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.405699][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.290497][T11530] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 446.359929][T11530] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 446.371131][T11530] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 446.385018][T11530] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 446.651671][T11530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.709265][T11530] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.742702][ T6681] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.749856][ T6681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.822317][ T6681] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.829461][ T6681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.487914][T11530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.633943][T11530] veth0_vlan: entered promiscuous mode [ 447.683594][T11530] veth1_vlan: entered promiscuous mode [ 447.786641][T11530] veth0_macvtap: entered promiscuous mode [ 447.829651][T11530] veth1_macvtap: entered promiscuous mode [ 447.894451][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.932757][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.958700][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.979652][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.000832][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.047154][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.074142][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.123589][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.142720][T11530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.179906][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.237064][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.257629][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.314574][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.361865][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.401918][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.444835][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.498900][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.548513][T11530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.574686][T11530] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.627193][T11530] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.636013][T11530] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.687079][T11530] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.986071][ T6960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.001790][ T6278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.047361][ T6278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.064648][ T6960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.662970][T11820] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 453.291061][T11916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.617276][T11942] nbd: must specify at least one socket [ 454.939487][T11953] tmpfs: Unknown parameter 'nwZW U܃ܓ+``Sfq?P02$as-ҞmHpb@TcblY64 [ 454.939487][T11953] NtyA+m"իj2m4Е+-Nx>%!M淐+10g+#6?ࠏr+CY EAÄþ(DQjt6Ł&tʊ PPNr7 ' [ 456.005842][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 458.401986][T12018] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 458.416528][T12018] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 459.181261][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.008696][ T29] audit: type=1800 audit(4294967308.160:10): pid=12021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1350" name="SYSV00010000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 466.227219][T12130] netlink: 'syz.0.1379': attribute type 11 has an invalid length. [ 474.145420][T12267] delete_channel: no stack [ 479.674589][T12335] HSR: entered promiscuous mode [ 479.698003][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 482.306466][T12367] Process accounting resumed [ 482.724131][T12380] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 482.809579][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1433'. [ 483.320251][T12355] Bluetooth: hci3: command 0x0406 tx timeout [ 483.326349][T12355] Bluetooth: hci2: command 0x0406 tx timeout [ 483.645505][T12393] netlink: 'syz.3.1443': attribute type 1 has an invalid length. [ 483.697963][T12393] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1443'. [ 483.938743][T12394] ptrace attach of "./syz-executor exec"[10684] was attempted by "./syz-executor exec"[12394] [ 490.194689][T12460] HSR: entered promiscuous mode [ 491.239956][T12475] delete_channel: no stack [ 491.658787][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1463'. [ 493.495865][T12482] Process accounting resumed [ 496.886180][T12562] Process accounting resumed [ 497.127924][T12573] FAULT_INJECTION: forcing a failure. [ 497.127924][T12573] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 497.235701][T12573] CPU: 1 UID: 0 PID: 12573 Comm: syz.1.1488 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 497.246649][T12573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 497.256760][T12573] Call Trace: [ 497.260060][T12573] [ 497.263007][T12573] dump_stack_lvl+0x16c/0x1f0 [ 497.267734][T12573] should_fail_ex+0x497/0x5b0 [ 497.272571][T12573] _copy_from_user+0x30/0xf0 [ 497.277189][T12573] copy_msghdr_from_user+0x99/0x160 [ 497.282431][T12573] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 497.288312][T12573] ? __pfx___lock_acquire+0x10/0x10 [ 497.293557][T12573] ___sys_sendmsg+0xff/0x1e0 [ 497.298194][T12573] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.303448][T12573] ? lock_acquire+0x2f/0xb0 [ 497.307994][T12573] ? __fget_files+0x40/0x3f0 [ 497.312627][T12573] ? fdget+0x176/0x210 [ 497.316742][T12573] __sys_sendmsg+0x117/0x1f0 [ 497.321375][T12573] ? __pfx___sys_sendmsg+0x10/0x10 [ 497.326530][T12573] ? __fget_files+0x244/0x3f0 [ 497.331348][T12573] do_syscall_64+0xcd/0x250 [ 497.335887][T12573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.341837][T12573] RIP: 0033:0x7fad86f7dff9 [ 497.346294][T12573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.365931][T12573] RSP: 002b:00007fad87cf8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.374377][T12573] RAX: ffffffffffffffda RBX: 00007fad87135f80 RCX: 00007fad86f7dff9 [ 497.382461][T12573] RDX: 0000000000008000 RSI: 0000000020000180 RDI: 0000000000000004 [ 497.390454][T12573] RBP: 00007fad87cf8090 R08: 0000000000000000 R09: 0000000000000000 [ 497.398446][T12573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.406472][T12573] R13: 0000000000000000 R14: 00007fad87135f80 R15: 00007ffee3f387f8 [ 497.414559][T12573] [ 498.677076][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 500.158115][T12623] FAULT_INJECTION: forcing a failure. [ 500.158115][T12623] name failslab, interval 1, probability 0, space 0, times 1 [ 500.188275][T12623] CPU: 1 UID: 0 PID: 12623 Comm: syz.2.1499 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 500.199150][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 500.209267][T12623] Call Trace: [ 500.212596][T12623] [ 500.215574][T12623] dump_stack_lvl+0x16c/0x1f0 [ 500.220334][T12623] should_fail_ex+0x497/0x5b0 [ 500.225172][T12623] ? fs_reclaim_acquire+0xae/0x160 [ 500.230359][T12623] should_failslab+0xc2/0x120 [ 500.235108][T12623] kmem_cache_alloc_node_noprof+0x71/0x310 [ 500.240981][T12623] ? __alloc_skb+0x2b3/0x380 [ 500.245639][T12623] __alloc_skb+0x2b3/0x380 [ 500.250123][T12623] ? __pfx___alloc_skb+0x10/0x10 [ 500.255132][T12623] ? lock_acquire+0x2f/0xb0 [ 500.259730][T12623] netlink_alloc_large_skb+0x69/0x130 [ 500.265166][T12623] netlink_sendmsg+0x689/0xd70 [ 500.269992][T12623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.275363][T12623] ____sys_sendmsg+0x9ae/0xb40 [ 500.280188][T12623] ? copy_msghdr_from_user+0x10b/0x160 [ 500.285720][T12623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.291077][T12623] ? __pfx___lock_acquire+0x10/0x10 [ 500.296350][T12623] ___sys_sendmsg+0x135/0x1e0 [ 500.301096][T12623] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.306380][T12623] ? lock_acquire+0x2f/0xb0 [ 500.310955][T12623] ? __fget_files+0x40/0x3f0 [ 500.315702][T12623] ? fdget+0x176/0x210 [ 500.319830][T12623] __sys_sendmsg+0x117/0x1f0 [ 500.324488][T12623] ? __pfx___sys_sendmsg+0x10/0x10 [ 500.329685][T12623] ? __fget_files+0x244/0x3f0 [ 500.334442][T12623] do_syscall_64+0xcd/0x250 [ 500.339022][T12623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.345063][T12623] RIP: 0033:0x7f133fd7dff9 [ 500.349528][T12623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.369280][T12623] RSP: 002b:00007f1340b78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.377757][T12623] RAX: ffffffffffffffda RBX: 00007f133ff35f80 RCX: 00007f133fd7dff9 [ 500.385778][T12623] RDX: 0000000000008000 RSI: 0000000020000180 RDI: 0000000000000004 [ 500.393796][T12623] RBP: 00007f1340b78090 R08: 0000000000000000 R09: 0000000000000000 [ 500.401824][T12623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.409844][T12623] R13: 0000000000000000 R14: 00007f133ff35f80 R15: 00007ffe7eccd138 [ 500.417975][T12623] [ 501.717614][ T30] INFO: task syz.1.1086:10493 blocked for more than 143 seconds. [ 501.733624][ T30] Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 501.747258][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.766318][ T30] task:syz.1.1086 state:D stack:24720 pid:10493 tgid:10492 ppid:9586 flags:0x00004006 [ 501.776829][ T30] Call Trace: [ 501.780300][ T30] [ 501.783278][ T30] __schedule+0xef5/0x5750 [ 501.787926][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 501.793212][ T30] ? find_held_lock+0x2d/0x110 [ 501.798368][ T30] ? __pfx___schedule+0x10/0x10 [ 501.803298][ T30] ? schedule+0x298/0x350 [ 501.811179][ T30] ? __pfx_lock_release+0x10/0x10 [ 501.816297][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 501.821811][ T30] ? lock_acquire+0x2f/0xb0 [ 501.826419][ T30] ? schedule+0x1fd/0x350 [ 501.830916][ T30] schedule+0xe7/0x350 [ 501.835203][ T30] schedule_timeout+0x258/0x2a0 [ 501.840337][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 501.847329][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 501.852880][ T30] __wait_for_common+0x3e1/0x600 [ 501.858173][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 501.863616][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 501.871580][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 501.878563][ T30] wait_for_completion_state+0x1c/0x40 [ 501.884226][ T30] do_coredump+0x82f/0x4160 [ 501.888919][ T30] ? hlock_class+0x4e/0x130 [ 501.893576][ T30] ? stack_depot_save_flags+0x28/0x900 [ 501.907046][ T30] ? __pfx_do_coredump+0x10/0x10 [ 501.918684][ T30] ? kmem_cache_free+0x152/0x4b0 [ 501.923861][ T30] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 501.934030][ T30] ? do_syscall_64+0xda/0x250 [ 501.944155][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.964549][ T30] get_signal+0x237c/0x26d0 [ 501.973879][ T30] ? __pfx_get_signal+0x10/0x10 [ 501.991457][ T30] ? rcu_is_watching+0x12/0xc0 [ 501.996311][ T30] ? fpu__clear_user_states+0xf8/0x1e0 [ 502.022375][ T30] ? __local_bh_enable_ip+0xa4/0x120 [ 502.039581][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 502.055482][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 502.066729][ T30] ? rcu_is_watching+0x12/0xc0 [ 502.078202][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 502.083939][ T30] do_syscall_64+0xda/0x250 [ 502.108308][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.116764][ T30] RIP: 0033:0x7f9a44e403c0 [ 502.129278][ T30] RSP: 002b:00007f9a45e3cb38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 502.153007][ T30] RAX: 0000000000000000 RBX: 00007f9a45135f88 RCX: 00007f9a44f7dff9 [ 502.170336][ T30] RDX: 00007f9a45e3cb40 RSI: 00007f9a45e3cc70 RDI: 000000000000000b [ 502.191884][ T30] RBP: 00007f9a45135f80 R08: 0000000000000000 R09: 0000000000000000 [ 502.209604][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a45135f8c [ 502.239322][ T30] R13: 0000000000000000 R14: 00007fff0db2de20 R15: 00007fff0db2df08 [ 502.255909][ T30] [ 502.269690][ T30] [ 502.269690][ T30] Showing all locks held in the system: [ 502.284734][ T30] 1 lock held by khungtaskd/30: [ 502.301342][ T30] #0: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 502.322850][ T30] 2 locks held by getty/4988: [ 502.334049][ T30] #0: ffff88802e5550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 502.362940][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 502.388250][ T30] 6 locks held by kworker/u8:15/6283: [ 502.393730][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 502.423870][ T30] #1: ffffc90004137d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 502.446552][ T30] #2: ffffffff8faad5d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 502.469895][ T30] #3: ffffffff8fac31e8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1b/0x230 [ 502.489470][ T30] #4: ffff88807ea39428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_netns_pre_exit+0xdd/0x230 [ 502.515334][ T30] #5: ffffffff8ddc30f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 502.542942][ T30] 3 locks held by kworker/u8:37/6954: [ 502.555619][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 502.588081][ T30] #1: ffffc900044ffd80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 502.616379][ T30] #2: ffffffff8fac31e8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 502.637324][ T30] 2 locks held by kworker/u8:44/7267: [ 502.651871][ T30] #0: ffff8880b873ee98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 502.676132][ T30] #1: ffffc900031afd80 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 502.709143][ T30] 1 lock held by syz.1.1086/10494: [ 502.720151][ T30] 1 lock held by syz.1.1456/12449: [ 502.735571][ T30] 2 locks held by syz.0.1474/12525: [ 502.750060][ T30] 2 locks held by syz.0.1479/12550: [ 502.766748][ T30] 2 locks held by syz.3.1495/12612: [ 502.781237][ T30] 2 locks held by syz.2.1500/12633: [ 502.796922][ T30] #0: ffffffff8faad5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 502.823254][ T30] #1: ffffffff8fac31e8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x1b0/0x6e0 [ 502.850213][ T30] 2 locks held by syz.0.1502/12641: [ 502.867374][ T30] #0: ffffffff8fb61250 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 502.896234][ T30] #1: ffffffff8fac31e8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0xb4/0xb10 [ 502.923355][ T30] [ 502.933362][ T30] ============================================= [ 502.933362][ T30] [ 502.952050][ T30] NMI backtrace for cpu 0 [ 502.956443][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 502.966995][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 502.977097][ T30] Call Trace: [ 502.980413][ T30] [ 502.983382][ T30] dump_stack_lvl+0x116/0x1f0 [ 502.988130][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 502.993132][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 502.999183][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 503.005226][ T30] watchdog+0xf0c/0x1240 [ 503.009569][ T30] ? __pfx_watchdog+0x10/0x10 [ 503.014307][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 503.019569][ T30] ? __kthread_parkme+0x148/0x220 [ 503.024669][ T30] ? __pfx_watchdog+0x10/0x10 [ 503.029492][ T30] kthread+0x2c1/0x3a0 [ 503.033609][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 503.038860][ T30] ? __pfx_kthread+0x10/0x10 [ 503.043508][ T30] ret_from_fork+0x45/0x80 [ 503.047973][ T30] ? __pfx_kthread+0x10/0x10 [ 503.052618][ T30] ret_from_fork_asm+0x1a/0x30 [ 503.057540][ T30] [ 503.061446][ T30] Sending NMI from CPU 0 to CPUs 1: [ 503.067290][ C1] NMI backtrace for cpu 1 [ 503.067303][ C1] CPU: 1 UID: 0 PID: 4673 Comm: klogd Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 503.067332][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 503.067345][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 503.067384][ C1] Code: 7e 60 e8 a3 ff ff ff 31 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 f4 22 77 7e 65 8b 05 f5 22 77 7e a9 00 01 [ 503.067406][ C1] RSP: 0018:ffffc9000354f960 EFLAGS: 00000246 [ 503.067425][ C1] RAX: 0000000000000000 RBX: 00000000ffffeeb3 RCX: ffffffff816dd579 [ 503.067441][ C1] RDX: ffff88807ee8bc00 RSI: 00000000ffffeeb3 RDI: 0000000000000006 [ 503.067457][ C1] RBP: 00000000ffffeeb3 R08: 0000000000000006 R09: 00000000ffffeeb3 [ 503.067472][ C1] R10: 00000000ffffeeb3 R11: 0000000000002570 R12: ffffc9000354fb18 [ 503.067487][ C1] R13: 0000000000000000 R14: ffffffff8dd15aa8 R15: 80000000ffffeeb3 [ 503.067503][ C1] FS: 00007fb504394380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 503.067531][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.067548][ C1] CR2: 000000110c452c35 CR3: 000000007f174000 CR4: 00000000003526f0 [ 503.067571][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 503.067586][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 503.067600][ C1] Call Trace: [ 503.067608][ C1] [ 503.067616][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 503.067644][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 503.067681][ C1] ? nmi_handle+0x1a9/0x5c0 [ 503.067709][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 503.067762][ C1] ? default_do_nmi+0x6a/0x160 [ 503.067787][ C1] ? exc_nmi+0x170/0x1e0 [ 503.067810][ C1] ? end_repeat_nmi+0xf/0x53 [ 503.067846][ C1] ? desc_read+0x269/0x350 [ 503.067884][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 503.067922][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 503.067961][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 503.067999][ C1] [ 503.068006][ C1] [ 503.068014][ C1] desc_read+0x273/0x350 [ 503.068052][ C1] desc_read_finalized_seq+0x8a/0x1d0 [ 503.068091][ C1] ? __pfx_desc_read_finalized_seq+0x10/0x10 [ 503.068130][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 503.068170][ C1] ? get_data+0x39b/0x550 [ 503.068208][ C1] _prb_read_valid+0x4a8/0x7d0 [ 503.068271][ C1] ? __pfx__prb_read_valid+0x10/0x10 [ 503.068315][ C1] ? __pfx_lock_release+0x10/0x10 [ 503.068354][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 503.068392][ C1] prb_read_valid+0x79/0xb0 [ 503.068432][ C1] ? __pfx_prb_read_valid+0x10/0x10 [ 503.068474][ C1] syslog_print+0x44f/0x5d0 [ 503.068513][ C1] ? __pfx_syslog_print+0x10/0x10 [ 503.068559][ C1] ? aa_get_newest_label+0x376/0x680 [ 503.068591][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 503.068631][ C1] ? __sys_sendto+0x265/0x4d0 [ 503.068672][ C1] ? bpf_lsm_capable+0x9/0x10 [ 503.068708][ C1] ? security_capable+0x7e/0x260 [ 503.068739][ C1] do_syslog+0x3be/0x6a0 [ 503.068765][ C1] ? __pfx_do_syslog+0x10/0x10 [ 503.068796][ C1] ? rcu_is_watching+0x12/0xc0 [ 503.068828][ C1] __x64_sys_syslog+0x74/0xb0 [ 503.068853][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 503.068885][ C1] do_syscall_64+0xcd/0x250 [ 503.068921][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.068953][ C1] RIP: 0033:0x7fb5044f5fa7 [ 503.068972][ C1] Code: 73 01 c3 48 8b 0d 81 ce 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 51 ce 0c 00 f7 d8 64 89 01 48 [ 503.068998][ C1] RSP: 002b:00007fff7904ef88 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 503.069021][ C1] RAX: ffffffffffffffda RBX: 00007fb5046944a0 RCX: 00007fb5044f5fa7 [ 503.069039][ C1] RDX: 00000000000003ff RSI: 00007fb5046944a0 RDI: 0000000000000002 [ 503.069055][ C1] RBP: 0000000000000000 R08: 0000000000000002 R09: 61075f224b4a7bcf [ 503.069072][ C1] R10: 0000000000004000 R11: 0000000000000206 R12: 00007fb5046944a0 [ 503.069089][ C1] R13: 00007fb504684212 R14: 00007fb504694503 R15: 00007fb504694503 [ 503.069114][ C1] [ 503.188737][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 503.188762][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 503.188804][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 503.188825][ T30] Call Trace: [ 503.188836][ T30] [ 503.188849][ T30] dump_stack_lvl+0x3d/0x1f0 [ 503.188905][ T30] panic+0x71d/0x800 [ 503.188955][ T30] ? __pfx_panic+0x10/0x10 [ 503.189002][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 503.189044][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 503.540828][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 503.546237][ T30] ? watchdog+0xd76/0x1240 [ 503.550702][ T30] ? watchdog+0xd69/0x1240 [ 503.555178][ T30] watchdog+0xd87/0x1240 [ 503.559468][ T30] ? __pfx_watchdog+0x10/0x10 [ 503.564194][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 503.569449][ T30] ? __kthread_parkme+0x148/0x220 [ 503.574503][ T30] ? __pfx_watchdog+0x10/0x10 [ 503.579217][ T30] kthread+0x2c1/0x3a0 [ 503.583323][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 503.588570][ T30] ? __pfx_kthread+0x10/0x10 [ 503.593191][ T30] ret_from_fork+0x45/0x80 [ 503.597627][ T30] ? __pfx_kthread+0x10/0x10 [ 503.602241][ T30] ret_from_fork_asm+0x1a/0x30 [ 503.607060][ T30] [ 503.610422][ T30] Kernel Offset: disabled [ 503.614762][ T30] Rebooting in 86400 seconds..