last executing test programs: 22.949181368s ago: executing program 3 (id=423): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x8903, 0x400000000000001) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) close_range$auto(0x0, 0xfffffffffffff000, 0x2) msgctl$auto(0x2, 0xc, &(0x7f0000000080)={{0x2, 0xf3, 0x2, 0x6, 0x9, 0x2, 0x6}, 0x0, 0x0, 0x7, 0x80000001, 0xce0a, 0xf3, 0x80, 0x412f, 0x1, 0x5, 0x9, 0x1}) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) clone$auto(0x4, 0x400, 0xfffffffffffffffe, 0xfffffffffffffffc, 0xd1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 20.485248715s ago: executing program 0 (id=440): mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8002) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mincore$auto(0x1000, 0x8001, 0x0) (async) fcntl$auto(0x1ff, 0x9, 0x0) (async) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) (async) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fcntl$auto(0x8000000000000001, 0x26, 0x2) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mlockall$auto(0x7) socket(0xa, 0x801, 0x84) (async) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) (async) socket(0x2b, 0x1, 0x1) (async) futex$auto(0x0, 0x9, 0x8243, 0x0, 0x0, 0x2) socket(0x1d, 0x2, 0x2) socket(0x2, 0x1, 0x106) setsockopt$auto(0x3, 0x6, 0x1, 0x0, 0x4) listen$auto(0x3, 0x9) (async) listen$auto(0x3, 0x81) (async) shutdown$auto(0x200000003, 0x2) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x4040, 0x90) accept$auto(0x3, 0x0, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) syslog$auto(0x2, 0xfffffffffffffffe, 0xffffffff) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 19.313509453s ago: executing program 0 (id=445): socket(0x28, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0xffffffffffffffff, 0x300) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) io_uring_setup$auto(0x6, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0x2, 0x2, 0x1) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setuid$auto(0xe) (async, rerun: 64) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) (rerun: 64) mincore$auto(0x0, 0x8000000000005a, 0x0) mkdir$auto(0x0, 0x40) (async) access$auto(0x0, 0x0) (async) socket(0x25, 0x1, 0x3) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x5, 0x0) futex$auto(0x0, 0xd, 0x1, 0x0, 0x0, 0xfffffffc) (async) getsockopt$auto(0x6, 0x40000000084, 0x4, 0xfffffffffffffffe, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) socket(0xa, 0x801, 0x84) (async, rerun: 64) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) 18.836995666s ago: executing program 1 (id=448): sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048841}, 0x0) (async, rerun: 32) r0 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000300), 0xffffffffffffffff) (async, rerun: 32) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fstat$auto(0x2, 0x0) (async) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01"], 0x5c}, 0x1, 0x0, 0x0, 0x40004000}, 0x40001000) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048810}, 0x4804) (async) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf2502000000fe0093f6"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x44, r5, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, {@u6_addr16=[0x7ff, 0x101, 0x800, 0x2, 0x4, 0xfc, 0x9f8]}}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, {@u6_addr32=[0xfffffff9, 0x2f, 0x1, 0x6]}}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) 18.57065182s ago: executing program 1 (id=451): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mincore$auto(0x0, 0x8000000000005a, 0x0) rmdir$auto(0x0) 18.354968287s ago: executing program 1 (id=452): shmget$auto(0x0, 0x5, 0x4) socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x4) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0) dup2$auto(0x7, 0xb7c) 18.168278103s ago: executing program 1 (id=454): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000180), r0) sendmsg$auto_TIPC_NL_LINK_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000840) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) tkill$auto(0x1, 0x7) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x0) mprotect$auto(0x1ffff000, 0x80000000, 0x0) setresgid$auto(0x81, 0x800000a0, 0x8) socket(0x2, 0x2, 0x1) exit$auto(0x7) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f00000000c0)="c82fb5f220470490b0ce42cba0a2d8edb15700"/33, 0x10001) getsockopt$auto(0x6, 0x4000008, 0x7, 0xfffffffffffffffe, 0x0) syz_genetlink_get_family_id$auto_MAC802154_HWSIM(&(0x7f0000000000), r0) syz_genetlink_get_family_id$auto_MAC802154_HWSIM(&(0x7f0000000040), r0) 16.262009277s ago: executing program 1 (id=455): rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) keyctl$auto(0x1e, 0xfffffffb, 0x40000000001065, 0x1, 0x1) userfaultfd$auto(0x10000) 2.686205276s ago: executing program 3 (id=423): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x8903, 0x400000000000001) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) close_range$auto(0x0, 0xfffffffffffff000, 0x2) msgctl$auto(0x2, 0xc, &(0x7f0000000080)={{0x2, 0xf3, 0x2, 0x6, 0x9, 0x2, 0x6}, 0x0, 0x0, 0x7, 0x80000001, 0xce0a, 0xf3, 0x80, 0x412f, 0x1, 0x5, 0x9, 0x1}) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) clone$auto(0x4, 0x400, 0xfffffffffffffffe, 0xfffffffffffffffc, 0xd1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 2.399588265s ago: executing program 3 (id=475): socket(0x2, 0x1, 0x106) ioctl$auto(0x3, 0x8907, 0xfffffffffffff4e0) dup2$auto(0x0, 0x3) 2.387699417s ago: executing program 2 (id=476): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(0x0) mincore$auto(0x0, 0x8000000000005a, 0x0) rmdir$auto(0x0) 2.163348646s ago: executing program 3 (id=477): r0 = socket(0xa, 0x1, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000000), r1) sendmsg$auto_NFC_CMD_DEV_DOWN(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4040010) sendmsg$auto_NFC_CMD_GET_SE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x10}]}, 0x1c}}, 0x4000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) getpid() select$auto(0x3, 0x0, &(0x7f0000000100)={[0xc, 0x600, 0x10008, 0x8010000000000201, 0x4, 0x1000, 0x1, 0x1, 0x5, 0xffffffff, 0x8000000000000002, 0x3, 0x9, 0x200, 0xffffffffffffffff, 0xc]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) io_uring_setup$auto(0x6, 0x0) write$auto(0x3, 0x0, 0xff) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.162948581s ago: executing program 2 (id=478): madvise$auto(0x0, 0x2000040080000004, 0xe) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 1.805428541s ago: executing program 2 (id=479): connect$auto(0x3, &(0x7f0000000000)={0x2, @sockaddr_1_1}, 0x55) (async) keyctl$auto(0x20000000000001f, 0x20000002, 0xffffffffffffff66, 0xf, 0x8400000000000007) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) flock$auto(0x6, 0x1) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) close_range$auto(0x2, 0x8, 0x0) (async) mknod$auto(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x1001, 0x4) (async) open(&(0x7f0000000000)='./file0\x00', 0xa240, 0x15e) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) fcntl$auto(0x3, 0x4, 0xa553) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) read$auto(0x3, 0x0, 0x80) 1.534337336s ago: executing program 0 (id=445): socket(0x28, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0xffffffffffffffff, 0x300) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) io_uring_setup$auto(0x6, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0x2, 0x2, 0x1) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setuid$auto(0xe) (async, rerun: 64) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) (rerun: 64) mincore$auto(0x0, 0x8000000000005a, 0x0) mkdir$auto(0x0, 0x40) (async) access$auto(0x0, 0x0) (async) socket(0x25, 0x1, 0x3) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x5, 0x0) futex$auto(0x0, 0xd, 0x1, 0x0, 0x0, 0xfffffffc) (async) getsockopt$auto(0x6, 0x40000000084, 0x4, 0xfffffffffffffffe, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) socket(0xa, 0x801, 0x84) (async, rerun: 64) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) 1.071241653s ago: executing program 0 (id=480): sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x8, 0x1000000004, 0x7fff, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) nanosleep$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x2b, 0x1, 0x1) bind$auto(0x7, &(0x7f0000000000)={0x11, @sockaddr_1_1}, 0x3e) clone3$auto(0x0, 0x1000) ioprio_set$auto(0x2, 0x800000000, 0x8) 1.001613698s ago: executing program 3 (id=481): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) write$auto(0x3, 0x0, 0x296) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) write$auto(0x7f, &(0x7f0000000080)='nlctrl\x00', 0x1) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0x7, &(0x7f00000001c0)='nfsd\x00', 0x6) pidfd_open$auto(0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x10, 0x2, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) unshare$auto(0x200) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r2, 0x0) clone$auto(0xfffffffe20000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xfa6) nanosleep$auto(&(0x7f0000000d40)={0x4, 0xffffffffffffffff}, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd77dcb7fcdf250300000001000000000000000100"], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x10000000) 809.687879ms ago: executing program 0 (id=482): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) close_range$auto(0x0, 0xfffffffffffff000, 0x2) msgctl$auto(0x2, 0xc, &(0x7f0000000080)={{0x2, 0xf3, 0x2, 0x6, 0x9, 0x2, 0x6}, 0x0, 0x0, 0x7, 0x80000001, 0xce0a, 0xf3, 0x80, 0x412f, 0x1, 0x5, 0x9, 0x1}) mmap$auto(0x4, 0x5, 0x3, 0x92, 0x101, 0x80000000) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080)={0x2, @sockaddr_1_1}, 0x6b) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 652.094053ms ago: executing program 0 (id=483): futex$auto(&(0x7f0000000280)=0x4, 0xb, 0x4, 0x0, &(0x7f0000000300), 0x6) (async) futex$auto(&(0x7f0000000280)=0x4, 0xb, 0x4, 0x0, &(0x7f0000000300), 0x6) ioperm$auto(0x800, 0x5, 0xd) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x89e2, 0x91) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) open(&(0x7f0000000080)='./file0\x00', 0x1ffd, 0x12) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x100082) fallocate$auto(0x3, 0x3, 0xe, 0x8ec5) (async) fallocate$auto(0x3, 0x3, 0xe, 0x8ec5) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x8000000000000000, 0x8, 0x7, 0x9, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0xf, 0x0, 0x9, 0x10001, 0x5, [0x9, 0x7f, 0x77, 0x1, 0x8, 0xe06, 0x400, 0x3, 0x80000000, 0x8, 0x3, 0xfffffffffffffffc, 0x10, 0x3, 0x35c4, 0x1, 0x6, 0x8, 0xea8, 0x8, 0x5, 0x8, 0x5, 0x1, 0x200000000800, 0x9, 0x5, 0x2, 0x800, 0x8000000000000000, 0x2ab, 0x8, 0x7, 0x1, 0x1, 0x3, 0x1800, 0x6b, 0xfffffffffffffff9, 0x4, 0x2ba, 0x4, 0xf, 0x3ff, 0x9, 0x7fffffff, 0x6, 0x7d, 0xdc]}, 0x800, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sched_setattr$auto(0x0, &(0x7f00000002c0)={0x1000, 0x6, 0x1d, 0xc, 0x6, 0x5f02, 0x2, 0x9, 0x877, 0x6}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x40000000029, 0x3, 0xfffffffffffffffe, 0x0) socket(0x2b, 0x800, 0x5) (async) socket(0x2b, 0x800, 0x5) select$auto(0xb, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x200000000000000, 0x5}) 606.297068ms ago: executing program 2 (id=484): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x11, 0x80003, 0x300) madvise$auto(0x0, 0x2000040080000004, 0xe) open(&(0x7f0000004080)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_register$auto(0x2, 0xf, 0x0, 0x20) mprotect$auto(0x1ffff000, 0x20000010000, 0xfffffffffffffffd) r0 = socket$nl_generic(0x10, 0x3, 0x10) rt_sigprocmask$auto(0x2, &(0x7f0000000000)={0x8}, 0x0, 0x8) r1 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)=ANY=[@ANYBLOB="9fe1e6d4", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25020000000600010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) vmsplice$auto(0x1, 0xffffffffffffffff, 0x7, 0x6) recvfrom$auto(0x3, &(0x7f0000000040), 0x9, 0x2, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) 553.401103ms ago: executing program 1 (id=456): socket(0x2c, 0x807, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x9) writev$auto(0x5, &(0x7f0000000100)={&(0x7f0000000040), 0x4}, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') clone$auto(0x4003b45, 0x80000000000005, 0xfffffffffffffffe, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0xc0807, 0x73) mmap$auto(0xf000, 0x8, 0x31b1, 0x3cb9b4dd, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) move_pages$auto(0xfffffffa, 0xd0, &(0x7f0000001100)=0x0, 0x0, 0x0, 0x5) futex_waitv$auto(0xfffffffffffffffd, 0x5, 0x7, 0x0, 0x7fffffff) setitimer$auto(0x1, 0x0, 0x0) set_mempolicy$auto(0x2, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto(0x0, 0xa, 0x80000001) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getitimer$auto(0x1aa9, &(0x7f0000000040)={{0x1, 0x8}, {0x400800, 0xa}}) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x202) fanotify_init$auto(0x7a, 0x80000000000) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000022c0)='ns/net\x00') fanotify_mark$auto(0x2, 0x7, 0x9, 0x4, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 233.520576ms ago: executing program 2 (id=485): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x29, 0x6, 0x2) r0 = socket(0x8, 0x806, 0x106) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$auto(0x8, 0x0, 0x83, 0x9, &(0x7f00000002c0)={0xfffffffffffffffa, 0x7}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x1) modify_ldt$auto(0x2, 0xfffffffffffffffd, 0x1) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe) close_range$auto(0x0, 0x7, 0x6) fanotify_init$auto(0x5, 0x2) mmap$auto(0x0, 0x9, 0xe2, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0x3f, 0x0, 0xf2) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) io_uring_setup$auto(0xecf, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x3, 0x6, 0xe, 0x7, [0x1, 0x10000, 0x3], {0x9, 0x40d, 0x1000, 0x5, 0xd, 0x0, 0x10001, 0xd, 0xffffffffffffffff}, {0x2, 0x1, 0x1, 0x0, 0x0, 0x8, 0x8000, 0xfffffff9, 0x7f}}) socket(0x2a, 0x808, 0x41) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) fdatasync$auto(0x0) bind$auto(0x7, &(0x7f0000000000)={0x2, @sa_data_min="590eac1414349774a263b19050fe"}, 0x6f) listen$auto(0x3, 0x81) read$auto(0x0, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) 132.241268ms ago: executing program 2 (id=486): r0 = socket$nl_generic(0x10, 0x3, 0x10) open_tree$auto(0xffffffffffff106b, 0xfffffffffffffffd, 0x41b) mmap$auto(0x3, 0x20009, 0x2000000000001, 0xeb1, 0x405, 0x8000) ioperm$auto(0x40008, 0x3, 0x2) futex$auto(0x0, 0x85, 0x2, 0x0, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x175) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mlockall$auto(0x7) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) madvise$auto(0x0, 0x1d26, 0x17) setsockopt$auto(0x0, 0x1, 0x14, &(0x7f0000000040)='\x88\xd6\x17\xa2\xab0a\x12\xaa\xc6\xaa\'\xf1c\xc0\a\x0f\xbe\x89U\xfe\xd3\x87\xdc\xd1\x93\x1dU)yX\xb7pe\xd0m\xb6q\xf4gW\xbd\x94\x02\xca\x9a\xf8-G\xcak\xe5\xa4\xc6\xaf\xb3B\x05]R\xedf\xc5\xc0\x13\xbb$]\x1a\x85\xfc\x04\x86\x8e\xce(t\xfe\vfb\xc3\x83\xc0\x93\xfc\xb8!B\xc5\xd0cy\x89\xd7\xb9\xad7=N\xd6\xda\xb9\x83\xe9f\xe4\xc3\xebUM\xe6\f\x16N6\x1e\x18\x8d\xb2\x86\xd7\xa9\xdc\xcfm&\n\x06\xc0\xe1\x97x\xcb\xbe\xc8\x9djf4_\xccw\t\xecB7wh\x86\x89\xb3\xb9F5v\x8c\x1b\xdbZ}\xe2#=\xb4\x00D\xa5\x1fL\xf6eUo\xe6\xbcr\x03?^\xfa\x03\x8a\xf7\xae\a~X\xf1\xf8\xac\xef\xbe\xb1\xbd#\xe7\x96,\x0f\xc8\x9f\xa1\xdf7m\x02\x9a\x1cvp\x8b\xdd\x90;\xf5W\xed\xabU\xc1.\xf1\xad\xf0w\xc6-O\"\xe9\x7f=\x0f9}>Q`\xd5P\xe4\xe1;\xfe\x98s\rn\xcb\x9b\xa9', 0xa484) sendmsg$auto_WG_CMD_GET_DEVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="012dbd"], 0x14}, 0x1, 0x0, 0x0, 0x20040104}, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$auto_MAC802154_HWSIM(&(0x7f0000000340), r1) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9b0d1400", @ANYRES16=r2, @ANYBLOB="8f632dbd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 0s ago: executing program 3 (id=487): socket(0x11, 0x80003, 0x300) socket(0x23, 0x80805, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) getsockopt$auto(0x4, 0x6, 0x6, 0xfffffffffffffffc, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. [ 49.588560][ T5216] cgroup: Unknown subsys name 'net' [ 49.754891][ T5216] cgroup: Unknown subsys name 'cpuset' [ 49.762806][ T5216] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.070444][ T5216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.818071][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.841665][ T5226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.849200][ T5226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.862630][ T5226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.872860][ T5226] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 52.892230][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.899414][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.952259][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.963184][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.972680][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.980118][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.992102][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.000548][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.009126][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.016577][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.025268][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.033661][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.041028][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.048277][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.056626][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.064856][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.072593][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.080869][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.089039][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.297298][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 53.366141][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 53.447340][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 53.456912][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.464568][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.472275][ T5225] bridge_slave_0: entered allmulticast mode [ 53.478892][ T5225] bridge_slave_0: entered promiscuous mode [ 53.510928][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.518133][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.525453][ T5225] bridge_slave_1: entered allmulticast mode [ 53.532466][ T5225] bridge_slave_1: entered promiscuous mode [ 53.609464][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.635842][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.644692][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.652403][ T5232] bridge_slave_0: entered allmulticast mode [ 53.659406][ T5232] bridge_slave_0: entered promiscuous mode [ 53.668250][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.691685][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.698766][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.706156][ T5232] bridge_slave_1: entered allmulticast mode [ 53.713273][ T5232] bridge_slave_1: entered promiscuous mode [ 53.732176][ T5225] team0: Port device team_slave_0 added [ 53.759750][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 53.770770][ T5225] team0: Port device team_slave_1 added [ 53.784549][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.791844][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.798916][ T5233] bridge_slave_0: entered allmulticast mode [ 53.805721][ T5233] bridge_slave_0: entered promiscuous mode [ 53.814564][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.826182][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.852698][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.859785][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.867072][ T5233] bridge_slave_1: entered allmulticast mode [ 53.874366][ T5233] bridge_slave_1: entered promiscuous mode [ 53.905618][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.912809][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.938911][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.960337][ T5232] team0: Port device team_slave_0 added [ 53.969492][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.976809][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.002982][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.021804][ T5232] team0: Port device team_slave_1 added [ 54.029559][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.058997][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.118393][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.125916][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.151967][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.179680][ T5233] team0: Port device team_slave_0 added [ 54.186096][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.193170][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.219198][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.230315][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.237690][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.244881][ T5228] bridge_slave_0: entered allmulticast mode [ 54.251375][ T5228] bridge_slave_0: entered promiscuous mode [ 54.259639][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.266790][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.274002][ T5228] bridge_slave_1: entered allmulticast mode [ 54.280859][ T5228] bridge_slave_1: entered promiscuous mode [ 54.290028][ T5225] hsr_slave_0: entered promiscuous mode [ 54.296268][ T5225] hsr_slave_1: entered promiscuous mode [ 54.304306][ T5233] team0: Port device team_slave_1 added [ 54.368667][ T5232] hsr_slave_0: entered promiscuous mode [ 54.375402][ T5232] hsr_slave_1: entered promiscuous mode [ 54.381370][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.389204][ T5232] Cannot create hsr debugfs directory [ 54.396372][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.403508][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.429480][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.451762][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.461983][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.468927][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.495021][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.518766][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.579673][ T5228] team0: Port device team_slave_0 added [ 54.602631][ T5228] team0: Port device team_slave_1 added [ 54.645512][ T5233] hsr_slave_0: entered promiscuous mode [ 54.652320][ T5233] hsr_slave_1: entered promiscuous mode [ 54.658284][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.666376][ T5233] Cannot create hsr debugfs directory [ 54.688136][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.695194][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.721219][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.733451][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.740398][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.766433][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.857924][ T5228] hsr_slave_0: entered promiscuous mode [ 54.865788][ T5228] hsr_slave_1: entered promiscuous mode [ 54.872058][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.879600][ T5228] Cannot create hsr debugfs directory [ 54.972476][ T5236] Bluetooth: hci0: command tx timeout [ 54.989593][ T5225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.019190][ T5225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.027968][ T5225] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.049819][ T5225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.056939][ T5236] Bluetooth: hci2: command tx timeout [ 55.106775][ T5232] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.117152][ T5232] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.126249][ T5232] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.133846][ T5236] Bluetooth: hci3: command tx timeout [ 55.141531][ T5236] Bluetooth: hci1: command tx timeout [ 55.156459][ T5232] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.210980][ T5233] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.236696][ T5233] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.259527][ T5233] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.268654][ T5233] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.317822][ T5228] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.330738][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.346518][ T5228] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.355780][ T5228] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.364936][ T5228] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.428956][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.446347][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.474452][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.487071][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.494278][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.528308][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.535437][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.547392][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.554489][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.576153][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.583273][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.669234][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.687955][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.704373][ T5232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.715069][ T5232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.746764][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.765049][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.772180][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.804634][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.828075][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.835229][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.886579][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.893671][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.933291][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.940418][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.007796][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.101042][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.140678][ T5232] veth0_vlan: entered promiscuous mode [ 56.185857][ T5232] veth1_vlan: entered promiscuous mode [ 56.236090][ T5225] veth0_vlan: entered promiscuous mode [ 56.265093][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.276454][ T5225] veth1_vlan: entered promiscuous mode [ 56.311158][ T5232] veth0_macvtap: entered promiscuous mode [ 56.328601][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.339339][ T5232] veth1_macvtap: entered promiscuous mode [ 56.378046][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.393873][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.406600][ T5225] veth0_macvtap: entered promiscuous mode [ 56.414690][ T5228] veth0_vlan: entered promiscuous mode [ 56.427280][ T5232] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.436213][ T5232] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.445340][ T5232] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.454362][ T5232] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.468044][ T5225] veth1_macvtap: entered promiscuous mode [ 56.516183][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.527379][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.538871][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.548483][ T5228] veth1_vlan: entered promiscuous mode [ 56.563474][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.578051][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.592154][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.605759][ T5233] veth0_vlan: entered promiscuous mode [ 56.620449][ T5233] veth1_vlan: entered promiscuous mode [ 56.628850][ T5225] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.638328][ T5225] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.648007][ T5225] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.657209][ T5225] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.731820][ T5228] veth0_macvtap: entered promiscuous mode [ 56.746750][ T5233] veth0_macvtap: entered promiscuous mode [ 56.754961][ T4516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.759219][ T5233] veth1_macvtap: entered promiscuous mode [ 56.768945][ T4516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.807632][ T5228] veth1_macvtap: entered promiscuous mode [ 56.841380][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.841382][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.852333][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.859774][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.869915][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.889185][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.900392][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.934662][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.946556][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.957843][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.958340][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.975661][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.987213][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.999003][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.010852][ T5233] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.020977][ T5233] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.029966][ T5233] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.038949][ T5233] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.051800][ T5236] Bluetooth: hci0: command tx timeout [ 57.067495][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.078646][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.088811][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.099324][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.109591][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.121197][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.131896][ T5236] Bluetooth: hci2: command tx timeout [ 57.139970][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.143818][ T5232] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.169487][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.185032][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.195062][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.210375][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.220726][ T5231] Bluetooth: hci3: command tx timeout [ 57.226467][ T5236] Bluetooth: hci1: command tx timeout [ 57.233559][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.244476][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.255429][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.279094][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.282584][ T5228] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.287172][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.296399][ T5288] process 'syz.2.3' launched ':,' with NULL argv: empty string added [ 57.313793][ T5228] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.323458][ T5228] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.333539][ T5228] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.581589][ T4516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.589445][ T4516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.660481][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.670483][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.682923][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.690763][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.713823][ T5290] ======================================================= [ 57.713823][ T5290] WARNING: The mand mount option has been deprecated and [ 57.713823][ T5290] and is ignored by this kernel. Remove the mand [ 57.713823][ T5290] option from the mount to silence this warning. [ 57.713823][ T5290] ======================================================= [ 57.809607][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.841689][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.849359][ T5294] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.094170][ T5301] svc: failed to register nfsdv3 RPC service (errno 111). [ 58.104308][ T5301] svc: failed to register nfsaclv3 RPC service (errno 111). [ 58.632076][ T5299] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 59.145150][ T5236] Bluetooth: hci0: command tx timeout [ 59.211820][ T5236] Bluetooth: hci2: command tx timeout [ 59.291609][ T5236] Bluetooth: hci1: command tx timeout [ 59.297321][ T5231] Bluetooth: hci3: command tx timeout [ 59.454336][ T5326] Zero length message leads to an empty skb [ 61.212445][ T5236] Bluetooth: hci0: command tx timeout [ 61.292936][ T5236] Bluetooth: hci2: command tx timeout [ 61.373123][ T5236] Bluetooth: hci1: command tx timeout [ 61.373137][ T5231] Bluetooth: hci3: command tx timeout [ 63.555565][ T5377] could not allocate digest TFM handle [ 63.650264][ T5380] could not allocate digest TFM handle [ 64.786574][ T5409] openvswitch: netlink: Key 4 has unexpected len 13 expected 12 [ 65.472410][ T5418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 66.041795][ T5436] mmap: syz.1.38 (5436) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.317761][ T5439] svc: failed to register nfsdv3 RPC service (errno 111). [ 66.363551][ T5439] svc: failed to register nfsaclv3 RPC service (errno 111). [ 67.254254][ T5470] cgroup: fork rejected by pids controller in /syz1 [ 67.485968][ T5492] syz.0.45 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.666397][ T5508] netlink: 'syz.3.48': attribute type 11 has an invalid length. [ 67.954265][ T5510] syz.2.47 uses obsolete (PF_INET,SOCK_PACKET) [ 68.315427][ T5517] svc: failed to register nfsdv3 RPC service (errno 111). [ 68.424227][ T5517] svc: failed to register nfsaclv3 RPC service (errno 111). [ 69.251141][ T5514] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 71.560706][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.567234][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.973548][ T5569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.64'. [ 76.281694][ T5587] sctp: [Deprecated]: syz.1.68 (pid 5587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 76.281694][ T5587] Use struct sctp_sack_info instead [ 76.705665][ T1165] cfg80211: failed to load regulatory.db [ 78.403934][ T5605] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.680722][ T5759] openvswitch: netlink: Key type 8590 is out of range max 32 [ 87.463946][ T5766] could not allocate digest TFM handle [ 89.668414][ T5814] svc: failed to register nfsdv3 RPC service (errno 111). [ 89.708051][ T5814] svc: failed to register nfsaclv3 RPC service (errno 111). [ 89.722071][ T5818] nbd: must specify at least one socket [ 89.758562][ T5815] nbd: must specify at least one socket [ 93.262865][ T5922] mmap: syz.1.153 (5922): VmData 24944640 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 96.658991][ T5991] svc: failed to register nfsdv3 RPC service (errno 111). [ 96.696387][ T5991] svc: failed to register nfsaclv3 RPC service (errno 111). [ 98.102680][ T5995] netlink: 172 bytes leftover after parsing attributes in process `syz.2.164'. [ 108.900178][ T6222] ptrace attach of "./syz-executor exec"[5225] was attempted by "./syz-executor exec"[6222] [ 109.512996][ T6225] sctp: failed to load transform for md5: -4 [ 115.319387][ T29] audit: type=1326 audit(48972.844:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.0.260" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa6c5f7dff9 code=0x0 [ 117.877001][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.887086][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.908292][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.919379][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.930268][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 117.937660][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.627109][ T6345] chnl_net:caif_netlink_parms(): no params data found [ 119.406079][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.425199][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.432400][ T6345] bridge_slave_0: entered allmulticast mode [ 119.454010][ T6345] bridge_slave_0: entered promiscuous mode [ 120.180240][ T5236] Bluetooth: hci4: command tx timeout [ 120.233644][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.240782][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.278694][ T6345] bridge_slave_1: entered allmulticast mode [ 120.314411][ T6345] bridge_slave_1: entered promiscuous mode [ 120.830930][ T6395] delete_channel: no stack [ 121.023214][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.279'. [ 121.206022][ T6345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.325214][ T6345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.828735][ T5931] syz.2.144 (5931) used greatest stack depth: 19216 bytes left [ 122.126630][ T6345] team0: Port device team_slave_0 added [ 122.180562][ T6345] team0: Port device team_slave_1 added [ 122.437488][ T5236] Bluetooth: hci4: command tx timeout [ 122.615557][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.624546][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.693249][ T6345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.876511][ T5897] syz.2.144 (5897) used greatest stack depth: 18368 bytes left [ 122.985818][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.992831][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.135782][ T6345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.355364][ T6345] hsr_slave_0: entered promiscuous mode [ 123.373437][ T6345] hsr_slave_1: entered promiscuous mode [ 123.398338][ T6345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.409048][ T6345] Cannot create hsr debugfs directory [ 123.915224][ T6345] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.180709][ T6345] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.385358][ T6345] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.575044][ T6345] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.720771][ T5236] Bluetooth: hci4: command tx timeout [ 125.051387][ T4516] bridge_slave_1: left allmulticast mode [ 125.058310][ T4516] bridge_slave_1: left promiscuous mode [ 125.064781][ T4516] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.095447][ T4516] bridge_slave_0: left allmulticast mode [ 125.118427][ T4516] bridge_slave_0: left promiscuous mode [ 125.134648][ T4516] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.744676][ T4516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.776400][ T4516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.801667][ T4516] bond0 (unregistering): Released all slaves [ 126.303716][ T6345] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 126.313267][ T6345] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 126.330238][ T6345] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 126.352283][ T6345] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 126.468631][ T4516] hsr_slave_0: left promiscuous mode [ 126.485754][ T4516] hsr_slave_1: left promiscuous mode [ 126.506144][ T4516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.527811][ T4516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.566577][ T4516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.584377][ T4516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.613910][ T4516] veth1_macvtap: left promiscuous mode [ 126.633425][ T4516] veth0_macvtap: left promiscuous mode [ 126.647616][ T4516] veth1_vlan: left promiscuous mode [ 126.661079][ T4516] veth0_vlan: left promiscuous mode [ 126.978010][ T5236] Bluetooth: hci4: command tx timeout [ 127.575202][ T4516] team0 (unregistering): Port device team_slave_1 removed [ 127.627832][ T4516] team0 (unregistering): Port device team_slave_0 removed [ 128.305977][ T6345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.341906][ T6345] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.359884][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.367575][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.434754][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.441907][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.884981][ T6345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.951634][ T6345] veth0_vlan: entered promiscuous mode [ 128.972970][ T6345] veth1_vlan: entered promiscuous mode [ 129.017812][ T6345] veth0_macvtap: entered promiscuous mode [ 129.028185][ T6345] veth1_macvtap: entered promiscuous mode [ 129.071070][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.102510][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.112840][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.124261][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.134434][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.154088][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.169765][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.201609][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.233699][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.253155][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.297870][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.313865][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.335490][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.357829][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.382650][ T6345] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.407794][ T6345] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.430798][ T6345] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.443089][ T6345] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.582400][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.620652][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.628149][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.639022][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.882001][ T6709] netlink: 'syz.3.347': attribute type 11 has an invalid length. [ 135.884761][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.892095][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.528540][ T6768] netlink: 5280 bytes leftover after parsing attributes in process `syz.3.364'. [ 138.685755][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 138.725717][ T6771] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 140.209723][ T6807] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.376'. [ 143.631079][ T6846] syz.0.384: vmalloc error: size 269492224, failed to allocated page array size 526352, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 143.666840][ T6846] CPU: 1 UID: 0 PID: 6846 Comm: syz.0.384 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 143.677682][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 143.688267][ T6846] Call Trace: [ 143.691588][ T6846] [ 143.694963][ T6846] dump_stack_lvl+0x16c/0x1f0 [ 143.700012][ T6846] warn_alloc+0x24d/0x3a0 [ 143.704615][ T6846] ? __pfx_warn_alloc+0x10/0x10 [ 143.710296][ T6846] ? __get_vm_area_node+0x190/0x2d0 [ 143.715837][ T6846] ? __get_vm_area_node+0x1bc/0x2d0 [ 143.721641][ T6846] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 143.727791][ T6846] ? xt_alloc_table_info+0x3e/0xa0 [ 143.733254][ T6846] ? hlock_class+0x4e/0x130 [ 143.737828][ T6846] ? xt_counters_alloc+0x4c/0x70 [ 143.742945][ T6846] ? rcu_is_watching+0x12/0xc0 [ 143.747784][ T6846] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 143.754180][ T6846] ? translate_table+0x8bb/0x1c10 [ 143.759444][ T6846] ? xt_counters_alloc+0x4c/0x70 [ 143.764702][ T6846] vzalloc_noprof+0x6b/0x90 [ 143.769519][ T6846] ? xt_counters_alloc+0x4c/0x70 [ 143.774615][ T6846] xt_counters_alloc+0x4c/0x70 [ 143.779879][ T6846] __do_replace+0x99/0x9e0 [ 143.784431][ T6846] ? __pfx_translate_table+0x10/0x10 [ 143.789761][ T6846] ? lock_acquire+0x2f/0xb0 [ 143.794313][ T6846] ? __might_fault+0xe3/0x190 [ 143.799430][ T6846] ? __pfx___do_replace+0x10/0x10 [ 143.804594][ T6846] do_arpt_set_ctl+0xc6f/0x1050 [ 143.810275][ T6846] ? find_held_lock+0x2d/0x110 [ 143.815098][ T6846] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 143.820695][ T6846] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 143.826728][ T6846] ? __pfx_lock_release+0x10/0x10 [ 143.831804][ T6846] ? trace_contention_end+0xea/0x140 [ 143.837146][ T6846] ? __mutex_lock+0x1a6/0x9c0 [ 143.841993][ T6846] ? __mutex_unlock_slowpath+0x164/0x650 [ 143.847704][ T6846] ? __pfx___mutex_lock+0x10/0x10 [ 143.852795][ T6846] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.860843][ T6846] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 143.866361][ T6846] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 143.872764][ T6846] nf_setsockopt+0x8a/0xf0 [ 143.877679][ T6846] ip_setsockopt+0xcb/0xf0 [ 143.882507][ T6846] tcp_setsockopt+0xa4/0x100 [ 143.887844][ T6846] smc_setsockopt+0x1b4/0xc00 [ 143.892928][ T6846] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 143.899060][ T6846] ? __pfx_smc_setsockopt+0x10/0x10 [ 143.904753][ T6846] ? __pfx_smc_setsockopt+0x10/0x10 [ 143.910448][ T6846] do_sock_setsockopt+0x222/0x480 [ 143.915992][ T6846] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 143.921789][ T6846] ? fdget+0x176/0x210 [ 143.926813][ T6846] __sys_setsockopt+0x1a4/0x270 [ 143.932486][ T6846] ? __pfx___sys_setsockopt+0x10/0x10 [ 143.937925][ T6846] ? rcu_is_watching+0x12/0xc0 [ 143.942839][ T6846] __x64_sys_setsockopt+0xbd/0x160 [ 143.948360][ T6846] ? do_syscall_64+0x91/0x250 [ 143.953447][ T6846] ? lockdep_hardirqs_on+0x7c/0x110 [ 143.958904][ T6846] do_syscall_64+0xcd/0x250 [ 143.963461][ T6846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.969424][ T6846] RIP: 0033:0x7fa6c5f7dff9 [ 143.974768][ T6846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.995468][ T6846] RSP: 002b:00007fa6c6df5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 144.003933][ T6846] RAX: ffffffffffffffda RBX: 00007fa6c6136130 RCX: 00007fa6c5f7dff9 [ 144.012390][ T6846] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 144.020427][ T6846] RBP: 00007fa6c5ff0296 R08: 0000000001010151 R09: 0000000000000000 [ 144.028665][ T6846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.038503][ T6846] R13: 0000000000000000 R14: 00007fa6c6136130 R15: 00007fff795c12b8 [ 144.046733][ T6846] [ 144.156280][ T6846] Mem-Info: [ 144.159601][ T6846] active_anon:67834 inactive_anon:4 isolated_anon:0 [ 144.159601][ T6846] active_file:5174 inactive_file:51593 isolated_file:0 [ 144.159601][ T6846] unevictable:768 dirty:252 writeback:0 [ 144.159601][ T6846] slab_reclaimable:9299 slab_unreclaimable:92770 [ 144.159601][ T6846] mapped:29443 shmem:61946 pagetables:801 [ 144.159601][ T6846] sec_pagetables:0 bounce:0 [ 144.159601][ T6846] kernel_misc_reclaimable:0 [ 144.159601][ T6846] free:1278573 free_pcp:16757 free_cma:0 [ 144.220659][ T6846] Node 0 active_anon:267520kB inactive_anon:16kB active_file:20696kB inactive_file:206300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118472kB dirty:1004kB writeback:0kB shmem:242432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10056kB pagetables:3204kB sec_pagetables:0kB all_unreclaimable? no [ 144.266219][ T6846] Node 1 active_anon:116kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 144.351609][ T6846] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.380023][ T6846] lowmem_reserve[]: 0 2465 2466 0 0 [ 144.385428][ T6846] Node 0 DMA32 free:1213904kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:267584kB inactive_anon:16kB active_file:20696kB inactive_file:205476kB unevictable:1536kB writepending:1000kB present:3129332kB managed:2551308kB mlocked:0kB bounce:0kB free_pcp:22672kB local_pcp:18660kB free_cma:0kB [ 144.417799][ T6846] lowmem_reserve[]: 0 0 0 0 0 [ 144.422781][ T6846] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 144.450860][ T6846] lowmem_reserve[]: 0 0 0 0 0 [ 144.455676][ T6846] Node 1 Normal free:3876980kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:116kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:56080kB local_pcp:28348kB free_cma:0kB [ 144.486898][ T6846] lowmem_reserve[]: 0 0 0 0 0 [ 144.491691][ T6846] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 144.505755][ T6846] Node 0 DMA32: 461*4kB (UME) 445*8kB (UME) 437*16kB (UME) 231*32kB (ME) 107*64kB (UME) 48*128kB (UME) 24*256kB (UME) 115*512kB (UME) 92*1024kB (UM) 25*2048kB (UM) 235*4096kB (UM) = 1205772kB [ 144.526930][ T6846] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 144.539594][ T6846] Node 1 Normal: 52*4kB (UME) 29*8kB (UME) 36*16kB (UE) 166*32kB (UME) 85*64kB (UME) 33*128kB (UME) 14*256kB (UME) 8*512kB (UME) 3*1024kB (UME) 4*2048kB (UME) 938*4096kB (M) = 3876984kB [ 144.558493][ T6846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.569252][ T6846] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.579319][ T6846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.589482][ T6846] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.600818][ T6846] 121265 total pagecache pages [ 144.605890][ T6846] 27 pages in swap cache [ 144.610163][ T6846] Free swap = 123832kB [ 144.617401][ T6846] Total swap = 124996kB [ 144.621682][ T6846] 2097051 pages RAM [ 144.625857][ T6846] 0 pages HighMem/MovableOnly [ 144.630993][ T6846] 427374 pages reserved [ 144.635902][ T6846] 0 pages cma reserved [ 147.642132][ T6920] svc: failed to register nfsdv3 RPC service (errno 111). [ 147.697039][ T6920] svc: failed to register nfsaclv3 RPC service (errno 111). [ 151.334579][ T6981] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.502249][ T6981] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.181507][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.228484][ T6981] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.253925][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.268633][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.277118][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.284775][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.294087][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.476323][ T5236] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 152.631381][ T6981] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.048013][ T6981] bridge_slave_1: left allmulticast mode [ 153.055767][ T6981] bridge_slave_1: left promiscuous mode [ 153.076354][ T6981] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.171081][ T6981] bridge_slave_0: left allmulticast mode [ 153.176783][ T6981] bridge_slave_0: left promiscuous mode [ 153.202638][ T6981] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.076455][ T7079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.441'. [ 154.107663][ T7079] nbd: must specify at least one socket [ 154.421162][ T6981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.433471][ T6981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.448595][ T6981] bond0 (unregistering): Released all slaves [ 154.463480][ T7009] chnl_net:caif_netlink_parms(): no params data found [ 154.577913][ T5236] Bluetooth: hci1: command tx timeout [ 154.869938][ T7009] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.916364][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.923602][ T7009] bridge_slave_0: entered allmulticast mode [ 154.960997][ T7009] bridge_slave_0: entered promiscuous mode [ 154.993290][ T7009] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.001108][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.060953][ T7009] bridge_slave_1: entered allmulticast mode [ 155.068116][ T7009] bridge_slave_1: entered promiscuous mode [ 155.076628][ T7105] svc: failed to register nfsdv3 RPC service (errno 111). [ 155.126439][ T7105] svc: failed to register nfsaclv3 RPC service (errno 111). [ 155.348800][ T7009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.386251][ T7009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.582075][ T6981] hsr_slave_0: left promiscuous mode [ 155.589406][ T6981] hsr_slave_1: left promiscuous mode [ 155.593539][ T7121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.448'. [ 155.625313][ T6981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.647150][ T6981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.676582][ T6981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.706646][ T6981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.755350][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.765129][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.772945][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.781821][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.786983][ T6981] veth1_macvtap: left promiscuous mode [ 155.798650][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.807232][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.807280][ T6981] veth0_macvtap: left promiscuous mode [ 155.825022][ T6981] veth1_vlan: left promiscuous mode [ 155.832774][ T6981] veth0_vlan: left promiscuous mode [ 156.243239][ T7142] ptrace attach of ""[5233] was attempted by "./syz-executor exec"[7142] [ 156.839106][ T5231] Bluetooth: hci1: command tx timeout [ 156.896888][ T6981] team0 (unregistering): Port device team_slave_1 removed [ 156.984365][ T6981] team0 (unregistering): Port device team_slave_0 removed [ 157.789838][ T7009] team0: Port device team_slave_0 added [ 157.930639][ T7009] team0: Port device team_slave_1 added [ 158.060395][ T5231] Bluetooth: hci0: command tx timeout [ 158.060611][ T7009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.113832][ T7009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.196633][ T7009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.230083][ T7009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.266644][ T7009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.338035][ T7009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.532012][ T7009] hsr_slave_0: entered promiscuous mode [ 158.547190][ T7009] hsr_slave_1: entered promiscuous mode [ 158.563811][ T7009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.571561][ T7009] Cannot create hsr debugfs directory [ 158.768398][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.780225][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.790025][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.803227][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.814239][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.823827][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.108379][ T5236] Bluetooth: hci1: command tx timeout [ 159.415830][ T6817] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.714996][ T6817] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.760398][ T7123] chnl_net:caif_netlink_parms(): no params data found [ 160.028822][ T6817] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.185987][ T6817] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.308675][ T7160] chnl_net:caif_netlink_parms(): no params data found [ 160.329541][ T5236] Bluetooth: hci0: command tx timeout [ 160.420946][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.436684][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.444621][ T7123] bridge_slave_0: entered allmulticast mode [ 160.451792][ T7123] bridge_slave_0: entered promiscuous mode [ 160.460647][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.467860][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.476104][ T7123] bridge_slave_1: entered allmulticast mode [ 160.483526][ T7123] bridge_slave_1: entered promiscuous mode [ 160.513948][ T7009] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 160.581130][ T7009] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 160.608351][ T7123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.673265][ T7009] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 160.696230][ T7123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.748006][ T7160] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.762007][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.770914][ T7160] bridge_slave_0: entered allmulticast mode [ 160.778462][ T7160] bridge_slave_0: entered promiscuous mode [ 160.822457][ T7009] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 160.844523][ T7160] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.857773][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.875054][ T7160] bridge_slave_1: entered allmulticast mode [ 160.887839][ T7160] bridge_slave_1: entered promiscuous mode [ 160.959470][ T6817] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.991612][ T7123] team0: Port device team_slave_0 added [ 161.039842][ T5236] Bluetooth: hci2: command tx timeout [ 161.051010][ T7123] team0: Port device team_slave_1 added [ 161.083931][ T6817] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.102585][ T7160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.193801][ T7160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.257799][ T6817] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.306664][ T7123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.341231][ T7123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.378311][ T5236] Bluetooth: hci1: command tx timeout [ 161.461075][ T7123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.499462][ T7123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.506533][ T7123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.555058][ T7123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.659975][ T6817] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.751255][ T7160] team0: Port device team_slave_0 added [ 161.810630][ T7160] team0: Port device team_slave_1 added [ 161.938380][ T7123] hsr_slave_0: entered promiscuous mode [ 161.972136][ T7123] hsr_slave_1: entered promiscuous mode [ 161.982931][ T7123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.999900][ T7123] Cannot create hsr debugfs directory [ 162.023412][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.030532][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.073050][ T7160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.161353][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.184193][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.238960][ T7160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.560391][ T7160] hsr_slave_0: entered promiscuous mode [ 162.569990][ T7160] hsr_slave_1: entered promiscuous mode [ 162.590324][ T7160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.598286][ T7160] Cannot create hsr debugfs directory [ 162.603873][ T5236] Bluetooth: hci0: command tx timeout [ 162.656746][ T6817] bridge_slave_1: left allmulticast mode [ 162.663301][ T6817] bridge_slave_1: left promiscuous mode [ 162.696028][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.727991][ T6817] bridge_slave_0: left allmulticast mode [ 162.740731][ T6817] bridge_slave_0: left promiscuous mode [ 162.746512][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.772554][ T6817] bridge_slave_1: left allmulticast mode [ 162.795667][ T6817] bridge_slave_1: left promiscuous mode [ 162.801477][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.839864][ T6817] bridge_slave_0: left allmulticast mode [ 162.845686][ T6817] bridge_slave_0: left promiscuous mode [ 162.866860][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.297769][ T5236] Bluetooth: hci2: command tx timeout [ 164.550625][ T6817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.578308][ T6817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.599256][ T6817] bond0 (unregistering): Released all slaves [ 164.876793][ T5236] Bluetooth: hci0: command tx timeout [ 165.028177][ T6817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.062274][ T6817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.098539][ T6817] bond0 (unregistering): Released all slaves [ 165.568463][ T5236] Bluetooth: hci2: command tx timeout [ 165.708612][ T7009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.811873][ T7009] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.897815][ T6987] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.905090][ T6987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.952821][ T6987] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.961992][ T6987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.143574][ T7009] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.156769][ T7009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.414373][ T6817] hsr_slave_0: left promiscuous mode [ 166.431862][ T6817] hsr_slave_1: left promiscuous mode [ 166.440095][ T6817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.453156][ T6817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.469323][ T6817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.479123][ T6817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.505515][ T6817] hsr_slave_0: left promiscuous mode [ 166.516215][ T6817] hsr_slave_1: left promiscuous mode [ 166.527292][ T6817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.544698][ T6817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.561218][ T6817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.587242][ T6817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.663874][ T6817] veth1_macvtap: left promiscuous mode [ 166.669657][ T6817] veth0_macvtap: left promiscuous mode [ 166.678337][ T6817] veth1_vlan: left promiscuous mode [ 166.690665][ T6817] veth0_vlan: left promiscuous mode [ 166.699204][ T6817] veth1_macvtap: left promiscuous mode [ 166.712492][ T6817] veth0_macvtap: left promiscuous mode [ 166.719510][ T6817] veth1_vlan: left promiscuous mode [ 166.731446][ T6817] veth0_vlan: left promiscuous mode [ 167.593208][ T6817] team0 (unregistering): Port device team_slave_1 removed [ 167.666138][ T6817] team0 (unregistering): Port device team_slave_0 removed [ 167.848354][ T5236] Bluetooth: hci2: command tx timeout [ 168.943880][ T6817] team0 (unregistering): Port device team_slave_1 removed [ 169.013286][ T6817] team0 (unregistering): Port device team_slave_0 removed [ 169.980173][ T7009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.126717][ T7009] veth0_vlan: entered promiscuous mode [ 170.184674][ T7009] veth1_vlan: entered promiscuous mode [ 170.302297][ T7123] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 170.321479][ T7123] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 170.356383][ T7123] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 170.387593][ T7123] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 170.461006][ T7009] veth0_macvtap: entered promiscuous mode [ 170.567444][ T7123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.576834][ T7160] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 170.589195][ T7160] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 170.616344][ T7123] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.628995][ T7009] veth1_macvtap: entered promiscuous mode [ 170.645404][ T7160] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 170.678326][ T7160] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 170.707310][ T6822] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.714568][ T6822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.756703][ T6987] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.763893][ T6987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.795381][ T7009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.827779][ T7009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.855110][ T7009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.932092][ T7009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.944071][ T7009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.957089][ T7009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.037531][ T7009] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.056798][ T7009] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.065597][ T7009] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.089580][ T7009] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.188071][ T7160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.208907][ T7160] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.227667][ T7123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.304148][ T6822] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.311495][ T6822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.324309][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.331525][ T6822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.459255][ T6817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.478627][ T6817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.527100][ T6987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.535089][ T6987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.622238][ T7123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.728070][ T7123] veth0_vlan: entered promiscuous mode [ 171.771422][ T7123] veth1_vlan: entered promiscuous mode [ 171.881019][ T7123] veth0_macvtap: entered promiscuous mode [ 171.911328][ T7123] veth1_macvtap: entered promiscuous mode [ 171.948939][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.982953][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.004578][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.020186][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.040622][ T7123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.091939][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.134196][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.151581][ T7123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.193487][ T7123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.205021][ T7123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.228433][ T7123] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.246787][ T7123] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.257909][ T7123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.267106][ T7123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.328898][ T7160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.527433][ T6986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.554752][ T6986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.619481][ T7160] veth0_vlan: entered promiscuous mode [ 172.632630][ T6985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.650483][ T6985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.660131][ T7160] veth1_vlan: entered promiscuous mode [ 172.747746][ T7160] veth0_macvtap: entered promiscuous mode [ 172.785270][ T7160] veth1_macvtap: entered promiscuous mode [ 172.873676][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.906286][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.934325][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.966599][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.977374][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.020954][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.055242][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.098071][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.130356][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.140354][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.173424][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.195748][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.207561][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.251321][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.306533][ T7160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.315344][ T7160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.343158][ T7160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.359937][ T7160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.566081][ T6987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.589019][ T6987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.628334][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.678124][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.864969][ T7426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.481'. [ 174.473423][ T7439] ------------[ cut here ]------------ [ 174.480121][ T7439] WARNING: CPU: 1 PID: 7439 at mm/huge_memory.c:1602 copy_huge_pmd+0x16dd/0x2500 [ 174.489514][ T7439] Modules linked in: [ 174.493562][ T7439] CPU: 1 UID: 0 PID: 7439 Comm: syz.1.456 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 174.504325][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 174.514578][ T7439] RIP: 0010:copy_huge_pmd+0x16dd/0x2500 [ 174.520235][ T7439] Code: 01 e9 dd f5 ff ff e8 72 bc 9a ff 4c 89 e3 31 ff 83 e3 02 48 89 de e8 d2 be 9a ff 48 85 db 0f 84 a0 07 00 00 e8 54 bc 9a ff 90 <0f> 0b 90 e9 88 ef ff ff e8 46 bc 9a ff 49 89 ec 31 ff 41 81 e4 ff [ 174.540187][ T7439] RSP: 0018:ffffc90003a5f660 EFLAGS: 00010283 [ 174.546269][ T7439] RAX: 0000000000000fdc RBX: 0000000000000002 RCX: ffffc9000c33b000 [ 174.554317][ T7439] RDX: 0000000000040000 RSI: ffffffff81f1fb6c RDI: 0000000000000007 [ 174.562664][ T7439] RBP: ffffea000092da80 R08: 0000000000000007 R09: 0000000000000000 [ 174.571236][ T7439] R10: 0000000000000002 R11: 0000000000000000 R12: d7f0000000000e02 [ 174.579285][ T7439] R13: d7ffe7fff993fe02 R14: 0000000000000200 R15: ffff88802bf47c98 [ 174.588033][ T7439] FS: 00007fe1d21be6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 174.597122][ T7439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.603780][ T7439] CR2: 00007f8e2171fd58 CR3: 0000000061ac8000 CR4: 00000000003526f0 [ 174.611916][ T7439] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 174.620086][ T7439] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 174.628575][ T7439] Call Trace: [ 174.632379][ T7439] [ 174.635322][ T7439] ? __warn+0xea/0x3d0 [ 174.639594][ T7439] ? copy_huge_pmd+0x16dd/0x2500 [ 174.644546][ T7439] ? report_bug+0x3c0/0x580 [ 174.649799][ T7439] ? handle_bug+0x54/0xa0 [ 174.654672][ T7439] ? exc_invalid_op+0x17/0x50 [ 174.659602][ T7439] ? asm_exc_invalid_op+0x1a/0x20 [ 174.664663][ T7439] ? copy_huge_pmd+0x16dc/0x2500 [ 174.669965][ T7439] ? copy_huge_pmd+0x16dd/0x2500 [ 174.674946][ T7439] ? lock_acquire+0x2f/0xb0 [ 174.680826][ T7439] ? __pfx_copy_huge_pmd+0x10/0x10 [ 174.685963][ T7439] ? do_raw_spin_unlock+0x172/0x230 [ 174.692600][ T7439] ? _raw_spin_unlock+0x28/0x50 [ 174.698111][ T7439] copy_page_range+0xa6b/0x5a50 [ 174.703169][ T7439] ? mas_wr_store_entry+0x4e5/0x31a0 [ 174.708730][ T7439] ? __pfx_copy_page_range+0x10/0x10 [ 174.715380][ T7439] ? mas_store+0x53b/0xad0 [ 174.720319][ T7439] ? __pfx_mas_store+0x10/0x10 [ 174.725137][ T7439] ? lock_acquire+0x2f/0xb0 [ 174.729649][ T7439] ? copy_mm+0x1063/0x2550 [ 174.734114][ T7439] ? up_write+0x1b2/0x520 [ 174.738785][ T7439] copy_mm+0x134f/0x2550 [ 174.743087][ T7439] ? __pfx_copy_mm+0x10/0x10 [ 174.748008][ T7439] ? copy_process+0x3c7d/0x6ee0 [ 174.752962][ T7439] ? __raw_spin_lock_init+0x3a/0x110 [ 174.758796][ T7439] copy_process+0x3e43/0x6ee0 [ 174.763503][ T7439] ? __pfx_copy_process+0x10/0x10 [ 174.768766][ T7439] ? futex_wait+0x121/0x380 [ 174.773571][ T7439] kernel_clone+0xfd/0x960 [ 174.778011][ T7439] ? __pfx_kernel_clone+0x10/0x10 [ 174.783141][ T7439] ? find_held_lock+0x2d/0x110 [ 174.787932][ T7439] ? do_futex+0x123/0x350 [ 174.792668][ T7439] ? __pfx_do_futex+0x10/0x10 [ 174.797367][ T7439] ? 0xffffffff81000000 [ 174.801920][ T7439] __do_sys_clone+0xba/0x100 [ 174.806527][ T7439] ? __pfx___do_sys_clone+0x10/0x10 [ 174.816150][ T7439] ? 0xffffffff81000000 [ 174.820305][ T7439] ? 0xffffffff81000000 [ 174.824576][ T7439] do_syscall_64+0xcd/0x250 [ 174.829218][ T7439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.836219][ T7439] RIP: 0033:0x7fe1d137dff9 [ 174.840660][ T7439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.861083][ T7439] RSP: 002b:00007fe1d21be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 174.869758][ T7439] RAX: ffffffffffffffda RBX: 00007fe1d1536058 RCX: 00007fe1d137dff9 [ 174.877905][ T7439] RDX: ffffffff81000000 RSI: 0000000000000006 RDI: 0000000081000005 [ 174.885978][ T7439] RBP: 00007fe1d13f0296 R08: 0000000080000001 R09: 0000000000000000 [ 174.894759][ T7439] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 174.903217][ T7439] R13: 0000000000000000 R14: 00007fe1d1536058 R15: 00007ffd92c5c2a8 [ 174.911766][ T7439] ? 0xffffffff81000000 [ 174.915932][ T7439] [ 174.918967][ T7439] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 174.926266][ T7439] CPU: 1 UID: 0 PID: 7439 Comm: syz.1.456 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 174.936866][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 174.946962][ T7439] Call Trace: [ 174.950287][ T7439] [ 174.953221][ T7439] dump_stack_lvl+0x3d/0x1f0 [ 174.957869][ T7439] panic+0x71d/0x800 [ 174.961771][ T7439] ? __pfx_panic+0x10/0x10 [ 174.966207][ T7439] ? show_trace_log_lvl+0x29d/0x3d0 [ 174.971502][ T7439] ? copy_huge_pmd+0x16dd/0x2500 [ 174.976441][ T7439] check_panic_on_warn+0xab/0xb0 [ 174.981424][ T7439] __warn+0xf6/0x3d0 [ 174.985329][ T7439] ? copy_huge_pmd+0x16dd/0x2500 [ 174.990287][ T7439] report_bug+0x3c0/0x580 [ 174.994663][ T7439] handle_bug+0x54/0xa0 [ 174.998859][ T7439] exc_invalid_op+0x17/0x50 [ 175.003373][ T7439] asm_exc_invalid_op+0x1a/0x20 [ 175.008237][ T7439] RIP: 0010:copy_huge_pmd+0x16dd/0x2500 [ 175.013800][ T7439] Code: 01 e9 dd f5 ff ff e8 72 bc 9a ff 4c 89 e3 31 ff 83 e3 02 48 89 de e8 d2 be 9a ff 48 85 db 0f 84 a0 07 00 00 e8 54 bc 9a ff 90 <0f> 0b 90 e9 88 ef ff ff e8 46 bc 9a ff 49 89 ec 31 ff 41 81 e4 ff [ 175.033799][ T7439] RSP: 0018:ffffc90003a5f660 EFLAGS: 00010283 [ 175.039872][ T7439] RAX: 0000000000000fdc RBX: 0000000000000002 RCX: ffffc9000c33b000 [ 175.047852][ T7439] RDX: 0000000000040000 RSI: ffffffff81f1fb6c RDI: 0000000000000007 [ 175.055853][ T7439] RBP: ffffea000092da80 R08: 0000000000000007 R09: 0000000000000000 [ 175.063830][ T7439] R10: 0000000000000002 R11: 0000000000000000 R12: d7f0000000000e02 [ 175.071844][ T7439] R13: d7ffe7fff993fe02 R14: 0000000000000200 R15: ffff88802bf47c98 [ 175.080103][ T7439] ? copy_huge_pmd+0x16dc/0x2500 [ 175.085148][ T7439] ? lock_acquire+0x2f/0xb0 [ 175.089660][ T7439] ? __pfx_copy_huge_pmd+0x10/0x10 [ 175.094777][ T7439] ? do_raw_spin_unlock+0x172/0x230 [ 175.099999][ T7439] ? _raw_spin_unlock+0x28/0x50 [ 175.104862][ T7439] copy_page_range+0xa6b/0x5a50 [ 175.109749][ T7439] ? mas_wr_store_entry+0x4e5/0x31a0 [ 175.115060][ T7439] ? __pfx_copy_page_range+0x10/0x10 [ 175.120357][ T7439] ? mas_store+0x53b/0xad0 [ 175.124781][ T7439] ? __pfx_mas_store+0x10/0x10 [ 175.129725][ T7439] ? lock_acquire+0x2f/0xb0 [ 175.134264][ T7439] ? copy_mm+0x1063/0x2550 [ 175.138703][ T7439] ? up_write+0x1b2/0x520 [ 175.143065][ T7439] copy_mm+0x134f/0x2550 [ 175.147588][ T7439] ? __pfx_copy_mm+0x10/0x10 [ 175.152225][ T7439] ? copy_process+0x3c7d/0x6ee0 [ 175.157094][ T7439] ? __raw_spin_lock_init+0x3a/0x110 [ 175.162400][ T7439] copy_process+0x3e43/0x6ee0 [ 175.167136][ T7439] ? __pfx_copy_process+0x10/0x10 [ 175.172895][ T7439] ? futex_wait+0x121/0x380 [ 175.177768][ T7439] kernel_clone+0xfd/0x960 [ 175.182992][ T7439] ? __pfx_kernel_clone+0x10/0x10 [ 175.188111][ T7439] ? find_held_lock+0x2d/0x110 [ 175.193099][ T7439] ? do_futex+0x123/0x350 [ 175.197723][ T7439] ? __pfx_do_futex+0x10/0x10 [ 175.203154][ T7439] ? 0xffffffff81000000 [ 175.207326][ T7439] __do_sys_clone+0xba/0x100 [ 175.211933][ T7439] ? __pfx___do_sys_clone+0x10/0x10 [ 175.217160][ T7439] ? 0xffffffff81000000 [ 175.221487][ T7439] ? 0xffffffff81000000 [ 175.226007][ T7439] do_syscall_64+0xcd/0x250 [ 175.230567][ T7439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.237089][ T7439] RIP: 0033:0x7fe1d137dff9 [ 175.241710][ T7439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.261862][ T7439] RSP: 002b:00007fe1d21be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 175.270284][ T7439] RAX: ffffffffffffffda RBX: 00007fe1d1536058 RCX: 00007fe1d137dff9 [ 175.278273][ T7439] RDX: ffffffff81000000 RSI: 0000000000000006 RDI: 0000000081000005 [ 175.286298][ T7439] RBP: 00007fe1d13f0296 R08: 0000000080000001 R09: 0000000000000000 [ 175.294548][ T7439] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 175.302705][ T7439] R13: 0000000000000000 R14: 00007fe1d1536058 R15: 00007ffd92c5c2a8 [ 175.310728][ T7439] ? 0xffffffff81000000 [ 175.315236][ T7439] [ 175.318959][ T7439] Kernel Offset: disabled [ 175.323658][ T7439] Rebooting in 86400 seconds..