last executing test programs: 57.59985336s ago: executing program 2 (id=2267): r0 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, r0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x9, 0x1a, "10d2d17400"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20005811}, 0x48000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x118, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x100, 0xbb, "1e2eae3ac8ee9af5a8f29870325da7b6ba320e4b0b2c015c8b97615753db4ef4f9717456479468283a1be605282ac14ae7338cf0d52cd3caa364afb46b7a19d9fbc6df9b2d583ec28740312d6e7ebabbab3239d77a3f250410f89f32be5c03eea44d33c169cf070dc475bade9017b44b379820fb048cf7bf80cb23626f523b103d929e0e1015bdc544c50aabff740c6506722b4d43aa4a76ce106ee9848601e5a6befa895d35755355f92f3e3e206710c868a483b307e615e67751c25f2437f680e7e33a472b3229cd6a3ba9f6b5d3b53adf4032981f0c8701ede8b532274e7cded961908274f4d36a467c72907f107496bf93b4c6e8bd82770f0d95"}]}, 0x118}, 0x1, 0x0, 0x0, 0x811}, 0x1) 57.178123597s ago: executing program 2 (id=2269): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x10, &(0x7f0000000000)=@bpf_attr_1={0x8, 0x19, @value=0x507, 0xd9}, 0xcf) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 56.028056097s ago: executing program 1 (id=2271): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x73, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'}) 55.488060353s ago: executing program 1 (id=2273): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x3, 0x1) getsockopt$auto(0x6, 0x65, 0x2, 0xffffffffffffffff, 0x0) 54.890076189s ago: executing program 1 (id=2275): mmap$auto(0x0, 0xab, 0xdf, 0xeb1, 0x5e, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x5, 0x5, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x2040, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8004) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) socket(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1c24}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8000, 0x0) utimes$auto(0x0, &(0x7f0000000040)={0x19578706, 0x593}) mq_open$auto(&(0x7f0000000000)='&\x00', 0x4816, 0xff, &(0x7f0000000080)={0x7ff, 0x9, 0x489, 0x5}) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) 54.009721593s ago: executing program 1 (id=2278): mmap$auto(0x0, 0xab, 0xdf, 0xeb1, 0x5e, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x5, 0x5, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x2040, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8004) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) setsockopt$auto(0x3, 0x28, 0x7, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1c24}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8000, 0x0) utimes$auto(0x0, &(0x7f0000000040)={0x19578706, 0x593}) mq_open$auto(&(0x7f0000000000)='&\x00', 0x4816, 0xff, &(0x7f0000000080)={0x7ff, 0x9, 0x489, 0x5}) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) 52.105579604s ago: executing program 3 (id=2281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DEST(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x14, r1, 0x709, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0xf0, 0x24004091}, 0x0) 51.98933853s ago: executing program 1 (id=2282): connect$auto(0x9, &(0x7f0000000000)={0x40, @sa_data_min="15c8272929e1594a372304cd52e5"}, 0x2) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) (async) getsockopt$auto(0x6, 0x29, 0x4, 0x0, 0x0) (async) r0 = socket(0xa, 0x3, 0xff) (async) select$auto(0xfffffffd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xe, 0x9, 0x3, 0x1, 0x2800000000000002, 0x9, 0x5e582971, 0xff, 0x2c, 0x2000000004, 0xffff, 0x74, 0xb]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)={0x1ae, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x5d}, 0x1, 0x0, 0x0, 0x4000}, 0x880) 51.878952056s ago: executing program 3 (id=2283): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0x4000400002, 0x8000) fcntl$auto(0x100000000, 0xa, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4000000000020009, 0xc, 0xeb1, 0x401, 0x8000) msgsnd$auto(0xfffffff9, &(0x7f0000000040)={0x1}, 0x8, 0x921d) r0 = open(&(0x7f0000000000)='./file1\x00', 0x4361c0, 0x10) mq_open$auto(&(0x7f0000000200)='#)-\\&[}\x00', 0xde8, 0xb, 0x0) syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x8, 0x8000) mmap$auto(0x0, 0x3ff, 0x1, 0x1d, 0x9, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_HSR(&(0x7f0000000dc0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_IPVS(0x0, r0) read$auto(0x3, 0x0, 0x7) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 51.162254728s ago: executing program 1 (id=2284): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x3, 0x0, 0xc) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) mmap$auto(0x80, 0x20009, 0x0, 0xeb4, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) semctl$auto(0x8, 0x8, 0xd, 0x9) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x28044004) shmat$auto(0x0, 0x0, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) cachestat$auto(0x2, &(0x7f0000000000)={0x605, 0xff}, 0x0, 0xffff) clone$auto(0x40083b42, 0x5c84, 0xfffffffffffffffe, 0x0, 0x100000000000f) mount$auto(0x0, 0x0, 0x0, 0x9, 0x0) preadv$auto(0x5, 0x0, 0x3, 0xffff, 0x100000000) sendmsg$auto_NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x140ca49872d70a39) 50.889890356s ago: executing program 3 (id=2285): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unshare$auto(0x20000080) clone$auto(0x646a8dac, 0x8, 0x0, 0x0, 0x4) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x73, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'}) 50.285739721s ago: executing program 3 (id=2286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000002900), r0) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002940)={0x14, r1, 0x1d, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x1400000000000000, 0x40}, 0x0) 49.886203308s ago: executing program 3 (id=2287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="012dbd"], 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$auto_MAC802154_HWSIM(&(0x7f0000000340), r1) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="8f632dbd70bc73b83a641d"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 49.325124661s ago: executing program 3 (id=2289): r0 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r1 = open(&(0x7f0000000080)='./file0\x00', 0x22000, 0x50) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0xc, 0x72, 0x8b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rt_sigaction$auto(0x104, 0x0, 0x0, 0x3) exit$auto(0x5f97) rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setns(0xffffffffffffffff, 0x0) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) unshare$auto(0x40000080) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mmap$auto(0xffffffffffffffff, 0xa, 0x6, 0x1ffffffffffff, 0xfffffffffffffffc, 0x9) madvise$auto(0x3, 0x1, 0x7) writev$auto(0x1, &(0x7f0000000100)={&(0x7f0000000140), 0x400000000000fdef}, 0x1) vmsplice$auto(0x3, &(0x7f0000000080)={0x0, 0x6}, 0x22, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ustat$auto(0x6, 0xfffffffffffffffd) madvise$auto(0x0, 0x20200, 0x15) ioctl$auto(r1, 0x0, 0x6ea) syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f00000000c0), r0) 9.51507284s ago: executing program 2 (id=2270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x9b06d31d7996b03f) sendmsg$auto_IPVS_CMD_NEW_DEST(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80010080}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x284, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe6}, @IPVS_CMD_ATTR_DAEMON={0x6d, 0x3, "f560281673b9f647b02fa0adaa0d025bb536c014b4fde9648888c241eef9805a23254437807ff3f2b305c8daf29c651a4d59ef02cb72b261efdd50e324c03a563ce3a1c887c0ff81dd351d79433f4ff426292e1384b5bb7b30697ab1df7ba8fff8a639a7e3479a4cac"}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0x102, 0x2, "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"}, @IPVS_CMD_ATTR_SERVICE={0xdb, 0x1, "04fef77b1cda3b2abef77c9e35637ee793c5e798526bc5e542413e5057cf33b4cef9b123f42d804f53288b00f297b1e56d2423e137eb0dbbec1eb82b5052012c986975183e9de63d236951c4d8f3c8f4a63570b743dc07d591fece119e40ecef01b89e7b54c1d2bde44fda6c737f98a9cae35ff34dccde526a47f39a57f43723daf16ae27aeddd5890d18feede637af18240281428dc3358bc1b48565355c73b9fded3478b86ddabfa0578493a4344e2ae3c14d5eae3335aacd99d85b09d6721847b8d773005e057a087a6f9c242f5813bdda2c0b2738b"}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x284}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xdc, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4}, @NL80211_ATTR_REG_ALPHA2={0xb2, 0x21, "e43773630370d67f48f96132e33931fd9110b3985a664940a119a22dcff7abbba11a57409c4bbbf8262b6782d57a221b978152152b347b5599597ca7201817e3617cfa75bfa6c7cb87dff382583e0e433ed07a504299026aa3df11fc52bc38e342a463d58e57340f7f4bcb1a9939712eaafb0b0b46845ad8ddd349679e51db8c9dce579d388086a94c570036ee3b0d1a768858c1c1df0c89aecb4fa8c54154cd12fca144ec185c45c994416b4773"}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8090}, 0x24048040) syz_genetlink_get_family_id$auto_NET_DM(&(0x7f00000006c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) accept$auto(r3, &(0x7f0000000700)={0x9, @sockaddr_1_1={"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"}}, &(0x7f0000001740)=0x9) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000017c0), r2) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x24, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x5) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80009}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x8}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xfbcff6b78d062bd0) membarrier$auto(0x4, 0x7, 0x4) ppoll$auto(&(0x7f00000019c0)={r3, 0x7, 0xc7d3}, 0x7, &(0x7f0000001a00)={0xfffffffffffffff4, 0x5}, &(0x7f0000001a40)={0xff}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000001a80), r6) r7 = syz_genetlink_get_family_id$auto_NLBL_UNLBL(&(0x7f0000001b00), r6) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x30, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, {0xffff}}, @NLBL_UNLABEL_A_SECCTX={0x12, 0x7, "845ed227379cd484389fa4471c27"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) r8 = syz_genetlink_get_family_id$auto_MAC802154_HWSIM(&(0x7f0000001c40), r6) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000001ec0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001e80)={&(0x7f0000001c80)={0x1fc, r8, 0x3228d89fa1fa867d, 0x70bd2c, 0x25dfdbfd, {}, [@MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x8}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0xb9, 0x2, "f9adab9e4b75610983038c01da8f397ababba6e91b3b633e08443ff75ff1f46cd80a02506711c660aa5cdac73f524ec3346805243bd5ccc17803bd79dfd54c8768c6e95f80ee1ea943b0e6bdbf95f1a9ac34ab8192d427ef9167262171a24bb76ade6ea9df19f7330216bde6788bd1fb780e2157728509aa732b3b22b92e4dac74a974602bac97bf3ab5f30dde83e4ed05fbab05809c19e381ae1c0e8a2cdb9bd6d028a50d5c1e7ad33d3e3cf7578bd410d603d16f"}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x7}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x75, 0x2, "67197d993a79ef8f201e294ff0de998ba411e709b2d7548aab49e7c1e2dfab004297c0df9aefa8671f5fb7baf484a7dc8b21c6263cfc66994355efe8d2961275fb21f6096b19e83573715c6293e9965987db9559c1a84ab918d5eed0a3008ebd6dc9fbc80f57dd1a1f3aa787ffa2b3dceb"}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x31, 0x3, "e275a233b8896b7cfae812e6de1306a6f0ae1d946ed1a575591794a8fa46ca2c94815be709b5abb085f2b14a8c"}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x7ff}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x15, 0x3, "652cc386f025d3324fb39a243a8438e8e8"}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x2}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x47, 0x3, "38f8d37fca6a1813a2eaab2864a33bd7f7b51779b5846b10d6bb6197a1b04dde3545fe6ef1bef755e0e73ec5b06bb9572561ee15413964debfa2b651923b41a11ad465"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x41810}, 0x4000000) r9 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f40), r2) sendmsg$auto_NBD_CMD_STATUS(r2, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x38, r9, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_DEVICE_LIST={0x15, 0x9, "8a7f24267300b827682807ac67dd4b4f03"}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000011}, 0x0) madvise$auto(0x80000000, 0x10001, 0x5) r10 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000002080), r3) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x24, r10, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x60000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x8c1) mmap$auto(0x5, 0x89a3, 0x4, 0x17, 0xaa, 0x4) socket(0x11, 0x2, 0x40) r11 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000021c0), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x24, r11, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x2}, @OVS_DP_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x8080) socket(0x23, 0x5, 0x4) 9.289624846s ago: executing program 2 (id=2294): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x0, 0x8000000000005a, 0x0) mkdir$auto(0x0, 0x40) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) io_uring_register$auto(0x5, 0x5, 0x0, 0x1) 8.468520548s ago: executing program 2 (id=2296): mmap$auto(0x0, 0x2, 0x1000000004, 0x15, 0x2, 0x8003) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x9, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x4000000000000000, 0x6, 0x3, 0x200, 0x8, 0x6]}, 0x0, 0x0) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async, rerun: 32) write$auto(0x3, 0x0, 0xfdef) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) fcntl$auto(0x8000000000000001, 0x26, 0x8) (rerun: 64) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) (async) r0 = socket(0xa, 0x2, 0x88) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) (async) connect$auto(0x3, &(0x7f0000000140)={0xa, @sa_data_min="c4aeed448dc7fe8000"}, 0x55) (async, rerun: 64) sendmsg$auto_NL80211_CMD_REMOVE_LINK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x10c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_VENDOR_DATA={0x32, 0xc5, "1f3dc0d38c3dbf2d8d2389635cb06e9accc0ea0c9e76c44815e0fa1b7795cee6b74424e5d80ed4974ab96bc3e065"}, @NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_MLD_ADDR={0x86, 0x13a, "5d06d1bc4870c397dba60393e60d1efa26b80e7d912cf23e6b3da6ca6f997b26ba66c2d7ecdf537aa0ce0b6aad49d6e17d5dbe85ab02be965634ee7ba795617023a17d428c1191e1d5cbe4e0b95ca1987bf187020914e46a2c42090de5374d741664cac0893a7ac7def3e67fa088251ec42061630426c06bf5542b312613bb84a46f"}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x1}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xffffffff}, @NL80211_ATTR_SSID={0x1f, 0x34, "055e70dd4b88442748ab3792cb5c67ec05f37742d05b952166be44"}, @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, '\"'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40010}, 0x40) (async, rerun: 64) sendmmsg$auto(0x15, &(0x7f0000000100)={{0x0, 0x6, 0x0, 0x7f, 0x0, 0x8000, 0x2}, 0x7}, 0x3, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20006, 0x10000000000df, 0xeb2, 0x401, 0x8000) (rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) (async) fcntl$auto(0x8000000000000001, 0x26, 0x8) (async) fcntl$auto(0x8000000000000001, 0x6, 0x2) (async) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) write$auto(0x3, 0x0, 0xfdef) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 8.115703269s ago: executing program 0 (id=2297): ioperm$auto(0x7, 0x6, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) memfd_create$auto(0x0, 0x5) prctl$auto(0x0, 0xff, 0x2, 0xffffffffffffffff, 0x8) bpf$auto(0x0, &(0x7f0000000340)=@link_update={0x1a, @new_map_fd=0x7fff, 0x10003, @old_prog_fd=0x1}, 0x4) munmap$auto(0x1000000, 0x2000000c) madvise$auto(0x0, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) prctl$auto(0x59616d61, 0x101, 0x5, 0x0, 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x1, 0x1, 0x46, &(0x7f0000000040)='\xff', 0xbb) socket(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) mknod$auto(&(0x7f0000000180)='\xb2{(\\)[{[\x00', 0x2d, 0x8) mprotect$auto(0x1ffff000, 0x8000000000000002, 0x0) utime$auto(0x0, &(0x7f0000000340)={0x3}) swapon$auto(0xfffffffffffffffc, 0x7) sendmsg$auto_OVS_DP_CMD_SET(r0, 0x0, 0x90) fchmod$auto(0x1, 0x8000000000000001) prctl$auto(0xfffffff9, 0x8e, 0x709c6067, 0x2, 0x3ff) ioperm$auto(0x5, 0x7, 0x100) 5.114324143s ago: executing program 2 (id=2298): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000000c0)={0x2, @sockaddr_1_1}, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28) socket(0x1, 0x5, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) 4.094155539s ago: executing program 0 (id=2299): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x10, &(0x7f0000000000)=@bpf_attr_1={0x8, 0x19, @value=0x507, 0xd9}, 0xcf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 2.915999591s ago: executing program 0 (id=2300): mmap$auto(0x0, 0xab, 0xdf, 0xeb1, 0x5e, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x5, 0x5, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x2040, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8004) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) setsockopt$auto(0x3, 0x28, 0x7, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1c24}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8000, 0x0) utimes$auto(0x0, &(0x7f0000000040)={0x19578706, 0x593}) mq_open$auto(&(0x7f0000000000)='&\x00', 0x4816, 0xff, &(0x7f0000000080)={0x7ff, 0x9, 0x489, 0x5}) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) 2.12570774s ago: executing program 0 (id=2301): mmap$auto(0x0, 0xab, 0xdf, 0xeb1, 0x5e, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x5, 0x5, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x2040, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8004) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) setsockopt$auto(0x3, 0x28, 0x7, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1c24}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8000, 0x0) utimes$auto(0x0, &(0x7f0000000040)={0x19578706, 0x593}) mq_open$auto(&(0x7f0000000000)='&\x00', 0x4816, 0xff, &(0x7f0000000080)={0x7ff, 0x9, 0x489, 0x5}) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) 752.591618ms ago: executing program 0 (id=2302): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DEST(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x14, r1, 0x709, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0xe00, 0x24004091}, 0x0) 0s ago: executing program 0 (id=2303): madvise$auto(0xb, 0x2200040080000002, 0x200101) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x30000000, 0x2, 0x15, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000e2, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567) socketpair$auto(0x4, 0x8, 0x6, &(0x7f0000000040)=0x3) socket(0xa, 0x801, 0x84) sysinfo$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="dbfd000000000000000000000a"], 0xfdef}, 0x1, 0x0, 0x0, 0x20008000}, 0x2000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) kernel console output (not intermixed with test programs): 4704][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1230'. [ 378.834768][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.841254][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.584054][T10024] netlink: 222 bytes leftover after parsing attributes in process `syz.0.1253'. [ 386.329448][T10088] netlink: 'syz.0.1271': attribute type 11 has an invalid length. [ 386.719923][T10093] net_ratelimit: 2 callbacks suppressed [ 386.719943][T10093] netlink: zone id is out of range [ 386.739842][T10093] netlink: zone id is out of range [ 386.756337][T10093] netlink: zone id is out of range [ 386.770132][T10093] netlink: zone id is out of range [ 386.786998][T10093] netlink: zone id is out of range [ 386.800088][T10093] netlink: zone id is out of range [ 386.814835][T10093] netlink: zone id is out of range [ 386.826438][T10093] netlink: zone id is out of range [ 386.838837][T10093] netlink: zone id is out of range [ 386.849298][T10093] netlink: zone id is out of range [ 389.138719][T10110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1277'. [ 394.090365][T10190] net_ratelimit: 12 callbacks suppressed [ 394.090387][T10190] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 398.332758][T10272] netlink: 'syz.0.1324': attribute type 11 has an invalid length. [ 399.004624][T10287] netlink: 'syz.3.1327': attribute type 11 has an invalid length. [ 399.583387][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1335'. [ 400.249642][T10320] openvswitch: netlink: Flow key attribute not present in set flow. [ 401.951342][T10375] FAULT_INJECTION: forcing a failure. [ 401.951342][T10375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 402.006526][T10375] CPU: 1 UID: 0 PID: 10375 Comm: syz.0.1355 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 402.017354][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 402.027439][T10375] Call Trace: [ 402.030744][T10375] [ 402.033698][T10375] dump_stack_lvl+0x16c/0x1f0 [ 402.038421][T10375] should_fail_ex+0x497/0x5b0 [ 402.043142][T10375] ? fs_reclaim_acquire+0xae/0x150 [ 402.048292][T10375] should_fail_alloc_page+0xe7/0x130 [ 402.053626][T10375] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 402.059820][T10375] ? __pfx_mark_lock+0x10/0x10 [ 402.064715][T10375] ? find_held_lock+0x2d/0x110 [ 402.069528][T10375] __alloc_pages_noprof+0x190/0x25a0 [ 402.074860][T10375] ? is_bpf_text_address+0x8a/0x1a0 [ 402.080100][T10375] ? __pfx_lock_release+0x10/0x10 [ 402.085168][T10375] ? __pfx_mark_lock+0x10/0x10 [ 402.089975][T10375] ? hlock_class+0x4e/0x130 [ 402.094517][T10375] ? mark_lock+0xb5/0xc60 [ 402.098887][T10375] ? __lock_acquire+0xbdd/0x3ce0 [ 402.103871][T10375] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 402.109653][T10375] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 402.115592][T10375] ? policy_nodemask+0xea/0x4e0 [ 402.120485][T10375] alloc_pages_mpol_noprof+0x2c9/0x610 [ 402.125992][T10375] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 402.132023][T10375] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 402.137703][T10375] folio_alloc_mpol_noprof+0x36/0xd0 [ 402.143039][T10375] vma_alloc_folio_noprof+0xee/0x1b0 [ 402.148363][T10375] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 402.154290][T10375] ? find_held_lock+0x2d/0x110 [ 402.159098][T10375] do_pte_missing+0x2010/0x3e50 [ 402.163990][T10375] ? lock_vma_under_rcu+0x13e/0x980 [ 402.169219][T10375] __handle_mm_fault+0x100a/0x2a10 [ 402.174358][T10375] ? __pfx_lock_release+0x10/0x10 [ 402.179404][T10375] ? lock_vma_under_rcu+0x13e/0x980 [ 402.184633][T10375] ? __pfx___handle_mm_fault+0x10/0x10 [ 402.190131][T10375] handle_mm_fault+0x3fa/0xaa0 [ 402.194911][T10375] do_user_addr_fault+0x60d/0x13f0 [ 402.200042][T10375] exc_page_fault+0x5c/0xc0 [ 402.204551][T10375] asm_exc_page_fault+0x26/0x30 [ 402.209403][T10375] RIP: 0033:0x7fada204940b [ 402.213823][T10375] Code: 00 00 00 48 8d 3d fd 27 19 00 48 89 c1 31 c0 e8 bb 5a ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 31 28 19 00 48 89 34 24 48 8b 14 24 48 8b [ 402.233609][T10375] RSP: 002b:00007fada2f75fb0 EFLAGS: 00010202 [ 402.239856][T10375] RAX: 0000000000000000 RBX: 00007fada2336058 RCX: 0000000000000000 [ 402.247827][T10375] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000020000180 [ 402.255799][T10375] RBP: 00007fada2f77090 R08: 0000000000000000 R09: 0000000000000000 [ 402.263777][T10375] R10: 0000000020000180 R11: 0000000000000000 R12: 0000000000000001 [ 402.271752][T10375] R13: 0000000000000001 R14: 00007fada2336058 R15: 00007ffede2d5f78 [ 402.280045][T10375] [ 402.299496][T10375] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 402.536240][T10380] netlink: zone id is out of range [ 402.541417][T10380] netlink: zone id is out of range [ 402.617242][T10380] netlink: zone id is out of range [ 402.656628][T10380] netlink: zone id is out of range [ 402.705063][T10380] netlink: del zone limit has 4 unknown bytes [ 405.293163][T10431] openvswitch: netlink: Flow key attribute not present in set flow. [ 406.017219][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1383'. [ 406.668459][T10471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1390'. [ 413.405473][T10615] FAULT_INJECTION: forcing a failure. [ 413.405473][T10615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.441255][T10615] CPU: 1 UID: 0 PID: 10615 Comm: syz.2.1434 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 413.452435][T10615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 413.462521][T10615] Call Trace: [ 413.465846][T10615] [ 413.468802][T10615] dump_stack_lvl+0x16c/0x1f0 [ 413.473517][T10615] should_fail_ex+0x497/0x5b0 [ 413.478244][T10615] _copy_from_user+0x30/0xf0 [ 413.482867][T10615] copy_msghdr_from_user+0x99/0x160 [ 413.488105][T10615] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 413.493967][T10615] ___sys_sendmsg+0xff/0x1e0 [ 413.498599][T10615] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.503852][T10615] ? __pfx_lock_release+0x10/0x10 [ 413.508914][T10615] ? trace_lock_acquire+0x14a/0x1d0 [ 413.514160][T10615] ? fdget+0x176/0x210 [ 413.518259][T10615] __sys_sendmmsg+0x1a1/0x450 [ 413.522981][T10615] ? __pfx___sys_sendmmsg+0x10/0x10 [ 413.528224][T10615] ? vfs_write+0x14d/0x1140 [ 413.532796][T10615] ? do_sys_openat2+0xb1/0x1e0 [ 413.537595][T10615] ? __pfx_do_sys_openat2+0x10/0x10 [ 413.542849][T10615] ? ksys_write+0x1ad/0x260 [ 413.547372][T10615] ? __pfx_ksys_write+0x10/0x10 [ 413.552237][T10615] __x64_sys_sendmmsg+0x9c/0x100 [ 413.557187][T10615] ? lockdep_hardirqs_on+0x7c/0x110 [ 413.562392][T10615] do_syscall_64+0xcd/0x250 [ 413.566905][T10615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.572801][T10615] RIP: 0033:0x7f98c797dff9 [ 413.577217][T10615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.596834][T10615] RSP: 002b:00007f98c8791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 413.605260][T10615] RAX: ffffffffffffffda RBX: 00007f98c7b35f80 RCX: 00007f98c797dff9 [ 413.613243][T10615] RDX: 00000000000009a6 RSI: 0000000020000000 RDI: 0000000000000003 [ 413.621234][T10615] RBP: 00007f98c8791090 R08: 0000000000000000 R09: 0000000000000000 [ 413.629219][T10615] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 413.637212][T10615] R13: 0000000000000000 R14: 00007f98c7b35f80 R15: 00007ffee9f976c8 [ 413.645211][T10615] [ 414.242166][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1440'. [ 415.265327][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 420.670650][T10804] raw_sendmsg: syz.3.1480 forgot to set AF_INET. Fix it! [ 420.872339][T10805] delete_channel: no stack [ 421.657108][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 426.737916][T10943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1522'. [ 427.231585][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1525'. [ 428.156859][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 429.564514][T11004] FAULT_INJECTION: forcing a failure. [ 429.564514][T11004] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 429.642314][T11004] CPU: 1 UID: 0 PID: 11004 Comm: syz.0.1540 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 429.653145][T11004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 429.663238][T11004] Call Trace: [ 429.666540][T11004] [ 429.669578][T11004] dump_stack_lvl+0x16c/0x1f0 [ 429.674299][T11004] should_fail_ex+0x497/0x5b0 [ 429.679015][T11004] ? fs_reclaim_acquire+0xae/0x150 [ 429.684169][T11004] should_fail_alloc_page+0xe7/0x130 [ 429.689506][T11004] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 429.695712][T11004] ? __pfx___lock_acquire+0x10/0x10 [ 429.700956][T11004] __alloc_pages_noprof+0x190/0x25a0 [ 429.706279][T11004] ? hlock_class+0x4e/0x130 [ 429.710789][T11004] ? mark_lock+0xb5/0xc60 [ 429.715130][T11004] ? find_held_lock+0x2d/0x110 [ 429.719904][T11004] ? __pfx_mark_lock+0x10/0x10 [ 429.724676][T11004] ? hlock_class+0x4e/0x130 [ 429.729198][T11004] ? __lock_acquire+0xbdd/0x3ce0 [ 429.734147][T11004] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 429.739886][T11004] ? hlock_class+0x4e/0x130 [ 429.744396][T11004] ? __lock_acquire+0xbdd/0x3ce0 [ 429.749343][T11004] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 429.755255][T11004] ? policy_nodemask+0xea/0x4e0 [ 429.760129][T11004] alloc_pages_mpol_noprof+0x2c9/0x610 [ 429.765632][T11004] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 429.771637][T11004] pte_alloc_one+0x20/0x360 [ 429.776148][T11004] do_pte_missing+0x1ae0/0x3e50 [ 429.781063][T11004] __handle_mm_fault+0x100a/0x2a10 [ 429.786221][T11004] ? __pfx_mt_find+0x10/0x10 [ 429.790824][T11004] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 429.796476][T11004] ? __pfx___handle_mm_fault+0x10/0x10 [ 429.801960][T11004] ? find_vma+0xc0/0x140 [ 429.806212][T11004] ? __pfx_find_vma+0x10/0x10 [ 429.810900][T11004] handle_mm_fault+0x3fa/0xaa0 [ 429.815677][T11004] do_user_addr_fault+0x7a3/0x13f0 [ 429.820804][T11004] exc_page_fault+0x5c/0xc0 [ 429.825315][T11004] asm_exc_page_fault+0x26/0x30 [ 429.830170][T11004] RIP: 0010:copy_iovec_from_user+0x79/0x170 [ 429.836078][T11004] Code: e8 8c 4c 06 fd 4d 85 f6 0f 85 c6 00 00 00 e8 ce 4a 06 fd 0f 01 cb 0f ae e8 49 bf 00 00 00 00 00 fc ff df e8 b9 4a 06 fd 31 db <48> 8b 45 08 31 ff 89 de 49 89 c6 e8 e7 4c 06 fd 85 db 0f 85 b1 00 [ 429.855693][T11004] RSP: 0018:ffffc900047df8e0 EFLAGS: 00050246 [ 429.861763][T11004] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff84866e34 [ 429.869741][T11004] RDX: ffff88802e369e00 RSI: ffffffff84866e57 RDI: 0000000000000006 [ 429.877715][T11004] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 429.885692][T11004] R10: 0000000000001060 R11: 0000000000000000 R12: ffff88807ede4000 [ 429.893662][T11004] R13: 0000000000000106 R14: 0000000000000000 R15: dffffc0000000000 [ 429.901646][T11004] ? copy_iovec_from_user+0x54/0x170 [ 429.906952][T11004] ? copy_iovec_from_user+0x77/0x170 [ 429.912350][T11004] iovec_from_user.part.0+0x65/0x130 [ 429.917638][T11004] __import_iovec+0xdc/0x6e0 [ 429.922266][T11004] import_iovec+0x108/0x140 [ 429.926791][T11004] copy_msghdr_from_user+0xfa/0x160 [ 429.932007][T11004] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 429.937835][T11004] ___sys_sendmsg+0xff/0x1e0 [ 429.942445][T11004] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.947664][T11004] ? __pfx_lock_release+0x10/0x10 [ 429.952697][T11004] ? trace_lock_acquire+0x14a/0x1d0 [ 429.957910][T11004] ? fdget+0x176/0x210 [ 429.961984][T11004] __sys_sendmmsg+0x1a1/0x450 [ 429.966677][T11004] ? __pfx___sys_sendmmsg+0x10/0x10 [ 429.971883][T11004] ? vfs_write+0x14d/0x1140 [ 429.976399][T11004] ? do_sys_openat2+0xb1/0x1e0 [ 429.981170][T11004] ? __pfx_do_sys_openat2+0x10/0x10 [ 429.986387][T11004] ? ksys_write+0x1ad/0x260 [ 429.990890][T11004] ? __pfx_ksys_write+0x10/0x10 [ 429.995751][T11004] __x64_sys_sendmmsg+0x9c/0x100 [ 430.000708][T11004] ? lockdep_hardirqs_on+0x7c/0x110 [ 430.005915][T11004] do_syscall_64+0xcd/0x250 [ 430.010429][T11004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.016424][T11004] RIP: 0033:0x7fada217dff9 [ 430.020840][T11004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.040449][T11004] RSP: 002b:00007fada2f98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 430.048867][T11004] RAX: ffffffffffffffda RBX: 00007fada2335f80 RCX: 00007fada217dff9 [ 430.056849][T11004] RDX: 00000000000009a6 RSI: 0000000020000000 RDI: 0000000000000003 [ 430.064833][T11004] RBP: 00007fada2f98090 R08: 0000000000000000 R09: 0000000000000000 [ 430.072801][T11004] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 430.080771][T11004] R13: 0000000000000000 R14: 00007fada2335f80 R15: 00007ffede2d5f78 [ 430.088755][T11004] [ 431.613859][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1550'. [ 438.679987][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 440.275036][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.281406][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.298373][T11172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1591'. [ 448.806927][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1625'. [ 450.336336][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1633'. [ 455.687700][T11367] netlink: 'syz.1.1651': attribute type 1 has an invalid length. [ 455.729916][T11367] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1651'. [ 458.026041][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 458.069708][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 458.081949][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 458.091789][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 458.099590][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 458.107240][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 458.696479][T11404] chnl_net:caif_netlink_parms(): no params data found [ 459.254465][T11404] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.292166][T11404] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.313374][T11404] bridge_slave_0: entered allmulticast mode [ 459.324293][T11404] bridge_slave_0: entered promiscuous mode [ 459.355256][T11404] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.362391][T11404] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.384937][T11404] bridge_slave_1: entered allmulticast mode [ 459.405890][T11404] bridge_slave_1: entered promiscuous mode [ 459.468574][T11404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.505962][T11404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.102272][T11404] team0: Port device team_slave_0 added [ 460.132763][T11404] team0: Port device team_slave_1 added [ 460.194602][ T54] Bluetooth: hci1: command tx timeout [ 460.554262][T11404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.581896][T11404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.661213][T11404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.705135][T11404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.712126][T11404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.793341][T11404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.310706][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1669'. [ 461.373905][T11404] hsr_slave_0: entered promiscuous mode [ 461.505699][T11404] hsr_slave_1: entered promiscuous mode [ 461.659022][T11404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.686703][T11404] Cannot create hsr debugfs directory [ 462.282682][ T54] Bluetooth: hci1: command tx timeout [ 462.713399][T11404] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.486351][T11404] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.095141][T11404] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.353162][ T54] Bluetooth: hci1: command tx timeout [ 464.743797][T10865] syz.3.1490 (10865) used greatest stack depth: 18144 bytes left [ 464.796705][T11404] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.435833][ T54] Bluetooth: hci1: command tx timeout [ 466.490432][ T2925] bridge_slave_1: left allmulticast mode [ 466.531047][ T2925] bridge_slave_1: left promiscuous mode [ 466.561062][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.693770][ T2925] bridge_slave_0: left allmulticast mode [ 466.699475][ T2925] bridge_slave_0: left promiscuous mode [ 466.719947][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.524292][T11489] FAULT_INJECTION: forcing a failure. [ 467.524292][T11489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.578501][T11489] CPU: 0 UID: 0 PID: 11489 Comm: syz.1.1680 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 467.589349][T11489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 467.599431][T11489] Call Trace: [ 467.602729][T11489] [ 467.605678][T11489] dump_stack_lvl+0x16c/0x1f0 [ 467.610398][T11489] should_fail_ex+0x497/0x5b0 [ 467.615115][T11489] _copy_to_user+0x30/0xc0 [ 467.619561][T11489] simple_read_from_buffer+0xd0/0x160 [ 467.624973][T11489] proc_fail_nth_read+0x198/0x270 [ 467.630033][T11489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.635613][T11489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.641190][T11489] vfs_read+0x1ce/0xbd0 [ 467.645375][T11489] ? __fget_files+0x23a/0x3f0 [ 467.650163][T11489] ? fdget_pos+0x24c/0x360 [ 467.654622][T11489] ? __pfx_lock_release+0x10/0x10 [ 467.659744][T11489] ? trace_lock_acquire+0x14a/0x1d0 [ 467.664973][T11489] ? __pfx_vfs_read+0x10/0x10 [ 467.669667][T11489] ? __pfx___mutex_lock+0x10/0x10 [ 467.674743][T11489] ? __fget_files+0x244/0x3f0 [ 467.679460][T11489] ksys_read+0x12f/0x260 [ 467.683738][T11489] ? __pfx_ksys_read+0x10/0x10 [ 467.688527][T11489] ? syscall_user_dispatch+0x77/0x140 [ 467.693949][T11489] do_syscall_64+0xcd/0x250 [ 467.698486][T11489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.704411][T11489] RIP: 0033:0x7fe49bf7ca3c [ 467.708845][T11489] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 467.728483][T11489] RSP: 002b:00007fe49ccca030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 467.736928][T11489] RAX: ffffffffffffffda RBX: 00007fe49c135f80 RCX: 00007fe49bf7ca3c [ 467.744931][T11489] RDX: 000000000000000f RSI: 00007fe49ccca0a0 RDI: 0000000000000003 [ 467.752929][T11489] RBP: 00007fe49ccca090 R08: 0000000000000000 R09: 0000000000000000 [ 467.760939][T11489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.768945][T11489] R13: 0000000000000000 R14: 00007fe49c135f80 R15: 00007ffe8ffbd678 [ 467.776987][T11489] [ 468.894823][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.976235][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.014950][ T2925] bond0 (unregistering): Released all slaves [ 469.073366][T11404] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 469.272816][T11404] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 469.329749][T11404] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 469.422306][T11404] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 469.771413][T11404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.896338][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1687'. [ 470.009462][T11404] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.162430][T10724] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.169594][T10724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.199086][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'. [ 470.223773][T10716] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.230903][T10716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.207146][T11404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.380515][ T2925] hsr_slave_0: left promiscuous mode [ 471.389944][ T2925] hsr_slave_1: left promiscuous mode [ 471.477326][ T2925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.489937][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.533802][ T2925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.551922][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.591719][ T2925] veth1_macvtap: left promiscuous mode [ 471.603871][ T2925] veth0_macvtap: left promiscuous mode [ 471.609661][ T2925] veth1_vlan: left promiscuous mode [ 471.621999][ T2925] veth0_vlan: left promiscuous mode [ 471.644216][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1698'. [ 473.424023][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 473.573971][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 474.658989][T11404] veth0_vlan: entered promiscuous mode [ 474.671380][T11404] veth1_vlan: entered promiscuous mode [ 474.776678][T11404] veth0_macvtap: entered promiscuous mode [ 474.802271][T11404] veth1_macvtap: entered promiscuous mode [ 474.841481][T11404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.865458][T11404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.882402][T11404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.919197][T11404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.929683][T11404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.940369][T11404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.951525][T11404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.961711][T11404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.972475][T11404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.982561][T11404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.993279][T11404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.003438][T11404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.014085][T11404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.028635][T11404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.063671][T11404] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.083171][T11404] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.091922][T11404] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.100724][T11404] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.233972][T10725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.241837][T10725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.314449][T10725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.322348][T10725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.082079][T10726] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.354965][T10726] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.668907][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 479.678874][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 479.687601][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 479.695686][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 479.704549][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 479.712599][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 479.724670][T10726] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.056047][T10726] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.491728][T10726] bridge_slave_1: left allmulticast mode [ 480.533498][T10726] bridge_slave_1: left promiscuous mode [ 480.539594][T10726] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.754741][T10726] bridge_slave_0: left allmulticast mode [ 480.760580][T10726] bridge_slave_0: left promiscuous mode [ 480.773122][T10726] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.793042][ T54] Bluetooth: hci3: command tx timeout [ 481.933332][T11701] netlink: 'syz.3.1742': attribute type 11 has an invalid length. [ 483.120641][T10726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.283612][T10726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.330029][T10726] bond0 (unregistering): Released all slaves [ 483.558570][T11670] chnl_net:caif_netlink_parms(): no params data found [ 483.881712][ T54] Bluetooth: hci3: command tx timeout [ 483.979896][T11729] nbd: must specify at least one socket [ 484.413064][T11670] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.420340][T11670] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.454013][T11670] bridge_slave_0: entered allmulticast mode [ 484.462064][T11670] bridge_slave_0: entered promiscuous mode [ 484.502370][T11670] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.515341][T11670] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.522593][T11670] bridge_slave_1: entered allmulticast mode [ 484.546369][T11670] bridge_slave_1: entered promiscuous mode [ 485.113765][T11670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.156171][T11670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.954403][ T54] Bluetooth: hci3: command tx timeout [ 486.419258][T11670] team0: Port device team_slave_0 added [ 486.672830][T11670] team0: Port device team_slave_1 added [ 487.200895][T11670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.219123][T11670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.269019][T11670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.409142][T11670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.423854][T11670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.513420][T11670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.777864][T10726] hsr_slave_0: left promiscuous mode [ 487.806068][T10726] hsr_slave_1: left promiscuous mode [ 487.829944][T10726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.883021][T10726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.901299][T10726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.943036][T10726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.033047][ T54] Bluetooth: hci3: command tx timeout [ 488.113254][T10726] veth1_macvtap: left promiscuous mode [ 488.118845][T10726] veth0_macvtap: left promiscuous mode [ 488.154789][T10726] veth1_vlan: left promiscuous mode [ 488.160144][T10726] veth0_vlan: left promiscuous mode [ 489.915471][T10726] team0 (unregistering): Port device team_slave_1 removed [ 490.053870][T10726] team0 (unregistering): Port device team_slave_0 removed [ 491.685484][T11670] hsr_slave_0: entered promiscuous mode [ 491.718819][T11670] hsr_slave_1: entered promiscuous mode [ 491.743926][T11670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.751535][T11670] Cannot create hsr debugfs directory [ 492.648777][T11848] kernel read not supported for file /#Yr²ÖL±þ]ð.¶²%ìE-\ø†ÀyŒÄ‹´ÊF£ B|m¾,æoOÉ' (pid: 11848 comm: syz.0.1766) [ 492.681558][ T29] audit: type=1800 audit(8277292230.895:4): pid=11848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1766" name=235972B2D64CB1FE5DF02EB6B225EC452D5CF886C079018CC48BB4CA46A30B427C1F6DBE2CE66F4FC927 dev="mqueue" ino=33200 res=0 errno=0 [ 493.671740][T11670] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 493.679655][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1769'. [ 493.722583][T11670] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 493.765610][T11670] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 493.818858][T11670] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 494.140823][T11670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.210777][T11670] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.260023][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.267224][ T7332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.294437][ T7332] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.301615][ T7332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.821501][T11670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.950022][T11670] veth0_vlan: entered promiscuous mode [ 495.000153][T11670] veth1_vlan: entered promiscuous mode [ 495.092866][T11670] veth0_macvtap: entered promiscuous mode [ 495.103806][T11670] veth1_macvtap: entered promiscuous mode [ 495.126361][T11670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.137044][T11670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.146914][T11670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.157573][T11670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.167468][T11670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.177927][T11670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.191346][T11670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.203013][T11670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.213528][T11670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.223424][T11670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.234092][T11670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.244018][T11670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.254662][T11670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.265745][T11670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.284990][T11670] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.294184][T11670] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.304193][T11670] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.313102][T11670] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.458745][T10726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.498684][T10726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.568027][T10725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.591337][T10725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.727620][T11953] netlink: 'syz.3.1784': attribute type 1 has an invalid length. [ 495.743078][T11953] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1784'. [ 497.439177][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 497.650226][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1799'. [ 501.393537][T12138] could not allocate digest TFM handle [ 501.403436][T12134] could not allocate digest TFM handle [ 501.715767][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.722119][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.501444][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1829'. [ 506.660348][T12208] svc: failed to register nfsdv3 RPC service (errno 111). [ 506.712488][T12208] svc: failed to register nfsaclv3 RPC service (errno 111). [ 508.531381][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 510.111671][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'. [ 510.719604][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1858'. [ 512.313396][T12275] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 512.332968][T12275] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 515.288481][T12319] netlink: 'syz.3.1875': attribute type 11 has an invalid length. [ 519.384005][T12361] netlink: 'syz.3.1889': attribute type 11 has an invalid length. [ 526.213618][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1892'. [ 526.958749][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1896'. [ 527.713635][T12418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1902'. [ 528.165607][T12432] nbd: must specify an index to disconnect [ 528.236826][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1911'. [ 530.347473][T12499] netlink: 'syz.1.1930': attribute type 11 has an invalid length. [ 530.959293][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1936'. [ 532.871020][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1946'. [ 544.328550][T12717] netlink: 'syz.0.1993': attribute type 11 has an invalid length. [ 547.356723][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'. [ 548.306380][T12777] netlink: 'syz.0.2010': attribute type 11 has an invalid length. [ 555.571561][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2028'. [ 555.663342][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2028'. [ 558.756525][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2046'. [ 562.105006][T12941] netlink: 'syz.1.2058': attribute type 1 has an invalid length. [ 562.178406][T12941] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2058'. [ 563.183439][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.189769][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.003136][T12970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2069'. [ 568.048529][T12970] HSR: entered promiscuous mode [ 568.883270][T12991] netlink: 'syz.3.2076': attribute type 11 has an invalid length. [ 569.094064][T12997] netlink: 'syz.3.2078': attribute type 11 has an invalid length. [ 570.774320][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 570.786480][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 570.795761][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 570.807564][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 570.816419][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 570.827489][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 571.432220][T13005] chnl_net:caif_netlink_parms(): no params data found [ 571.796024][T13005] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.823046][T13005] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.841193][T13005] bridge_slave_0: entered allmulticast mode [ 571.854167][T13005] bridge_slave_0: entered promiscuous mode [ 571.865094][T13005] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.890355][T13005] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.909647][T13005] bridge_slave_1: entered allmulticast mode [ 571.920672][T13005] bridge_slave_1: entered promiscuous mode [ 572.008232][T13005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.039318][T13005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.204638][T13005] team0: Port device team_slave_0 added [ 572.224517][T13005] team0: Port device team_slave_1 added [ 572.295143][T13005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.313060][T13005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.372951][T13005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.402684][T13005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.422937][T13005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.472957][T13005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.574201][T13005] hsr_slave_0: entered promiscuous mode [ 572.580694][T13005] hsr_slave_1: entered promiscuous mode [ 572.597708][T13005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.612712][T13005] Cannot create hsr debugfs directory [ 572.913197][ T54] Bluetooth: hci0: command tx timeout [ 573.122082][T13005] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.383483][T13005] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.621894][T13005] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.777035][T13005] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.057092][T13005] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 574.116249][T13005] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 574.199282][T13005] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 574.220083][T13005] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 574.448915][T13005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.505805][T13005] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.554879][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.561997][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.598998][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.606146][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.993298][ T54] Bluetooth: hci0: command tx timeout [ 575.088301][T13005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.211859][T13005] veth0_vlan: entered promiscuous mode [ 575.251890][T13005] veth1_vlan: entered promiscuous mode [ 575.337565][T13005] veth0_macvtap: entered promiscuous mode [ 575.372854][T13005] veth1_macvtap: entered promiscuous mode [ 575.431826][T13005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.461264][T13005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.493433][T13005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.530084][T13005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.563222][T13005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.599347][T13005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.623159][T13005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.663716][T13005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.700070][T13005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.727131][T13005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.762950][T13005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.772789][T13005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.819991][T13005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.843539][T13005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.873176][T13005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.903645][T13005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.933083][T13005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.954456][T13005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.000970][T13005] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.075737][T13005] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.114156][T13005] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.155747][T13005] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.705311][T10726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.751150][T10726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.899665][T10726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.942960][T10726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.075026][ T54] Bluetooth: hci0: command tx timeout [ 577.478976][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2087'. [ 577.787032][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2089'. [ 578.393445][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2091'. [ 579.188473][ T54] Bluetooth: hci0: command tx timeout [ 579.527708][T13069] netlink: 'syz.3.2098': attribute type 1 has an invalid length. [ 579.541852][T13069] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2098'. [ 580.304380][T13079] sctp: [Deprecated]: syz.3.2101 (pid 13079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 580.304380][T13079] Use struct sctp_sack_info instead [ 580.593080][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 582.134084][T13119] FAULT_INJECTION: forcing a failure. [ 582.134084][T13119] name failslab, interval 1, probability 0, space 0, times 0 [ 582.203044][T13119] CPU: 1 UID: 0 PID: 13119 Comm: syz.2.2111 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 582.213865][T13119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 582.224042][T13119] Call Trace: [ 582.227344][T13119] [ 582.230304][T13119] dump_stack_lvl+0x16c/0x1f0 [ 582.235025][T13119] should_fail_ex+0x497/0x5b0 [ 582.239744][T13119] ? fs_reclaim_acquire+0xae/0x150 [ 582.244892][T13119] should_failslab+0xc2/0x120 [ 582.249606][T13119] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 582.255018][T13119] ? ptlock_alloc+0x1f/0x70 [ 582.259563][T13119] ptlock_alloc+0x1f/0x70 [ 582.263930][T13119] pte_alloc_one+0x74/0x360 [ 582.268463][T13119] do_pte_missing+0x1ae0/0x3e50 [ 582.273350][T13119] ? do_raw_spin_unlock+0x172/0x230 [ 582.278577][T13119] ? __pmd_alloc+0x359/0x810 [ 582.283201][T13119] __handle_mm_fault+0x100a/0x2a10 [ 582.288357][T13119] ? __pfx_mt_find+0x10/0x10 [ 582.292970][T13119] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 582.298661][T13119] ? __pfx___handle_mm_fault+0x10/0x10 [ 582.304177][T13119] ? find_vma+0xc0/0x140 [ 582.308450][T13119] ? __pfx_find_vma+0x10/0x10 [ 582.313164][T13119] handle_mm_fault+0x3fa/0xaa0 [ 582.317974][T13119] do_user_addr_fault+0x7a3/0x13f0 [ 582.323135][T13119] exc_page_fault+0x5c/0xc0 [ 582.327675][T13119] asm_exc_page_fault+0x26/0x30 [ 582.332562][T13119] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 582.338401][T13119] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 582.358477][T13119] RSP: 0018:ffffc90014d57a18 EFLAGS: 00050202 [ 582.364574][T13119] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 582.372565][T13119] RDX: fffff520029aaf57 RSI: 0000000000000000 RDI: ffffc90014d57ab8 [ 582.380558][T13119] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff520029aaf57 [ 582.388554][T13119] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000004 [ 582.396550][T13119] R13: ffffc90014d57ab8 R14: 0000000000000000 R15: 0000000000000000 [ 582.404572][T13119] _copy_from_user+0xc6/0xf0 [ 582.409196][T13119] do_tcp_setsockopt+0x1ca/0x2820 [ 582.414506][T13119] ? __mutex_trylock_common+0xea/0x250 [ 582.420000][T13119] ? mutex_is_locked+0x20/0x50 [ 582.424794][T13119] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 582.430467][T13119] ? rcu_is_watching+0x12/0xc0 [ 582.435268][T13119] ? trace_contention_end+0xea/0x140 [ 582.440602][T13119] ? __mutex_lock+0x1a6/0x9c0 [ 582.445322][T13119] ? smc_setsockopt+0x101/0xc00 [ 582.450219][T13119] ? __pfx___mutex_lock+0x10/0x10 [ 582.455296][T13119] tcp_setsockopt+0xe2/0x100 [ 582.459949][T13119] smc_setsockopt+0x1b4/0xc00 [ 582.464656][T13119] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 582.470582][T13119] ? __pfx_smc_setsockopt+0x10/0x10 [ 582.476078][T13119] ? __pfx_lock_release+0x10/0x10 [ 582.481139][T13119] ? proc_fail_nth_write+0xa0/0x250 [ 582.486379][T13119] ? __pfx_smc_setsockopt+0x10/0x10 [ 582.491612][T13119] do_sock_setsockopt+0x222/0x480 [ 582.496669][T13119] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 582.502251][T13119] ? __pfx_vfs_write+0x10/0x10 [ 582.507083][T13119] ? do_sys_openat2+0xb1/0x1e0 [ 582.511889][T13119] ? fdget+0x176/0x210 [ 582.515994][T13119] __sys_setsockopt+0x1a4/0x270 [ 582.520886][T13119] ? __pfx___sys_setsockopt+0x10/0x10 [ 582.526310][T13119] ? ksys_write+0x1ad/0x260 [ 582.530843][T13119] ? __pfx_ksys_write+0x10/0x10 [ 582.535732][T13119] __x64_sys_setsockopt+0xbd/0x160 [ 582.540876][T13119] ? do_syscall_64+0x91/0x250 [ 582.545590][T13119] ? lockdep_hardirqs_on+0x7c/0x110 [ 582.550830][T13119] do_syscall_64+0xcd/0x250 [ 582.555457][T13119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.561413][T13119] RIP: 0033:0x7f98c797dff9 [ 582.565858][T13119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.585509][T13119] RSP: 002b:00007f98c8791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 582.593966][T13119] RAX: ffffffffffffffda RBX: 00007f98c7b35f80 RCX: 00007f98c797dff9 [ 582.601962][T13119] RDX: 0000000000000005 RSI: 0000000000000006 RDI: 0000000000000003 [ 582.609952][T13119] RBP: 00007f98c8791090 R08: 0000000000000004 R09: 0000000000000000 [ 582.617949][T13119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.626041][T13119] R13: 0000000000000000 R14: 00007f98c7b35f80 R15: 00007ffee9f976c8 [ 582.634083][T13119] [ 582.858254][T13126] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2113'. [ 582.880100][T13126] openvswitch: HSR: Dropping previously announced user features [ 586.303402][T13180] netlink: 'syz.1.2126': attribute type 11 has an invalid length. [ 586.633199][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2128'. [ 587.462837][T13199] svc: failed to register nfsdv3 RPC service (errno 111). [ 587.491874][T13199] svc: failed to register nfsaclv3 RPC service (errno 111). [ 590.644989][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2145'. [ 594.273817][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 594.303725][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 594.312606][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 594.332749][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 594.344950][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 594.352469][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 595.343028][T13290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2159'. [ 595.489895][T13274] chnl_net:caif_netlink_parms(): no params data found [ 596.433779][ T5229] Bluetooth: hci4: command tx timeout [ 596.762556][T13274] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.779933][T13274] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.820398][T13274] bridge_slave_0: entered allmulticast mode [ 596.834428][T13274] bridge_slave_0: entered promiscuous mode [ 596.861913][T13274] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.870693][T13274] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.887711][T13274] bridge_slave_1: entered allmulticast mode [ 596.904284][T13274] bridge_slave_1: entered promiscuous mode [ 597.055823][T13274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.100097][T13274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.295703][T13274] team0: Port device team_slave_0 added [ 597.339711][T13274] team0: Port device team_slave_1 added [ 597.605557][T13274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.612542][T13274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.743034][T13274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.284593][T13274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.291579][T13274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.346272][T13274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.555347][ T54] Bluetooth: hci4: command tx timeout [ 598.698688][T13322] FAULT_INJECTION: forcing a failure. [ 598.698688][T13322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.720965][T13322] CPU: 0 UID: 0 PID: 13322 Comm: syz.2.2166 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 598.731768][T13322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 598.741833][T13322] Call Trace: [ 598.745121][T13322] [ 598.748147][T13322] dump_stack_lvl+0x16c/0x1f0 [ 598.752848][T13322] should_fail_ex+0x497/0x5b0 [ 598.757555][T13322] _copy_to_user+0x30/0xc0 [ 598.761987][T13322] simple_read_from_buffer+0xd0/0x160 [ 598.767393][T13322] proc_fail_nth_read+0x198/0x270 [ 598.772437][T13322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.778006][T13322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.783570][T13322] vfs_read+0x1ce/0xbd0 [ 598.787748][T13322] ? __pfx_vfs_read+0x10/0x10 [ 598.792440][T13322] ? do_sys_openat2+0xb1/0x1e0 [ 598.797318][T13322] ? fdget+0x176/0x210 [ 598.801417][T13322] ? __sys_setsockopt+0x1b5/0x270 [ 598.806470][T13322] ? __sys_setsockopt+0x1c0/0x270 [ 598.811519][T13322] ? __pfx___sys_setsockopt+0x10/0x10 [ 598.816926][T13322] ksys_read+0x12f/0x260 [ 598.821189][T13322] ? __pfx_ksys_read+0x10/0x10 [ 598.825982][T13322] do_syscall_64+0xcd/0x250 [ 598.830511][T13322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.836430][T13322] RIP: 0033:0x7f98c797ca3c [ 598.840944][T13322] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 598.860582][T13322] RSP: 002b:00007f98c8791030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 598.869016][T13322] RAX: ffffffffffffffda RBX: 00007f98c7b35f80 RCX: 00007f98c797ca3c [ 598.877008][T13322] RDX: 000000000000000f RSI: 00007f98c87910a0 RDI: 0000000000000004 [ 598.884994][T13322] RBP: 00007f98c8791090 R08: 0000000000000000 R09: 0000000000000000 [ 598.892976][T13322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.900960][T13322] R13: 0000000000000000 R14: 00007f98c7b35f80 R15: 00007ffee9f976c8 [ 598.908967][T13322] [ 599.146105][T13274] hsr_slave_0: entered promiscuous mode [ 599.303765][T13274] hsr_slave_1: entered promiscuous mode [ 599.463046][T13274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 599.470765][T13274] Cannot create hsr debugfs directory [ 600.185166][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2171'. [ 600.457998][T13274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.595248][ T5229] Bluetooth: hci4: command tx timeout [ 600.797937][T13274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.004357][T13274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.242551][T13274] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.111582][T13274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 602.484688][T13274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 602.546905][T13274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 602.703116][ T5229] Bluetooth: hci4: command tx timeout [ 603.890031][T13274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 604.249839][T13274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.331292][T13274] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.385921][T10716] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.393063][T10716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.446583][T10716] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.453735][T10716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.704354][T13353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2177'. [ 605.665817][T13274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.677217][T13363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2179'. [ 605.878500][T13274] veth0_vlan: entered promiscuous mode [ 606.044405][T13274] veth1_vlan: entered promiscuous mode [ 606.193111][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 606.246222][T13274] veth0_macvtap: entered promiscuous mode [ 606.339544][T13274] veth1_macvtap: entered promiscuous mode [ 606.462690][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.563226][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.611476][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.693087][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.763284][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.858978][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.910867][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.998620][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.078069][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.143030][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.206758][T13274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.307092][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.386496][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.461918][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.543042][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.603159][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.669060][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.722716][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.769327][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.814746][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.865681][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.916466][T13274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.985058][T13274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.062929][T13274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.123573][T13274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.154068][T13376] netlink: 'syz.1.2182': attribute type 1 has an invalid length. [ 608.188638][T13274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.245587][T13371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2183'. [ 608.433416][T13376] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2182'. [ 608.968286][ T7332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.032951][ T7332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.173631][ T7332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.181491][ T7332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.470255][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'. [ 612.103105][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2191'. [ 612.973090][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2193'. [ 619.050489][T13448] netlink: 'syz.3.2204': attribute type 11 has an invalid length. [ 620.953508][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 620.964294][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 620.983352][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 620.998940][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 621.008127][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 621.016538][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 621.655722][T13471] chnl_net:caif_netlink_parms(): no params data found [ 623.073019][ T54] Bluetooth: hci5: command tx timeout [ 623.221690][T13471] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.243536][T13471] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.284542][T13471] bridge_slave_0: entered allmulticast mode [ 623.305963][T13471] bridge_slave_0: entered promiscuous mode [ 623.362340][T13471] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.379500][T13471] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.433180][T13471] bridge_slave_1: entered allmulticast mode [ 623.444316][T13471] bridge_slave_1: entered promiscuous mode [ 623.534262][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2216'. [ 623.727219][T13471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.771948][T13471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.029027][T13471] team0: Port device team_slave_0 added [ 624.039699][T13471] team0: Port device team_slave_1 added [ 624.238610][T13471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.292937][T13471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.372786][T13471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.537911][T13497] netlink: 'syz.2.2219': attribute type 11 has an invalid length. [ 624.583472][T13471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.603536][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.605579][T13471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.609834][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.742997][T13471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.153122][ T54] Bluetooth: hci5: command tx timeout [ 625.246334][T13471] hsr_slave_0: entered promiscuous mode [ 625.354083][T13471] hsr_slave_1: entered promiscuous mode [ 625.448679][T13471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 625.456390][T13471] Cannot create hsr debugfs directory [ 626.672719][T13509] netlink: 'syz.2.2224': attribute type 1 has an invalid length. [ 626.721468][T13509] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2224'. [ 626.879124][T13471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.233121][ T54] Bluetooth: hci5: command tx timeout [ 627.247020][T13471] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.464123][T13471] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.758598][T13471] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.251653][T13471] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 628.364654][T13471] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 628.394667][T13471] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 628.434692][T13471] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 628.958243][T13471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.089126][T13471] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.189484][T13471] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 629.200048][T13471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 629.278316][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.285474][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.296131][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.303272][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.321996][ T54] Bluetooth: hci5: command tx timeout [ 630.372458][T13471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.614097][T13471] veth0_vlan: entered promiscuous mode [ 630.658120][T13471] veth1_vlan: entered promiscuous mode [ 630.784025][T13471] veth0_macvtap: entered promiscuous mode [ 630.812267][T13471] veth1_macvtap: entered promiscuous mode [ 630.862439][T13471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.933095][T13471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.993454][T13471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.015770][T13471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.046608][T13471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.077781][T13471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.124052][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 631.132955][T13471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.152215][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 631.163218][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 631.183132][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 631.191949][T13471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.201969][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 631.211299][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 631.263050][T13471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.335668][T13471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.412995][T13471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.452965][T13471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.515188][T13471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.787723][T13471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.832923][T13471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.842776][T13471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.922838][T13471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.932757][T13471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.972924][T13471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.982784][T13471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.029725][T13471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.062974][T13471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.093089][T13471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.125251][T13471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.153137][T13471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.181434][T13471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.265935][T13471] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.290099][T13471] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.319459][T13471] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.353126][T13471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.921522][T10724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.963350][T10724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.970909][T10724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.188594][T10724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.286698][T13556] chnl_net:caif_netlink_parms(): no params data found [ 633.318388][ T5229] Bluetooth: hci1: command tx timeout [ 634.026841][T13556] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.049162][T13556] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.062626][T13556] bridge_slave_0: entered allmulticast mode [ 634.074122][T13556] bridge_slave_0: entered promiscuous mode [ 634.095975][T13556] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.113086][T13556] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.143603][T13556] bridge_slave_1: entered allmulticast mode [ 634.151795][T13556] bridge_slave_1: entered promiscuous mode [ 634.391625][T13556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.428073][T13556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.069610][T13556] team0: Port device team_slave_0 added [ 635.095724][T13556] team0: Port device team_slave_1 added [ 635.304945][T13556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.311923][T13556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.436788][ T5229] Bluetooth: hci1: command tx timeout [ 635.442623][T13556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.865892][T13556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.895611][T13556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.055112][T13556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.438093][T13556] hsr_slave_0: entered promiscuous mode [ 637.474161][ T5229] Bluetooth: hci1: command tx timeout [ 637.593557][T13556] hsr_slave_1: entered promiscuous mode [ 637.666666][T13556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.694889][T13556] Cannot create hsr debugfs directory [ 638.631396][T13556] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.513841][T13556] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.553064][ T5229] Bluetooth: hci1: command tx timeout [ 640.496094][T13556] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.173208][T13556] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.777729][T13556] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 641.877753][T13556] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 641.935838][T13556] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 641.975785][T13556] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 642.266088][T13556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.317326][T13556] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.375042][T10716] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.382246][T10716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.424435][T10716] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.431595][T10716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.500677][T13556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.637167][T13556] veth0_vlan: entered promiscuous mode [ 643.653892][T13662] mmap: syz.1.2259 (13662): VmData 24944640 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 643.687195][T13556] veth1_vlan: entered promiscuous mode [ 643.752060][T13556] veth0_macvtap: entered promiscuous mode [ 643.783170][T13556] veth1_macvtap: entered promiscuous mode [ 643.829590][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.882321][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.913570][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.952097][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.978274][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.005060][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.032497][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.040868][T13671] netlink: 'syz.1.2263': attribute type 11 has an invalid length. [ 644.080764][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.114757][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.135963][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.183148][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.223079][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.252251][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.293166][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.324074][T13556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.357959][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.393114][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.443007][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.461987][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.492980][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.523408][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.555174][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.590996][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.602957][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.622951][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.632794][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.643391][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.653331][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.663868][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.675235][T13556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.686127][T13556] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.695509][T13556] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.704943][T13556] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.713750][T13556] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.930942][T13687] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2267'. [ 645.136557][T10724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.154424][T10724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.254103][T10724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.262811][T10724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.676688][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 646.685728][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 646.695077][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 646.703420][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 646.711868][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 646.722390][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 647.591011][T13705] chnl_net:caif_netlink_parms(): no params data found [ 648.413124][T13705] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.442996][T13705] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.457538][T13705] bridge_slave_0: entered allmulticast mode [ 648.493099][T13705] bridge_slave_0: entered promiscuous mode [ 648.522612][T13705] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.537991][T13705] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.555395][T13705] bridge_slave_1: entered allmulticast mode [ 648.562546][T13705] bridge_slave_1: entered promiscuous mode [ 648.646484][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2277'. [ 648.815276][ T2925] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.833317][ T54] Bluetooth: hci6: command tx timeout [ 649.479676][ T2925] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.525066][T13705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.576034][T13705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.971531][T13742] Invalid ELF header magic: != ELF [ 650.367665][ T2925] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.558865][T13705] team0: Port device team_slave_0 added [ 650.575483][T13705] team0: Port device team_slave_1 added [ 650.891495][ T2925] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.923043][ T54] Bluetooth: hci6: command tx timeout [ 651.089533][T13705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.113060][T13705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.198762][T13705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.536859][T13705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.552981][T13705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.611739][T13705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.117591][T13705] hsr_slave_0: entered promiscuous mode [ 652.233413][T13705] hsr_slave_1: entered promiscuous mode [ 652.293241][T13705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 652.311067][T13705] Cannot create hsr debugfs directory [ 652.973259][ T2925] bridge_slave_1: left allmulticast mode [ 652.978962][ T2925] bridge_slave_1: left promiscuous mode [ 652.993101][ T54] Bluetooth: hci6: command tx timeout [ 653.014116][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.039144][ T2925] bridge_slave_0: left allmulticast mode [ 653.045572][ T2925] bridge_slave_0: left promiscuous mode [ 653.051324][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.440596][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 653.454215][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 653.462437][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 653.471265][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 653.485388][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 653.492723][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 655.073080][ T54] Bluetooth: hci6: command tx timeout [ 655.565257][ T54] Bluetooth: hci2: command tx timeout [ 656.378936][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.614926][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.781079][ T2925] bond0 (unregistering): Released all slaves [ 657.633576][ T54] Bluetooth: hci2: command tx timeout [ 659.723075][ T54] Bluetooth: hci2: command tx timeout [ 661.002012][T13778] chnl_net:caif_netlink_parms(): no params data found [ 661.816794][ T54] Bluetooth: hci2: command tx timeout [ 662.434976][T13705] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 662.514528][ T5229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 662.523428][ T5229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 662.531395][ T5229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 662.539483][ T5229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 662.586337][ T5229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 662.594132][ T5229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 662.824673][T13778] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.831796][T13778] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.863208][T13778] bridge_slave_0: entered allmulticast mode [ 662.870361][T13778] bridge_slave_0: entered promiscuous mode [ 662.911781][T13705] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 663.184381][T13778] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.191559][T13778] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.232630][T13778] bridge_slave_1: entered allmulticast mode [ 663.284187][T13778] bridge_slave_1: entered promiscuous mode [ 663.303767][T13705] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 663.507101][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 663.515739][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 663.524708][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 663.532663][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 663.542538][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 663.549983][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 663.930763][T13705] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 664.021407][T13778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.066013][T13778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.104997][T13778] team0: Port device team_slave_0 added [ 664.147573][T13778] team0: Port device team_slave_1 added [ 664.673182][ T5229] Bluetooth: hci5: command tx timeout [ 665.177872][T13778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.195927][T13778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.272962][T13778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.314374][T13778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.321443][T13778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.393260][T13778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.793933][ T5229] Bluetooth: hci3: command tx timeout [ 666.261064][T13778] hsr_slave_0: entered promiscuous mode [ 666.307165][T13778] hsr_slave_1: entered promiscuous mode [ 666.472989][T13778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 666.480699][T13778] Cannot create hsr debugfs directory [ 666.792948][ T5229] Bluetooth: hci5: command tx timeout [ 667.883064][ T5229] Bluetooth: hci3: command tx timeout [ 667.998693][T13816] chnl_net:caif_netlink_parms(): no params data found [ 668.205617][ T2925] hsr_slave_0: left promiscuous mode [ 668.211926][ T2925] hsr_slave_1: left promiscuous mode [ 668.218022][ T2925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.233397][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.254774][ T2925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.262216][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.316822][ T2925] veth1_macvtap: left promiscuous mode [ 668.322398][ T2925] veth0_macvtap: left promiscuous mode [ 668.353081][ T2925] veth1_vlan: left promiscuous mode [ 668.358464][ T2925] veth0_vlan: left promiscuous mode [ 668.835740][ T5229] Bluetooth: hci5: command tx timeout [ 669.953486][ T5229] Bluetooth: hci3: command tx timeout [ 670.138481][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 670.298670][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 670.924084][ T5229] Bluetooth: hci5: command tx timeout [ 672.019107][T13705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.123608][ T5229] Bluetooth: hci3: command tx timeout [ 672.769695][T13705] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.904487][T13705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 672.932920][T13705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.013357][T10726] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.020478][T10726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.055644][T10726] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.062805][T10726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.123061][T13816] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.130171][T13816] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.170133][T13816] bridge_slave_0: entered allmulticast mode [ 673.184476][T13816] bridge_slave_0: entered promiscuous mode [ 673.228048][T13823] chnl_net:caif_netlink_parms(): no params data found [ 673.483622][T13816] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.490747][T13816] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.499190][T13816] bridge_slave_1: entered allmulticast mode [ 673.534190][T13816] bridge_slave_1: entered promiscuous mode [ 673.624010][T13816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.718231][T13778] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.040693][T13816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.262056][T13778] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.425061][T13816] team0: Port device team_slave_0 added [ 674.532698][T13705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.636423][T13778] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.726640][T13823] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.753835][T13823] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.761107][T13823] bridge_slave_0: entered allmulticast mode [ 674.796127][T13823] bridge_slave_0: entered promiscuous mode [ 674.836604][T13816] team0: Port device team_slave_1 added [ 674.888320][T13778] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.096914][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.343646][T13823] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.350767][T13823] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.358613][T13823] bridge_slave_1: entered allmulticast mode [ 675.374308][T13823] bridge_slave_1: entered promiscuous mode [ 676.994693][T13816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.001671][T13816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.027706][T13816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.040337][T13816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.047385][T13816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.074493][T13816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.743649][T13816] hsr_slave_0: entered promiscuous mode [ 678.773669][T13816] hsr_slave_1: entered promiscuous mode [ 679.821181][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.849368][T13823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.866220][T13823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.945887][T13705] veth0_vlan: entered promiscuous mode [ 679.995419][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.165103][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.195253][T13823] team0: Port device team_slave_0 added [ 680.210712][T13705] veth1_vlan: entered promiscuous mode [ 680.296514][T13823] team0: Port device team_slave_1 added [ 680.373038][T13778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 680.395399][T13778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 680.487140][T13816] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.566382][T13823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.582966][T13823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.663012][T13823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.705337][T13778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 680.725895][T13778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 680.836574][T13816] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.879513][T13823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.902988][T13823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.972974][T13823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.069108][T13816] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.222579][T13705] veth0_macvtap: entered promiscuous mode [ 681.395696][T13816] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.451604][T13705] veth1_macvtap: entered promiscuous mode [ 681.495983][T13823] hsr_slave_0: entered promiscuous mode [ 681.663455][T13823] hsr_slave_1: entered promiscuous mode [ 681.683029][T13823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 681.690626][T13823] Cannot create hsr debugfs directory [ 681.912567][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.925039][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.943335][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.963125][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.988781][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.033939][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.073007][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.115930][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.143810][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.183116][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.232939][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.275865][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.299361][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.336092][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.370956][T13705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.470944][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.532982][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.543253][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.573752][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.605601][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.643117][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.663148][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.703602][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.733038][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.772997][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.782847][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.834108][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.862977][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.882957][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.914521][T13705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.942820][ T35] bridge_slave_1: left allmulticast mode [ 683.073154][ T35] bridge_slave_1: left promiscuous mode [ 683.078903][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.089906][ T35] bridge_slave_0: left allmulticast mode [ 683.123008][ T35] bridge_slave_0: left promiscuous mode [ 683.128743][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.156448][ T35] bridge_slave_1: left allmulticast mode [ 683.162126][ T35] bridge_slave_1: left promiscuous mode [ 683.193339][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.234427][ T35] bridge_slave_0: left allmulticast mode [ 683.240114][ T35] bridge_slave_0: left promiscuous mode [ 683.263265][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.295599][ T35] bridge_slave_1: left allmulticast mode [ 683.313046][ T35] bridge_slave_1: left promiscuous mode [ 683.318837][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.344624][ T35] bridge_slave_0: left allmulticast mode [ 683.350301][ T35] bridge_slave_0: left promiscuous mode [ 683.383318][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.037489][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.043998][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.554011][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.626539][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.639761][ T35] bond0 (unregistering): Released all slaves [ 687.123394][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.173573][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.193999][ T35] bond0 (unregistering): Released all slaves [ 687.605188][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.637251][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.665977][ T35] bond0 (unregistering): Released all slaves [ 687.979504][T13705] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.995681][T13705] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.041128][T13705] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.072949][T13705] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.119429][T13778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.179295][T13778] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.346738][T13778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 688.393055][T13778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 688.790229][T13778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.905062][T13778] veth0_vlan: entered promiscuous mode [ 688.943478][T13778] veth1_vlan: entered promiscuous mode [ 689.015229][T13778] veth0_macvtap: entered promiscuous mode [ 689.047120][T13778] veth1_macvtap: entered promiscuous mode [ 689.106804][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.143145][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.173224][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.213272][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.238972][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.272995][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.303089][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.341430][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.372923][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.403015][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.433191][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.473364][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.512953][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.542978][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.572945][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.613069][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.637608][T13778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.676255][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.712987][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.722829][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.778613][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.803029][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.843294][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.874170][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.912911][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.922759][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.972941][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.982795][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.043211][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.072994][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.103864][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.132961][T13778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.162988][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.194321][T13778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.233824][T13778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.242567][T13778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.292971][T13778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.301719][T13778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.515564][T10726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.533012][T10726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.613564][T10726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.632825][T10726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.013816][T10724] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.021107][T10724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.064537][T10724] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.071667][T10724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.212374][T13816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 691.734180][T13816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 691.776297][T13816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 692.164033][T13816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 692.473080][ T7332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.480938][ T7332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.739101][T10720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.747930][T10720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.147084][T13823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 693.246024][ T5229] Bluetooth: hci0: command 0x0406 tx timeout [ 693.311078][T13823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 693.347120][T13823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 693.397303][T13816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.453704][T13823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 693.665338][T13816] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.718644][T10720] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.725833][T10720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.878087][T13816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 693.888676][T13816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 693.995424][ T2925] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.002566][ T2925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.657207][ T35] hsr_slave_0: left promiscuous mode [ 694.732955][ T35] hsr_slave_1: left promiscuous mode [ 694.850531][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.883018][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.941816][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.983095][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.065719][ T35] hsr_slave_0: left promiscuous mode [ 695.103539][ T35] hsr_slave_1: left promiscuous mode [ 695.152165][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.160515][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.189122][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.196795][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.257522][ T35] hsr_slave_0: left promiscuous mode [ 695.354429][ T35] hsr_slave_1: left promiscuous mode [ 695.463216][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.470707][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.504258][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.511721][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.673034][ T35] veth1_macvtap: left promiscuous mode [ 695.678676][ T35] veth0_macvtap: left promiscuous mode [ 695.685656][ T35] veth1_vlan: left promiscuous mode [ 695.704757][ T35] veth0_vlan: left promiscuous mode [ 695.723781][ T35] veth1_macvtap: left promiscuous mode [ 695.729430][ T35] veth0_macvtap: left promiscuous mode [ 695.735548][ T35] veth1_vlan: left promiscuous mode [ 695.740899][ T35] veth0_vlan: left promiscuous mode [ 695.864644][ T35] veth1_macvtap: left promiscuous mode [ 695.870210][ T35] veth0_macvtap: left promiscuous mode [ 695.891258][ T35] veth1_vlan: left promiscuous mode [ 695.909158][ T35] veth0_vlan: left promiscuous mode [ 699.564466][ T35] team0 (unregistering): Port device team_slave_1 removed [ 699.685620][ T35] team0 (unregistering): Port device team_slave_0 removed [ 703.596839][ T35] team0 (unregistering): Port device team_slave_1 removed [ 703.765648][ T35] team0 (unregistering): Port device team_slave_0 removed [ 708.075199][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 708.087758][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 708.095845][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 708.103852][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 708.112316][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 708.121523][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 710.273390][ T54] Bluetooth: hci1: command tx timeout [ 710.416627][ T35] team0 (unregistering): Port device team_slave_1 removed [ 710.714328][ T35] team0 (unregistering): Port device team_slave_0 removed [ 712.356910][ T54] Bluetooth: hci1: command tx timeout [ 713.020011][ T5229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 713.029274][ T5229] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 713.037860][ T5229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 713.047518][ T5229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 713.055560][ T5229] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 713.062837][ T5229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 713.706047][T13816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.746793][T13823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.125110][T13823] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.147513][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.154688][ T7332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.350611][ T7332] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.357835][ T7332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.434378][ T5229] Bluetooth: hci1: command tx timeout [ 714.617495][T13823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 714.654685][T13823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 714.695655][T13816] veth0_vlan: entered promiscuous mode [ 714.787616][T13816] veth1_vlan: entered promiscuous mode [ 715.233448][ T5229] Bluetooth: hci7: command tx timeout [ 715.705732][T13816] veth0_macvtap: entered promiscuous mode [ 715.833560][T13816] veth1_macvtap: entered promiscuous mode [ 716.251417][T13816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.273571][T13816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.307344][T13816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.343010][T13816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.352853][T13816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.409186][T13816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.442958][T13816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.473685][T13816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.515142][ T5229] Bluetooth: hci1: command tx timeout [ 716.520606][T13816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.546684][T13816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.562995][T13816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.573922][T13816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.588613][T13816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.052802][T13823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.107493][T13816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.145260][T13816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.182986][T13816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.213633][T13816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.243680][T13816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.303057][T13816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.313498][ T54] Bluetooth: hci7: command tx timeout [ 717.353727][T13816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.382955][T13816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.392802][T13816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.433251][T13816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.463950][T13816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.500668][T13816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.533808][T13816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.545004][T13991] chnl_net:caif_netlink_parms(): no params data found [ 717.949758][T13816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.983108][T13816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.991842][T13816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.043065][T13816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.082000][T13985] chnl_net:caif_netlink_parms(): no params data found [ 718.210253][T13823] veth0_vlan: entered promiscuous mode [ 718.841657][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 719.042266][T13823] veth1_vlan: entered promiscuous mode [ 719.393704][ T5229] Bluetooth: hci7: command tx timeout [ 719.895569][T13991] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.902772][T13991] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.943667][T13991] bridge_slave_0: entered allmulticast mode [ 719.959273][T13991] bridge_slave_0: entered promiscuous mode [ 720.110456][T13985] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.144079][T13985] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.151343][T13985] bridge_slave_0: entered allmulticast mode [ 720.184448][T13985] bridge_slave_0: entered promiscuous mode [ 720.233967][T13991] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.241082][T13991] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.313326][T13991] bridge_slave_1: entered allmulticast mode [ 720.343361][T13991] bridge_slave_1: entered promiscuous mode [ 720.883524][T13985] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.890648][T13985] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.923410][T13985] bridge_slave_1: entered allmulticast mode [ 720.953049][T13985] bridge_slave_1: entered promiscuous mode [ 721.239104][T13991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.374773][T13823] veth0_macvtap: entered promiscuous mode [ 721.456956][T13985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.473071][ T5229] Bluetooth: hci7: command tx timeout [ 721.505450][T13991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.615169][T13823] veth1_macvtap: entered promiscuous mode [ 721.650836][T13985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.729452][T13991] team0: Port device team_slave_0 added [ 721.739555][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.763086][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.784355][T13985] team0: Port device team_slave_0 added [ 721.835806][T13991] team0: Port device team_slave_1 added [ 721.919294][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.955498][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.984031][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.006118][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.016406][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.027172][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.037302][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.048082][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.058251][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.073117][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.083302][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.103258][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.123007][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.143034][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.154833][T13823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.164471][T13985] team0: Port device team_slave_1 added [ 722.211902][T10724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.219856][T10724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.327071][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.353249][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.365164][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.382967][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.392791][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.424836][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.442997][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.473256][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.492992][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.516212][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.541458][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.582994][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.592839][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.662964][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.694322][T13823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.795282][T13991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.802338][T13991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.922907][T13991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.986052][T13991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.023092][T13991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.124197][T13991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.214231][T13985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.221203][T13985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.332919][T13985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.393438][T13985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.400407][T13985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.522954][T13985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.595657][T13823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.634931][T13823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.658886][T13823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.702839][T13823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.163441][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 724.172719][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 724.181154][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 724.190418][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 724.198065][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 724.205368][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 724.237943][T13991] hsr_slave_0: entered promiscuous mode [ 724.403449][T13991] hsr_slave_1: entered promiscuous mode [ 724.474524][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 724.483852][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 724.491623][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 724.500372][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 724.508795][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 724.516594][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 724.682951][T13991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 724.690544][T13991] Cannot create hsr debugfs directory [ 724.768822][T13985] hsr_slave_0: entered promiscuous mode [ 724.823425][T13985] hsr_slave_1: entered promiscuous mode [ 724.829721][T13985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 724.852947][T13985] Cannot create hsr debugfs directory [ 726.209761][T13985] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.285538][ T54] Bluetooth: hci2: command tx timeout [ 726.460087][T13985] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.593312][ T54] Bluetooth: hci6: command tx timeout [ 726.603670][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.666525][T13985] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.700194][T14016] chnl_net:caif_netlink_parms(): no params data found [ 726.766079][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.865642][T13985] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.917322][T14019] chnl_net:caif_netlink_parms(): no params data found [ 727.085309][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.265781][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.591945][T14016] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.613414][T14016] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.620682][T14016] bridge_slave_0: entered allmulticast mode [ 727.664118][T14016] bridge_slave_0: entered promiscuous mode [ 727.735937][T14016] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.783125][T14016] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.790403][T14016] bridge_slave_1: entered allmulticast mode [ 727.845906][T14016] bridge_slave_1: entered promiscuous mode [ 727.936111][T14019] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.953272][T14019] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.960684][T14019] bridge_slave_0: entered allmulticast mode [ 727.984873][T14019] bridge_slave_0: entered promiscuous mode [ 728.005085][T14019] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.012203][T14019] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.033290][T14019] bridge_slave_1: entered allmulticast mode [ 728.040375][T14019] bridge_slave_1: entered promiscuous mode [ 728.137108][T14016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.166371][T14016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.215877][ T35] bridge_slave_1: left allmulticast mode [ 728.221567][ T35] bridge_slave_1: left promiscuous mode [ 728.253313][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.324110][ T35] bridge_slave_0: left allmulticast mode [ 728.329886][ T35] bridge_slave_0: left promiscuous mode [ 728.355456][ T54] Bluetooth: hci2: command tx timeout [ 728.374549][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.406331][ T35] bridge_slave_1: left allmulticast mode [ 728.412014][ T35] bridge_slave_1: left promiscuous mode [ 728.473999][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.603673][ T35] bridge_slave_0: left allmulticast mode [ 728.609355][ T35] bridge_slave_0: left promiscuous mode [ 728.633207][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.704365][ T54] Bluetooth: hci6: command tx timeout [ 730.253157][ T30] INFO: task syz.0.2118:13141 blocked for more than 143 seconds. [ 730.260932][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 730.283218][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 730.291931][ T30] task:syz.0.2118 state:D stack:27392 pid:13141 tgid:13140 ppid:13005 flags:0x00000004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 730.363195][ T30] Call Trace: [ 730.366523][ T30] [ 730.369470][ T30] __schedule+0xef5/0x5750 [ 730.412955][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 730.418231][ T30] ? __pfx___schedule+0x10/0x10 [ 730.433283][ T54] Bluetooth: hci2: command tx timeout [ 730.472939][ T30] ? schedule+0x298/0x350 [ 730.477331][ T30] ? __pfx_lock_release+0x10/0x10 [ 730.482381][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 730.533014][ T30] ? lock_acquire+0x2f/0xb0 [ 730.537585][ T30] ? schedule+0x1fd/0x350 [ 730.541941][ T30] schedule+0xe7/0x350 [ 730.603086][ T30] schedule_timeout+0x258/0x2a0 [ 730.617464][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 730.653344][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 730.658598][ T30] __wait_for_common+0x3e1/0x600 [ 730.683071][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 730.688504][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 730.742938][ T30] ? __pfx_try_to_wake_up+0x10/0x10 [ 730.748213][ T30] wait_for_completion_state+0x1c/0x40 [ 730.753877][ T54] Bluetooth: hci6: command tx timeout [ 730.793109][ T30] do_coredump+0x82f/0x4160 [ 730.797673][ T30] ? hlock_class+0x4e/0x130 [ 730.802203][ T30] ? stack_depot_save_flags+0x28/0x900 [ 730.902928][ T30] ? __pfx_do_coredump+0x10/0x10 [ 730.907927][ T30] ? kmem_cache_free+0x152/0x4b0 [ 730.962933][ T30] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 730.968802][ T30] ? do_syscall_64+0xda/0x250 [ 730.993477][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.999692][ T30] get_signal+0x237c/0x26d0 [ 731.034641][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 731.039987][ T30] ? __pfx_get_signal+0x10/0x10 [ 731.062939][ T30] ? force_sig_info_to_task+0x3a0/0x660 [ 731.068575][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 731.103005][ T30] ? __pfx_force_exit_sig+0x10/0x10 [ 731.108253][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 731.144358][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 731.150059][ T30] do_syscall_64+0xda/0x250 [ 731.173238][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.179188][ T30] RIP: 0033:0x7f0f28f7dff9 [ 731.203042][ T30] RSP: 002b:00007f0f29d4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000009e [ 731.211506][ T30] RAX: ffffffffffffffda RBX: 00007f0f29135f80 RCX: 00007f0f28f7dff9 [ 731.283142][ T30] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000001021 [ 731.291168][ T30] RBP: 00007f0f28ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 731.343121][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.351146][ T30] R13: 0000000000000000 R14: 00007f0f29135f80 R15: 00007fffc06e67b8 [ 731.383897][ T30] [ 731.409800][ T30] [ 731.409800][ T30] Showing all locks held in the system: [ 731.443262][ T30] 1 lock held by khungtaskd/30: [ 731.448154][ T30] #0: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 731.503268][ T30] 4 locks held by kworker/u8:2/35: [ 731.508463][ T30] 3 locks held by kworker/u8:7/2925: [ 731.543112][ T30] 1 lock held by dhcpcd/4898: [ 731.547832][ T30] #0: ffffffff8fac31e8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x1c1/0x1e10 [ 731.593096][ T30] 2 locks held by getty/4982: [ 731.597812][ T30] #0: ffff88802ea9c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 731.639320][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 731.672978][ T30] 3 locks held by kworker/1:3/5233: [ 731.678213][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 731.723062][ T30] #1: ffffc90003d97d80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 731.763067][ T30] #2: ffffffff8fac31e8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 731.793389][ T30] 3 locks held by kworker/u8:16/7332: [ 731.798794][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1212/0x1b30 [ 731.841402][ T30] #1: ffffc900143cfd80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 731.883207][ T30] #2: ffffffff8fac31e8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 731.892356][ T30] 1 lock held by syz.0.2050/12916: [ 731.923217][ T30] 1 lock held by syz.0.2118/13147: [ 731.928368][ T30] 1 lock held by syz.0.2189/13396: [ 731.963106][ T30] 1 lock held by syz.3.2210/13459: [ 731.968260][ T30] 4 locks held by syz-executor/13985: [ 731.993488][ T30] #0: ffff888032474420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 732.002542][ T30] #1: ffff88803a667888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 732.063295][ T30] #2: ffff888025a7b2d8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 732.093121][ T30] #3: ffffffff8f0692e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x187/0x730 [ 732.119538][ T30] 7 locks held by syz-executor/13991: [ 732.144289][ T30] #0: ffff888032474420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 732.172977][ T30] #1: ffff88802f117888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 732.182800][ T30] #2: ffff888025a7b3c8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 732.232960][ T30] #3: ffffffff8f0692e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 732.273323][ T30] #4: ffff888031cc00e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 [ 732.303188][ T30] #5: ffff888031cc1250 (&devlink->lock_key#13){+.+.}-{3:3}, at: nsim_drv_remove+0x4a/0x1d0 [ 732.333297][ T30] #6: ffffffff8fac31e8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x6f/0x6b0 [ 732.342254][ T30] 1 lock held by syz-executor/14016: [ 732.383019][ T30] #0: ffffffff8fac31e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 732.392508][ T30] 1 lock held by syz-executor/14019: [ 732.433130][ T30] #0: ffffffff8fac31e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 732.469910][ T30] [ 732.472277][ T30] ============================================= [ 732.472277][ T30] [ 732.513516][ T54] Bluetooth: hci2: command tx timeout [ 732.523066][ T30] NMI backtrace for cpu 1 [ 732.527426][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 732.537947][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 732.548019][ T30] Call Trace: [ 732.551305][ T30] [ 732.554254][ T30] dump_stack_lvl+0x116/0x1f0 [ 732.558960][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 732.563923][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 732.569927][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 732.575924][ T30] watchdog+0xf0c/0x1240 [ 732.580197][ T30] ? __pfx_watchdog+0x10/0x10 [ 732.584903][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 732.590126][ T30] ? __kthread_parkme+0x148/0x220 [ 732.595169][ T30] ? __pfx_watchdog+0x10/0x10 [ 732.599869][ T30] kthread+0x2c1/0x3a0 [ 732.603964][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 732.609178][ T30] ? __pfx_kthread+0x10/0x10 [ 732.613787][ T30] ret_from_fork+0x45/0x80 [ 732.618219][ T30] ? __pfx_kthread+0x10/0x10 [ 732.622823][ T30] ret_from_fork_asm+0x1a/0x30 [ 732.627627][ T30] [ 732.631746][ T30] Sending NMI from CPU 1 to CPUs 0: [ 732.637537][ C0] NMI backtrace for cpu 0 [ 732.637549][ C0] CPU: 0 UID: 0 PID: 13459 Comm: syz.3.2210 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 732.637573][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 732.637584][ C0] RIP: 0010:sha256_transform_rorx+0x58a/0x1120 [ 732.637611][ C0] Code: 31 f5 c4 63 7b f0 f0 16 45 01 d8 21 de c4 e3 45 0f ce 04 45 31 e6 c4 63 7b f0 e0 02 45 31 d7 c5 ed 72 d1 07 45 31 e6 41 89 c4 <41> 21 cc 45 01 ef c5 e5 72 f1 19 44 09 e6 45 01 f3 45 01 f8 c5 e5 [ 732.637635][ C0] RSP: 0018:ffffc9000ae2f200 EFLAGS: 00000286 [ 732.637652][ C0] RAX: 000000008f0a882f RBX: 00000000d293b05a RCX: 000000006376e1d2 [ 732.637666][ C0] RDX: 00000000ea332990 RSI: 00000000c212a05a RDI: 0000000000000100 [ 732.637678][ C0] RBP: ffffc9000ae2f420 R08: 000000008d146d72 R09: 0000000004cfbb84 [ 732.637692][ C0] R10: 0000000001b9ac8b R11: 00000000d1fb28f4 R12: 000000008f0a882f [ 732.637705][ C0] R13: 00000000682142b6 R14: 00000000889e6463 R15: 00000000018bad8b [ 732.637719][ C0] FS: 00007f973243d6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 732.637739][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 732.637753][ C0] CR2: 000055d58f0ac000 CR3: 0000000066152000 CR4: 00000000003526f0 [ 732.637766][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 732.637778][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 732.637791][ C0] Call Trace: [ 732.637797][ C0] [ 732.637804][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 732.637828][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 732.637855][ C0] ? nmi_handle+0x1a9/0x5c0 [ 732.637876][ C0] ? sha256_transform_rorx+0x58a/0x1120 [ 732.637897][ C0] ? default_do_nmi+0x6a/0x160 [ 732.637915][ C0] ? exc_nmi+0x170/0x1e0 [ 732.637933][ C0] ? end_repeat_nmi+0xf/0x53 [ 732.637961][ C0] ? sha256_transform_rorx+0x58a/0x1120 [ 732.637982][ C0] ? sha256_transform_rorx+0x58a/0x1120 [ 732.638004][ C0] ? sha256_transform_rorx+0x58a/0x1120 [ 732.638025][ C0] [ 732.638031][ C0] [ 732.638056][ C0] ? integrity_kernel_read+0x7f/0xb0 [ 732.638084][ C0] _sha256_update+0x17e/0x220 [ 732.638104][ C0] ? __pfx_sha256_transform_rorx+0x10/0x10 [ 732.638127][ C0] ima_calc_file_hash_tfm+0x302/0x3e0 [ 732.638148][ C0] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 732.638183][ C0] ? hlock_class+0x4e/0x130 [ 732.638205][ C0] ? ima_alloc_tfm+0x21d/0x2d0 [ 732.638224][ C0] ? generic_fillattr+0x663/0x8c0 [ 732.638249][ C0] ima_calc_file_hash+0x1ba/0x490 [ 732.638271][ C0] ima_collect_measurement+0x8a7/0xa10 [ 732.638292][ C0] ? process_measurement+0x70a/0x2370 [ 732.638314][ C0] ? __pfx_ima_collect_measurement+0x10/0x10 [ 732.638335][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 732.638368][ C0] ? rcu_is_watching+0x12/0xc0 [ 732.638389][ C0] ? trace_contention_end+0xea/0x140 [ 732.638416][ C0] ? is_bad_inode+0xd/0x40 [ 732.638441][ C0] ? xattr_resolve_name+0x27b/0x3f0 [ 732.638470][ C0] ? vfs_getxattr_alloc+0xf1/0x340 [ 732.638499][ C0] ? ima_get_hash_algo+0x27d/0x410 [ 732.638525][ C0] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 732.638554][ C0] ? process_measurement+0x1271/0x2370 [ 732.638573][ C0] process_measurement+0x1271/0x2370 [ 732.638595][ C0] ? __pfx_process_measurement+0x10/0x10 [ 732.638622][ C0] ? kasan_save_track+0x14/0x30 [ 732.638653][ C0] ? find_held_lock+0x2d/0x110 [ 732.638676][ C0] ? aa_file_perm+0x4c6/0xfe0 [ 732.638703][ C0] ? __pfx_lock_release+0x10/0x10 [ 732.638728][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 732.638758][ C0] ? __pfx_aa_file_perm+0x10/0x10 [ 732.638786][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 732.638815][ C0] ima_file_mmap+0x1b1/0x1d0 [ 732.638833][ C0] ? __pfx_ima_file_mmap+0x10/0x10 [ 732.638855][ C0] security_mmap_file+0x8bd/0x990 [ 732.638883][ C0] vm_mmap_pgoff+0xdb/0x360 [ 732.638910][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 732.638936][ C0] ? hugetlbfs_get_inode+0x32d/0x530 [ 732.638967][ C0] ksys_mmap_pgoff+0x1c8/0x5c0 [ 732.638991][ C0] ? syscall_user_dispatch+0x77/0x140 [ 732.639020][ C0] __x64_sys_mmap+0x125/0x190 [ 732.639042][ C0] do_syscall_64+0xcd/0x250 [ 732.639067][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.639090][ C0] RIP: 0033:0x7f973157dff9 [ 732.639106][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.639125][ C0] RSP: 002b:00007f973243d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 732.639143][ C0] RAX: ffffffffffffffda RBX: 00007f9731735f80 RCX: 00007f973157dff9 [ 732.639157][ C0] RDX: 00004000000000df RSI: 0020000000000005 RDI: 0000000000000001 [ 732.639170][ C0] RBP: 00007f97315f0296 R08: 0000000000000402 R09: 0000300000000000 [ 732.639184][ C0] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 732.639196][ C0] R13: 0000000000000000 R14: 00007f9731735f80 R15: 00007ffca4c17688 [ 732.639215][ C0] [ 733.162957][ T54] Bluetooth: hci6: command tx timeout [ 733.192935][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 733.199835][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 733.210361][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 733.220434][ T30] Call Trace: [ 733.223727][ T30] [ 733.226669][ T30] dump_stack_lvl+0x3d/0x1f0 [ 733.231289][ T30] panic+0x71d/0x800 [ 733.235209][ T30] ? __pfx_panic+0x10/0x10 [ 733.239647][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 733.245069][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 733.251160][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 733.256551][ T30] ? watchdog+0xd76/0x1240 [ 733.260991][ T30] ? watchdog+0xd69/0x1240 [ 733.265450][ T30] watchdog+0xd87/0x1240 [ 733.269735][ T30] ? __pfx_watchdog+0x10/0x10 [ 733.274439][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 733.279667][ T30] ? __kthread_parkme+0x148/0x220 [ 733.284714][ T30] ? __pfx_watchdog+0x10/0x10 [ 733.289413][ T30] kthread+0x2c1/0x3a0 [ 733.293504][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 733.298720][ T30] ? __pfx_kthread+0x10/0x10 [ 733.303328][ T30] ret_from_fork+0x45/0x80 [ 733.307770][ T30] ? __pfx_kthread+0x10/0x10 [ 733.312378][ T30] ret_from_fork_asm+0x1a/0x30 [ 733.317178][ T30] [ 733.320441][ T30] Kernel Offset: disabled [ 733.324762][ T30] Rebooting in 86400 seconds..