last executing test programs: 3m30.373337748s ago: executing program 0 (id=2078): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/icmp\x00', 0x20000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m30.206857308s ago: executing program 0 (id=2081): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) mknod$auto(0x0, 0x1001, 0x4) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000280)="c282709c589333e2", 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x7) socket$nl_generic(0x10, 0x3, 0x10) io_setup$auto(0x7ffe, &(0x7f0000000000)) mq_open$auto(&(0x7f0000000280)='nfsd\x00', 0xff, 0xb, &(0x7f00000002c0)={0x1, 0x18000000000, 0x8, 0x7fffffff}) 3m29.332004548s ago: executing program 0 (id=2088): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20040014}, 0x2600c880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) read$auto(0x3, 0x0, 0x7) 3m28.41159191s ago: executing program 0 (id=2104): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) close_range$auto(0x2, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0xd, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) ioperm$auto(0x3, 0xe, 0x2000000000000149) fcntl$auto(0x8000000000000001, 0x5, 0x8) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) 3m28.279614012s ago: executing program 0 (id=2105): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x3d, 0x4909b6f8, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0xefde, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x4]}, 0x1fe, 0xd) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000000), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 3m28.140021261s ago: executing program 0 (id=2107): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x15c0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4) mount$auto(0x0, 0x0, &(0x7f0000000140)='nfsd\x00', 0x87, 0x0) 3m12.899368095s ago: executing program 32 (id=2107): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x15c0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4) mount$auto(0x0, 0x0, &(0x7f0000000140)='nfsd\x00', 0x87, 0x0) 2m56.397383689s ago: executing program 4 (id=2297): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="29012cbd7000ffdbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="05003901"], 0x24}, 0x1, 0x0, 0x0, 0x4004050}, 0x14) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m56.086997714s ago: executing program 4 (id=2298): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x3, 0x6) eventfd$auto(0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x3, 0x1) bind$auto(0x7, &(0x7f0000000000)=@in={0x1d, 0x0, @rand_addr=0x1000000}, 0x3e) 2m55.987333187s ago: executing program 4 (id=2300): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000100)='.\x00', 0x0, 0x44c) getdents64$auto(0x0, 0x0, 0x18) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) connect$auto(0x3, 0x0, 0x55) fanotify_init$auto(0x7, 0x1) ioctl$auto(0x3, 0x541b, 0x10000000000402) 2m55.751235832s ago: executing program 4 (id=2303): mmap$auto(0x0, 0x20009, 0x12, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) socket(0x2, 0x6, 0x0) epoll_create$auto(0x4) epoll_wait$auto(0x5, 0x0, 0x2, 0xfffffffd) epoll_wait$auto(0x5, 0x0, 0x2, 0xfffffffd) r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r0, 0x0) capset$auto(0x0, 0xfffffffffffffffe) epoll_ctl$auto(0x5, 0x3, r0, 0x0) 2m55.270142302s ago: executing program 4 (id=2308): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) open(&(0x7f0000000080)='.\x00', 0x0, 0x1f2) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) open(0x0, 0x22240, 0x155) 2m54.621158596s ago: executing program 4 (id=2313): mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = getpid() pidfd_open$auto(r0, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) 2m39.522756021s ago: executing program 33 (id=2313): mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = getpid() pidfd_open$auto(r0, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) 2m26.211791379s ago: executing program 1 (id=2448): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) utime$auto(0x0, 0x0) read$auto(0x4, 0x0, 0x20fd) 2m26.032418381s ago: executing program 1 (id=2450): socket(0xa, 0x2, 0x0) setsockopt$auto(0x200000000000003, 0x1, 0x29, 0x0, 0x300) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(0xffffffffffffffff, 0x0, 0x40000) getrandom$auto(0x0, 0x6000000, 0x3) madvise$auto(0x0, 0x2000040080000004, 0xe) clone$auto(0x1, 0xfc, &(0x7f00000002c0)=0x9, 0x0, 0x5) clock_settime$auto(0xfffefffb, &(0x7f0000000000)={0x7ffffffffffffffb, 0x100}) connect$auto(0x3, 0xfffffffffffffffe, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 2m25.354943316s ago: executing program 1 (id=2454): connect$auto(0x3, &(0x7f0000000140), 0x55) socket(0x25, 0x5, 0x0) write$auto(0x3, 0x0, 0xfdef) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x14) shutdown$auto(0xffffffffffffffff, 0x6ddb00) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x600007, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2m24.59355352s ago: executing program 1 (id=2460): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0xc1, 0x2000000000002) socket(0x2, 0x2, 0x1) socket(0x2, 0x801, 0x106) socket(0x26, 0x80805, 0x0) open(0x0, 0x12ba7e, 0x145) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x20}, 0x3) 2m24.342857935s ago: executing program 1 (id=2462): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x2, 0x1) socket(0x2, 0x801, 0x106) socket(0x26, 0x80805, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x145) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x1e}, 0x3) writev$auto(0x2, &(0x7f0000000140)={0x0, 0x7fff}, 0x6) 2m24.228075814s ago: executing program 1 (id=2463): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) mkdir$auto(&(0x7f00000003c0)='}[,&*}\x00', 0x6) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) socketpair$auto(0x1e, 0x4, 0x1, 0x0) open$dir(&(0x7f0000000080)='}[,&*}\x00', 0x0, 0x113) fsetxattr$auto(r0, 0x0, 0x0, 0x2, 0x2) 2m8.952337375s ago: executing program 34 (id=2463): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) mkdir$auto(&(0x7f00000003c0)='}[,&*}\x00', 0x6) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) socketpair$auto(0x1e, 0x4, 0x1, 0x0) open$dir(&(0x7f0000000080)='}[,&*}\x00', 0x0, 0x113) fsetxattr$auto(r0, 0x0, 0x0, 0x2, 0x2) 4.976951885s ago: executing program 3 (id=3179): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000240)={0x1, 0x9, 0x1c2, 0x25ab3089, 0x0, "9d4f8edef785a8e5a5ff69c61ed549c46c1ea0ce39439cb9f7fe26fe87659c9dd52e80eb5a7b5bdce62f726f940b383b8d24"}) socket(0x1, 0x1, 0x1) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x24004054) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) 3.324613262s ago: executing program 2 (id=3187): r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x4c00, 0x0) bind$auto(r0, 0x0, 0x100009) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x342, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xfff9}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x2}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0xc010) 3.218715354s ago: executing program 3 (id=3188): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mlock$auto(0xfbe8, 0x4) personality$auto(0xfffffffc) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) mmap$auto(0x0, 0xb, 0xb, 0x12, 0x8000000000000000, 0x0) sysfs$auto(0x2, 0x15, 0x0) mincore$auto(0x4, 0xfffffffffffffff4, &(0x7f0000000040)='/dev/dsp\x00') openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f00000000c0), 0x2944c2, 0x0) 3.109754827s ago: executing program 5 (id=3189): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x801, 0x100) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) 2.941582966s ago: executing program 5 (id=3190): arch_prctl$auto(0x5002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) fanotify_init$auto(0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x7, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(0x3, 0x4b52, 0x38) 2.729978611s ago: executing program 6 (id=3191): socket(0xa, 0x3, 0xff) connect$auto(0x3, 0x0, 0x55) sendmsg$auto_L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x40) io_uring_register$auto(0xffffffffffffffff, 0x9, &(0x7f0000000640)="b4877ff614bfd88abd4b0d", 0x887) socket(0x10, 0x2, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, 0x0, 0x1c) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x280, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xa, 0x32c, 0x4, 0x6b, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x9, 0x1, 0x5, 0x10000000009, 0x7, 0x7, 0x40000104}) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x402, 0x0) ioctl$auto(r0, 0x5101, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 2.700058104s ago: executing program 5 (id=3192): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0xe0}, 0x55) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/rxrpc/peers\x00', 0x480, 0x0) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x261c2, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x265, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x4004) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\f\x00', @ANYRES16, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES32, @ANYBLOB="08000b0109000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0x210, 0xfffffffffffffffa, 0x8002) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r2, 0x0, 0x2000000) 2.539876548s ago: executing program 6 (id=3193): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) socket(0x2, 0x6, 0x0) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) epoll_ctl$auto(0x5, 0x3, r0, 0x0) epoll_wait$auto(0x5, 0x0, 0x2, 0xfffffffd) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 2.278661946s ago: executing program 3 (id=3194): futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/ipv6_route\x00', 0x8000, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x181902, 0x0) ioctl$auto(r0, 0x80044dfd, 0x4) ioctl$auto(0x3, 0xc0285629, 0x38) futex$auto(&(0x7f0000000080)=0x1, 0x9, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0x3, 0x5, 0x8, 0x0, &(0x7f0000000100)=0x314, 0x440a48d3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:01.1/ata1/host0/target0:0:0/0:0:0:0/delete\x00', 0x2280, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/mtd-0/min_bytes\x00', 0xc0002, 0x0) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0xfdef) socket(0x15, 0xa, 0x7) 2.277597566s ago: executing program 6 (id=3202): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4, 0x0) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0xcf2a, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x20) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0) mq_notify$auto(0x5cf5, &(0x7f00000006c0)={@sival_ptr=0x0, 0x3, 0x2, @_sigev_thread={0x0, 0x0}}) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0x2, 0x0, 0x0) keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) 2.155741516s ago: executing program 2 (id=3195): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000000c0), 0x55) mkdir$auto(&(0x7f0000000300)='./file0\x00', 0xf801) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) chmod$auto(&(0x7f0000000040)='./file0\x00', 0x10fe) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) socket(0x11, 0x80003, 0x300) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) 1.920271627s ago: executing program 2 (id=3196): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x2, 0x801, 0x106) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) bpf$auto(0x1, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x80000000, 0xc, 0xb, 0x5}, 0x7) 1.725368171s ago: executing program 2 (id=3197): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000240)={0x1, 0x9, 0x1c2, 0x25ab3089, 0x0, "9d4f8edef785a8e5a5ff69c61ed549c46c1ea0ce39439cb9f7fe26fe87659c9dd52e80eb5a7b5bdce62f726f940b383b8d24"}) socket(0x1, 0x1, 0x1) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x24004054) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) 1.724666206s ago: executing program 6 (id=3206): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000000c0), 0x55) mkdir$auto(&(0x7f0000000300)='./file0\x00', 0xf801) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) chmod$auto(0x0, 0x10fe) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) write$auto(0xc8, 0x0, 0x40f6) 1.61564901s ago: executing program 3 (id=3198): unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8002) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) ioctl$auto(0xc8, 0x400454c8, 0x5c8d) getdents64$auto(r0, &(0x7f0000000040)={0x1d6c, 0x1000000000, 0x2, 0x25, ']'}, 0x7) fchdir$auto(r0) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mkdir$auto(0x0, 0x9) access$auto(&(0x7f0000000100)='./file1\x00', 0xe716) syz_open_procfs$namespace(0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) 1.370135556s ago: executing program 5 (id=3199): socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f00000000c0)=@link_update={r1, @new_prog_fd=0x4, 0x91e, @old_map_fd=r0}, 0xa3) 1.336384972s ago: executing program 6 (id=3200): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) 1.308563755s ago: executing program 5 (id=3201): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x41ff, 0x3) write$auto(0x3, 0x0, 0x7fffffff) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 554.968009ms ago: executing program 3 (id=3203): mmap$auto(0x0, 0x8, 0xdf, 0x209b72, 0x4e477f5a, 0x8000) memfd_secret$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x6, 0x21, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000100e900020000000000060007000100000008000200", @ANYRESOCT=r0, @ANYBLOB="0800040003000000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r1 = socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_GET(r1, &(0x7f00000046c0)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x20000001) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, '\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) 401.850159ms ago: executing program 3 (id=3204): sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r0, 0x40044900, 0x800000000000003) poll$auto(&(0x7f0000000200)={r0, 0x1, 0x43c7}, 0xb, 0x7fffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x2000b, 0x2, 0xeb1, 0x3fe, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x23, 0x80805, 0x0) poll$auto(&(0x7f0000000000)={r1, 0x1, 0x8}, 0x5, 0x400) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002f40), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000002fc0)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) 316.743851ms ago: executing program 6 (id=3205): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x8904, 0x1) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) madvise$auto(0x108000, 0x800034, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20040000) getpgid(0x0) 254.433246ms ago: executing program 2 (id=3207): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1ff, r0, @relative_id=0x13, 0xe600}, 0xf) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x2, 0x1, 0x0) listen$auto(r3, 0x6) r4 = open(0x0, 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0xc) close_range$auto(0x2, 0x8, 0x0) 83.230312ms ago: executing program 2 (id=3208): socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) open(0x0, 0x2a4c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x149443, 0x0) socket(0x1e, 0x5, 0x0) socket(0x10, 0x2, 0xc) pipe$auto(0x0) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0xb, 0x0, 0x0) 0s ago: executing program 5 (id=3209): socket(0xa, 0x3, 0x6) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x89e1, 0x91) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) write$auto(0x800000000000c8, 0x0, 0x1a) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) mlockall$auto(0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x28, 0x9}, 0x7}, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) pselect6$auto(0x4, 0x0, &(0x7f0000000180)={[0x2, 0x9, 0x2da0000, 0xff, 0x101, 0x1c00000, 0xa1, 0x4, 0xfffffffffffffffe, 0x8, 0x4, 0x9, 0x1, 0x0, 0xe, 0x80000001]}, 0x0, 0x0, &(0x7f0000000340)) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) lstat$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. [ 65.554010][ T5821] cgroup: Unknown subsys name 'net' [ 65.700378][ T5821] cgroup: Unknown subsys name 'cpuset' [ 65.708898][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.058804][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.789997][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.808456][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.817484][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.825567][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.826320][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.833206][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.841997][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.849930][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.861310][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.867972][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.869695][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.883539][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.891327][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.893625][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.899166][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.911225][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.920128][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.928766][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.936361][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.943865][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.944481][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.959362][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.969767][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.985661][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.300567][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 69.378595][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 69.481676][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 69.499227][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.506294][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.513871][ T5830] bridge_slave_0: entered allmulticast mode [ 69.521797][ T5830] bridge_slave_0: entered promiscuous mode [ 69.529575][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 69.547061][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.554274][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.561718][ T5830] bridge_slave_1: entered allmulticast mode [ 69.568499][ T5830] bridge_slave_1: entered promiscuous mode [ 69.651368][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.664003][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.671275][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.678491][ T5831] bridge_slave_0: entered allmulticast mode [ 69.685037][ T5831] bridge_slave_0: entered promiscuous mode [ 69.696190][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.712551][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.719748][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.726941][ T5831] bridge_slave_1: entered allmulticast mode [ 69.733876][ T5831] bridge_slave_1: entered promiscuous mode [ 69.801800][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.809414][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.816520][ T5836] bridge_slave_0: entered allmulticast mode [ 69.824107][ T5836] bridge_slave_0: entered promiscuous mode [ 69.840788][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.859531][ T5830] team0: Port device team_slave_0 added [ 69.865527][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.872780][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.880224][ T5837] bridge_slave_0: entered allmulticast mode [ 69.886750][ T5837] bridge_slave_0: entered promiscuous mode [ 69.895583][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.902856][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.910076][ T5837] bridge_slave_1: entered allmulticast mode [ 69.916603][ T5837] bridge_slave_1: entered promiscuous mode [ 69.923443][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.930938][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.938332][ T5836] bridge_slave_1: entered allmulticast mode [ 69.944900][ T5836] bridge_slave_1: entered promiscuous mode [ 69.953068][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.974341][ T5830] team0: Port device team_slave_1 added [ 70.031826][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.043420][ T5831] team0: Port device team_slave_0 added [ 70.052049][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.059469][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.085697][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.100510][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.112185][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.122878][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.142515][ T5831] team0: Port device team_slave_1 added [ 70.157577][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.164522][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.190886][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.228223][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.235193][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.261532][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.284053][ T5836] team0: Port device team_slave_0 added [ 70.321364][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.328633][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.355092][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.368755][ T5837] team0: Port device team_slave_0 added [ 70.376791][ T5836] team0: Port device team_slave_1 added [ 70.392987][ T5830] hsr_slave_0: entered promiscuous mode [ 70.399692][ T5830] hsr_slave_1: entered promiscuous mode [ 70.412090][ T5837] team0: Port device team_slave_1 added [ 70.426510][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.436315][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.462759][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.500920][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.507933][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.536461][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.574784][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.581856][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.608370][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.631841][ T5831] hsr_slave_0: entered promiscuous mode [ 70.638270][ T5831] hsr_slave_1: entered promiscuous mode [ 70.644259][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.652203][ T5831] Cannot create hsr debugfs directory [ 70.661615][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.668684][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.694623][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.709205][ T5836] hsr_slave_0: entered promiscuous mode [ 70.715387][ T5836] hsr_slave_1: entered promiscuous mode [ 70.721592][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.729187][ T5836] Cannot create hsr debugfs directory [ 70.834642][ T5837] hsr_slave_0: entered promiscuous mode [ 70.841548][ T5837] hsr_slave_1: entered promiscuous mode [ 70.849155][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.856800][ T5837] Cannot create hsr debugfs directory [ 71.010256][ T5838] Bluetooth: hci3: command tx timeout [ 71.010258][ T5832] Bluetooth: hci1: command tx timeout [ 71.021269][ T5838] Bluetooth: hci0: command tx timeout [ 71.038710][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.064017][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.074254][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.087752][ T5832] Bluetooth: hci2: command tx timeout [ 71.106462][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.166024][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.175415][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.195245][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.204922][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.245641][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.256359][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.272086][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.298977][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.360426][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.369669][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.385197][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.394626][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.471321][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.502004][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.535570][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.542981][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.566001][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.573150][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.581947][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.589470][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.600286][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.616488][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.649182][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.671799][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.678925][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.699597][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.724938][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.732087][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.741468][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.748614][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.774893][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.782032][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.826262][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.845274][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.885718][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.925570][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.932726][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.967721][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.974847][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.074725][ T5837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.107434][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.181938][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.223772][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.320879][ T5836] veth0_vlan: entered promiscuous mode [ 72.355856][ T5830] veth0_vlan: entered promiscuous mode [ 72.372962][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.385286][ T5836] veth1_vlan: entered promiscuous mode [ 72.396753][ T5830] veth1_vlan: entered promiscuous mode [ 72.405991][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.454487][ T5830] veth0_macvtap: entered promiscuous mode [ 72.471623][ T5830] veth1_macvtap: entered promiscuous mode [ 72.494990][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.517793][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.542080][ T5837] veth0_vlan: entered promiscuous mode [ 72.552541][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.563620][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.572864][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.583162][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.595945][ T5831] veth0_vlan: entered promiscuous mode [ 72.609716][ T5836] veth0_macvtap: entered promiscuous mode [ 72.622263][ T5837] veth1_vlan: entered promiscuous mode [ 72.631877][ T5831] veth1_vlan: entered promiscuous mode [ 72.642127][ T5836] veth1_macvtap: entered promiscuous mode [ 72.695236][ T5831] veth0_macvtap: entered promiscuous mode [ 72.709521][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.721390][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.732811][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.746006][ T5831] veth1_macvtap: entered promiscuous mode [ 72.802501][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.813795][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.824702][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.841780][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.853088][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.862812][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.871987][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.883013][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.893883][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.904017][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.915504][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.928145][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.939598][ T5837] veth0_macvtap: entered promiscuous mode [ 72.950260][ T2904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.955242][ T5837] veth1_macvtap: entered promiscuous mode [ 72.964110][ T2904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.989084][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.000038][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.012032][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.022798][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.033965][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.062917][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.072131][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.081342][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.090551][ T5832] Bluetooth: hci0: command tx timeout [ 73.090578][ T5835] Bluetooth: hci1: command tx timeout [ 73.096534][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.110724][ T5838] Bluetooth: hci3: command tx timeout [ 73.121404][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.132161][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.142142][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.152629][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.162612][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.173553][ T5838] Bluetooth: hci2: command tx timeout [ 73.180102][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.191033][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.200182][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.213406][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.214399][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.234098][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.244023][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.255039][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.264879][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.275431][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.285985][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.333556][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.343560][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.352812][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.361786][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.388131][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.455872][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.475235][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.619506][ T3637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.620030][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.627850][ T3637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.642790][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.662248][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.681235][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.732043][ T3445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.756669][ T3445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.839625][ T5897] Zero length message leads to an empty skb [ 73.850740][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.874220][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.027744][ T5901] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3'. [ 74.484587][ T5919] netlink: 'syz.2.12': attribute type 4 has an invalid length. [ 74.507275][ T5919] netlink: 314 bytes leftover after parsing attributes in process `syz.2.12'. [ 74.757226][ T5914] ptrace attach of "./syz-executor exec"[5836] was attempted by ""[5914] [ 74.887779][ T5918] netlink: 334 bytes leftover after parsing attributes in process `syz.3.13'. [ 75.168367][ T5838] Bluetooth: hci1: command tx timeout [ 75.173817][ T5838] Bluetooth: hci3: command tx timeout [ 75.182110][ T5838] Bluetooth: hci0: command tx timeout [ 75.247683][ T5838] Bluetooth: hci2: command tx timeout [ 75.494673][ T5946] netlink: 342 bytes leftover after parsing attributes in process `syz.2.22'. [ 75.754043][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 76.274904][ T5966] netlink: 342 bytes leftover after parsing attributes in process `syz.0.30'. [ 76.458670][ T5974] sp0: Synchronizing with TNC [ 76.478867][ T5975] netlink: 'syz.2.33': attribute type 17 has an invalid length. [ 76.486844][ T5975] netlink: 326 bytes leftover after parsing attributes in process `syz.2.33'. [ 76.498004][ T5977] netlink: 338 bytes leftover after parsing attributes in process `syz.0.34'. [ 77.277563][ T5838] Bluetooth: hci0: command tx timeout [ 77.283419][ T5838] Bluetooth: hci3: command tx timeout [ 77.289619][ T5838] Bluetooth: hci1: command tx timeout [ 77.328094][ T5832] Bluetooth: hci2: command tx timeout [ 77.792034][ T6008] syz.2.43 uses obsolete (PF_INET,SOCK_PACKET) [ 78.120931][ T6014] netlink: 326 bytes leftover after parsing attributes in process `syz.1.46'. [ 78.265630][ T6020] netlink: 330 bytes leftover after parsing attributes in process `syz.3.48'. [ 79.518778][ T6051] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.838716][ T6060] __nla_validate_parse: 1 callbacks suppressed [ 79.838743][ T6060] netlink: 330 bytes leftover after parsing attributes in process `syz.3.65'. [ 80.157574][ T6063] mkiss: ax0: crc mode is auto. [ 81.192611][ T6093] netlink: 342 bytes leftover after parsing attributes in process `syz.2.80'. [ 81.386836][ T6096] netlink: 342 bytes leftover after parsing attributes in process `syz.2.82'. [ 81.419055][ T6096] netlink: 342 bytes leftover after parsing attributes in process `syz.2.82'. [ 81.673145][ T6106] process 'syz.0.85' launched '/dev/fd/3' with NULL argv: empty string added [ 81.832536][ T973] cfg80211: failed to load regulatory.db [ 82.194205][ T6119] sctp: [Deprecated]: syz.0.87 (pid 6119) Use of int in max_burst socket option deprecated. [ 82.194205][ T6119] Use struct sctp_assoc_value instead [ 82.716129][ T6128] netlink: 330 bytes leftover after parsing attributes in process `syz.3.90'. [ 83.111218][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 83.579531][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 83.621638][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 83.764265][ T6155] netlink: 'syz.2.103': attribute type 4 has an invalid length. [ 84.084053][ T6166] netlink: 290 bytes leftover after parsing attributes in process `syz.1.106'. [ 84.234997][ T6168] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.367239][ T6234] netlink: 334 bytes leftover after parsing attributes in process `syz.0.125'. [ 87.596203][ T6276] netlink: 'syz.1.136': attribute type 46 has an invalid length. [ 88.667041][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 88.695436][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 88.888688][ T6306] netlink: 146 bytes leftover after parsing attributes in process `syz.3.151'. [ 88.990759][ T6309] capability: warning: `syz.2.153' uses 32-bit capabilities (legacy support in use) [ 89.102558][ T6312] netlink: 342 bytes leftover after parsing attributes in process `syz.3.154'. [ 89.213929][ T6314] netlink: 146 bytes leftover after parsing attributes in process `syz.2.155'. [ 89.717904][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.161'. [ 90.517525][ T6347] netlink: 330 bytes leftover after parsing attributes in process `syz.1.166'. [ 91.801931][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'. [ 92.112495][ T6368] netlink: 342 bytes leftover after parsing attributes in process `syz.2.175'. [ 92.142859][ T6368] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.177338][ T6368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.184897][ T6368] IPv6: NLM_F_CREATE should be set when creating new route [ 92.192202][ T6368] IPv6: NLM_F_CREATE should be set when creating new route [ 92.507734][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 94.026805][ T6413] netlink: 350 bytes leftover after parsing attributes in process `syz.0.192'. [ 94.644127][ T6421] netlink: 146 bytes leftover after parsing attributes in process `syz.0.195'. [ 94.879753][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'. [ 94.900588][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'. [ 95.526232][ T6444] netlink: 334 bytes leftover after parsing attributes in process `syz.3.204'. [ 96.211665][ T6458] netlink: 342 bytes leftover after parsing attributes in process `syz.3.208'. [ 96.803462][ T6469] sctp: [Deprecated]: syz.0.212 (pid 6469) Use of int in max_burst socket option. [ 96.803462][ T6469] Use struct sctp_assoc_value instead [ 97.443063][ T6481] [U] [ 97.445950][ T6481] [U] [ 97.448688][ T6481] [U] [ 97.451421][ T6481] [U] [ 97.492141][ T6481] [U] [ 97.494905][ T6481] [U] [ 97.497643][ T6481] [U] [ 97.500369][ T6481] [U] [ 97.523584][ T6481] [U] [ 97.526340][ T6481] [U] [ 97.529071][ T6481] [U] [ 97.531798][ T6481] [U] [ 97.562279][ T6481] [U] [ 97.565032][ T6481] [U] [ 97.567758][ T6481] [U] [ 97.570479][ T6481] [U] [ 97.593877][ T6486] [U] [ 97.731899][ T6490] netlink: 326 bytes leftover after parsing attributes in process `syz.3.221'. [ 98.418854][ T6505] netlink: 'syz.0.226': attribute type 19 has an invalid length. [ 98.439283][ T6505] netlink: 114 bytes leftover after parsing attributes in process `syz.0.226'. [ 102.149882][ T6582] netlink: 330 bytes leftover after parsing attributes in process `syz.3.256'. [ 102.888223][ T6601] netlink: 'syz.2.264': attribute type 4 has an invalid length. [ 102.939703][ T6603] netlink: 'syz.2.264': attribute type 4 has an invalid length. [ 103.228252][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'. [ 103.511341][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 104.178626][ T6627] delete_channel: no stack [ 104.937613][ T6643] sp0: Synchronizing with TNC [ 105.948454][ T6665] netlink: 326 bytes leftover after parsing attributes in process `syz.3.286'. [ 106.327852][ T6670] netlink: 'syz.0.289': attribute type 21 has an invalid length. [ 106.338140][ T6670] netlink: 326 bytes leftover after parsing attributes in process `syz.0.289'. [ 106.978960][ T6681] netlink: 146 bytes leftover after parsing attributes in process `syz.2.294'. [ 107.436968][ T6697] netlink: 'syz.3.296': attribute type 27 has an invalid length. [ 107.463027][ T6696] misc userio: The device must be registered before sending interrupts [ 107.474704][ T6697] netlink: 334 bytes leftover after parsing attributes in process `syz.3.296'. [ 107.802377][ T6707] random: crng reseeded on system resumption [ 110.267877][ T6720] syz.2.305 (6720) used greatest stack depth: 20672 bytes left [ 110.389767][ T6734] mmap: syz.2.311 (6734) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.134122][ T6745] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 113.627047][ T6787] netlink: 'syz.2.332': attribute type 64 has an invalid length. [ 113.645552][ T6787] netlink: 74 bytes leftover after parsing attributes in process `syz.2.332'. [ 114.096732][ T6791] raw_sendmsg: syz.2.333 forgot to set AF_INET. Fix it! [ 115.465804][ T6820] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.595519][ T6839] ICMPv6: process `syz.3.351' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 117.834657][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 118.017338][ T6852] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 118.044499][ T6855] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 118.061588][ T6855] netlink: 318 bytes leftover after parsing attributes in process `syz.2.358'. [ 118.287631][ T6857] netlink: 266 bytes leftover after parsing attributes in process `syz.2.360'. [ 118.322431][ T6857] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.283027][ T6869] lo: entered allmulticast mode [ 119.387934][ T6871] lo: left allmulticast mode [ 121.919787][ T6371] syz.1.174 (6371) used greatest stack depth: 18768 bytes left [ 121.933523][ T6915] netlink: 342 bytes leftover after parsing attributes in process `syz.3.380'. [ 122.312805][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 122.358113][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 122.366239][ T6926] netlink: 'syz.3.382': attribute type 39 has an invalid length. [ 122.415547][ T6926] netlink: 'syz.3.382': attribute type 40 has an invalid length. [ 122.499829][ T6926] netlink: 'syz.3.382': attribute type 41 has an invalid length. [ 122.531407][ T6926] netlink: 'syz.3.382': attribute type 44 has an invalid length. [ 122.577403][ T6926] netlink: 'syz.3.382': attribute type 46 has an invalid length. [ 122.597176][ T6926] netlink: 'syz.3.382': attribute type 47 has an invalid length. [ 122.637683][ T6926] netlink: 'syz.3.382': attribute type 48 has an invalid length. [ 122.656173][ T6143] syz.1.97 (6143) used greatest stack depth: 18544 bytes left [ 122.693540][ T6926] netlink: 'syz.3.382': attribute type 49 has an invalid length. [ 122.713871][ T6926] netlink: 'syz.3.382': attribute type 50 has an invalid length. [ 122.747839][ T6926] netlink: 6 bytes leftover after parsing attributes in process `syz.3.382'. [ 122.844017][ T6933] netlink: 330 bytes leftover after parsing attributes in process `syz.1.387'. [ 123.945053][ T6963] netlink: 'syz.3.399': attribute type 4 has an invalid length. [ 124.857289][ T6987] program syz.1.408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.394147][ T7001] netlink: 342 bytes leftover after parsing attributes in process `syz.1.414'. [ 126.692633][ T7038] netlink: 306 bytes leftover after parsing attributes in process `syz.3.428'. [ 127.359220][ T7044] syz.3.431 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 127.413151][ T7063] netlink: 330 bytes leftover after parsing attributes in process `syz.0.439'. [ 127.435325][ T7063] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.916245][ T7071] validate_nla: 1 callbacks suppressed [ 127.916264][ T7071] netlink: 'syz.0.443': attribute type 33 has an invalid length. [ 127.951875][ T7071] netlink: 322 bytes leftover after parsing attributes in process `syz.0.443'. [ 128.232295][ T7093] netlink: 'syz.1.451': attribute type 1 has an invalid length. [ 128.251587][ T7093] netlink: 230 bytes leftover after parsing attributes in process `syz.1.451'. [ 128.804977][ T7104] netlink: 330 bytes leftover after parsing attributes in process `syz.3.457'. [ 129.511254][ T7108] ptrace attach of "./syz-executor exec"[5830] was attempted by ""[7108] [ 129.638058][ T7115] netlink: 334 bytes leftover after parsing attributes in process `syz.0.460'. [ 129.744522][ T7105] netlink: 93 bytes leftover after parsing attributes in process `syz.1.454'. [ 131.147717][ T7148] netlink: 330 bytes leftover after parsing attributes in process `syz.0.478'. [ 131.156777][ T7149] netlink: 330 bytes leftover after parsing attributes in process `syz.2.471'. [ 131.345887][ T7154] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 131.380517][ T7154] netlink: 53 bytes leftover after parsing attributes in process `syz.0.481'. [ 131.393707][ T7157] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 131.410796][ T7157] netlink: 53 bytes leftover after parsing attributes in process `syz.0.481'. [ 132.462613][ T7179] netlink: 'syz.2.480': attribute type 21 has an invalid length. [ 132.494203][ T7179] __nla_validate_parse: 4 callbacks suppressed [ 132.494247][ T7179] netlink: 326 bytes leftover after parsing attributes in process `syz.2.480'. [ 133.023089][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.029733][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.635019][ T7210] mkiss: ax0: crc mode is auto. [ 133.826889][ T7214] netlink: 'syz.0.493': attribute type 21 has an invalid length. [ 133.846895][ T7214] netlink: 326 bytes leftover after parsing attributes in process `syz.0.493'. [ 135.391587][ T7235] netlink: 330 bytes leftover after parsing attributes in process `syz.0.498'. [ 135.524839][ T7240] netlink: 326 bytes leftover after parsing attributes in process `syz.0.502'. [ 137.655346][ T7302] netlink: 342 bytes leftover after parsing attributes in process `syz.3.525'. [ 137.686848][ T7302] IPv6: NLM_F_CREATE should be specified when creating new route [ 137.704745][ T7302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.712178][ T7302] IPv6: NLM_F_CREATE should be set when creating new route [ 137.719487][ T7302] IPv6: NLM_F_CREATE should be set when creating new route [ 138.427444][ T7318] sctp: [Deprecated]: syz.2.530 (pid 7318) Use of int in max_burst socket option deprecated. [ 138.427444][ T7318] Use struct sctp_assoc_value instead [ 139.021226][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'. [ 139.033160][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'. [ 140.027746][ T7354] netlink: 290 bytes leftover after parsing attributes in process `syz.0.542'. [ 140.124509][ T7358] netlink: 330 bytes leftover after parsing attributes in process `syz.0.543'. [ 141.608413][ T7390] netlink: 330 bytes leftover after parsing attributes in process `syz.2.556'. [ 144.411530][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.569'. [ 146.584342][ T7470] netlink: 306 bytes leftover after parsing attributes in process `syz.3.586'. [ 146.671772][ T7474] netlink: 146 bytes leftover after parsing attributes in process `syz.1.587'. [ 147.883315][ T7498] netlink: 330 bytes leftover after parsing attributes in process `syz.2.595'. [ 148.160120][ T7504] netlink: 146 bytes leftover after parsing attributes in process `syz.2.599'. [ 148.868770][ T7513] netlink: 326 bytes leftover after parsing attributes in process `syz.3.604'. [ 149.835216][ T7533] netlink: 342 bytes leftover after parsing attributes in process `syz.2.611'. [ 149.885331][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 150.073753][ T7537] netlink: 'syz.3.614': attribute type 4 has an invalid length. [ 150.122030][ T7537] netlink: 314 bytes leftover after parsing attributes in process `syz.3.614'. [ 150.359114][ T29] audit: type=1326 audit(1734389001.368:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.1.616" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb14c385d19 code=0x0 [ 150.452661][ T7548] netlink: 146 bytes leftover after parsing attributes in process `syz.2.618'. [ 153.042846][ T7593] netlink: 330 bytes leftover after parsing attributes in process `syz.2.636'. [ 154.262865][ T7619] netlink: 326 bytes leftover after parsing attributes in process `syz.0.645'. [ 155.698723][ T7651] netlink: 330 bytes leftover after parsing attributes in process `syz.2.657'. [ 155.747203][ T7651] : renamed from gre0 (while UP) [ 155.978253][ T7651] netlink: 330 bytes leftover after parsing attributes in process `syz.2.657'. [ 156.047981][ T7658] netlink: 342 bytes leftover after parsing attributes in process `syz.3.662'. [ 156.057655][ T7658] IPv6: Can't replace route, no match found [ 156.650351][ T29] audit: type=1800 audit(1734389007.668:3): pid=7673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.667" name="discovery_nqn" dev="configfs" ino=12233 res=0 errno=0 [ 156.863767][ T7681] netlink: 330 bytes leftover after parsing attributes in process `syz.0.670'. [ 156.971155][ T7684] netlink: 330 bytes leftover after parsing attributes in process `syz.2.672'. [ 157.532326][ T7705] netlink: 330 bytes leftover after parsing attributes in process `syz.0.682'. [ 157.613887][ T7703] lo: entered promiscuous mode [ 157.698696][ T7703] lo: left promiscuous mode [ 157.812347][ T7713] netlink: 330 bytes leftover after parsing attributes in process `syz.3.685'. [ 158.280793][ T7726] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.287030][ T7726] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 158.375297][ T7726] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 158.403283][ T7726] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 158.409597][ T7726] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 158.418547][ T7726] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 158.425557][ T7726] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.432608][ T7726] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 158.454833][ T7726] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 158.469882][ T7726] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.483777][ T7726] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 158.494800][ T7726] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 159.191583][ T7742] netlink: 334 bytes leftover after parsing attributes in process `syz.3.695'. [ 160.287325][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.391411][ T5832] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 160.447242][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.447355][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.527227][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 161.566016][ T7800] netlink: 'syz.2.717': attribute type 4 has an invalid length. [ 161.968119][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 162.014848][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 162.367314][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.532653][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 162.532661][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 162.628374][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.751906][ T7824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.727'. [ 162.781721][ T7821] block nbd0: Unsupported socket: shutdown callout must be supported. [ 162.808298][ T7824] ipvlan0: entered allmulticast mode [ 162.813637][ T7824] veth0_vlan: entered allmulticast mode [ 163.023442][ T7830] netlink: 326 bytes leftover after parsing attributes in process `syz.0.730'. [ 163.344761][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'. [ 163.407633][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'. [ 163.668442][ T7841] netlink: 330 bytes leftover after parsing attributes in process `syz.2.733'. [ 163.904133][ T7845] netlink: 326 bytes leftover after parsing attributes in process `syz.2.735'. [ 164.318622][ T7856] netlink: 326 bytes leftover after parsing attributes in process `syz.2.740'. [ 164.447370][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.607370][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.613430][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.687252][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.683348][ T7886] netlink: 330 bytes leftover after parsing attributes in process `syz.0.751'. [ 167.262282][ T7906] netlink: 'syz.0.760': attribute type 28 has an invalid length. [ 167.277292][ T7906] netlink: 'syz.0.760': attribute type 29 has an invalid length. [ 167.285056][ T7906] netlink: 'syz.0.760': attribute type 30 has an invalid length. [ 167.307199][ T7906] netlink: 'syz.0.760': attribute type 31 has an invalid length. [ 167.335845][ T7906] netlink: 'syz.0.760': attribute type 32 has an invalid length. [ 167.347426][ T7906] netlink: 'syz.0.760': attribute type 33 has an invalid length. [ 167.365662][ T7906] netlink: 'syz.0.760': attribute type 35 has an invalid length. [ 167.377224][ T7906] netlink: 'syz.0.760': attribute type 37 has an invalid length. [ 167.397178][ T7906] netlink: 'syz.0.760': attribute type 39 has an invalid length. [ 167.425622][ T7906] netlink: 'syz.0.760': attribute type 40 has an invalid length. [ 167.457307][ T7906] netlink: 18 bytes leftover after parsing attributes in process `syz.0.760'. [ 167.662464][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.763'. [ 168.130132][ T7923] netlink: 330 bytes leftover after parsing attributes in process `syz.0.767'. [ 168.783442][ T7936] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 169.410442][ T7944] netlink: 330 bytes leftover after parsing attributes in process `syz.2.776'. [ 169.723111][ T7947] netlink: 146 bytes leftover after parsing attributes in process `syz.0.777'. [ 170.966491][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'. [ 170.985011][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'. [ 172.388412][ T7989] validate_nla: 1 callbacks suppressed [ 172.388433][ T7989] netlink: 'syz.3.792': attribute type 4 has an invalid length. [ 172.435349][ T7989] netlink: 314 bytes leftover after parsing attributes in process `syz.3.792'. [ 172.463812][ T7991] netlink: 330 bytes leftover after parsing attributes in process `syz.0.793'. [ 173.315272][ T8007] netlink: 326 bytes leftover after parsing attributes in process `syz.3.801'. [ 173.539505][ T8009] netlink: 326 bytes leftover after parsing attributes in process `syz.3.803'. [ 173.887768][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.805'. [ 173.915268][ T8019] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 173.941413][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.805'. [ 174.275624][ T8025] netlink: 266 bytes leftover after parsing attributes in process `syz.3.808'. [ 174.423382][ T8030] netlink: 326 bytes leftover after parsing attributes in process `syz.3.811'. [ 175.387251][ T8051] netlink: 330 bytes leftover after parsing attributes in process `syz.0.819'. [ 176.874887][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'. [ 179.170525][ T8130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.850'. [ 179.254847][ T8132] netlink: 146 bytes leftover after parsing attributes in process `syz.0.851'. [ 180.268773][ T8154] netlink: 326 bytes leftover after parsing attributes in process `syz.2.859'. [ 180.350749][ T8154] veth0_macvtap: left promiscuous mode [ 182.076319][ T8181] sp0: Synchronizing with TNC [ 182.311587][ T8185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.872'. [ 184.051694][ T8218] netlink: 330 bytes leftover after parsing attributes in process `syz.0.883'. [ 184.245607][ T8223] netlink: 342 bytes leftover after parsing attributes in process `syz.0.886'. [ 184.273036][ T8223] netlink: 146 bytes leftover after parsing attributes in process `syz.0.886'. [ 185.268850][ T8254] netlink: 330 bytes leftover after parsing attributes in process `syz.2.896'. [ 185.580600][ T8267] netlink: 334 bytes leftover after parsing attributes in process `syz.0.900'. [ 185.605659][ T8263] netlink: 146 bytes leftover after parsing attributes in process `syz.1.899'. [ 185.763050][ T8274] sp0: Synchronizing with TNC [ 185.960482][ T8278] netlink: 'syz.1.905': attribute type 5 has an invalid length. [ 185.993291][ T8278] netlink: 314 bytes leftover after parsing attributes in process `syz.1.905'. [ 186.131848][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.908'. [ 186.587695][ T8303] netlink: 314 bytes leftover after parsing attributes in process `syz.0.913'. [ 186.956245][ T8310] delete_channel: no stack [ 187.702297][ T8335] netlink: 342 bytes leftover after parsing attributes in process `syz.1.927'. [ 187.717613][ T8335] netlink: 214 bytes leftover after parsing attributes in process `syz.1.927'. [ 187.726790][ T8335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.734117][ T8335] IPv6: NLM_F_CREATE should be set when creating new route [ 187.741410][ T8335] IPv6: NLM_F_CREATE should be set when creating new route [ 187.748663][ T8335] IPv6: NLM_F_CREATE should be set when creating new route [ 189.535587][ T8381] __nla_validate_parse: 4 callbacks suppressed [ 189.535607][ T8381] netlink: 330 bytes leftover after parsing attributes in process `syz.0.946'. [ 191.505464][ T8424] netlink: 334 bytes leftover after parsing attributes in process `syz.3.962'. [ 192.605123][ T8440] netlink: 330 bytes leftover after parsing attributes in process `syz.0.969'. [ 192.977700][ T8450] netlink: 342 bytes leftover after parsing attributes in process `syz.2.972'. [ 194.350951][ T8480] netlink: 326 bytes leftover after parsing attributes in process `syz.2.984'. [ 194.457156][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.463484][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.566842][ T8483] netlink: 330 bytes leftover after parsing attributes in process `syz.3.985'. [ 194.697301][ T8485] netlink: 334 bytes leftover after parsing attributes in process `syz.2.986'. [ 195.415037][ T8505] netlink: 330 bytes leftover after parsing attributes in process `syz.0.993'. [ 196.250917][ T8526] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1000'. [ 197.142168][ T8550] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1009'. [ 197.566570][ T8562] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1013'. [ 197.602644][ T8564] netlink: 266 bytes leftover after parsing attributes in process `syz.3.1015'. [ 197.838162][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 197.868797][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 198.292622][ T8586] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1025'. [ 200.184206][ T8651] __nla_validate_parse: 2 callbacks suppressed [ 200.184229][ T8651] netlink: 322 bytes leftover after parsing attributes in process `syz.3.1048'. [ 202.171231][ T8694] netlink: 130 bytes leftover after parsing attributes in process `syz.0.1066'. [ 204.210184][ T8765] netlink: 314 bytes leftover after parsing attributes in process `syz.0.1095'. [ 206.083502][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 206.095155][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 206.517490][ T8805] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1108'. [ 208.877771][ T8861] netlink: 'syz.2.1128': attribute type 8 has an invalid length. [ 208.885551][ T8861] netlink: 'syz.2.1128': attribute type 9 has an invalid length. [ 208.919580][ T8861] netlink: 162 bytes leftover after parsing attributes in process `syz.2.1128'. [ 209.399981][ T8882] netlink: 'syz.0.1136': attribute type 39 has an invalid length. [ 209.428068][ T8882] netlink: 'syz.0.1136': attribute type 40 has an invalid length. [ 209.446917][ T8882] netlink: 'syz.0.1136': attribute type 41 has an invalid length. [ 209.464876][ T8883] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1137'. [ 209.475098][ T8882] netlink: 'syz.0.1136': attribute type 44 has an invalid length. [ 209.501699][ T8882] netlink: 'syz.0.1136': attribute type 46 has an invalid length. [ 209.527427][ T8882] netlink: 'syz.0.1136': attribute type 47 has an invalid length. [ 209.536327][ T8882] netlink: 'syz.0.1136': attribute type 48 has an invalid length. [ 209.554308][ T8882] netlink: 'syz.0.1136': attribute type 49 has an invalid length. [ 209.577736][ T8882] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1136'. [ 209.952891][ T8896] ======================================================= [ 209.952891][ T8896] WARNING: The mand mount option has been deprecated and [ 209.952891][ T8896] and is ignored by this kernel. Remove the mand [ 209.952891][ T8896] option from the mount to silence this warning. [ 209.952891][ T8896] ======================================================= [ 210.378907][ T8916] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1149'. [ 210.399526][ T8916] netlink: 114 bytes leftover after parsing attributes in process `syz.1.1149'. [ 214.556119][ T8999] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1181'. [ 214.607310][ T8999] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1181'. [ 214.637554][ T9002] netlink: 322 bytes leftover after parsing attributes in process `syz.0.1182'. [ 214.668510][ T9002] bond0: entered promiscuous mode [ 214.673860][ T9002] bond_slave_0: entered promiscuous mode [ 214.686205][ T9002] bond_slave_1: entered promiscuous mode [ 214.883764][ T9011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1186'. [ 215.289002][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1189'. [ 215.328494][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1189'. [ 216.866733][ T9049] [U] [ 216.869489][ T9049] [U] [ 216.872206][ T9049] [U] [ 216.874935][ T9049] [U] [ 216.878241][ T9049] [U] [ 216.880960][ T9049] [U] [ 216.883661][ T9049] [U] [ 216.886356][ T9049] [U] [ 216.894305][ T9049] [U] [ 216.897025][ T9049] [U] [ 216.899721][ T9049] [U] [ 216.902415][ T9049] [U] [ 216.905618][ T9049] [U] [ 216.908354][ T9049] [U] [ 216.911072][ T9049] [U] [ 216.913792][ T9049] [U] [ 216.921627][ T9049] [U] [ 216.924362][ T9049] [U] [ 216.927092][ T9049] [U] [ 216.929819][ T9049] [U] [ 216.946991][ T9054] [U] [ 217.594524][ T9071] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1209'. [ 217.796561][ T9075] validate_nla: 1 callbacks suppressed [ 217.796582][ T9075] netlink: 'syz.2.1211': attribute type 10 has an invalid length. [ 217.822621][ T9075] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1211'. [ 218.574013][ T9092] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1218'. [ 218.909227][ T9105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1220'. [ 218.933695][ T9105] veth1_macvtap: entered allmulticast mode [ 219.339286][ T9110] hsr_slave_1 (unregistering): left promiscuous mode [ 221.524657][ T9204] __nla_validate_parse: 1 callbacks suppressed [ 221.524677][ T9204] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1255'. [ 221.627877][ T9204] veth1_macvtap: left promiscuous mode [ 221.760910][ T9207] serio: Serial port ptm0 [ 224.580166][ T9268] sock: sock_set_timeout: `syz.1.1276' (pid 9268) tries to set negative timeout [ 225.083374][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1282'. [ 225.109439][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1282'. [ 226.035181][ T9305] block nbd0: not configured, cannot reconfigure [ 227.578174][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1309'. [ 227.605671][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1309'. [ 227.819281][ T9362] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1314'. [ 227.855949][ T9362] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1314'. [ 227.882884][ T9362] netlink: 130 bytes leftover after parsing attributes in process `syz.2.1314'. [ 228.295502][ T9382] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1320'. [ 228.337474][ T9382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.344750][ T9382] IPv6: NLM_F_CREATE should be set when creating new route [ 228.352052][ T9382] IPv6: NLM_F_CREATE should be set when creating new route [ 228.359312][ T9382] IPv6: NLM_F_CREATE should be set when creating new route [ 228.941060][ T9400] mkiss: ax0: crc mode is auto. [ 229.394303][ T9414] ICMPv6: process `syz.0.1333' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 229.431967][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 229.460919][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 230.775413][ T9445] tipc: Started in network mode [ 230.791866][ T9445] tipc: Node identity ffffffff, cluster identity 4711 [ 230.807481][ T9445] tipc: Node number set to 4294967295 [ 231.233455][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 233.307330][ T9514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1371'. [ 233.345735][ T9514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.370026][ T9514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.394353][ T9514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.440614][ T9514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.630041][ T9521] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1374'. [ 233.901036][ T9529] netlink: 222 bytes leftover after parsing attributes in process `syz.1.1378'. [ 233.957769][ T9529] netlink: 222 bytes leftover after parsing attributes in process `syz.1.1378'. [ 234.376783][ T9542] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1382'. [ 234.498142][ T9547] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1385'. [ 238.267395][ T9651] netlink: 'syz.1.1424': attribute type 4 has an invalid length. [ 238.307178][ T9651] netlink: 314 bytes leftover after parsing attributes in process `syz.1.1424'. [ 238.316252][ T9651] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.370096][ T9651] IPv6: NLM_F_REPLACE set, but no existing node found! [ 238.647684][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'. [ 238.695039][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'. [ 243.316694][ T9750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1457'. [ 243.403728][ T9750] hsr_slave_0: left promiscuous mode [ 243.428356][ T9750] hsr_slave_1: left promiscuous mode [ 243.881934][ T9757] ICMPv6: process `syz.0.1460' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 248.532406][ T9835] [U]  [ 248.535254][ T9835] [U] [ 248.537978][ T9835] [U] [ 248.540702][ T9835] [U] [ 248.577460][ T9835] [U] [ 248.580229][ T9835] [U] [ 248.582952][ T9835] [U] [ 248.585680][ T9835] [U] [ 248.614498][ T9835] [U] [ 248.617246][ T9835] [U] [ 248.619979][ T9835] [U] [ 248.622702][ T9835] [U] [ 248.632045][ T9835] [U] [ 248.634792][ T9835] [U] [ 248.637511][ T9835] [U] [ 248.640235][ T9835] [U] [ 248.665728][ T9835] [U] [ 248.668477][ T9835] [U] [ 248.671198][ T9835] [U] [ 248.673917][ T9835] [U] [ 248.687423][ T9835] [U] [ 248.690162][ T9835] [U] [ 248.692885][ T9835] [U] [ 248.695603][ T9835] [U] [ 248.704000][ T9835] [U] [ 248.706735][ T9835] [U] [ 248.709460][ T9835] [U] [ 248.712185][ T9835] [U] [ 248.721407][ T9835] [U] [ 248.724141][ T9835] [U] [ 248.726866][ T9835] [U] [ 248.729594][ T9835] [U] [ 248.741493][ T9835] [U] [ 248.744228][ T9835] [U] [ 248.746952][ T9835] [U] [ 248.749680][ T9835] [U] [ 248.767372][ T9835] [U] [ 248.770113][ T9835] [U] [ 248.772836][ T9835] [U] [ 248.775553][ T9835] [U] [ 248.779274][ T9835] [U] [ 248.782010][ T9835] [U] [ 248.784727][ T9835] [U] [ 248.787446][ T9835] [U] [ 248.801137][ T9835] [U] [ 248.803873][ T9835] [U] [ 248.806593][ T9835] [U] [ 248.809315][ T9835] [U] [ 248.822734][ T9835] [U] [ 248.825467][ T9835] [U] [ 248.828187][ T9835] [U] [ 248.830906][ T9835] [U] [ 248.844286][ T9835] [U] [ 248.847020][ T9835] [U] [ 248.849741][ T9835] [U] [ 248.852461][ T9835] [U] [ 248.864247][ T9835] [U] [ 248.866982][ T9835] [U] [ 248.869701][ T9835] [U] [ 248.872419][ T9835] [U] [ 249.018168][ T9835] [U] [ 249.020920][ T9835] [U] [ 249.023642][ T9835] [U] [ 249.026360][ T9835] [U] [ 249.033758][ T9835] [U] [ 249.036498][ T9835] [U] [ 249.039218][ T9835] [U] [ 249.041946][ T9835] [U] [ 249.079801][ T9835] [U] [ 249.082554][ T9835] [U] [ 249.085271][ T9835] [U] [ 249.087991][ T9835] [U] [ 249.113614][ T9835] [U] [ 249.116362][ T9835] [U] [ 249.119089][ T9835] [U] [ 249.121809][ T9835] [U] [ 249.140260][ T9835] [U] [ 249.143004][ T9835] [U] [ 249.145720][ T9835] [U] [ 249.148438][ T9835] [U] [ 249.167593][ T9835] [U] [ 249.170329][ T9835] [U] [ 249.173048][ T9835] [U] [ 249.175765][ T9835] [U] [ 249.187441][ T9835] [U] [ 249.190180][ T9835] [U] [ 249.192899][ T9835] [U] [ 249.195626][ T9835] [U] [ 249.217597][ T9835] [U] [ 249.220341][ T9835] [U] [ 249.223062][ T9835] [U] [ 249.225782][ T9835] [U] [ 249.246461][ T9835] [U] [ 249.249211][ T9835] [U] [ 249.251944][ T9835] [U] [ 249.254664][ T9835] [U] [ 249.281922][ T9835] [U] [ 249.284667][ T9835] [U] [ 249.287386][ T9835] [U] [ 249.290104][ T9835] [U] [ 249.343824][ T9835] [U] [ 249.346587][ T9835] [U] [ 249.349311][ T9835] [U] [ 249.352037][ T9835] [U] [ 249.401282][ T9835] [U] [ 249.404043][ T9835] [U] [ 249.406769][ T9835] [U] [ 249.409489][ T9835] [U] [ 249.480046][ T9835] [U] [ 249.482804][ T9835] [U] [ 249.485526][ T9835] [U] [ 249.488249][ T9835] [U] [ 249.504656][ T9835] [U] [ 250.088817][ T9877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1509'. [ 251.407567][ T9897] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1508'. [ 251.751323][ T9905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1511'. [ 251.777163][ T9905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.794952][ T9905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.816080][ T9905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.829247][ T9905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.646755][ T9927] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1519'. [ 252.679453][ T9927] lo: entered promiscuous mode [ 252.684275][ T9927] lo: entered allmulticast mode [ 253.136455][ T9948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1525'. [ 253.145836][ T9948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.153871][ T9948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.178382][ T9948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.185814][ T9948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.671563][ T9958] netlink: 'syz.3.1528': attribute type 4 has an invalid length. [ 253.705437][ T9958] netlink: 314 bytes leftover after parsing attributes in process `syz.3.1528'. [ 254.332069][ T9968] [U] [ 254.334833][ T9968] [U] [ 254.337561][ T9968] [U] [ 254.340287][ T9968] [U] [ 254.343278][ T9968] [U] [ 254.346005][ T9968] [U] [ 254.348729][ T9968] [U] [ 254.351450][ T9968] [U] [ 254.354867][ T9968] [U] [ 254.357609][ T9968] [U] [ 254.360332][ T9968] [U] [ 254.363069][ T9968] [U] [ 254.366039][ T9968] [U] [ 254.368758][ T9968] [U] [ 254.371454][ T9968] [U] [ 254.374152][ T9968] [U] [ 254.377531][ T9968] [U] [ 254.380269][ T9968] [U] [ 254.382998][ T9968] [U] [ 254.385740][ T9968] [U] [ 254.388751][ T9968] [U] [ 254.391490][ T9968] [U] [ 254.394213][ T9968] [U] [ 254.396934][ T9968] [U] [ 254.407458][ T9968] [U] [ 254.410205][ T9968] [U] [ 254.412929][ T9968] [U] [ 254.415652][ T9968] [U] [ 254.418931][ T9972] [U] [ 255.890207][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.896625][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.164438][T10023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1552'. [ 256.174778][T10023] hsr_slave_0: left promiscuous mode [ 256.185589][T10023] hsr_slave_1: left promiscuous mode [ 257.471231][T10047] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1560'. [ 257.629681][T10054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1563'. [ 257.641368][T10054] hsr_slave_0: left promiscuous mode [ 257.678760][T10054] hsr_slave_1: left promiscuous mode [ 257.816568][T10041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1559'. [ 257.838394][T10041] lo: entered promiscuous mode [ 257.843214][T10041] lo: entered allmulticast mode [ 257.875706][T10056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1565'. [ 258.042297][T10064] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1568'. [ 258.057563][T10058] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1567'. [ 258.085273][T10065] netlink: 'syz.2.1571': attribute type 5 has an invalid length. [ 258.153298][T10065] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1571'. [ 259.803779][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 260.140237][T10099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1579'. [ 260.197293][T10099] lo: entered promiscuous mode [ 260.202122][T10099] lo: entered allmulticast mode [ 263.442256][T10174] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1606'. [ 263.498671][T10174] netlink: 166 bytes leftover after parsing attributes in process `syz.0.1606'. [ 263.684809][T10180] mkiss: ax0: crc mode is auto. [ 264.068689][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1616'. [ 264.378251][T10206] sp0: Synchronizing with TNC [ 264.621654][T10212] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1621'. [ 264.668879][T10212] netlink: 142 bytes leftover after parsing attributes in process `syz.1.1621'. [ 265.084687][T10230] netlink: 'syz.3.1627': attribute type 33 has an invalid length. [ 265.092847][T10230] netlink: 322 bytes leftover after parsing attributes in process `syz.3.1627'. [ 267.568496][T10310] netlink: 322 bytes leftover after parsing attributes in process `syz.0.1666'. [ 267.589402][T10310] vcan0: entered promiscuous mode [ 267.936514][T10327] sp0: Synchronizing with TNC [ 268.142813][T10338] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1668'. [ 268.293360][T10344] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1671'. [ 268.910775][T10358] netlink: 'syz.0.1677': attribute type 33 has an invalid length. [ 268.926453][T10358] netlink: 322 bytes leftover after parsing attributes in process `syz.0.1677'. [ 270.681689][T10433] netlink: 'syz.2.1705': attribute type 27 has an invalid length. [ 270.698376][T10433] netlink: 'syz.2.1705': attribute type 28 has an invalid length. [ 270.714732][T10433] netlink: 'syz.2.1705': attribute type 29 has an invalid length. [ 270.724547][T10433] netlink: 'syz.2.1705': attribute type 30 has an invalid length. [ 270.743268][T10433] netlink: 'syz.2.1705': attribute type 31 has an invalid length. [ 270.768732][T10433] netlink: 'syz.2.1705': attribute type 32 has an invalid length. [ 270.776582][T10433] netlink: 'syz.2.1705': attribute type 33 has an invalid length. [ 270.795010][T10433] netlink: 'syz.2.1705': attribute type 35 has an invalid length. [ 270.827259][T10433] netlink: 'syz.2.1705': attribute type 37 has an invalid length. [ 270.857876][T10433] netlink: 'syz.2.1705': attribute type 39 has an invalid length. [ 270.877178][T10433] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1705'. [ 271.245296][T10445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1710'. [ 271.498673][T10454] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 272.031273][T10475] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1720'. [ 273.203677][T10497] mkiss: ax0: crc mode is auto. [ 273.670816][T10514] sctp: [Deprecated]: syz.2.1728 (pid 10514) Use of int in maxseg socket option. [ 273.670816][T10514] Use struct sctp_assoc_value instead [ 275.822960][T10556] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1747'. [ 276.010551][T10567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1752'. [ 276.045635][T10567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1752'. [ 276.206922][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1755'. [ 276.228760][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1755'. [ 277.086006][T10604] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1769'. [ 277.104816][T10604] netlink: 274 bytes leftover after parsing attributes in process `syz.1.1769'. [ 277.458255][T10617] sctp: [Deprecated]: syz.1.1771 (pid 10617) Use of int in maxseg socket option. [ 277.458255][T10617] Use struct sctp_assoc_value instead [ 279.625185][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1794'. [ 279.738396][T10667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1788'. [ 280.530771][T10696] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1809'. [ 280.618232][T10700] HfR: entered promiscuous mode [ 281.876861][T10731] Process accounting resumed [ 282.049249][T10740] __nla_validate_parse: 3 callbacks suppressed [ 282.049269][T10740] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1814'. [ 282.093159][T10740] netlink: 274 bytes leftover after parsing attributes in process `syz.3.1814'. [ 282.244060][T10743] netlink: 138 bytes leftover after parsing attributes in process `syz.2.1818'. [ 283.174189][T10768] HfR: entered promiscuous mode [ 283.504501][T10779] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1835'. [ 283.537245][T10779] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1835'. [ 283.565968][T10779] netlink: 134 bytes leftover after parsing attributes in process `syz.3.1835'. [ 284.944059][T10833] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1854'. [ 284.958928][T10833] net veth1_virt_wifi ›: renamed from virt_wifi0 [ 285.040953][T10838] HfR: entered promiscuous mode [ 285.386149][T10847] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1861'. [ 285.614213][T10861] netlink: 266 bytes leftover after parsing attributes in process `syz.0.1865'. [ 285.801725][T10871] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1867'. [ 288.530214][T10956] validate_nla: 1 callbacks suppressed [ 288.530235][T10956] netlink: 'syz.2.1901': attribute type 4 has an invalid length. [ 288.578584][T10956] __nla_validate_parse: 3 callbacks suppressed [ 288.578604][T10956] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1901'. [ 288.623454][T10959] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1902'. [ 288.638073][T10956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.645350][T10956] IPv6: NLM_F_CREATE should be set when creating new route [ 289.121352][T10973] netlink: 'syz.0.1916': attribute type 46 has an invalid length. [ 289.264749][T10977] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1909'. [ 289.378573][T10982] netlink: 306 bytes leftover after parsing attributes in process `syz.0.1911'. [ 289.397278][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1911'. [ 289.406496][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1911'. [ 289.480120][T10986] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1913'. [ 291.003483][T11015] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1923'. [ 291.490325][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1933'. [ 291.520415][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1933'. [ 292.673807][T11061] : renamed from bond_slave_1 (while UP) [ 293.395105][ T29] audit: type=1800 audit(1734389144.405:4): pid=11081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1951" name="dbroot" dev="configfs" ino=26817 res=0 errno=0 [ 293.692483][T11094] __nla_validate_parse: 3 callbacks suppressed [ 293.692505][T11094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1958'. [ 293.717525][T11094] ipvlan0: entered allmulticast mode [ 293.722989][T11094] veth0_vlan: entered allmulticast mode [ 294.448484][T11109] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1961'. [ 294.580422][T11112] netlink: 'syz.0.1964': attribute type 10 has an invalid length. [ 294.599455][T11112] netlink: 'syz.0.1964': attribute type 13 has an invalid length. [ 295.003162][T11127] netlink: 158 bytes leftover after parsing attributes in process `syz.2.1970'. [ 295.020828][T11125] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 295.553657][T11148] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1976'. [ 295.589291][T11150] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1978'. [ 295.754575][T11159] netlink: 'syz.2.1982': attribute type 10 has an invalid length. [ 295.762690][T11159] netlink: 230 bytes leftover after parsing attributes in process `syz.2.1982'. [ 296.188012][T11171] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1987'. [ 296.207868][T11171] : renamed from bond_slave_1 (while UP) [ 296.432492][T11183] openvswitch: netlink: IP tunnel dst address not specified [ 296.488876][T11183] openvswitch: netlink: IP tunnel dst address not specified [ 296.536329][T11188] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1993'. [ 296.678588][T11194] netlink: 'syz.3.1995': attribute type 64 has an invalid length. [ 296.707300][T11194] netlink: 74 bytes leftover after parsing attributes in process `syz.3.1995'. [ 299.320687][T11251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2016'. [ 299.342570][T11251] ipvlan0: entered allmulticast mode [ 299.350225][T11251] veth0_vlan: entered allmulticast mode [ 299.362901][T11253] netlink: 'syz.3.2017': attribute type 4 has an invalid length. [ 299.378638][T11253] netlink: 314 bytes leftover after parsing attributes in process `syz.3.2017'. [ 299.594513][T11256] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2020'. [ 299.751977][T11264] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2022'. [ 299.777682][T11264] ›: renamed from veth0_vlan (while UP) [ 299.784599][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2018'. [ 299.877804][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2018'. [ 300.241912][T11278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2026'. [ 301.896175][T11299] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2034'. [ 303.793949][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2060'. [ 303.838363][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2060'. [ 304.692544][T11391] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2068'. [ 304.955978][T11404] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2073'. [ 305.134372][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 305.166549][T11414] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2077'. [ 305.187207][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 305.390504][T11418] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2079'. [ 307.389344][T11494] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2105'. [ 307.409274][T11494] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2105'. [ 307.420971][T11494] netlink: 290 bytes leftover after parsing attributes in process `syz.0.2105'. [ 307.547975][T11499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2108'. [ 307.587289][T11499] bond0: (slave bond_slave_0): Releasing backup interface [ 307.945063][T11510] nbd: illegal input index 50331648 [ 309.478802][T11544] mkiss: ax0: crc mode is auto. [ 310.014822][T11567] netlink: 266 bytes leftover after parsing attributes in process `syz.3.2133'. [ 310.083587][T11569] nbd: illegal input index 50331648 [ 310.389098][T11574] mkiss: ax0: crc mode is auto. [ 310.737389][T11587] sp0: Synchronizing with TNC [ 312.046816][T11593] kexec: Could not allocate control_code_buffer [ 312.116585][T11604] nbd: illegal input index 50331648 [ 312.836786][T11637] netlink: 'syz.1.2160': attribute type 2 has an invalid length. [ 312.847670][T11637] netlink: 'syz.1.2160': attribute type 2 has an invalid length. [ 317.333444][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.130680][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 323.144180][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 323.152576][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 323.169009][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 323.180347][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 323.188798][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 323.375214][T11661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2168'. [ 323.446973][T11661] bond0: (slave bond_slave_0): Releasing backup interface [ 323.502477][T11670] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2172'. [ 323.524463][T11670] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2172'. [ 323.609429][T11651] chnl_net:caif_netlink_parms(): no params data found [ 323.918607][T11651] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.925803][T11651] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.933335][T11651] bridge_slave_0: entered allmulticast mode [ 323.940413][T11651] bridge_slave_0: entered promiscuous mode [ 323.948463][T11651] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.955632][T11651] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.967582][T11651] bridge_slave_1: entered allmulticast mode [ 323.974720][T11651] bridge_slave_1: entered promiscuous mode [ 324.040441][T11651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.054566][T11651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.195339][T11651] team0: Port device team_slave_0 added [ 324.203334][T11651] team0: Port device team_slave_1 added [ 324.289143][T11651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.296135][T11651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.322294][T11651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.334903][T11651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.341911][T11651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.367867][T11651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.498641][T11651] hsr_slave_0: entered promiscuous mode [ 324.510031][T11651] hsr_slave_1: entered promiscuous mode [ 324.518615][T11651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.532143][T11651] Cannot create hsr debugfs directory [ 324.859623][T11651] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 324.882443][T11651] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 324.930109][T11651] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 324.949640][T11651] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 325.079744][T11651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.119522][T11651] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.148480][ T3637] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.155593][ T3637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.193068][ T3637] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.200242][ T3637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.247282][ T5838] Bluetooth: hci4: command tx timeout [ 325.522913][T11651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.796266][T11726] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2189'. [ 326.014113][T11651] veth0_vlan: entered promiscuous mode [ 326.039765][T11651] veth1_vlan: entered promiscuous mode [ 326.085097][T11651] veth0_macvtap: entered promiscuous mode [ 326.124981][T11651] veth1_macvtap: entered promiscuous mode [ 326.158940][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.181672][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.204327][T11651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.235220][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.258176][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.279849][T11651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.305904][T11651] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.327161][T11651] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.345892][T11651] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.360511][T11651] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.517208][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.533108][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.586284][ T3550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.594410][ T3550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.698631][T11743] bridge0: port 3(vlan1) entered blocking state [ 326.726413][T11743] bridge0: port 3(vlan1) entered disabled state [ 326.753024][T11743] vlan1: entered allmulticast mode [ 326.769485][T11743] vlan1: entered promiscuous mode [ 327.008579][T11745] mkiss: ax0: crc mode is auto. [ 327.331055][ T5838] Bluetooth: hci4: command tx timeout [ 327.728314][T11769] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2204'. [ 327.992117][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2208'. [ 328.172881][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2208'. [ 328.455284][T11792] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2212'. [ 328.712905][T11798] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2213'. [ 328.768686][T11798] netlink: 274 bytes leftover after parsing attributes in process `syz.2.2213'. [ 329.137585][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2219'. [ 329.410350][ T5838] Bluetooth: hci4: command tx timeout [ 329.819575][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2227'. [ 330.920717][T11859] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2233'. [ 331.496642][ T5838] Bluetooth: hci4: command tx timeout [ 334.199887][T11936] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2259'. [ 334.236823][T11936] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2259'. [ 334.622302][T11950] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2264'. [ 335.563357][T11976] netlink: 246 bytes leftover after parsing attributes in process `syz.3.2272'. [ 335.933565][T11980] netlink: 222 bytes leftover after parsing attributes in process `syz.3.2274'. [ 335.964918][T11980] netlink: 222 bytes leftover after parsing attributes in process `syz.3.2274'. [ 337.843004][T12009] Process accounting resumed [ 338.168535][T12018] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2289'. [ 339.820988][T12041] could not allocate digest TFM handle [ 348.936011][T12235] netlink: 'syz.1.2371': attribute type 46 has an invalid length. [ 349.965189][T12254] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2377'. [ 350.023331][T12254] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2377'. [ 351.751991][T12268] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2382'. [ 351.830521][T12268] netlink: 274 bytes leftover after parsing attributes in process `syz.3.2382'. [ 356.723373][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.742467][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.751457][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.764614][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.775105][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 356.782609][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.189853][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.459997][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.721015][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.949731][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.024559][T12324] chnl_net:caif_netlink_parms(): no params data found [ 358.151942][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2407'. [ 358.192347][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2407'. [ 358.561896][T12324] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.569265][T12324] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.587515][T12324] bridge_slave_0: entered allmulticast mode [ 358.594537][T12324] bridge_slave_0: entered promiscuous mode [ 358.614566][T12324] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.621818][T12324] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.630387][T12324] bridge_slave_1: entered allmulticast mode [ 358.659129][T12324] bridge_slave_1: entered promiscuous mode [ 358.718645][T12354] netlink: 322 bytes leftover after parsing attributes in process `syz.1.2408'. [ 358.847298][ T5838] Bluetooth: hci4: command tx timeout [ 359.144249][T12324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.174368][T12354] bond0: entered promiscuous mode [ 359.185314][T12354] bond_slave_1: entered promiscuous mode [ 359.189435][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2410'. [ 359.212470][T12354] bond0: entered allmulticast mode [ 359.232204][T12354] bond_slave_1: entered allmulticast mode [ 359.319870][T12324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.611091][T12324] team0: Port device team_slave_0 added [ 359.641493][ T11] bridge_slave_1: left allmulticast mode [ 359.655018][ T11] bridge_slave_1: left promiscuous mode [ 359.671856][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.723405][ T11] bridge_slave_0: left allmulticast mode [ 359.729291][ T11] bridge_slave_0: left promiscuous mode [ 359.741219][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.844212][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.877785][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.899311][ T11] bond0 (unregistering): Released all slaves [ 360.927981][ T5838] Bluetooth: hci4: command tx timeout [ 360.999465][T12324] team0: Port device team_slave_1 added [ 361.507033][T12324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.527464][T12324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.600609][T12324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.629283][T12324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.636245][T12324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.697160][T12324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.139434][T12324] hsr_slave_0: entered promiscuous mode [ 362.169816][T12324] hsr_slave_1: entered promiscuous mode [ 362.201021][T12324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.217235][T12324] Cannot create hsr debugfs directory [ 362.446243][ T11] hsr_slave_0: left promiscuous mode [ 362.484305][ T11] hsr_slave_1: left promiscuous mode [ 362.609689][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.637242][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.701564][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.738206][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.842321][ T11] veth1_macvtap: left promiscuous mode [ 362.867698][ T11] veth0_macvtap: left promiscuous mode [ 362.873326][ T11] veth1_vlan: left promiscuous mode [ 362.887737][ T11] veth0_vlan: left promiscuous mode [ 363.007365][ T5838] Bluetooth: hci4: command tx timeout [ 363.539496][ T11] team0 (unregistering): Port device team_slave_1 removed [ 363.573853][ T11] team0 (unregistering): Port device team_slave_0 removed [ 364.166718][T12324] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 364.189909][T12324] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 364.230649][T12324] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 364.304518][T12324] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 364.520390][T12324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.593371][T12324] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.629534][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.637627][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.678632][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.685757][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.087351][ T5838] Bluetooth: hci4: command tx timeout [ 365.114496][T12324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.510307][T12453] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 365.633764][T12324] veth0_vlan: entered promiscuous mode [ 365.662055][T12324] veth1_vlan: entered promiscuous mode [ 365.702565][T12324] veth0_macvtap: entered promiscuous mode [ 365.729926][T12324] veth1_macvtap: entered promiscuous mode [ 365.764219][T12324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.799576][T12324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.831635][T12324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.915445][T12324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.940295][T12324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.988326][T12324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.069526][T12474] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2428'. [ 366.114398][T12324] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.123530][T12324] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.146192][T12324] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.168436][T12324] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.384921][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.438409][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.504441][ T3637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.547183][ T3637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.282799][T12503] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2431'. [ 368.202495][T12504] syz.3.2433: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 368.229234][T12504] CPU: 1 UID: 0 PID: 12504 Comm: syz.3.2433 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 368.240051][T12504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 368.250137][T12504] Call Trace: [ 368.253438][T12504] [ 368.256391][T12504] dump_stack_lvl+0x16c/0x1f0 [ 368.261105][T12504] warn_alloc+0x24d/0x3a0 [ 368.265483][T12504] ? __pfx_warn_alloc+0x10/0x10 [ 368.270372][T12504] ? __pfx_mark_lock+0x10/0x10 [ 368.275185][T12504] ? lock_acquire.part.0+0x11b/0x380 [ 368.280514][T12504] __vmalloc_node_range_noprof+0x10df/0x1530 [ 368.286535][T12504] ? rcu_is_watching+0x12/0xc0 [ 368.291337][T12504] ? trace_contention_end+0xee/0x140 [ 368.296664][T12504] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 368.301996][T12504] ? dvb_demux_do_ioctl+0x496/0x1340 [ 368.307327][T12504] ? __pfx___mutex_lock+0x10/0x10 [ 368.312390][T12504] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 368.318764][T12504] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 368.324698][T12504] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 368.330030][T12504] vmalloc_noprof+0x6b/0x90 [ 368.334572][T12504] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 368.339896][T12504] dvb_demux_do_ioctl+0x54d/0x1340 [ 368.345057][T12504] dvb_usercopy+0x165/0x320 [ 368.349599][T12504] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 368.355184][T12504] ? __pfx_dvb_usercopy+0x10/0x10 [ 368.360241][T12504] ? __pfx_lock_release+0x10/0x10 [ 368.365314][T12504] ? __fget_files+0x206/0x3a0 [ 368.370034][T12504] dvb_demux_ioctl+0x29/0x40 [ 368.374662][T12504] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 368.379992][T12504] __x64_sys_ioctl+0x190/0x200 [ 368.384807][T12504] do_syscall_64+0xcd/0x250 [ 368.389351][T12504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.395285][T12504] RIP: 0033:0x7f7fb1b85d19 [ 368.399737][T12504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.419376][T12504] RSP: 002b:00007f7fb2a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.427823][T12504] RAX: ffffffffffffffda RBX: 00007f7fb1d75fa0 RCX: 00007f7fb1b85d19 [ 368.435820][T12504] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 368.443813][T12504] RBP: 00007f7fb1c01a20 R08: 0000000000000000 R09: 0000000000000000 [ 368.451790][T12504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.459764][T12504] R13: 0000000000000000 R14: 00007f7fb1d75fa0 R15: 00007fffccf38bc8 [ 368.467751][T12504] [ 368.637189][T12504] Mem-Info: [ 368.654904][T12504] active_anon:17231 inactive_anon:0 isolated_anon:0 [ 368.654904][T12504] active_file:8138 inactive_file:49710 isolated_file:0 [ 368.654904][T12504] unevictable:768 dirty:277 writeback:0 [ 368.654904][T12504] slab_reclaimable:10479 slab_unreclaimable:95507 [ 368.654904][T12504] mapped:29294 shmem:2487 pagetables:842 [ 368.654904][T12504] sec_pagetables:0 bounce:0 [ 368.654904][T12504] kernel_misc_reclaimable:0 [ 368.654904][T12504] free:1311710 free_pcp:549 free_cma:0 [ 368.779431][T12504] Node 0 active_anon:75724kB inactive_anon:0kB active_file:32552kB inactive_file:198764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117076kB dirty:1204kB writeback:0kB shmem:8412kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11028kB pagetables:3368kB sec_pagetables:0kB all_unreclaimable? no [ 368.927618][T12504] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 368.986191][T12504] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.115258][T12504] lowmem_reserve[]: 0 2465 2466 0 0 [ 369.135587][T12504] Node 0 DMA32 free:1305972kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:73420kB inactive_anon:0kB active_file:32552kB inactive_file:197928kB unevictable:1536kB writepending:1320kB present:3129332kB managed:2551332kB mlocked:0kB bounce:0kB free_pcp:10848kB local_pcp:824kB free_cma:0kB [ 369.237317][T12504] lowmem_reserve[]: 0 0 0 0 0 [ 369.243279][T12504] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.284923][T12504] lowmem_reserve[]: 0 0 0 0 0 [ 369.299730][T12504] Node 1 Normal free:3910448kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.344376][T12504] lowmem_reserve[]: 0 0 0 0 0 [ 369.377233][T12504] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 369.425791][T12504] Node 0 DMA32: 917*4kB (UME) 1796*8kB (UME) 1660*16kB (UME) 1581*32kB (UME) 1104*64kB (UME) 354*128kB (UME) 153*256kB (ME) 118*512kB (UME) 69*1024kB (UME) 31*2048kB (UM) 213*4096kB (UM) = 1317332kB [ 369.488637][T12504] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 369.549880][T12504] Node 1 Normal: 216*4kB (UE) 58*8kB (UME) 44*16kB (UME) 220*32kB (UME) 89*64kB (UME) 25*128kB (UME) 15*256kB (UME) 11*512kB (UM) 4*1024kB (UM) 4*2048kB (UME) 945*4096kB (UM) = 3910448kB [ 369.597208][T12504] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.627242][T12504] Node 0 hugepages_total=3 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 369.647330][T12504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.659300][T12504] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 369.668960][T12504] 60365 total pagecache pages [ 369.673783][T12504] 28 pages in swap cache [ 369.680286][T12504] Free swap = 124572kB [ 369.684593][T12504] Total swap = 124996kB [ 369.702901][T12504] 2097051 pages RAM [ 369.713006][T12504] 0 pages HighMem/MovableOnly [ 369.723123][T12504] 427368 pages reserved [ 369.730217][T12504] 0 pages cma reserved [ 370.148011][T12594] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2453'. [ 373.301723][T12672] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 375.853559][T12744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2496'. [ 375.977825][T12744] team0: Port device team_slave_0 removed [ 376.034052][T12748] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2506'. [ 377.382148][T12784] netlink: 'syz.3.2509': attribute type 33 has an invalid length. [ 377.426786][T12784] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2509'. [ 377.431929][T12787] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2510'. [ 377.456599][T12789] netlink: 'syz.3.2509': attribute type 33 has an invalid length. [ 377.498415][T12789] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2509'. [ 377.544701][T12787] veth1_macvtap: left promiscuous mode [ 377.568260][T12787] macsec0: entered promiscuous mode [ 378.111600][T12816] netlink: 'syz.5.2514': attribute type 6 has an invalid length. [ 378.121040][T12816] netlink: 306 bytes leftover after parsing attributes in process `syz.5.2514'. [ 378.476914][T12815] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2515'. [ 378.777675][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.191043][T12876] [U] [ 381.193822][T12876] [U] [ 381.196543][T12876] [U] [ 381.199279][T12876] [U] [ 381.339939][T12877] [U] [ 381.494454][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2531'. [ 381.512794][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2531'. [ 381.822056][T12883] ima: policy update failed [ 381.826826][ T29] audit: type=1802 audit(4294967299.840:5): pid=12883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2533" res=0 errno=0 [ 382.474884][T12917] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2539'. [ 382.491290][T12917] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2539'. [ 382.859162][T12927] netlink: 'syz.2.2541': attribute type 29 has an invalid length. [ 382.887223][T12927] netlink: 'syz.2.2541': attribute type 30 has an invalid length. [ 382.895098][T12927] netlink: 'syz.2.2541': attribute type 31 has an invalid length. [ 382.943604][T12927] netlink: 'syz.2.2541': attribute type 32 has an invalid length. [ 382.967398][T12927] netlink: 'syz.2.2541': attribute type 33 has an invalid length. [ 382.997206][T12927] netlink: 'syz.2.2541': attribute type 35 has an invalid length. [ 383.027185][T12927] netlink: 'syz.2.2541': attribute type 37 has an invalid length. [ 383.049181][T12927] netlink: 18 bytes leftover after parsing attributes in process `syz.2.2541'. [ 385.374008][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2554'. [ 385.432567][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2554'. [ 387.041384][ T5837] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 387.300301][T13069] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.309067][T13069] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.316921][T13069] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 387.325290][T13069] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 387.335428][T13069] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 387.343673][T13069] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 387.780634][T13068] chnl_net:caif_netlink_parms(): no params data found [ 388.118705][T13068] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.141621][T13068] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.177331][T13068] bridge_slave_0: entered allmulticast mode [ 388.186390][T13068] bridge_slave_0: entered promiscuous mode [ 388.217255][T13068] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.226454][T13068] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.243839][T13068] bridge_slave_1: entered allmulticast mode [ 388.258941][T13068] bridge_slave_1: entered promiscuous mode [ 388.308356][T13068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.332116][T13068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.389267][T13068] team0: Port device team_slave_0 added [ 388.403836][T13068] team0: Port device team_slave_1 added [ 388.503516][T13068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.527164][T13068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.587439][T13068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.619109][T13068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.626075][T13068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.707232][T13068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.898783][T13068] hsr_slave_0: entered promiscuous mode [ 388.936054][T13068] hsr_slave_1: entered promiscuous mode [ 388.987294][T13068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.994883][T13068] Cannot create hsr debugfs directory [ 389.407251][T13069] Bluetooth: hci3: command tx timeout [ 389.919763][T13068] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 389.996485][T13068] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 390.026420][T13068] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 390.071658][T13068] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 390.315752][T13068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.352365][T13068] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.402623][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.409776][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.440299][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.447458][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.503803][T13068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.808439][T13068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.391737][T13068] veth0_vlan: entered promiscuous mode [ 391.415072][T13068] veth1_vlan: entered promiscuous mode [ 391.487304][T13069] Bluetooth: hci3: command tx timeout [ 391.524547][T13068] veth0_macvtap: entered promiscuous mode [ 391.565289][T13068] veth1_macvtap: entered promiscuous mode [ 391.613507][T13068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.634265][T13068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.657206][T13068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.687188][T13068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.702085][T13068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.725633][T13128] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2578'. [ 391.753661][T13068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.780150][T13068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.798347][T13068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.818799][T13068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.839255][T13068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.861774][T13068] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.894515][T13068] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.911277][T13068] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.927679][T13068] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.207159][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.218634][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.268586][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.278347][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.635452][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2585'. [ 392.647941][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2585'. [ 393.567259][T13069] Bluetooth: hci3: command tx timeout [ 395.647420][T13069] Bluetooth: hci3: command tx timeout [ 396.797681][T13233] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 396.804685][T13233] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 396.824613][T13233] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 396.845402][T13233] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 396.854809][T13233] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 396.987497][T13233] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 397.058740][T13233] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 397.117290][T13233] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 397.142267][T13233] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 398.114581][T13258] blktrace: Concurrent blktraces are not allowed on sg0 [ 398.243984][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2619'. [ 398.262480][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2619'. [ 398.414750][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2622'. [ 398.433702][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2622'. [ 398.608025][T13275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2625'. [ 398.848037][T13069] Bluetooth: hci4: command 0x0c1a tx timeout [ 398.854128][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 398.860408][T13069] Bluetooth: hci1: command 0x0c1a tx timeout [ 398.866837][T13069] Bluetooth: hci0: command 0x0c1a tx timeout [ 399.092060][T13069] Bluetooth: hci3: command 0x0c1a tx timeout [ 399.618834][T13296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2631'. [ 399.838837][T13296] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 400.831530][ T29] audit: type=1806 audit(4294967318.830:6): xattr="." res=0 [ 400.927289][T13069] Bluetooth: hci4: command 0x0c1a tx timeout [ 400.952576][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2637'. [ 401.045142][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2637'. [ 401.116852][T13320] sp0: Synchronizing with TNC [ 401.177289][T13069] Bluetooth: hci3: command 0x0c1a tx timeout [ 401.502994][T13334] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2644'. [ 401.587679][T13334] netlink: 274 bytes leftover after parsing attributes in process `syz.6.2644'. [ 401.837866][T13338] [U]  [ 402.909286][T13362] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.966720][T13362] bridge_slave_0 (unregistering): left allmulticast mode [ 402.987426][T13362] bridge_slave_0 (unregistering): left promiscuous mode [ 402.994470][T13362] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.007539][T13069] Bluetooth: hci4: command 0x0c1a tx timeout [ 403.249272][T13069] Bluetooth: hci3: command 0x0c1a tx timeout [ 405.938944][T13391] __nla_validate_parse: 1 callbacks suppressed [ 405.938967][T13391] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2662'. [ 409.604722][T13454] Invalid ELF header magic: != ELF [ 411.358313][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2695'. [ 411.416808][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2695'. [ 412.585765][T13523] Invalid ELF header magic: != ELF [ 414.157794][T13544] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2711'. [ 414.751074][T13556] nbd: must specify at least one socket [ 415.181649][T13563] openvswitch: HfR: Dropping previously announced user features [ 415.233409][T13563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2718'. [ 415.269900][T13563] HfR: left promiscuous mode [ 415.404373][T13566] sctp: [Deprecated]: syz.5.2719 (pid 13566) Use of int in max_burst socket option deprecated. [ 415.404373][T13566] Use struct sctp_assoc_value instead [ 415.766052][T13568] netlink: 'syz.6.2720': attribute type 6 has an invalid length. [ 415.807359][T13568] netlink: 'syz.6.2720': attribute type 7 has an invalid length. [ 415.874178][T13568] netlink: 'syz.6.2720': attribute type 8 has an invalid length. [ 415.885487][T13568] netlink: 'syz.6.2720': attribute type 9 has an invalid length. [ 415.904531][T13568] netlink: 226 bytes leftover after parsing attributes in process `syz.6.2720'. [ 416.688804][T13593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2727'. [ 418.405120][T13602] kexec: Could not allocate control_code_buffer [ 421.328850][T13638] mtrr: base(0x100000) is not aligned on a size(0x2e001800000) boundary [ 422.504857][T13649] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2746'. [ 425.148802][T13696] delete_channel: no stack [ 425.356629][T13702] nbd: must specify at least one socket [ 426.757231][T13729] vcan0: entered allmulticast mode [ 428.145087][T13755] erspan0: entered allmulticast mode [ 428.247372][T13763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2780'. [ 430.258768][T13798] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2791'. [ 431.835745][T13830] lo: entered allmulticast mode [ 431.850241][T13830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2800'. [ 432.205252][T13829] lo: left allmulticast mode [ 433.850584][T13855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2806'. [ 433.928589][T13855] veth0_macvtap: entered promiscuous mode [ 435.566672][T13885] delete_channel: no stack [ 435.720966][T13887] HSR: entered promiscuous mode [ 436.209545][T13889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2817'. [ 436.467512][T13889] geneve1: entered allmulticast mode [ 438.314820][T13913] Dead loop on virtual device ip6_vti0, fix it urgently! [ 438.619667][T13922] Process accounting resumed [ 439.151598][T13929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2829'. [ 439.169755][T13929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2829'. [ 439.778863][T13943] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2833'. [ 440.055663][T13950] netlink: 252 bytes leftover after parsing attributes in process `syz.5.2836'. [ 440.070535][T13950] netlink: 252 bytes leftover after parsing attributes in process `syz.5.2836'. [ 440.209200][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.976574][T13965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2840'. [ 441.012464][T13965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2840'. [ 441.259474][T13971] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2841'. [ 444.268939][T14010] lo: entered allmulticast mode [ 444.289093][T14010] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2853'. [ 444.542112][T14008] lo: left allmulticast mode [ 445.193982][T14021] Process accounting resumed [ 447.061152][T14041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2860'. [ 447.555190][T14051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2864'. [ 447.914739][T14057] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2874'. [ 449.485859][T14093] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2878'. [ 449.533024][T14091] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2878'. [ 449.610339][T14091] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2878'. [ 449.717655][T14091] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2878'. [ 450.631775][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.220453][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2884'. [ 452.270304][T14138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2896'. [ 452.293164][T14138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2896'. [ 456.274547][T14205] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2914'. [ 456.678350][T14220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 456.711901][T14220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 460.799725][T14286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2941'. [ 465.884029][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2957'. [ 466.195802][T14354] Process accounting resumed [ 466.957361][T14367] netlink: 326 bytes leftover after parsing attributes in process `syz.5.2965'. [ 468.206681][T14384] block nbd0: not configured, cannot reconfigure [ 468.633850][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2979'. [ 468.676068][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2979'. [ 470.032108][T14443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2993'. [ 470.162218][T14446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2994'. [ 470.260381][T14450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2995'. [ 470.293476][T14450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2995'. [ 470.463982][T14454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2997'. [ 470.485628][T14454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2997'. [ 471.022980][T14466] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 471.044451][T14466] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 471.535293][T14478] HSR: entered promiscuous mode [ 471.682928][T14482] delete_channel: no stack [ 474.757644][T14523] netlink: 252 bytes leftover after parsing attributes in process `syz.6.3020'. [ 474.778050][T14523] netlink: 252 bytes leftover after parsing attributes in process `syz.6.3020'. [ 475.483793][T14547] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3027'. [ 477.444796][T14577] kernel read not supported for file /#)-\&[} (pid: 14577 comm: syz.3.3037) [ 477.502637][ T29] audit: type=1800 audit(4294967332.060:7): pid=14577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3037" name="#)-\&[}" dev="mqueue" ino=42103 res=0 errno=0 [ 478.601024][T14594] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3040'. [ 482.369832][T14631] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3049'. [ 486.011465][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3066'. [ 486.091752][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3066'. [ 487.415617][T14702] kernel read not supported for file /#)-\&[} (pid: 14702 comm: syz.2.3069) [ 487.543571][ T29] audit: type=1800 audit(4294967342.100:8): pid=14702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3069" name="#)-\&[}" dev="mqueue" ino=43021 res=0 errno=0 [ 489.419775][T14746] Dead loop on virtual device ip6_vti0, fix it urgently! [ 489.427314][T14746] Dead loop on virtual device ip6_vti0, fix it urgently! [ 489.469914][T14746] Dead loop on virtual device ip6_vti0, fix it urgently! [ 489.487789][T14746] Dead loop on virtual device ip6_vti0, fix it urgently! [ 489.505768][T14746] Dead loop on virtual device ip6_vti0, fix it urgently! [ 489.515205][T14746] Dead loop on virtual device ip6_vti0, fix it urgently! [ 491.068100][T14763] kernel read not supported for file /#)-\&[} (pid: 14763 comm: syz.6.3087) [ 491.077005][ T29] audit: type=1800 audit(4294967345.630:9): pid=14763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3087" name="#)-\&[}" dev="mqueue" ino=43170 res=0 errno=0 [ 491.425326][T11501] svc: failed to register nfsdv3 RPC service (errno 512). [ 491.466003][T11501] svc: failed to register nfsaclv3 RPC service (errno 512). [ 493.830028][T14789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3095'. [ 494.150389][T14780] netlink: 334 bytes leftover after parsing attributes in process `syz.6.3092'. [ 494.434016][T14802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3100'. [ 494.565784][T14805] binder: 14803:14805 ioctl 40044900 800000000000003 returned -22 [ 494.831741][T14802] bond0 (unregistering): (slave ): Releasing backup interface [ 494.848117][T14802] bond0 (unregistering): Released all slaves [ 496.075896][T14821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3103'. [ 496.235142][T14825] netlink: 252 bytes leftover after parsing attributes in process `syz.6.3105'. [ 496.265502][T14825] unsupported nla_type 14385 [ 496.280612][T14825] netlink: 252 bytes leftover after parsing attributes in process `syz.6.3105'. [ 497.034124][T14829] netlink: zone id is out of range [ 497.120063][T14829] netlink: set zone limit has 8 unknown bytes [ 498.405764][T14855] kernel read not supported for file /#)-\&[} (pid: 14855 comm: syz.5.3113) [ 498.467807][ T29] audit: type=1800 audit(4294967353.000:10): pid=14855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3113" name="#)-\&[}" dev="mqueue" ino=43356 res=0 errno=0 [ 498.749152][T14854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3115'. [ 500.424251][T14882] Process accounting resumed [ 501.655394][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.880512][T14929] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3136'. [ 506.425286][T14974] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3150'. [ 508.234361][T15010] netlink: 'syz.5.3166': attribute type 2 has an invalid length. [ 508.260395][T15010] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3166'. [ 508.301701][T15010] netlink: 'syz.5.3166': attribute type 2 has an invalid length. [ 508.384399][T15017] sctp: [Deprecated]: syz.3.3159 (pid 15017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 508.384399][T15017] Use struct sctp_sack_info instead [ 508.512965][T15017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3159'. [ 508.617995][T15017] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 508.895013][T15027] can0: slcan on ptm0. [ 508.967981][T15025] can0 (unregistered): slcan off ptm0. [ 509.200077][T15033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3167'. [ 509.241772][T15033] HfR: left promiscuous mode [ 509.298018][T15036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3167'. [ 511.084730][T15085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3183'. [ 514.640857][T15149] HfR: entered promiscuous mode [ 514.686309][T15149] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3200'. [ 514.720712][T15149] HfR: left promiscuous mode [ 515.243135][T15156] binder: 15155:15156 ioctl 40044900 800000000000003 returned -22 [ 515.727470][ T30] INFO: task syz.1.2463:12636 blocked for more than 143 seconds. [ 515.764200][ T30] Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 515.787162][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.795982][ T30] task:syz.1.2463 state:D stack:28016 pid:12636 tgid:12635 ppid:5837 flags:0x00004004 [ 515.833717][ T30] Call Trace: [ 515.841647][ T30] [ 515.850292][ T30] __schedule+0xe58/0x5ad0 [ 515.869503][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 515.881650][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 515.891466][ T30] ? __pfx___schedule+0x10/0x10 [ 515.903354][ T30] ? schedule+0x298/0x350 [ 515.920592][ T30] ? __pfx_lock_release+0x10/0x10 [ 515.928193][ T30] ? __mutex_trylock_common+0x78/0x250 [ 515.937618][ T30] ? lock_acquire+0x2f/0xb0 [ 515.946721][ T30] ? schedule+0x1fd/0x350 [ 515.957155][ T30] schedule+0xe7/0x350 [ 515.966346][ T30] schedule_preempt_disabled+0x13/0x30 [ 515.977598][ T30] __mutex_lock+0x62b/0xa60 [ 515.986726][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 515.998906][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 516.009668][ T30] ? __pfx_lock_release+0x10/0x10 [ 516.019339][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 516.029322][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 516.040165][ T30] nfsd_umount+0x48/0xe0 [ 516.049053][ T30] deactivate_locked_super+0xbe/0x1a0 [ 516.061417][ T30] deactivate_super+0xde/0x100 [ 516.073625][ T30] cleanup_mnt+0x222/0x450 [ 516.083815][ T30] task_work_run+0x14e/0x250 [ 516.095393][ T30] ? __pfx_task_work_run+0x10/0x10 [ 516.108923][ T30] ? __pfx___x64_sys_mount+0x10/0x10 [ 516.121181][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 516.133461][ T30] do_syscall_64+0xda/0x250 [ 516.140598][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.146648][ T30] RIP: 0033:0x7fb14c385d19 [ 516.152494][ T30] RSP: 002b:00007fb14a1f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 516.168932][ T30] RAX: ffffffffffffffea RBX: 00007fb14c575fa0 RCX: 00007fb14c385d19 [ 516.181358][ T30] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000000000000 [ 516.189616][ T30] RBP: 00007fb14c401a20 R08: 0000000000000000 R09: 0000000000000000 [ 516.201378][ T30] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 516.209516][ T30] R13: 0000000000000000 R14: 00007fb14c575fa0 R15: 00007ffe80b305c8 [ 516.221958][ T30] [ 516.225161][ T30] [ 516.225161][ T30] Showing all locks held in the system: [ 516.260151][ T30] 1 lock held by pool_workqueue_/3: [ 516.265625][ T30] #0: ffffffff8ddc6278 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 516.285409][ T30] 1 lock held by khungtaskd/30: [ 516.290557][ T30] #0: ffffffff8ddba940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 516.304151][ T30] 3 locks held by kworker/u8:5/2904: [ 516.309528][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 516.340809][ T30] #1: ffffc9000c287d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 516.383653][ T30] #2: ffffffff8faa92d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xbb/0xbd0 [ 516.410814][ T30] 2 locks held by getty/5589: [ 516.415619][ T30] #0: ffff888034f7a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 516.436114][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 516.457166][ T30] 3 locks held by kworker/0:3/5874: [ 516.462396][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 516.487307][ T30] #1: ffffc9000400fd80 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 516.515721][ T30] #2: ffffffff8ddc6140 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x700 [ 516.540524][ T30] 2 locks held by syz.0.2107/11501: [ 516.550252][ T30] #0: ffffffff8fb5db50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 516.570532][ T30] #1: ffffffff8e1baa88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x694/0xbe0 [ 516.594204][ T30] 2 locks held by syz.1.2463/12636: [ 516.607881][ T30] #0: ffff88805a1740e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 516.632061][ T30] #1: ffffffff8e1baa88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 516.652056][ T30] 3 locks held by syz.5.3209/15170: [ 516.665669][ T30] [ 516.669887][ T30] ============================================= [ 516.669887][ T30] [ 516.691632][ T30] NMI backtrace for cpu 0 [ 516.695990][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 516.706518][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 516.716595][ T30] Call Trace: [ 516.719897][ T30] [ 516.722854][ T30] dump_stack_lvl+0x116/0x1f0 [ 516.727565][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 516.732545][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 516.738560][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 516.744560][ T30] watchdog+0xf14/0x1240 [ 516.748816][ T30] ? __pfx_watchdog+0x10/0x10 [ 516.753499][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 516.758705][ T30] ? __kthread_parkme+0x148/0x220 [ 516.763741][ T30] ? __pfx_watchdog+0x10/0x10 [ 516.768424][ T30] kthread+0x2c1/0x3a0 [ 516.772501][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.777705][ T30] ? __pfx_kthread+0x10/0x10 [ 516.782306][ T30] ret_from_fork+0x45/0x80 [ 516.786726][ T30] ? __pfx_kthread+0x10/0x10 [ 516.791332][ T30] ret_from_fork_asm+0x1a/0x30 [ 516.796119][ T30] [ 516.799981][ T30] Sending NMI from CPU 0 to CPUs 1: [ 516.805709][ C1] NMI backtrace for cpu 1 [ 516.805729][ C1] CPU: 1 UID: 0 PID: 3637 Comm: kworker/u8:12 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 516.805754][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 516.805767][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 516.805793][ C1] RIP: 0010:unwind_next_frame+0x640/0x20c0 [ 516.805818][ C1] Code: 38 c2 40 0f 9e c6 84 d2 0f 95 c0 40 84 c6 0f 85 23 1a 00 00 4c 0f bf 31 4d 01 fe 0f b6 41 05 83 e0 07 3c 03 0f 84 fd 08 00 00 <3c> 04 0f 84 2e 08 00 00 3c 02 0f 84 59 04 00 00 80 3d 2c 87 bc 0e [ 516.805837][ C1] RSP: 0018:ffffc9000dac6ed8 EFLAGS: 00000297 [ 516.805852][ C1] RAX: 0000000000000002 RBX: 0000000000000001 RCX: ffffffff90ac7900 [ 516.805866][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 516.805878][ C1] RBP: ffffc9000dac6f90 R08: ffffffff90ac7906 R09: ffffffff90ac7904 [ 516.805892][ C1] R10: ffffc9000dac6f48 R11: 0000000000003e77 R12: ffffc9000dac6f98 [ 516.805906][ C1] R13: ffffc9000dac6f48 R14: ffffc9000dac7f58 R15: ffffc9000dac7f30 [ 516.805920][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 516.805940][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.805955][ C1] CR2: 00007f464034a338 CR3: 000000000db7e000 CR4: 00000000003526f0 [ 516.805968][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 516.805980][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 516.805993][ C1] Call Trace: [ 516.805998][ C1] [ 516.806005][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 516.806035][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 516.806064][ C1] ? nmi_handle+0x1ac/0x5d0 [ 516.806085][ C1] ? unwind_next_frame+0x640/0x20c0 [ 516.806106][ C1] ? default_do_nmi+0x6a/0x160 [ 516.806134][ C1] ? exc_nmi+0x170/0x1e0 [ 516.806167][ C1] ? end_repeat_nmi+0xf/0x53 [ 516.806196][ C1] ? unwind_next_frame+0x640/0x20c0 [ 516.806217][ C1] ? unwind_next_frame+0x640/0x20c0 [ 516.806239][ C1] ? unwind_next_frame+0x640/0x20c0 [ 516.806260][ C1] [ 516.806266][ C1] [ 516.806272][ C1] ? ret_from_fork+0x45/0x80 [ 516.806292][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 516.806320][ C1] arch_stack_walk+0x95/0x100 [ 516.806344][ C1] ? __pfx_kthread+0x10/0x10 [ 516.806366][ C1] ? ret_from_fork+0x45/0x80 [ 516.806386][ C1] stack_trace_save+0x95/0xd0 [ 516.806411][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 516.806437][ C1] ? __pfx_mark_lock+0x10/0x10 [ 516.806466][ C1] kasan_save_stack+0x33/0x60 [ 516.806489][ C1] ? kasan_save_stack+0x33/0x60 [ 516.806511][ C1] ? kasan_save_track+0x14/0x30 [ 516.806533][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 516.806555][ C1] ? __kmalloc_noprof+0x21a/0x4f0 [ 516.806579][ C1] ? cfg80211_inform_single_bss_data+0x5b0/0x1e40 [ 516.806600][ C1] ? cfg80211_inform_bss_data+0x254/0x3e40 [ 516.806621][ C1] ? cfg80211_inform_bss_frame_data+0x252/0x8a0 [ 516.806642][ C1] ? ieee80211_bss_info_update+0x311/0xab0 [ 516.806666][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1956/0x3040 [ 516.806690][ C1] ? ieee80211_iface_work+0xc0b/0xf00 [ 516.806713][ C1] ? cfg80211_wiphy_work+0x3de/0x560 [ 516.806735][ C1] ? process_one_work+0x958/0x1b30 [ 516.806763][ C1] ? worker_thread+0x6c8/0xf00 [ 516.806780][ C1] ? kthread+0x2c1/0x3a0 [ 516.806801][ C1] ? ret_from_fork+0x45/0x80 [ 516.806833][ C1] kasan_save_track+0x14/0x30 [ 516.806856][ C1] __kasan_kmalloc+0xaa/0xb0 [ 516.806878][ C1] __kmalloc_noprof+0x21a/0x4f0 [ 516.806903][ C1] ? cfg80211_inform_single_bss_data+0x5b0/0x1e40 [ 516.806927][ C1] cfg80211_inform_single_bss_data+0x5b0/0x1e40 [ 516.806948][ C1] ? unwind_next_frame+0xe5d/0x20c0 [ 516.806972][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 516.807003][ C1] ? stack_trace_save+0x95/0xd0 [ 516.807026][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 516.807051][ C1] ? __pfx_mark_lock+0x10/0x10 [ 516.807077][ C1] ? stack_depot_save_flags+0x28/0x9e0 [ 516.807106][ C1] ? ieee80211_parse_ch_switch_ie+0xd6f/0x1f60 [ 516.807136][ C1] ? cfg80211_inform_bss_data+0x254/0x3e40 [ 516.807161][ C1] cfg80211_inform_bss_data+0x254/0x3e40 [ 516.807182][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xc54/0x3040 [ 516.807205][ C1] ? ieee80211_iface_work+0xc0b/0xf00 [ 516.807228][ C1] ? cfg80211_wiphy_work+0x3de/0x560 [ 516.807250][ C1] ? process_one_work+0x958/0x1b30 [ 516.807278][ C1] ? __pfx_mark_lock+0x10/0x10 [ 516.807304][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 516.807333][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 516.807355][ C1] ? hlock_class+0x4e/0x130 [ 516.807377][ C1] ? mark_lock+0xb5/0xc60 [ 516.807406][ C1] ? hlock_class+0x4e/0x130 [ 516.807428][ C1] ? __lock_acquire+0xcc5/0x3c40 [ 516.807463][ C1] ? hlock_class+0x4e/0x130 [ 516.807488][ C1] ? find_held_lock+0x2d/0x110 [ 516.807513][ C1] cfg80211_inform_bss_frame_data+0x252/0x8a0 [ 516.807539][ C1] ieee80211_bss_info_update+0x311/0xab0 [ 516.807564][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 516.807588][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x191c/0x3040 [ 516.807614][ C1] ? ieee80211_mandatory_rates+0x1ab/0x220 [ 516.807645][ C1] ieee80211_ibss_rx_queued_mgmt+0x1956/0x3040 [ 516.807670][ C1] ? hlock_class+0x4e/0x130 [ 516.807696][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 516.807720][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 516.807738][ C1] ? find_held_lock+0x2d/0x110 [ 516.807761][ C1] ? find_held_lock+0x2d/0x110 [ 516.807785][ C1] ? kcov_remote_start+0x370/0x6e0 [ 516.807808][ C1] ? mark_held_locks+0x9f/0xe0 [ 516.807836][ C1] ? kcov_remote_start+0x3cf/0x6e0 [ 516.807859][ C1] ieee80211_iface_work+0xc0b/0xf00 [ 516.807885][ C1] cfg80211_wiphy_work+0x3de/0x560 [ 516.807910][ C1] process_one_work+0x958/0x1b30 [ 516.807942][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 516.807965][ C1] ? __pfx_process_one_work+0x10/0x10 [ 516.807993][ C1] ? rcu_is_watching+0x12/0xc0 [ 516.808020][ C1] ? assign_work+0x1a0/0x250 [ 516.808048][ C1] worker_thread+0x6c8/0xf00 [ 516.808069][ C1] ? __kthread_parkme+0x148/0x220 [ 516.808092][ C1] ? __pfx_worker_thread+0x10/0x10 [ 516.808110][ C1] kthread+0x2c1/0x3a0 [ 516.808131][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.808155][ C1] ? __pfx_kthread+0x10/0x10 [ 516.808178][ C1] ret_from_fork+0x45/0x80 [ 516.808195][ C1] ? __pfx_kthread+0x10/0x10 [ 516.808217][ C1] ret_from_fork_asm+0x1a/0x30 [ 516.808248][ C1] [ 516.840660][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 516.840676][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 516.840706][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 516.840721][ T30] Call Trace: [ 516.840728][ T30] [ 516.840738][ T30] dump_stack_lvl+0x3d/0x1f0 [ 516.840768][ T30] panic+0x71d/0x800 [ 516.840801][ T30] ? __pfx_panic+0x10/0x10 [ 516.840832][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 516.840860][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 516.840895][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 516.840922][ T30] ? watchdog+0xd7e/0x1240 [ 516.840945][ T30] ? watchdog+0xd71/0x1240 [ 516.840973][ T30] watchdog+0xd8f/0x1240 [ 516.841003][ T30] ? __pfx_watchdog+0x10/0x10 [ 516.841026][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 516.841055][ T30] ? __kthread_parkme+0x148/0x220 [ 516.841085][ T30] ? __pfx_watchdog+0x10/0x10 [ 516.841110][ T30] kthread+0x2c1/0x3a0 [ 516.841135][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.841160][ T30] ? __pfx_kthread+0x10/0x10 [ 516.841189][ T30] ret_from_fork+0x45/0x80 [ 516.841211][ T30] ? __pfx_kthread+0x10/0x10 [ 516.841239][ T30] ret_from_fork_asm+0x1a/0x30 [ 516.841284][ T30] [ 517.558526][ T30] Kernel Offset: disabled [ 517.562855][ T30] Rebooting in 86400 seconds..