last executing test programs: 4m50.30823827s ago: executing program 3 (id=765): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x1c, 0x0, 0x30f4b0fcc8d9477d, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000044) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) close_range$auto(0x2, 0x8, 0x0) 4m49.954959817s ago: executing program 3 (id=768): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40c02, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f00)={&(0x7f0000002840)=ANY=[], 0x11b4}}, 0x40) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdf3) mremap$auto(0x4000, 0xfee0, 0x3fd9, 0x3, 0xfffff000) pread64$auto(r0, 0x0, 0xffff, 0xa) 4m49.759018515s ago: executing program 3 (id=771): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) socket(0x25, 0x1, 0x3) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x8}, 0xed7138c}, 0x9a6, 0xe000) 4m49.537444608s ago: executing program 3 (id=775): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd2e, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4m49.22323913s ago: executing program 3 (id=777): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) r0 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) tkill$auto(0x1, 0x7) 4m48.266204366s ago: executing program 3 (id=784): setsockopt$auto(0x3, 0x8000000000000006, 0x21, 0x0, 0x7ffffc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x23, 0x2, 0x0) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x880) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x180, 0x0) madvise$auto(0x0, 0x200007, 0x19) bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) 4m47.905113891s ago: executing program 32 (id=784): setsockopt$auto(0x3, 0x8000000000000006, 0x21, 0x0, 0x7ffffc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x23, 0x2, 0x0) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x880) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x180, 0x0) madvise$auto(0x0, 0x200007, 0x19) bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) 2m41.291021286s ago: executing program 1 (id=1870): syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) read$auto(r1, 0x0, 0x5) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), 0xffffffffffffffff) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000040), 0x181080, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/printk_formats\x00', 0x109000, 0x0) close_range$auto(0x2, 0x8000, 0x0) 2m40.032577886s ago: executing program 1 (id=1877): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x1, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) write$auto(0x3, 0x0, 0xd7d) 2m39.743026093s ago: executing program 1 (id=1878): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8, 0x0) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9000c) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2m39.382947464s ago: executing program 1 (id=1882): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x800, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1, 0x1, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x7) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 2m39.132926492s ago: executing program 1 (id=1886): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) 2m38.62573946s ago: executing program 1 (id=1892): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) madvise$auto(0x8, 0xffffffffffff0001, 0x16) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8040, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) 2m23.42807486s ago: executing program 33 (id=1892): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) madvise$auto(0x8, 0xffffffffffff0001, 0x16) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8040, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) 27.254000719s ago: executing program 2 (id=2591): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf25030000000400080008000380090012"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x4) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 27.061727364s ago: executing program 2 (id=2592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x85, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(r3, 0xc1205531, r2) ioctl$auto_VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x7, r0}) socket(0x2, 0x3, 0x100) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) lseek$auto(0x3, 0x3, 0x1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x1cc00) 26.893911187s ago: executing program 2 (id=2594): socket(0x2, 0x1, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(r0, 0x0, 0x4004) dup2$auto(0x5, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) 26.703965738s ago: executing program 2 (id=2595): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) open(&(0x7f0000000080)='.\x00', 0x0, 0x1f2) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) open(0x0, 0x22240, 0x155) 26.246714957s ago: executing program 2 (id=2599): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) pselect6$auto(0x101, &(0x7f0000000080)={[0x4, 0x7, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x9, 0x8, 0x1, 0x4, 0x9, 0x4, 0x0, 0x7, 0xcb2a, 0x9]}, &(0x7f0000000100)={[0xffff, 0x3, 0xfffffffffffff31a, 0x7, 0x590, 0x8, 0x1d4, 0x4, 0x6, 0x7, 0x5, 0x7, 0x9, 0x7, 0x0, 0x1]}, &(0x7f0000000180)={[0xa9, 0x4, 0x4, 0x1, 0x3, 0x6, 0xcbd0, 0x200000001, 0x1f, 0xfffffffffffffffb, 0x7ff, 0x8000000000000001, 0x4, 0x7f, 0x91, 0x4]}, &(0x7f0000000000)={0x899, 0x5}, &(0x7f0000000200)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r0, 0x1002, 0x0, 0x0, 0x0, 0x2) sendmsg$auto_NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x40850) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) socket(0x2b, 0x1, 0x1) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x80000000}) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 25.527010655s ago: executing program 2 (id=2602): mmap$auto(0x0, 0x2020009, 0x3, 0x200000000000eb1, 0xfffffffffffffffb, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) newfstatat$auto(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000600)={0x3, 0x4, 0x5, 0x4, 0x0, 0x0, 0x0, 0x422, 0x8, 0x9, 0xaaf, 0x3, 0x2, 0x2, 0x8000000000000001, 0x5, 0xfffffffffffffffd}, 0xb7d) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) setuid$auto(0x0) listen$auto(0x3, 0x83) 25.267353909s ago: executing program 34 (id=2602): mmap$auto(0x0, 0x2020009, 0x3, 0x200000000000eb1, 0xfffffffffffffffb, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) newfstatat$auto(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000600)={0x3, 0x4, 0x5, 0x4, 0x0, 0x0, 0x0, 0x422, 0x8, 0x9, 0xaaf, 0x3, 0x2, 0x2, 0x8000000000000001, 0x5, 0xfffffffffffffffd}, 0xb7d) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) setuid$auto(0x0) listen$auto(0x3, 0x83) 7.219597759s ago: executing program 4 (id=2706): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) r1 = getpgrp(0xffffffffffffffff) sched_setattr$auto(r1, 0x0, 0xf) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)='5', 0x1) 5.704962785s ago: executing program 4 (id=2716): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) madvise$auto(0x0, 0x3, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6227, 0x1000, 0x0, 0x100000000, 0xffffffffffffffff) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000022c0)='ns/time_for_children\x00') mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 5.167416015s ago: executing program 5 (id=2718): prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) timerfd_create$auto(0x9, 0x0) socket(0xa, 0x3, 0x7) pselect6$auto(0xffffffff, &(0x7f00000000c0)={[0x2, 0xfff, 0x6, 0xbda3, 0x0, 0x7, 0x5, 0xc7, 0x5, 0x400, 0x7, 0x3, 0x2, 0x7fffffff, 0x87d9, 0xa]}, &(0x7f0000000180)={[0x182, 0x9bbb, 0x0, 0x3, 0x58, 0xb5, 0x8, 0x400, 0x6, 0x4, 0x7ff, 0x0, 0x2, 0x7de1, 0xed1b, 0x8c5]}, &(0x7f0000000200)={[0x8001, 0x0, 0x36d7, 0x39, 0x0, 0x7ff, 0x8, 0x7fffffff, 0x6, 0x3, 0x401, 0xffff, 0x95, 0x39d9eb, 0x8, 0x9]}, &(0x7f0000000280)={0xa}, &(0x7f00000002c0)) flock$auto(0x6, 0x1) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) 4.848401935s ago: executing program 5 (id=2720): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x10, 0x2, 0x0) fanotify_init$auto(0x5, 0x2000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) dup2$auto(0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) getpeername$auto(0x3, 0x0, 0x0) 4.701707014s ago: executing program 4 (id=2723): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, 0x0, 0x6a) write$auto(0xca, &(0x7f0000000040)='\x04\x02\x00Vwx\xbfZp\xd55>h\xd5\x89|d\v\x00'/32, 0x3) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffb8, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) shutdown$auto(0x200000003, 0x2) 4.476861267s ago: executing program 4 (id=2726): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) read$auto(0x3, 0x0, 0x400000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0xffffffffffffffff, 0x4, 0x5, &(0x7f0000000180), 0xffffffbc) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 3.77743677s ago: executing program 5 (id=2729): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x81, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r2, 0x6b, 0x2, 0xfffffffffffffffe, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xc00caee0, 0x0) 3.508804933s ago: executing program 5 (id=2731): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x3, &(0x7f0000000340)=@enable_stats={0x5}, 0x3) 3.078401033s ago: executing program 4 (id=2733): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x60642, 0x0) prctl$auto(0x6, 0xc3e, 0x0, 0xa, 0x9) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlock2$auto(0x1, 0x6, 0x43) 2.440611816s ago: executing program 6 (id=2734): unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x6) r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002c00), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_GET(r1, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000002cc0)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x814) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x8dc, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x272, 0x3, 0x0, 0x1, [@typed={0x8, 0x7f, 0x0, 0x0, @pid}, @nested={0x1da, 0x133, 0x0, 0x1, [@nested={0x4, 0xd5}, @typed={0x14, 0x78, 0x0, 0x0, @ipv6=@remote}, @nested={0xc4, 0x10, 0x0, 0x1, [@nested={0xbe, 0x28, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x8, 0x5f, 0x0, 0x0, @uid}, @typed={0xc, 0x143, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0xf1}, @generic="ee6e0d776703639b4856346e921d99441e074b80f8f393ed9684cf4cc7ff4d8c6a3bbeec57", @typed={0x8, 0x5e, 0x0, 0x0, @ipv4=@remote}, @generic="1014a34097", @generic="ab8e62ffb2eb51e97314dfe51673a45574852184d39e7492ee0c4cb912680bcad8a31d55944f6d5dc94c5120269e1ae095610631ad61e2c84811e1930064522febf054842d7e66c67009f162a1697a681f9550644810d0cd11615a7b0be9eb1efa0024b5", @nested={0x4, 0x6c}]}]}, @generic="e0e8f0497b69072cb0e404f1718b21b2acdb678392dd6f9671cdae386c479ec41e084d6f49545eba96961d6437c454a7427e6181cc4cd29f6221537484588bfe8aad6de3961ec78985d776258991d75f2b7d7afee582e40872d874247179a809f2c49300786dd2775d78d8036debf624fc05cc4a6d32d04ca57e899518e6b6a77ce971ffaed3eb42989ee1be89b61a16c346756af9839c7a968579e33db532d06cce368cf4ef6b9e76e8e29ebd69162025c0387ad5e0e7eb23ac10b879cf29e2bbf7f75720bd435c0cc65b248c6a2ac4cd0c51910efe09283c901225c58b81208b7fcfba439d2ba00e284dc08d96785ea240", @nested={0x4, 0x12e}, @nested={0x4, 0xeb}]}, @generic="9f7835c1f9f9ecc995d6380e7a27615bd8db894350dd9e5738678b0fc8c3d01264ceb4540bc294232f479d656b5421048241df783d3a6b79fe7dd6c132fcac5142cac72afd5505de0d234b79a03fb00746520f1f1489e198ebc1309a6260b37096d48bd21c72713420932bcd184416de605ea193ffe839d29aef91e0cb826a875933da538605b3207242"]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x654, 0x3, 0x0, 0x1, [@nested={0x17c, 0x48, 0x0, 0x1, [@nested={0x177, 0x9e, 0x0, 0x1, [@typed={0x8, 0x89, 0x0, 0x0, @uid}, @typed={0x8, 0xdb, 0x0, 0x0, @uid}, @nested={0x4, 0xf7}, @generic="37e2b7c1c80983ef6d84f76014744dd84defd351f1a85c7f5a8500144d03990970d301aaf50e4837d83e2ec0b6769d3e174741df516a1c6be27cf77ed86a5718fbdde8d552128f9354f9ba10b3ea2f624708e151af3faeade82343cc1b7b9f55033695c4e3fdbd393e7eee1cc17ca75fed3a003b2545eb4b34646261382622d3246579bffd00297dbbd743eb6e6e31bdad4a98336f4b276b8df74497164f3dd6da4c1646e4726540efee7c32ddc8909296749af9251ad32183bdcdfe1a0a7f0204b6f28e", @typed={0x14, 0x135, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x21, 0xbe, 0x0, 0x0, @str=']]z@\'[%O-*%]%]/[%$}^[(/.(){-\x00'}, @generic="219e0afafd1c64bca480f8cb0a29d56902519f0246e836985d333bf810f0fe624cd5ad7283160780309913df123fa10d915661fae7b41815556d", @generic="31f2aa21c2170f4cb3b2d46dc9386576f8667c923696d98e66ac2afab94dd3b2fba3b33de58335fa04"]}]}, @nested={0x4d3, 0xc, 0x0, 0x1, [@typed={0x8, 0x12e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}}, @nested={0x4, 0xb2}, @generic="94479e9fa5761507ecff5d558fb7ac651382836ac0f7d82b492bf6a1738542801aafd888ed7b11076d5cf882dc145b84f912dd5fa75c068bedf50b580513bda1ffaff16cb0baea69c166171c10d17fdd7ff94712b5171f53d4088cfc93b1697492cddacfb63c19aac03973", @nested={0x434, 0xa8, 0x0, 0x1, [@typed={0x8, 0xf4, 0x0, 0x0, @u32=0x68a7}, @nested={0x2eb, 0x88, 0x0, 0x1, [@typed={0x8, 0xd0, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x85}, @nested={0x9a, 0x146, 0x0, 0x1, [@typed={0x7, 0x13c, 0x0, 0x0, @str='\\\\\x00'}, @generic="c02a4da59a648de3726fbf1ee995711767f7d44168c514724137d118e325559a6798edf13fe0c4598cac5d27ffdcf6349b2b51904f7da6d2208de4c29951cd48a1a01caa2ce24e3dc3e6e18e9a9010bd5f190d24a42b90d70d72bf64c40b3d4f46eae9383e4cbcf42423e8eeb905037a8d3214223ab1affe9508044f50c8f2836a7842db8cf8", @typed={0x8, 0x62, 0x0, 0x0, @uid}]}, @generic="c7264c767b1e740cef2c2bd00790c18b494e2a434b2013aae2da8a6a2a93894c50a33be177be6f01f5fa644547e8e8a4e427b283cdc663891da9c5d3adc8af1b38bb0995cbe608ab9adfdd30142bfda48c4bad68aff63d82d8990256a3301c8efe1c23fdde3c5c13f82224c32a49b0c154d28ba820a64e79026c70e3d3b39630f9c5e291609ff8891cf41b5bfb95e94f13f237652600d9bd465542345f0e561d96f6042d1992cd837177c54c4da9199119b404eb5e81ee10d2e615282cfffc64de639c4e041d68ca4386713c3a863e", @nested={0x16d, 0xed, 0x0, 0x1, [@nested={0x4, 0xd5}, @typed={0x8, 0xc0, 0x0, 0x0, @pid}, @typed={0x8, 0xa8, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x8d}, @nested={0x4, 0x108}, @nested={0x4, 0x45}, @generic="b5abce900a06788f6f7192eb159f4674c02b799a750561abec6b992958a759f33a493187eeebcb54eb2913bdba7608a3de3e25a1d0f5dc6f3cba2c55360b", @nested={0x4, 0x12d}, @generic="aecbf93bdce2f21ce5390d5a9bea678ce63ea39ef91f9bb9c4a543818e88ed3e70a2fbf15a420546d799f8bc59ebea990e2c3f56a987cf487444d187460237a2739f1fb222d113e43cc6ec3f2fdabb675a9f4fec6460809205ffbd9d17635cb2a40514188faa01159f54629020a6d2e8896c94c4c2d5be582a30e73168426e7c25c7e3d82ce6c5c3ef8d174d33cdf353853bf8b59cd81e6df9034253171ea10d12d24f33f91dba45508eda38508a6e2387becc0dc3ca9ca9fe597360da3676d6199e9f333ad3beb01de1d3f9fbfae8b46e770d6461aa084990261d494abab9309bb76806a50e69289aa767ee9b1c12758939d9eb15920b6af6a861b768b98a", @typed={0x8, 0x126, 0x0, 0x0, @pid}]}]}, @nested={0x129, 0xae, 0x0, 0x1, [@typed={0x4, 0xef}, @generic="9df521e2", @typed={0x4, 0xd8}, @nested={0xc, 0x87, 0x0, 0x1, [@typed={0x4, 0xd4}, @nested={0x4, 0x97}]}, @nested={0x14, 0x6c, 0x0, 0x1, [@typed={0x8, 0x12, 0x0, 0x0, @pid}, @typed={0x8, 0x4d, 0x0, 0x0, @fd=r1}]}, @typed={0x4, 0x42}, @generic="823e5c17efb8fe3da42b828b1418724c229bd787261520bdcccdb4388c1aa305cbef3c4bf8656c1901b2769dccff4c32d4f7cad6d6229bed1571fbd381ddd24ba8e6543ed8784e2afa32f795a9ab73d56a92f5da097e65d6a1aad853090afb2ab0eed2f5dd95d41d23d813526607ec5d79da05806cfe29684a77cb688ecde26a193b72b70df84071475050783dc2dec6da02b24a442ce2db1bc2b36cc835321c128cce0d8596ea5663e4b692b50c39cb45cc26998db85fb837da71b5c1ab8768109385b31940bd01209296b95a41ddbb4f99e03ff6ff4fa7f276b769574337cacea7378d0616f552509f455d11853f86a1ac11c9f2"]}, @typed={0x8, 0x1d, 0x0, 0x0, @pid}, @typed={0x8, 0x92, 0x0, 0x0, @u32=0xb2}]}, @nested={0x4, 0xc}, @typed={0x8, 0x5e, 0x0, 0x0, @uid}, @nested={0x4, 0x72}, @nested={0x4, 0xf8}, @typed={0xc, 0x13b, 0x0, 0x0, @u64=0xff}, @nested={0x4, 0xb3}]}]}]}, 0x8dc}, 0x1, 0x0, 0x0, 0x8081}, 0x20004040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000001c0)={0x14, r4, 0x313, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 2.439833248s ago: executing program 5 (id=2743): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvfrom$auto(r0, 0x0, 0xc, 0xb21, 0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) 2.073525437s ago: executing program 0 (id=2736): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22042, 0x75) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @local, 0x1}, 0x55) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.693287098s ago: executing program 6 (id=2737): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x20006, 0x3, 0xe72, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) io_uring_setup$auto(0x1, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r1, 0xe315}, 0xd) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) 1.594026311s ago: executing program 0 (id=2738): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) select$auto(0x8, &(0x7f0000000080)={[0x20000009, 0xfffffffffffbfffc, 0x9, 0x5, 0xc, 0x3, 0x7, 0x1ffe000, 0x2, 0x8, 0x5, 0xf, 0xd, 0x1, 0x6, 0x1]}, 0x0, 0x0, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000002140), 0xa002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:01.0/subsystem_device\x00', 0xa8000, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x42100, 0x0) select$auto(0xb, &(0x7f0000000100)={[0x7f, 0x31, 0xffffffffffffffff, 0x80000000, 0x7, 0x6, 0x81, 0x67e, 0x8, 0x2, 0x5, 0x10001, 0x334, 0x4, 0xfffffffffffffffe, 0x8]}, 0x0, 0x0, 0x0) 1.567936654s ago: executing program 4 (id=2739): openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fsmount$auto(0x4, 0x0, 0x200003) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r1, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000179c0)={0x1c, r0, 0xc29, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_PMSR_RESULT={0x8, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000080) ioctl$auto(0x3, 0x6f2d, 0x10000000000402) 1.454861172s ago: executing program 0 (id=2741): socket$nl_generic(0x10, 0x3, 0x10) migrate_pages$auto(0x1, 0x9, 0x0, &(0x7f0000000840)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002ac0), r0) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002b00)={0x1c, r1, 0x1f97227bd58c1f83, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x40004) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0x2, 0x8000) r2 = socket(0x11, 0xa, 0x1000) ioctl$auto(r2, 0x2, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4bfb, 0x3) madvise$auto(0x1ffff000, 0x5510, 0x3) 1.419897273s ago: executing program 6 (id=2742): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r0 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1ff, r0, @relative_id=0x13, 0xe600}, 0xf) socketpair$auto(0x1, 0x801, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) 1.218353842s ago: executing program 6 (id=2744): mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0x7, 0x0) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) futex_wake$auto(0x0, 0x8, 0x7, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) 968.368225ms ago: executing program 0 (id=2745): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) exit$auto(0x7) landlock_create_ruleset$auto(&(0x7f0000000040)={0x0, 0x1}, 0x8d, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) 766.560774ms ago: executing program 0 (id=2746): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0xfffffffd, 0x0, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) socket(0x848000000015, 0x805, 0x0) io_uring_setup$auto(0x3ff, 0x0) io_uring_setup$auto(0x1, &(0x7f0000000000)={0x3, 0x10002, 0x7f, 0x5, 0x6, 0x5, r0, [], {0x2, 0x2005, 0x2, 0x8, 0x400, 0xb533, 0x7, 0x5, 0x80000000}, {0x7, 0xd, 0x6e68, 0x8, 0x6b, 0x86fe, 0x0, 0x0, 0xb1}}) 638.904871ms ago: executing program 5 (id=2747): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) io_uring_setup$auto(0x9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x401, r1, @relative_fd=r2, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4) bpf$auto(0x4, &(0x7f00000001c0)=@bpf_attr_11={0x5, 0x8000000000000005, 0x9, 0x161f, 0xf870e9f, 0xa4ea, 0x8}, 0x9) 392.156572ms ago: executing program 6 (id=2748): mmap$auto(0x0, 0x401, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1ff, r0, @relative_id=0x13, 0xe600}, 0xf) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) close_range$auto(0x2, 0x8, 0x0) 263.69259ms ago: executing program 6 (id=2749): unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) stat$auto(0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) ioctl$auto(0x3, 0xc0481273, 0x38) statmount$auto(0x0, 0x0, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) ioctl$auto(0x3, 0x1276, 0x7) 0s ago: executing program 0 (id=2750): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000004680)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x502, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/sound/ctl-led/mic/brightness\x00', 0x109140, 0x0) sysfs$auto(0x2, 0x4, 0x4) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x80043, 0x0) mincore$auto(0x1000, 0x8001, 0x0) io_uring_setup$auto(0x877, 0x0) r0 = io_uring_setup$auto(0x877, 0x0) io_uring_enter$auto(r0, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. [ 84.839419][ T5830] cgroup: Unknown subsys name 'net' [ 84.932749][ T5830] cgroup: Unknown subsys name 'cpuset' [ 84.940866][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.589193][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.834373][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.842813][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.850490][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.858511][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.866110][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.877374][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.893138][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.902336][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.913266][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.927072][ T5146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.935078][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.947913][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.955767][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.964422][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.969615][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.975915][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.986447][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.994212][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.995041][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.003151][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.015874][ T5853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.024021][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.032487][ T5851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.046499][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.393583][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 90.404504][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 90.448783][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 90.520350][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 90.643465][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.650730][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.659000][ T5839] bridge_slave_0: entered allmulticast mode [ 90.665919][ T5839] bridge_slave_0: entered promiscuous mode [ 90.683861][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.691034][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.698514][ T5843] bridge_slave_0: entered allmulticast mode [ 90.705193][ T5843] bridge_slave_0: entered promiscuous mode [ 90.713199][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.720625][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.727845][ T5843] bridge_slave_1: entered allmulticast mode [ 90.734815][ T5843] bridge_slave_1: entered promiscuous mode [ 90.741949][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.749434][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.756572][ T5844] bridge_slave_0: entered allmulticast mode [ 90.763401][ T5844] bridge_slave_0: entered promiscuous mode [ 90.771086][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.778676][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.785819][ T5844] bridge_slave_1: entered allmulticast mode [ 90.792685][ T5844] bridge_slave_1: entered promiscuous mode [ 90.799379][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.806483][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.813963][ T5839] bridge_slave_1: entered allmulticast mode [ 90.820985][ T5839] bridge_slave_1: entered promiscuous mode [ 90.889253][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.896383][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.903910][ T5845] bridge_slave_0: entered allmulticast mode [ 90.911106][ T5845] bridge_slave_0: entered promiscuous mode [ 90.920210][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.927355][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.935397][ T5845] bridge_slave_1: entered allmulticast mode [ 90.942148][ T5845] bridge_slave_1: entered promiscuous mode [ 90.951999][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.962953][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.975197][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.986593][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.005547][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.031194][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.066741][ T5843] team0: Port device team_slave_0 added [ 91.085296][ T5844] team0: Port device team_slave_0 added [ 91.105892][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.116382][ T5843] team0: Port device team_slave_1 added [ 91.126454][ T5844] team0: Port device team_slave_1 added [ 91.134660][ T5839] team0: Port device team_slave_0 added [ 91.145594][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.180595][ T5839] team0: Port device team_slave_1 added [ 91.203999][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.211040][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.237067][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.250360][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.257342][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.283692][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.297207][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.304236][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.330229][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.357685][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.364887][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.391628][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.430491][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.437483][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.463635][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.477030][ T5845] team0: Port device team_slave_0 added [ 91.499571][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.506554][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.533518][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.551421][ T5845] team0: Port device team_slave_1 added [ 91.597095][ T5844] hsr_slave_0: entered promiscuous mode [ 91.604382][ T5844] hsr_slave_1: entered promiscuous mode [ 91.635585][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.643502][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.669732][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.681931][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.689657][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.715946][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.744068][ T5839] hsr_slave_0: entered promiscuous mode [ 91.750434][ T5839] hsr_slave_1: entered promiscuous mode [ 91.756551][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.764450][ T5839] Cannot create hsr debugfs directory [ 91.775497][ T5843] hsr_slave_0: entered promiscuous mode [ 91.785210][ T5843] hsr_slave_1: entered promiscuous mode [ 91.791715][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.799489][ T5843] Cannot create hsr debugfs directory [ 91.879420][ T5845] hsr_slave_0: entered promiscuous mode [ 91.885885][ T5845] hsr_slave_1: entered promiscuous mode [ 91.892252][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.900278][ T5845] Cannot create hsr debugfs directory [ 91.978934][ T5846] Bluetooth: hci0: command tx timeout [ 92.058107][ T5846] Bluetooth: hci1: command tx timeout [ 92.063856][ T5846] Bluetooth: hci3: command tx timeout [ 92.138081][ T5846] Bluetooth: hci2: command tx timeout [ 92.169555][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.184899][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.206315][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.216717][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.286635][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.332151][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.347205][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.415769][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.463669][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.528598][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.557035][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.582921][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.602461][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.631763][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.665725][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.703912][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.730995][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.758010][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.787258][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.794579][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.844603][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.851806][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.906132][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.965939][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.024991][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.032141][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.052461][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.059635][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.090952][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.167136][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.194332][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.224387][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.231539][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.261469][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.268635][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.304709][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.352788][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.359981][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.387315][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.394480][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.430238][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.556401][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.577686][ T5843] veth0_vlan: entered promiscuous mode [ 93.601620][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.616993][ T5843] veth1_vlan: entered promiscuous mode [ 93.700035][ T5843] veth0_macvtap: entered promiscuous mode [ 93.720317][ T5843] veth1_macvtap: entered promiscuous mode [ 93.770651][ T5844] veth0_vlan: entered promiscuous mode [ 93.780844][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.801470][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.814722][ T5844] veth1_vlan: entered promiscuous mode [ 93.829594][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.839431][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.851868][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.861040][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.878261][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.935544][ T5844] veth0_macvtap: entered promiscuous mode [ 93.961829][ T5844] veth1_macvtap: entered promiscuous mode [ 93.997438][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.010470][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.022172][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.041751][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.073408][ T5846] Bluetooth: hci0: command tx timeout [ 94.084548][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.095998][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.107446][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.119991][ T5839] veth0_vlan: entered promiscuous mode [ 94.127217][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.135751][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.137292][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.143971][ T5853] Bluetooth: hci1: command tx timeout [ 94.157685][ T5846] Bluetooth: hci3: command tx timeout [ 94.158822][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.172506][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.181356][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.218298][ T5853] Bluetooth: hci2: command tx timeout [ 94.231280][ T5839] veth1_vlan: entered promiscuous mode [ 94.250554][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.275047][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.282323][ T5845] veth0_vlan: entered promiscuous mode [ 94.288056][ T5845] veth1_vlan: entered promiscuous mode [ 94.366652][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.366983][ T5839] veth0_macvtap: entered promiscuous mode [ 94.419831][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.428036][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.451957][ T5845] veth0_macvtap: entered promiscuous mode [ 94.471754][ T5839] veth1_macvtap: entered promiscuous mode [ 94.501252][ T5845] veth1_macvtap: entered promiscuous mode [ 94.546237][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.549347][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.565812][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.569746][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.577243][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.594006][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.605097][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.615467][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.628289][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.638533][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.649545][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.659682][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.671635][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.683707][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.706514][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.720328][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.731267][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.746098][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.758938][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.774550][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.785059][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.794354][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.803503][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.814985][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.826620][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.837479][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.848218][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.859082][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.869905][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.880865][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.892636][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.902251][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.911522][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.920663][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.065419][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.090105][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.113485][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.126413][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.214894][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.243984][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.263669][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.294062][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.897216][ T5920] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 96.138038][ T5853] Bluetooth: hci0: command tx timeout [ 96.187598][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 96.237154][ T5853] Bluetooth: hci1: command tx timeout [ 96.242774][ T5853] Bluetooth: hci3: command tx timeout [ 96.298809][ T5846] Bluetooth: hci2: command tx timeout [ 96.370533][ T5929] netlink: 330 bytes leftover after parsing attributes in process `syz.1.10'. [ 96.401992][ T5929] Zero length message leads to an empty skb [ 96.463925][ T5931] ======================================================= [ 96.463925][ T5931] WARNING: The mand mount option has been deprecated and [ 96.463925][ T5931] and is ignored by this kernel. Remove the mand [ 96.463925][ T5931] option from the mount to silence this warning. [ 96.463925][ T5931] ======================================================= [ 96.552157][ T5931] devtmpfs: Unknown parameter ':' [ 97.340395][ T8] cfg80211: failed to load regulatory.db [ 97.943225][ T5960] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.968786][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23'. [ 97.983118][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23'. [ 98.228222][ T5846] Bluetooth: hci0: command tx timeout [ 98.313577][ T5853] Bluetooth: hci1: command tx timeout [ 98.319233][ T5846] Bluetooth: hci3: command tx timeout [ 98.378217][ T5846] Bluetooth: hci2: command tx timeout [ 99.558563][ T5998] netlink: 330 bytes leftover after parsing attributes in process `syz.0.37'. [ 99.588790][ T5998] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.398556][ T6021] netlink: 342 bytes leftover after parsing attributes in process `syz.2.46'. [ 101.665904][ T6042] netlink: 334 bytes leftover after parsing attributes in process `syz.3.53'. [ 101.920563][ T6052] netlink: 'syz.1.58': attribute type 29 has an invalid length. [ 101.989997][ T6052] netlink: 334 bytes leftover after parsing attributes in process `syz.1.58'. [ 102.225360][ T6057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.59'. [ 102.326231][ T6057] vcan0: entered promiscuous mode [ 103.412121][ T6075] netlink: 2 bytes leftover after parsing attributes in process `syz.3.64'. [ 103.679626][ T6079] netlink: 334 bytes leftover after parsing attributes in process `syz.1.65'. [ 105.278806][ T6099] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.156240][ T6117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.80'. [ 107.438218][ T6144] netlink: 338 bytes leftover after parsing attributes in process `syz.3.92'. [ 107.477793][ T6144] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.140296][ T6157] netlink: 'syz.1.97': attribute type 4 has an invalid length. [ 109.165811][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.106'. [ 109.190732][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.106'. [ 110.169118][ T6205] netlink: 330 bytes leftover after parsing attributes in process `syz.2.116'. [ 110.832163][ T6221] netlink: 338 bytes leftover after parsing attributes in process `syz.0.122'. [ 110.876001][ T6221] netlink: 338 bytes leftover after parsing attributes in process `syz.0.122'. [ 111.099293][ T6226] netlink: 'syz.3.124': attribute type 21 has an invalid length. [ 111.107086][ T6226] netlink: 334 bytes leftover after parsing attributes in process `syz.3.124'. [ 111.288400][ T6230] random: crng reseeded on system resumption [ 113.460481][ T6279] netlink: 'syz.3.145': attribute type 28 has an invalid length. [ 113.477809][ T6279] netlink: 'syz.3.145': attribute type 29 has an invalid length. [ 113.495834][ T6279] netlink: 'syz.3.145': attribute type 30 has an invalid length. [ 113.518036][ T6279] netlink: 'syz.3.145': attribute type 31 has an invalid length. [ 113.538095][ T6279] netlink: 'syz.3.145': attribute type 32 has an invalid length. [ 113.551178][ T6279] netlink: 'syz.3.145': attribute type 33 has an invalid length. [ 113.587826][ T6279] netlink: 'syz.3.145': attribute type 35 has an invalid length. [ 113.609825][ T6279] netlink: 'syz.3.145': attribute type 37 has an invalid length. [ 113.645763][ T6279] netlink: 'syz.3.145': attribute type 39 has an invalid length. [ 113.667827][ T6279] netlink: 'syz.3.145': attribute type 40 has an invalid length. [ 113.678270][ T6279] netlink: 18 bytes leftover after parsing attributes in process `syz.3.145'. [ 116.430777][ T6337] netlink: 330 bytes leftover after parsing attributes in process `syz.0.166'. [ 117.951339][ T6358] mkiss: ax0: crc mode is auto. [ 118.427330][ T6373] netlink: 342 bytes leftover after parsing attributes in process `syz.3.179'. [ 119.742214][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 120.080957][ T6400] ovs_: entered promiscuous mode [ 120.568514][ T6411] validate_nla: 2 callbacks suppressed [ 120.568559][ T6411] netlink: 'syz.2.195': attribute type 3 has an invalid length. [ 120.581913][ T6411] netlink: 332 bytes leftover after parsing attributes in process `syz.2.195'. [ 120.594949][ T6411] netlink: 'syz.2.195': attribute type 3 has an invalid length. [ 120.602786][ T6411] netlink: 332 bytes leftover after parsing attributes in process `syz.2.195'. [ 120.796145][ T6414] Process accounting resumed [ 121.362927][ T6432] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.262881][ T6442] misc userio: No port type given on /dev/userio [ 122.849171][ T6453] netlink: 'syz.1.209': attribute type 28 has an invalid length. [ 122.857008][ T6453] netlink: 334 bytes leftover after parsing attributes in process `syz.1.209'. [ 123.004932][ T6458] Process accounting resumed [ 123.009975][ T6458] kernel write not supported for file net/rpc/nfsd.fh/content (pid: 6458 comm: syz.0.212) [ 123.206294][ T6461] netlink: 326 bytes leftover after parsing attributes in process `syz.2.214'. [ 123.534538][ T6469] netlink: 342 bytes leftover after parsing attributes in process `syz.0.217'. [ 123.770477][ T6474] netlink: 330 bytes leftover after parsing attributes in process `syz.3.219'. [ 124.128127][ T6482] Process accounting resumed [ 124.182822][ T6362] Process accounting resumed [ 124.204369][ T6362] kstrtoul() returned -22 for lu_gp_id [ 124.392082][ T6484] netlink: 'syz.2.223': attribute type 1 has an invalid length. [ 124.991194][ T29] audit: type=1804 audit(1736177047.620:2): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.218" name="/newroot/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id" dev="configfs" ino=10369 res=1 errno=0 [ 125.097765][ T29] audit: type=1800 audit(1736177047.670:3): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.218" name="lu_gp_id" dev="configfs" ino=10369 res=0 errno=0 [ 125.296043][ T6479] kstrtoul() returned -22 for lu_gp_id [ 125.723710][ T6511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.231'. [ 125.788951][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.830037][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.039347][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.103204][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.293558][ T6520] openvswitch: netlink: VXLAN extension 13870 out of range max 1 [ 126.978776][ T6511] kstrtoul() returned -22 for lu_gp_id [ 127.045500][ T6536] netlink: 146 bytes leftover after parsing attributes in process `syz.2.241'. [ 127.336198][ T6539] kstrtoul() returned -22 for lu_gp_id [ 127.699473][ T6546] kstrtoul() returned -22 for lu_gp_id [ 128.019250][ T6556] netlink: 'syz.3.249': attribute type 19 has an invalid length. [ 128.027051][ T6556] netlink: 114 bytes leftover after parsing attributes in process `syz.3.249'. [ 128.064230][ T6551] kstrtoul() returned -22 for lu_gp_id [ 128.327587][ T6563] kstrtoul() returned -22 for lu_gp_id [ 128.796555][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 129.097656][ T6573] kstrtoul() returned -22 for lu_gp_id [ 129.519662][ T6590] kstrtoul() returned -22 for lu_gp_id [ 129.823185][ T6488] kstrtoul() returned -22 for lu_gp_id [ 130.684131][ T6603] kstrtoul() returned -22 for lu_gp_id [ 130.766658][ T6620] netlink: 334 bytes leftover after parsing attributes in process `syz.2.274'. [ 130.862124][ T6624] process 'syz.3.276' launched ':,' with NULL argv: empty string added [ 131.165062][ T6626] kstrtoul() returned -22 for lu_gp_id [ 131.530419][ T6634] kstrtoul() returned -22 for lu_gp_id [ 131.863945][ T6643] kstrtoul() returned -22 for lu_gp_id [ 131.960836][ T6646] netlink: 350 bytes leftover after parsing attributes in process `syz.3.284'. [ 132.088235][ T6648] kstrtoul() returned -22 for lu_gp_id [ 132.372819][ T6659] netlink: 'syz.3.290': attribute type 33 has an invalid length. [ 132.390897][ T6659] netlink: 322 bytes leftover after parsing attributes in process `syz.3.290'. [ 132.421043][ T6659] netlink: 'syz.3.290': attribute type 33 has an invalid length. [ 132.437761][ T6659] netlink: 322 bytes leftover after parsing attributes in process `syz.3.290'. [ 133.077199][ T6656] kstrtoul() returned -22 for lu_gp_id [ 133.293963][ T6674] kstrtoul() returned -22 for lu_gp_id [ 133.508190][ T6683] netlink: 330 bytes leftover after parsing attributes in process `syz.0.300'. [ 133.605127][ T6682] kstrtoul() returned -22 for lu_gp_id [ 133.779472][ T6692] netlink: 244 bytes leftover after parsing attributes in process `syz.3.304'. [ 134.191181][ T6706] netlink: 338 bytes leftover after parsing attributes in process `syz.1.309'. [ 134.218941][ T6706] netlink: 338 bytes leftover after parsing attributes in process `syz.1.309'. [ 134.253384][ T6689] kstrtoul() returned -22 for lu_gp_id [ 135.209112][ T6718] netlink: 'syz.2.313': attribute type 4 has an invalid length. [ 135.226041][ T6718] netlink: 314 bytes leftover after parsing attributes in process `syz.2.313'. [ 135.731410][ T6715] kstrtoul() returned -22 for lu_gp_id [ 136.624692][ T6734] netlink: 'syz.1.319': attribute type 4 has an invalid length. [ 137.509712][ T6722] kstrtoul() returned -22 for lu_gp_id [ 137.713751][ T6755] netlink: 306 bytes leftover after parsing attributes in process `syz.2.327'. [ 138.068020][ T6701] kstrtoul() returned -22 for lu_gp_id [ 138.306365][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.313587][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.580424][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.338'. [ 138.700455][ T6766] kstrtoul() returned -22 for lu_gp_id [ 138.871910][ T6786] mkiss: ax0: crc mode is auto. [ 138.931656][ T6787] kstrtoul() returned -22 for lu_gp_id [ 139.252968][ T6795] kstrtoul() returned -22 for lu_gp_id [ 140.367214][ T6833] netlink: 'syz.1.360': attribute type 27 has an invalid length. [ 140.400776][ T6802] kstrtoul() returned -22 for lu_gp_id [ 140.417915][ T6833] netlink: 334 bytes leftover after parsing attributes in process `syz.1.360'. [ 140.573613][ T6835] kstrtoul() returned -22 for lu_gp_id [ 140.780922][ T6843] kstrtoul() returned -22 for lu_gp_id [ 141.001553][ T6852] kstrtoul() returned -22 for lu_gp_id [ 141.029151][ T6859] netlink: 330 bytes leftover after parsing attributes in process `syz.2.370'. [ 141.248161][ T6868] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 141.264747][ T6868] netlink: 230 bytes leftover after parsing attributes in process `syz.2.374'. [ 142.058636][ T6863] kstrtoul() returned -22 for lu_gp_id [ 142.154647][ T6888] netlink: 330 bytes leftover after parsing attributes in process `syz.3.382'. [ 142.299127][ T6890] kstrtoul() returned -22 for lu_gp_id [ 142.912339][ T6895] kstrtoul() returned -22 for lu_gp_id [ 143.214108][ T6919] vivid-003: ================= START STATUS ================= [ 143.259795][ T6919] vivid-003: Radio HW Seek Mode: Bounded [ 143.291470][ T6919] vivid-003: Radio Programmable HW Seek: false [ 143.318834][ T6919] vivid-003: RDS Rx I/O Mode: Block I/O [ 143.347860][ T6919] vivid-003: Generate RBDS Instead of RDS: false [ 143.362312][ T6919] vivid-003: RDS Reception: true [ 143.377536][ T6919] vivid-003: RDS Program Type: 0 inactive [ 143.395987][ T6919] vivid-003: RDS PS Name: inactive [ 143.416455][ T6919] vivid-003: RDS Radio Text: inactive [ 143.439840][ T6919] vivid-003: RDS Traffic Announcement: false inactive [ 143.456620][ T6919] vivid-003: RDS Traffic Program: false inactive [ 143.470497][ T6919] vivid-003: RDS Music: false inactive [ 143.476677][ T6919] vivid-003: ================== END STATUS ================== [ 143.925172][ T6914] kstrtoul() returned -22 for lu_gp_id [ 144.298336][ T6940] netlink: 74 bytes leftover after parsing attributes in process `syz.1.400'. [ 144.826140][ T6952] ima: policy update failed [ 144.850293][ T29] audit: type=1802 audit(1736177067.490:4): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.404" res=0 errno=0 [ 145.151590][ T6946] kstrtoul() returned -22 for lu_gp_id [ 145.463693][ T6967] kstrtoul() returned -22 for lu_gp_id [ 145.557816][ T6970] Process accounting resumed [ 146.340630][ T6981] binder: 6980:6981 unknown command 1986356271 [ 146.346943][ T6981] binder: 6980:6981 ioctl c0306201 9 returned -22 [ 146.667999][ T6977] kstrtoul() returned -22 for lu_gp_id [ 147.003575][ T6998] netlink: 350 bytes leftover after parsing attributes in process `syz.3.419'. [ 147.035284][ T6986] kstrtoul() returned -22 for lu_gp_id [ 147.106189][ T6995] kstrtoul() returned -22 for lu_gp_id [ 147.172251][ T7000] Process accounting resumed [ 147.459430][ T7008] netlink: 2 bytes leftover after parsing attributes in process `syz.0.421'. [ 147.947870][ T6927] kstrtoul() returned -22 for lu_gp_id [ 148.306138][ T7003] kstrtoul() returned -22 for lu_gp_id [ 148.390159][ T7024] netlink: 338 bytes leftover after parsing attributes in process `syz.2.428'. [ 148.431977][ T7024] netlink: 338 bytes leftover after parsing attributes in process `syz.2.428'. [ 148.716706][ T7025] kstrtoul() returned -22 for lu_gp_id [ 148.873393][ T7031] netlink: 338 bytes leftover after parsing attributes in process `syz.2.433'. [ 149.683497][ T7036] kstrtoul() returned -22 for lu_gp_id [ 149.949040][ T7045] kstrtoul() returned -22 for lu_gp_id [ 150.147066][ T7047] kstrtoul() returned -22 for lu_gp_id [ 150.644160][ T7056] syz.3.443 uses obsolete (PF_INET,SOCK_PACKET) [ 151.346001][ T7053] kstrtoul() returned -22 for lu_gp_id [ 151.745386][ T7074] kstrtoul() returned -22 for lu_gp_id [ 152.104183][ T7079] netlink: 326 bytes leftover after parsing attributes in process `syz.0.451'. [ 152.247791][ T7079] kstrtoul() returned -22 for lu_gp_id [ 152.590416][ T7088] kstrtoul() returned -22 for lu_gp_id [ 153.313178][ T7090] kstrtoul() returned -22 for lu_gp_id [ 153.587058][ T7111] kstrtoul() returned -22 for lu_gp_id [ 153.785886][ T7115] kstrtoul() returned -22 for lu_gp_id [ 153.928696][ T7117] kstrtoul() returned -22 for lu_gp_id [ 154.270831][ T7127] Process accounting resumed [ 154.667183][ T7119] Process accounting paused [ 155.407241][ T7135] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 155.589896][ T7147] Process accounting resumed [ 155.968798][ T7152] mkiss: ax0: crc mode is auto. [ 156.109139][ T7157] Process accounting resumed [ 156.642803][ T7165] netlink: 330 bytes leftover after parsing attributes in process `syz.1.478'. [ 159.821303][ T7216] netlink: 330 bytes leftover after parsing attributes in process `syz.3.492'. [ 160.155757][ T7220] can: request_module (can-proto-4) failed. [ 161.009226][ T7245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.504'. [ 161.019561][ T7245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.504'. [ 161.327256][ T7256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.514'. [ 162.054609][ T7277] netlink: 338 bytes leftover after parsing attributes in process `syz.3.509'. [ 162.147704][ T7277] netlink: 338 bytes leftover after parsing attributes in process `syz.3.509'. [ 162.322366][ T7256] syz.0.514 (7256) used greatest stack depth: 20848 bytes left [ 162.918680][ T7294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.096088][ T7321] netlink: 146 bytes leftover after parsing attributes in process `syz.0.521'. [ 165.860674][ T7326] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 167.387313][ T7352] netlink: 266 bytes leftover after parsing attributes in process `syz.1.533'. [ 167.497823][ T7352] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.615686][ T7354] netlink: 146 bytes leftover after parsing attributes in process `syz.2.534'. [ 168.672850][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.539'. [ 169.566129][ T7397] netlink: 342 bytes leftover after parsing attributes in process `syz.2.547'. [ 169.593165][ T7397] netlink: 102 bytes leftover after parsing attributes in process `syz.2.547'. [ 170.106210][ T7407] netlink: 'syz.3.551': attribute type 27 has an invalid length. [ 170.106236][ T7407] netlink: 334 bytes leftover after parsing attributes in process `syz.3.551'. [ 171.289284][ T7429] netlink: 326 bytes leftover after parsing attributes in process `syz.0.558'. [ 171.521464][ T7431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.559'. [ 173.051094][ T7456] netlink: 326 bytes leftover after parsing attributes in process `syz.3.567'. [ 174.722007][ T7484] Process accounting resumed [ 174.733724][ T7486] netlink: 330 bytes leftover after parsing attributes in process `syz.0.579'. [ 174.876281][ T7489] netlink: 'syz.0.580': attribute type 19 has an invalid length. [ 174.884205][ T7489] netlink: 114 bytes leftover after parsing attributes in process `syz.0.580'. [ 175.645729][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.587'. [ 175.676167][ T7504] unsupported nlmsg_type 40 [ 177.890288][ T7555] netlink: 334 bytes leftover after parsing attributes in process `syz.0.609'. [ 178.401492][ T7563] netlink: 334 bytes leftover after parsing attributes in process `syz.0.605'. [ 178.940278][ T7578] netlink: 330 bytes leftover after parsing attributes in process `syz.2.611'. [ 179.758882][ T7595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.617'. [ 180.146307][ T7603] netlink: 330 bytes leftover after parsing attributes in process `syz.0.621'. [ 180.502507][ T29] audit: type=1800 audit(6031144408.141:5): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.619" name="dbroot" dev="configfs" ino=12244 res=0 errno=0 [ 180.534677][ T7608] db_root: cannot open:  [ 180.546504][ T7609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.622'. [ 180.822962][ T7614] netlink: 146 bytes leftover after parsing attributes in process `syz.3.624'. [ 182.597524][ T7643] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[7643] [ 183.241559][ T7651] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.636'. [ 183.350952][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 183.391064][ T7654] netlink: 'syz.1.637': attribute type 5 has an invalid length. [ 183.398914][ T7654] netlink: 314 bytes leftover after parsing attributes in process `syz.1.637'. [ 184.947059][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.647'. [ 185.001671][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.647'. [ 187.185735][ T7717] netlink: 334 bytes leftover after parsing attributes in process `syz.1.660'. [ 187.501020][ T7724] netlink: 326 bytes leftover after parsing attributes in process `syz.1.662'. [ 188.926429][ T7737] netlink: 326 bytes leftover after parsing attributes in process `syz.1.669'. [ 189.285154][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'. [ 189.339176][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'. [ 189.983235][ T7757] netlink: 'syz.2.675': attribute type 39 has an invalid length. [ 190.037724][ T7757] netlink: 'syz.2.675': attribute type 40 has an invalid length. [ 190.097729][ T7757] netlink: 'syz.2.675': attribute type 41 has an invalid length. [ 190.142749][ T7757] netlink: 'syz.2.675': attribute type 44 has an invalid length. [ 190.197725][ T7757] netlink: 'syz.2.675': attribute type 46 has an invalid length. [ 190.227426][ T7757] netlink: 'syz.2.675': attribute type 47 has an invalid length. [ 190.256379][ T7757] netlink: 'syz.2.675': attribute type 48 has an invalid length. [ 190.277765][ T7757] netlink: 'syz.2.675': attribute type 49 has an invalid length. [ 190.306119][ T7757] netlink: 'syz.2.675': attribute type 50 has an invalid length. [ 190.366022][ T7757] netlink: 6 bytes leftover after parsing attributes in process `syz.2.675'. [ 191.268332][ T7776] netlink: 'syz.2.681': attribute type 4 has an invalid length. [ 191.268355][ T7776] netlink: 314 bytes leftover after parsing attributes in process `syz.2.681'. [ 191.644909][ T7782] netlink: 326 bytes leftover after parsing attributes in process `syz.2.685'. [ 191.736183][ T7778] netlink: 146 bytes leftover after parsing attributes in process `syz.1.686'. [ 192.157521][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 192.183212][ T7797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.700'. [ 192.222698][ T7797] hsr_slave_0: left promiscuous mode [ 192.261315][ T7797] hsr_slave_1: left promiscuous mode [ 192.881598][ T7817] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[7817] [ 193.469209][ T7832] netlink: 330 bytes leftover after parsing attributes in process `syz.1.703'. [ 194.313499][ T7850] netlink: 326 bytes leftover after parsing attributes in process `syz.2.709'. [ 194.982370][ T7870] lo: entered promiscuous mode [ 195.154790][ T7875] raw_sendmsg: syz.1.718 forgot to set AF_INET. Fix it! [ 195.318995][ T7870] lo: left promiscuous mode [ 195.415917][ T7879] netlink: 334 bytes leftover after parsing attributes in process `syz.3.721'. [ 195.930098][ T7889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.723'. [ 196.101833][ T7894] netlink: 330 bytes leftover after parsing attributes in process `syz.1.726'. [ 196.785687][ T7906] netlink: 326 bytes leftover after parsing attributes in process `syz.0.729'. [ 196.998522][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.732'. [ 197.910510][ T7929] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[7929] [ 198.698734][ T7942] netlink: 330 bytes leftover after parsing attributes in process `syz.0.742'. [ 199.768130][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.774493][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.673621][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'. [ 202.748340][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'. [ 203.282168][ T8051] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.780'. [ 203.311230][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 203.772027][ T8056] netlink: 330 bytes leftover after parsing attributes in process `syz.0.782'. [ 204.471046][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.480120][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.489607][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.507082][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.520545][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 204.529964][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.023797][ T8077] netlink: 138 bytes leftover after parsing attributes in process `syz.0.789'. [ 205.105044][ T8066] chnl_net:caif_netlink_parms(): no params data found [ 205.481138][ T8066] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.512004][ T8066] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.538124][ T8066] bridge_slave_0: entered allmulticast mode [ 205.545201][ T8066] bridge_slave_0: entered promiscuous mode [ 205.574059][ T8066] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.586682][ T8066] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.608074][ T8066] bridge_slave_1: entered allmulticast mode [ 205.615095][ T8066] bridge_slave_1: entered promiscuous mode [ 205.756445][ T8066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.794344][ T8066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.940841][ T8066] team0: Port device team_slave_0 added [ 205.950257][ T8066] team0: Port device team_slave_1 added [ 206.158777][ T8066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.177717][ T8066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.265514][ T8066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.304247][ T8066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.316851][ T8066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.354073][ T8066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.486359][ T8066] hsr_slave_0: entered promiscuous mode [ 206.498601][ T8066] hsr_slave_1: entered promiscuous mode [ 206.526027][ T8066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.533931][ T8066] Cannot create hsr debugfs directory [ 206.617768][ T5846] Bluetooth: hci1: command tx timeout [ 206.929475][ T8066] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.950594][ T8066] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.970239][ T8066] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.982347][ T8066] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.235981][ T8066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.300647][ T8066] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.322353][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.329511][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.564033][ T8101] syz.0.794 (8101) used greatest stack depth: 20592 bytes left [ 207.616323][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.623503][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.212115][ T8066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.717926][ T5846] Bluetooth: hci1: command tx timeout [ 208.736284][ T8066] veth0_vlan: entered promiscuous mode [ 208.833799][ T8066] veth1_vlan: entered promiscuous mode [ 208.935956][ T8066] veth0_macvtap: entered promiscuous mode [ 209.031636][ T8066] veth1_macvtap: entered promiscuous mode [ 209.104278][ T8066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.138382][ T8066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.152331][ T8066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.163287][ T8066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.174549][ T8066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.195634][ T8066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.217151][ T8066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.260115][ T8066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.295173][ T8066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.317920][ T8066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.342182][ T8066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.352273][ T8066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.362829][ T8066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.373844][ T8066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.494229][ T8066] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.533688][ T8066] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.549438][ T8066] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.577763][ T8066] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.688427][ T8143] netlink: 330 bytes leftover after parsing attributes in process `syz.1.804'. [ 209.733192][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.757701][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.783827][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.792782][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.529327][ T8154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.808'. [ 210.566445][ T8154] lo: entered promiscuous mode [ 210.583455][ T8154] lo: entered allmulticast mode [ 210.789269][ T5853] Bluetooth: hci1: command tx timeout [ 211.420445][ T8185] netlink: 342 bytes leftover after parsing attributes in process `syz.4.820'. [ 211.445514][ T8185] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.058239][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 212.226619][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'. [ 212.334103][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'. [ 212.728355][ T8225] netlink: 'syz.2.833': attribute type 21 has an invalid length. [ 212.777747][ T8225] netlink: 326 bytes leftover after parsing attributes in process `syz.2.833'. [ 212.858782][ T5846] Bluetooth: hci1: command tx timeout [ 213.103890][ T8228] netlink: 326 bytes leftover after parsing attributes in process `syz.0.842'. [ 213.119802][ T8230] netlink: 330 bytes leftover after parsing attributes in process `syz.2.834'. [ 214.037753][ T8246] netlink: 330 bytes leftover after parsing attributes in process `syz.4.841'. [ 214.888634][ T8266] netlink: 330 bytes leftover after parsing attributes in process `syz.0.849'. [ 215.233735][ T8276] sp0: Synchronizing with TNC [ 215.328800][ T8281] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 215.351055][ T8281] netlink: 53 bytes leftover after parsing attributes in process `syz.1.854'. [ 215.367056][ T8281] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 215.387846][ T8280] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.852'. [ 215.407891][ T8281] netlink: 53 bytes leftover after parsing attributes in process `syz.1.854'. [ 215.521577][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.852'. [ 215.600888][ T8284] netlink: 330 bytes leftover after parsing attributes in process `syz.0.855'. [ 216.325964][ T7843] syz.2.705 (7843) used greatest stack depth: 19312 bytes left [ 216.862667][ T8314] netlink: 'syz.2.862': attribute type 21 has an invalid length. [ 216.903224][ T8314] netlink: 326 bytes leftover after parsing attributes in process `syz.2.862'. [ 217.180765][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 217.180782][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 217.723007][ T8347] netlink: 326 bytes leftover after parsing attributes in process `syz.4.871'. [ 218.971443][ T8388] netlink: 306 bytes leftover after parsing attributes in process `syz.0.882'. [ 219.324886][ T7699] syz.2.653 (7699) used greatest stack depth: 18624 bytes left [ 219.575887][ T8403] netlink: 326 bytes leftover after parsing attributes in process `syz.4.889'. [ 220.600304][ T8429] netlink: 146 bytes leftover after parsing attributes in process `syz.0.900'. [ 220.923554][ T8438] netlink: 330 bytes leftover after parsing attributes in process `syz.4.903'. [ 221.771602][ T8456] netlink: 'syz.0.909': attribute type 17 has an invalid length. [ 221.807736][ T8456] netlink: 326 bytes leftover after parsing attributes in process `syz.0.909'. [ 222.793769][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'. [ 222.795567][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 222.924809][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 224.317969][ T8495] netlink: 342 bytes leftover after parsing attributes in process `syz.4.923'. [ 224.422100][ T8495] netlink: 342 bytes leftover after parsing attributes in process `syz.4.923'. [ 224.840869][ T8506] netlink: 314 bytes leftover after parsing attributes in process `syz.4.927'. [ 224.868689][ T8504] netlink: 'syz.1.926': attribute type 4 has an invalid length. [ 224.876426][ T8504] netlink: 314 bytes leftover after parsing attributes in process `syz.1.926'. [ 225.769393][ T8518] __nla_validate_parse: 2 callbacks suppressed [ 225.769416][ T8518] netlink: 330 bytes leftover after parsing attributes in process `syz.0.940'. [ 225.815734][ T8518] : renamed from gre0 (while UP) [ 225.858524][ T8518] netlink: 330 bytes leftover after parsing attributes in process `syz.0.940'. [ 226.355283][ T8531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.935'. [ 226.464856][ T8531] veth0_macvtap: left promiscuous mode [ 226.545352][ T8535] netlink: 334 bytes leftover after parsing attributes in process `syz.0.937'. [ 227.141514][ T8552] netlink: 326 bytes leftover after parsing attributes in process `syz.4.944'. [ 227.171977][ T8552] veth0_macvtap: left promiscuous mode [ 227.633972][ T8564] netlink: 330 bytes leftover after parsing attributes in process `syz.1.947'. [ 228.241426][ T8579] netlink: 342 bytes leftover after parsing attributes in process `syz.0.955'. [ 228.643521][ T8589] netlink: 330 bytes leftover after parsing attributes in process `syz.4.960'. [ 228.677781][ T8589] : renamed from gre0 (while UP) [ 228.739232][ T8589] netlink: 330 bytes leftover after parsing attributes in process `syz.4.960'. [ 229.164256][ T8602] netlink: 342 bytes leftover after parsing attributes in process `syz.0.972'. [ 229.425281][ T8609] netlink: 'syz.0.966': attribute type 33 has an invalid length. [ 230.254259][ T8604] lo: entered promiscuous mode [ 230.283875][ T8604] lo: entered allmulticast mode [ 233.054256][ T8675] __nla_validate_parse: 2 callbacks suppressed [ 233.054279][ T8675] netlink: 146 bytes leftover after parsing attributes in process `syz.2.992'. [ 233.183242][ T8681] netlink: 342 bytes leftover after parsing attributes in process `syz.0.993'. [ 233.202727][ T8681] IPv6: NLM_F_CREATE should be specified when creating new route [ 233.212259][ T8681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 233.219981][ T8681] IPv6: NLM_F_CREATE should be set when creating new route [ 233.227220][ T8681] IPv6: NLM_F_CREATE should be set when creating new route [ 233.884372][ T8701] Process accounting resumed [ 234.780116][ T8722] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1010'. [ 234.912434][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'. [ 235.336526][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 235.357796][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 236.280260][ T8756] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1023'. [ 236.819401][ T8776] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1033'. [ 237.320170][ T8791] netlink: 266 bytes leftover after parsing attributes in process `syz.1.1039'. [ 239.834250][ T8852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1059'. [ 240.569183][ T8868] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1064'. [ 240.726006][ T8874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1067'. [ 240.962656][ T8877] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1069'. [ 241.404782][ T8885] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1072'. [ 241.860701][ T8896] netlink: 290 bytes leftover after parsing attributes in process `syz.0.1079'. [ 241.972539][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'. [ 242.082827][ T8901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1080'. [ 242.158004][ T8901] veth1_macvtap: entered allmulticast mode [ 242.419260][ T8910] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 242.991606][ T8924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1089'. [ 243.697181][ T8937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1092'. [ 244.972093][ T8957] netlink: 'syz.0.1100': attribute type 3 has an invalid length. [ 245.459075][ T8966] __nla_validate_parse: 1 callbacks suppressed [ 245.459098][ T8966] netlink: 266 bytes leftover after parsing attributes in process `syz.2.1102'. [ 246.527903][ T8984] netlink: 'syz.4.1108': attribute type 1 has an invalid length. [ 246.773722][ T8993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1111'. [ 247.047907][ T8993] veth1_macvtap: left promiscuous mode [ 247.290012][ T9007] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1117'. [ 247.306784][ T9007] IPv6: Can't replace route, no match found [ 247.798828][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 247.878806][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 248.461378][ T9041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1127'. [ 248.528240][ T9041] veth1_macvtap: left promiscuous mode [ 248.933898][ T9055] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1132'. [ 248.997872][ T9058] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1133'. [ 249.295599][ T9063] netlink: zone id is out of range [ 249.403890][ T9063] netlink: zone id is out of range [ 249.451315][ T9063] netlink: set zone limit has 8 unknown bytes [ 250.868123][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'. [ 250.884155][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'. [ 250.892072][ T9099] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1147'. [ 251.691741][ T9113] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 251.710531][ T9113] binder: 9112:9113 ioctl 4018620d 9 returned -22 [ 253.716474][ T9169] mkiss: ax0: crc mode is auto. [ 254.555859][ T9190] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1186'. [ 254.671937][ T9194] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1188'. [ 257.527492][ T9255] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1208'. [ 258.376872][ T9267] netlink: zone id is out of range [ 258.420775][ T9267] netlink: zone id is out of range [ 258.437358][ T9267] netlink: set zone limit has 8 unknown bytes [ 261.179962][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.186370][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.377559][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1234'. [ 261.400076][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1234'. [ 262.263417][ T9351] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1241'. [ 262.298030][ T9355] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1245'. [ 262.790537][ T9367] netlink: 'syz.2.1251': attribute type 4 has an invalid length. [ 262.816115][ T9367] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1251'. [ 262.998873][ T9372] netlink: 'syz.2.1254': attribute type 4 has an invalid length. [ 263.017015][ T9372] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1254'. [ 263.043300][ T9372] IPv6: NLM_F_REPLACE set, but no existing node found! [ 263.730381][ T9384] netlink: 314 bytes leftover after parsing attributes in process `syz.0.1258'. [ 264.277040][ T9395] netlink: 74 bytes leftover after parsing attributes in process `syz.2.1262'. [ 265.887960][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1276'. [ 265.911597][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1276'. [ 266.160384][ T9437] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1279'. [ 266.219669][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 266.737212][ T9451] netlink: 'syz.2.1285': attribute type 39 has an invalid length. [ 266.753057][ T9451] netlink: 'syz.2.1285': attribute type 40 has an invalid length. [ 266.767738][ T9451] netlink: 'syz.2.1285': attribute type 41 has an invalid length. [ 266.786876][ T9451] netlink: 'syz.2.1285': attribute type 44 has an invalid length. [ 266.802161][ T9451] netlink: 'syz.2.1285': attribute type 46 has an invalid length. [ 266.821187][ T9451] netlink: 'syz.2.1285': attribute type 47 has an invalid length. [ 266.837723][ T9451] netlink: 'syz.2.1285': attribute type 48 has an invalid length. [ 266.852479][ T9451] netlink: 'syz.2.1285': attribute type 49 has an invalid length. [ 266.868879][ T9451] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1285'. [ 267.635487][ T9466] netlink: 322 bytes leftover after parsing attributes in process `syz.2.1291'. [ 269.601405][ T9521] Invalid ELF header magic: != ELF [ 270.720358][ T9549] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1318'. [ 270.768711][ T9549] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1318'. [ 270.816288][ T9549] netlink: 70 bytes leftover after parsing attributes in process `syz.1.1318'. [ 271.167543][ T9557] netlink: 130 bytes leftover after parsing attributes in process `syz.0.1321'. [ 271.860828][ T9573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1328'. [ 271.901490][ T9573] vcan0: entered promiscuous mode [ 272.614740][ T9592] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1335'. [ 273.929493][ T9610] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1341'. [ 275.406258][ T9647] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1357'. [ 275.570218][ T9654] block nbd0: not configured, cannot reconfigure [ 276.232667][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1368'. [ 276.786577][ T9690] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1374'. [ 279.283494][ T9745] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1394'. [ 279.799043][ T9752] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1396'. [ 281.619341][ T9789] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1412'. [ 285.048588][ T9882] sp0: Synchronizing with TNC [ 285.652778][ T9892] netlink: 322 bytes leftover after parsing attributes in process `syz.4.1448'. [ 286.214755][ T9915] sock: sock_set_timeout: `syz.1.1459' (pid 9915) tries to set negative timeout [ 286.769962][ T9931] netlink: 322 bytes leftover after parsing attributes in process `syz.4.1463'. [ 286.797147][ T9931] vcan0: entered promiscuous mode [ 287.306100][ T9940] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1466'. [ 289.676183][T10012] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1496'. [ 291.074773][T10061] netlink: 314 bytes leftover after parsing attributes in process `syz.0.1513'. [ 291.123400][T10057] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1514'. [ 291.522107][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 292.121235][T10090] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1527'. [ 292.887810][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1535'. [ 292.904751][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1535'. [ 293.435926][T10127] netlink: 306 bytes leftover after parsing attributes in process `syz.4.1539'. [ 293.690203][T10134] tipc: Started in network mode [ 293.695534][T10134] tipc: Node identity ffffffff, cluster identity 4711 [ 293.723664][T10134] tipc: Node number set to 4294967295 [ 296.319311][T10190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1565'. [ 296.372820][T10178] HfR: entered promiscuous mode [ 296.389826][T10184] openvswitch: HfR: Dropping previously announced user features [ 298.435177][T10231] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1580'. [ 298.719915][T10244] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1587'. [ 299.289443][T10266] validate_nla: 2 callbacks suppressed [ 299.289466][T10266] netlink: 'syz.1.1592': attribute type 5 has an invalid length. [ 299.305828][T10266] netlink: 314 bytes leftover after parsing attributes in process `syz.1.1592'. [ 299.320804][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1589'. [ 299.330508][T10261] tc_dump_action: action bad kind [ 299.534870][T10276] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1596'. [ 299.544875][T10276] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1596'. [ 299.554776][T10276] netlink: 210 bytes leftover after parsing attributes in process `syz.4.1596'. [ 301.389927][T10324] mmap: syz.0.1612 (10324) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 301.756960][T10333] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1614'. [ 302.040408][T10337] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1616'. [ 302.132476][T10337] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.141931][T10337] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.549059][T10350] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1622'. [ 303.746342][T10374] __nla_validate_parse: 1 callbacks suppressed [ 303.746365][T10374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1632'. [ 303.936943][T10374] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 308.455747][T10469] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1665'. [ 308.488352][T10469] veth1_macvtap: left promiscuous mode [ 308.493871][T10469] macsec0: entered promiscuous mode [ 309.276064][T10483] HfR: entered promiscuous mode [ 309.365849][T10483] openvswitch: HfR: Dropping previously announced user features [ 309.739327][T10502] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1675'. [ 309.797170][T10504] bridge0: port 3(hsr_slave_1) entered blocking state [ 309.810255][T10504] bridge0: port 3(hsr_slave_1) entered disabled state [ 309.817317][T10504] hsr_slave_1: entered allmulticast mode [ 309.826496][T10504] hsr_slave_1: entered promiscuous mode [ 309.833386][T10504] bridge0: port 3(hsr_slave_1) entered blocking state [ 309.840322][T10504] bridge0: port 3(hsr_slave_1) entered forwarding state [ 309.910879][T10502] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.919563][T10502] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.988723][T10507] netlink: 'syz.0.1677': attribute type 4 has an invalid length. [ 310.003880][T10507] netlink: 314 bytes leftover after parsing attributes in process `syz.0.1677'. [ 310.055566][T10509] netlink: 'syz.0.1677': attribute type 4 has an invalid length. [ 310.070859][T10509] netlink: 314 bytes leftover after parsing attributes in process `syz.0.1677'. [ 312.448559][T10579] netlink: 4763 bytes leftover after parsing attributes in process `syz.0.1704'. syzkaller syzkaller login: [ 312.967723][T10595] Process accounting resumed [ 312.974527][T10595] kernel write not supported for file /trace_marker (pid: 10595 comm: syz.1.1711) [ 313.060209][T10591] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1708'. [ 313.084786][T10587] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1708'. [ 313.875415][T10617] netlink: 'syz.4.1717': attribute type 64 has an invalid length. [ 313.905647][T10617] netlink: 74 bytes leftover after parsing attributes in process `syz.4.1717'. [ 315.913023][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1741'. [ 315.925114][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1741'. [ 317.164677][T10702] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1749'. [ 317.217947][T10706] netlink: 'syz.4.1751': attribute type 10 has an invalid length. [ 317.227159][T10706] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1751'. [ 320.519520][T10790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1787'. [ 321.247744][T10803] netlink: 50 bytes leftover after parsing attributes in process `syz.0.1792'. [ 321.434148][T10809] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1795'. [ 321.485006][T10813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1794'. [ 321.560230][T10813] ip6gre0: entered promiscuous mode [ 322.622953][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.630533][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.683357][T10856] netlink: 'syz.0.1810': attribute type 27 has an invalid length. [ 323.702682][T10856] netlink: 'syz.0.1810': attribute type 28 has an invalid length. [ 323.731732][T10856] netlink: 'syz.0.1810': attribute type 29 has an invalid length. [ 323.748040][T10856] netlink: 'syz.0.1810': attribute type 30 has an invalid length. [ 323.777686][T10856] netlink: 'syz.0.1810': attribute type 31 has an invalid length. [ 323.796568][T10856] netlink: 'syz.0.1810': attribute type 32 has an invalid length. [ 323.815462][T10856] netlink: 'syz.0.1810': attribute type 33 has an invalid length. [ 323.834718][T10856] netlink: 'syz.0.1810': attribute type 35 has an invalid length. [ 323.851624][T10856] netlink: 'syz.0.1810': attribute type 37 has an invalid length. [ 323.881695][T10856] netlink: 'syz.0.1810': attribute type 39 has an invalid length. [ 323.898672][T10856] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1810'. [ 325.549233][T10892] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1826'. [ 327.493921][T10949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1849'. [ 327.538235][T10949] vxcan1: entered promiscuous mode [ 329.820888][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 330.975346][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1871'. [ 331.022802][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1871'. [ 332.667097][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1881'. [ 332.914743][T11051] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1885'. [ 334.349182][T11082] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1900'. [ 336.398257][T11113] validate_nla: 1 callbacks suppressed [ 336.398279][T11113] netlink: 'syz.0.1909': attribute type 10 has an invalid length. [ 336.519678][T11113] netlink: 230 bytes leftover after parsing attributes in process `syz.0.1909'. [ 336.669309][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1911'. [ 336.724501][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1911'. [ 341.724403][T11168] netlink: 306 bytes leftover after parsing attributes in process `syz.4.1929'. [ 341.808860][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'. [ 341.848377][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'. [ 346.696755][T11225] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1948'. [ 346.734536][T11225] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1948'. [ 347.498172][T11230] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1950'. [ 347.547786][T11230] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1950'. [ 347.594541][T11230] netlink: 210 bytes leftover after parsing attributes in process `syz.4.1950'. [ 348.848692][T11250] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1958'. [ 349.280743][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.298512][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.314494][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.347922][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.356832][ T5853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 349.370566][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.616308][T11257] chnl_net:caif_netlink_parms(): no params data found [ 349.812363][T11257] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.835946][T11257] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.859362][T11257] bridge_slave_0: entered allmulticast mode [ 349.883144][T11257] bridge_slave_0: entered promiscuous mode [ 349.906523][T11257] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.921252][T11257] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.931907][T11257] bridge_slave_1: entered allmulticast mode [ 349.943406][T11257] bridge_slave_1: entered promiscuous mode [ 350.015593][T11257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.035635][T11257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.109377][T11257] team0: Port device team_slave_0 added [ 350.135124][T11257] team0: Port device team_slave_1 added [ 350.210543][T11257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.234788][T11257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.274864][T11257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.291482][T11257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.308326][T11257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.346758][T11257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.562669][T11257] hsr_slave_0: entered promiscuous mode [ 350.598458][T11257] hsr_slave_1: entered promiscuous mode [ 350.647929][T11257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.656272][T11257] Cannot create hsr debugfs directory [ 350.926162][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1968'. [ 350.963829][T11288] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1968'. [ 350.997861][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1968'. [ 351.109505][T11257] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 351.136724][T11257] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 351.214555][T11257] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 351.236184][T11257] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 351.420574][T11257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.421701][ T5853] Bluetooth: hci0: command tx timeout [ 351.491812][T11257] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.544010][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.551890][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.607688][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.615525][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.069843][T11257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.456809][T11257] veth0_vlan: entered promiscuous mode [ 352.493979][T11257] veth1_vlan: entered promiscuous mode [ 352.565794][T11257] veth0_macvtap: entered promiscuous mode [ 352.594327][T11257] veth1_macvtap: entered promiscuous mode [ 352.617905][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.629419][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.640632][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.652155][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.663010][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.674513][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.685401][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.697156][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.709337][T11257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.746703][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.765086][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.797761][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.838034][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.865579][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.896546][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.917770][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.957943][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.969871][T11257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.015354][T11257] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.036178][T11257] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.046761][T11257] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.057027][T11257] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.334056][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.368952][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.423240][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.439013][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.497781][ T5853] Bluetooth: hci0: command tx timeout [ 353.730999][T11332] netlink: 186 bytes leftover after parsing attributes in process `syz.5.1957'. [ 355.308578][T11362] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1994'. [ 355.579762][ T5853] Bluetooth: hci0: command tx timeout [ 356.624908][T11394] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2006'. [ 356.831162][T11399] netlink: 'syz.2.2008': attribute type 64 has an invalid length. [ 356.907687][T11399] netlink: 74 bytes leftover after parsing attributes in process `syz.2.2008'. [ 357.657890][ T5853] Bluetooth: hci0: command tx timeout [ 357.937839][T11417] netlink: 18 bytes leftover after parsing attributes in process `syz.2.2012'. [ 357.963903][T11420] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2014'. [ 357.986781][T11420] netlink: 274 bytes leftover after parsing attributes in process `syz.5.2014'. [ 359.056613][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2022'. [ 359.108943][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2022'. [ 360.718544][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2034'. [ 360.849444][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2034'. [ 363.765302][T11502] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2044'. [ 365.240367][T11535] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2057'. [ 368.459771][T11588] sctp: [Deprecated]: syz.4.2075 (pid 11588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.459771][T11588] Use struct sctp_sack_info instead [ 370.730185][T11619] sp0: Synchronizing with TNC [ 372.747440][T11644] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2093'. [ 374.532538][T11661] HfR: entered promiscuous mode [ 384.003377][T11788] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2136'. [ 384.080122][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.087086][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.157851][T11788] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2136'. [ 384.168040][T11788] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2136'. [ 385.728239][T11823] Process accounting resumed [ 385.750854][ T52] failed to send hello msg [ 385.756499][ T52] failed while handling packet from 1:16384 [ 386.562085][T11838] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2145'. [ 386.786395][T11846] QAT: Invalid ioctl 21531 [ 386.796780][T11844] netlink: 452 bytes leftover after parsing attributes in process `syz.5.2147'. [ 386.866899][T11847] netlink: 452 bytes leftover after parsing attributes in process `syz.5.2147'. [ 388.680560][T11880] netlink: 'syz.4.2161': attribute type 4 has an invalid length. [ 388.706360][T11880] netlink: 314 bytes leftover after parsing attributes in process `syz.4.2161'. [ 388.957077][T11883] netlink: 354 bytes leftover after parsing attributes in process `syz.4.2162'. [ 389.998980][T11905] netlink: 22 bytes leftover after parsing attributes in process `syz.2.2179'. [ 394.634338][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2197'. [ 394.699827][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2197'. [ 396.645583][T12029] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2220'. [ 396.677871][T12029] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2220'. [ 396.705400][T12029] netlink: 194 bytes leftover after parsing attributes in process `syz.2.2220'. [ 398.012019][T12031] kexec: Could not allocate control_code_buffer [ 398.462556][T12067] sp0: Synchronizing with TNC [ 400.199746][T12106] netlink: 266 bytes leftover after parsing attributes in process `syz.5.2240'. [ 400.339034][T12106] IPv6: NLM_F_CREATE should be specified when creating new route [ 400.630410][T12115] netlink: 'syz.5.2243': attribute type 4 has an invalid length. [ 400.664799][T12115] netlink: 314 bytes leftover after parsing attributes in process `syz.5.2243'. [ 400.700052][T12115] IPv6: NLM_F_CREATE should be specified when creating new route [ 400.748431][T12115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 400.756433][T12115] IPv6: NLM_F_CREATE should be set when creating new route [ 401.601191][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2248'. [ 402.822103][T12156] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2255'. [ 402.832652][T12156] ›: renamed from hsr0 (while UP) [ 403.009849][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'. [ 403.055250][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'. [ 403.218572][T12162] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2257'. [ 403.386086][T12162] netlink: 302 bytes leftover after parsing attributes in process `syz.2.2257'. [ 406.095912][T12219] sp0: Synchronizing with TNC [ 406.498036][T12231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'. [ 408.112380][T12248] openvswitch: netlink: IP tunnel dst address not specified [ 408.142429][T12248] openvswitch: netlink: IP tunnel dst address not specified [ 411.239485][T12288] tipc: Started in network mode [ 411.244891][T12288] tipc: Node identity ee00, cluster identity 4711 [ 411.271479][T12288] tipc: Node number set to 60928 [ 411.418179][T12292] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2300'. [ 411.596484][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2303'. [ 411.665788][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2303'. [ 418.309896][T12380] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2331'. [ 419.156972][T12395] nbd: illegal input index 50331648 [ 419.528613][T12404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2341'. [ 419.816891][T12404] hsr_slave_1 (unregistering): left promiscuous mode [ 421.139508][T12424] Invalid ELF header magic: != ELF [ 423.714472][T12459] netlink: 504 bytes leftover after parsing attributes in process `syz.5.2361'. [ 423.725961][T12459] netlink: 504 bytes leftover after parsing attributes in process `syz.5.2361'. [ 423.840930][T12462] syz.5.2363: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 423.857360][T12462] CPU: 0 UID: 0 PID: 12462 Comm: syz.5.2363 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 423.869248][T12462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 423.880349][T12462] Call Trace: [ 423.883982][T12462] [ 423.887228][T12462] dump_stack_lvl+0x16c/0x1f0 [ 423.892419][T12462] warn_alloc+0x24d/0x3a0 [ 423.897243][T12462] ? __pfx_warn_alloc+0x10/0x10 [ 423.902632][T12462] ? __pfx_mark_lock+0x10/0x10 [ 423.907939][T12462] ? lock_acquire.part.0+0x11b/0x380 [ 423.913804][T12462] __vmalloc_node_range_noprof+0x10df/0x1530 [ 423.920424][T12462] ? rcu_is_watching+0x12/0xc0 [ 423.925713][T12462] ? trace_contention_end+0xee/0x140 [ 423.931577][T12462] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 423.937445][T12462] ? dvb_demux_do_ioctl+0x496/0x1340 [ 423.943330][T12462] ? __pfx___mutex_lock+0x10/0x10 [ 423.948907][T12462] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 423.955929][T12462] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 423.962453][T12462] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 423.968324][T12462] vmalloc_noprof+0x6b/0x90 [ 423.973339][T12462] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 423.979201][T12462] dvb_demux_do_ioctl+0x54d/0x1340 [ 423.984886][T12462] dvb_usercopy+0x165/0x320 [ 423.989885][T12462] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 423.996064][T12462] ? __pfx_dvb_usercopy+0x10/0x10 [ 424.001669][T12462] ? __pfx_lock_release+0x10/0x10 [ 424.007248][T12462] ? __fget_files+0x206/0x3a0 [ 424.012446][T12462] dvb_demux_ioctl+0x29/0x40 [ 424.017532][T12462] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 424.023387][T12462] __x64_sys_ioctl+0x190/0x200 [ 424.028668][T12462] do_syscall_64+0xcd/0x250 [ 424.033668][T12462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.040202][T12462] RIP: 0033:0x7f14cc585d29 [ 424.045111][T12462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.066720][T12462] RSP: 002b:00007f14cd3bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.076018][T12462] RAX: ffffffffffffffda RBX: 00007f14cc775fa0 RCX: 00007f14cc585d29 [ 424.084816][T12462] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 424.093608][T12462] RBP: 00007f14cc601b08 R08: 0000000000000000 R09: 0000000000000000 [ 424.102401][T12462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.111201][T12462] R13: 0000000000000000 R14: 00007f14cc775fa0 R15: 00007ffc58d8eb08 [ 424.120022][T12462] [ 424.135412][T12462] Mem-Info: [ 424.138990][T12462] active_anon:61540 inactive_anon:253 isolated_anon:0 [ 424.138990][T12462] active_file:8028 inactive_file:45411 isolated_file:0 [ 424.138990][T12462] unevictable:776 dirty:309 writeback:0 [ 424.138990][T12462] slab_reclaimable:10555 slab_unreclaimable:100217 [ 424.138990][T12462] mapped:27496 shmem:49413 pagetables:755 [ 424.138990][T12462] sec_pagetables:0 bounce:0 [ 424.138990][T12462] kernel_misc_reclaimable:0 [ 424.138990][T12462] free:1278387 free_pcp:7859 free_cma:0 [ 424.189246][T12462] Node 0 active_anon:246160kB inactive_anon:1012kB active_file:32112kB inactive_file:181568kB unevictable:1568kB isolated(anon):0kB isolated(file):0kB mapped:109984kB dirty:1232kB writeback:0kB shmem:196116kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10592kB pagetables:3020kB sec_pagetables:0kB all_unreclaimable? no [ 424.226454][T12462] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 424.259908][T12462] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 424.290144][T12462] lowmem_reserve[]: 0 2465 2466 0 0 [ 424.296282][T12462] Node 0 DMA32 free:1221620kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:247924kB inactive_anon:1012kB active_file:32136kB inactive_file:180716kB unevictable:1608kB writepending:1320kB present:3129332kB managed:2551332kB mlocked:72kB bounce:0kB free_pcp:3868kB local_pcp:3284kB free_cma:0kB [ 424.306687][T12471] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2365'. [ 424.330643][T12462] lowmem_reserve[]: 0 0 0 0 0 [ 424.346705][T12462] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 424.376235][T12462] lowmem_reserve[]: 0 0 0 0 0 [ 424.381673][T12462] Node 1 Normal free:3896612kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:6144kB local_pcp:6144kB free_cma:0kB [ 424.414007][T12462] lowmem_reserve[]: 0 0 0 0 0 [ 424.419539][T12462] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 424.424117][T12471] : renamed from bond_slave_1 (while UP) [ 424.434139][T12462] Node 0 DMA32: 184*4kB (UME) 351*8kB (UE) 207*16kB (UE) 709*32kB (UME) 754*64kB (UME) 275*128kB (UME) 132*256kB (UME) 117*512kB (UME) 97*1024kB (UME) 32*2048kB (UME) 207*4096kB (UM) = 1219432kB [ 424.462611][T12462] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 424.475672][T12462] Node 1 Normal: 213*4kB (UME) 58*8kB (UME) 44*16kB (UME) 226*32kB (UME) 120*64kB (UME) 26*128kB (UME) 16*256kB (UME) 9*512kB (UME) 5*1024kB (UME) 6*2048kB (UME) 940*4096kB (UM) = 3896612kB [ 424.496929][T12462] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 424.507941][T12462] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 424.518812][T12462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 424.529928][T12462] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 424.540695][T12462] 105160 total pagecache pages [ 424.546515][T12462] 1058 pages in swap cache [ 424.551776][T12462] Free swap = 113028kB [ 424.556639][T12462] Total swap = 124996kB [ 424.561511][T12462] 2097051 pages RAM [ 424.566070][T12462] 0 pages HighMem/MovableOnly [ 424.571441][T12462] 427368 pages reserved [ 424.576096][T12462] 0 pages cma reserved [ 426.177155][T12498] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2376'. [ 426.238865][T12498] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.247100][T12498] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.691021][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 426.745378][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 426.970798][T12519] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2384'. [ 427.075054][T12519] hsr_slave_1 (unregistering): left promiscuous mode [ 427.636567][T12527] netlink: 'syz.4.2387': attribute type 10 has an invalid length. [ 427.666392][T12527] netlink: 'syz.4.2387': attribute type 13 has an invalid length. [ 427.768354][T12532] netlink: 34 bytes leftover after parsing attributes in process `syz.2.2388'. [ 427.965042][T12537] netlink: 50 bytes leftover after parsing attributes in process `syz.4.2391'. [ 428.383165][T12548] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2392'. [ 428.772715][T12553] __nla_validate_parse: 2 callbacks suppressed [ 428.772738][T12553] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2397'. [ 428.883726][T12555] hsr_slave_1 (unregistering): left promiscuous mode [ 431.476659][T12602] Invalid ELF header magic: != ELF [ 431.518090][T12604] netlink: 4368 bytes leftover after parsing attributes in process `syz.0.2414'. [ 432.005732][T12608] netlink: 146 bytes leftover after parsing attributes in process `syz.0.2415'. [ 433.100337][T12625] netlink: 'syz.4.2421': attribute type 19 has an invalid length. [ 433.148013][T12625] netlink: 'syz.4.2421': attribute type 27 has an invalid length. [ 433.156659][T12625] netlink: 'syz.4.2421': attribute type 28 has an invalid length. [ 433.217706][T12625] netlink: 'syz.4.2421': attribute type 29 has an invalid length. [ 433.226565][T12625] netlink: 38 bytes leftover after parsing attributes in process `syz.4.2421'. [ 434.017892][T12635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2423'. [ 434.120252][T12635] hsr_slave_1 (unregistering): left promiscuous mode [ 434.197663][T12638] netlink: 'syz.5.2425': attribute type 10 has an invalid length. [ 434.287368][T12638] netlink: 'syz.5.2425': attribute type 13 has an invalid length. [ 435.159348][T12658] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2430'. [ 435.198454][T12658] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2430'. [ 435.635430][T12670] random: crng reseeded on system resumption [ 437.848153][T12719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2453'. [ 440.391042][T12759] : Can't lookup blockdev [ 442.131094][T12786] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2475'. [ 442.278728][T12789] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2475'. [ 442.913676][T12802] Invalid ELF header magic: != ELF [ 443.238277][T12808] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2482'. [ 443.377665][T12810] sd 0:0:1:0: PR command failed: 1026 [ 443.384076][T12810] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 443.420704][T12810] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 445.517923][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.528939][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.536158][T12873] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2504'. [ 448.590828][T12877] netlink: 'syz.2.2505': attribute type 6 has an invalid length. [ 448.614349][T12877] netlink: 'syz.2.2505': attribute type 7 has an invalid length. [ 448.637652][T12877] netlink: 'syz.2.2505': attribute type 8 has an invalid length. [ 448.661201][T12877] netlink: 'syz.2.2505': attribute type 9 has an invalid length. [ 448.680109][T12877] netlink: 'syz.2.2505': attribute type 12 has an invalid length. [ 448.713491][T12877] netlink: 'syz.2.2505': attribute type 13 has an invalid length. [ 448.882456][T12882] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2508'. [ 448.918319][T12882] netlink: 'syz.2.2508': attribute type 1 has an invalid length. [ 448.926870][T12882] netlink: 274 bytes leftover after parsing attributes in process `syz.2.2508'. [ 451.342151][T12923] WARNING! power/level is deprecated; use power/control instead [ 452.202868][T12937] netlink: 246 bytes leftover after parsing attributes in process `syz.4.2528'. [ 455.386831][T12975] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2541'. [ 455.927698][T12981] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2545'. [ 455.969483][T12981] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2545'. [ 456.129907][T12985] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2544'. [ 458.336297][T13019] netlink: 246 bytes leftover after parsing attributes in process `syz.2.2559'. [ 459.609479][T13030] netlink: 'syz.4.2561': attribute type 6 has an invalid length. [ 459.637671][T13030] netlink: 'syz.4.2561': attribute type 7 has an invalid length. [ 459.692156][T13030] netlink: 'syz.4.2561': attribute type 8 has an invalid length. [ 459.733821][T13030] netlink: 'syz.4.2561': attribute type 9 has an invalid length. [ 459.804447][T13030] netlink: 'syz.4.2561': attribute type 12 has an invalid length. [ 459.841072][T13030] netlink: 'syz.4.2561': attribute type 13 has an invalid length. [ 461.427867][T13052] netlink: 246 bytes leftover after parsing attributes in process `syz.2.2567'. [ 462.155662][T13064] size and base must be multiples of 4 kiB [ 462.228596][T13064] CPU: 1 UID: 0 PID: 13064 Comm: syz.5.2573 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 462.240491][T13064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 462.251577][T13064] Call Trace: [ 462.255205][T13064] [ 462.258445][T13064] dump_stack_lvl+0x16c/0x1f0 [ 462.263630][T13064] mtrr_del+0xd1/0x110 [ 462.268158][T13064] mtrr_ioctl+0x900/0xcd0 [ 462.272993][T13064] ? __pfx_mtrr_ioctl+0x10/0x10 [ 462.278383][T13064] ? __pfx_lock_release+0x10/0x10 [ 462.283959][T13064] ? __fget_files+0x206/0x3a0 [ 462.289163][T13064] ? __pfx_mtrr_ioctl+0x10/0x10 [ 462.294551][T13064] proc_reg_unlocked_ioctl+0x226/0x320 [ 462.300594][T13064] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 462.307215][T13064] __x64_sys_ioctl+0x190/0x200 [ 462.312522][T13064] do_syscall_64+0xcd/0x250 [ 462.317529][T13064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.324067][T13064] RIP: 0033:0x7f14cc585d29 [ 462.329014][T13064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.350629][T13064] RSP: 002b:00007f14cd3bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.359929][T13064] RAX: ffffffffffffffda RBX: 00007f14cc775fa0 RCX: 00007f14cc585d29 [ 462.368728][T13064] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 462.377520][T13064] RBP: 00007f14cc601b08 R08: 0000000000000000 R09: 0000000000000000 [ 462.386310][T13064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.395101][T13064] R13: 0000000000000000 R14: 00007f14cc775fa0 R15: 00007ffc58d8eb08 [ 462.403916][T13064] [ 462.878450][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2577'. [ 464.174272][T13100] ubi0: attaching mtd0 [ 464.197986][T13100] ubi0: scanning is finished [ 464.208348][T13100] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 464.240756][T13102] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2586'. [ 464.306742][T13102] batadv0: entered promiscuous mode [ 464.484525][T13100] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 464.908561][T13115] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2591'. [ 466.170340][T13135] netlink: 22 bytes leftover after parsing attributes in process `syz.5.2600'. [ 467.318358][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 467.332152][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 467.340730][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 467.357938][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 467.367692][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 467.376974][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 468.173695][T13150] chnl_net:caif_netlink_parms(): no params data found [ 468.568927][T13150] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.611537][T13150] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.632657][T13150] bridge_slave_0: entered allmulticast mode [ 468.643134][T13150] bridge_slave_0: entered promiscuous mode [ 468.663095][T13150] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.676988][T13150] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.695138][T13150] bridge_slave_1: entered allmulticast mode [ 468.716298][T13150] bridge_slave_1: entered promiscuous mode [ 469.013052][T13150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.045347][T13150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.224451][T13179] futex_wake_op: syz.5.2613 tries to shift op by 64; fix this program [ 469.417676][ T5853] Bluetooth: hci2: command tx timeout [ 469.566313][T13150] team0: Port device team_slave_0 added [ 469.640926][T13150] team0: Port device team_slave_1 added [ 470.045169][T13150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.067827][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.133566][T13150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.182455][T13150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.199368][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.248345][T13150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.446218][T13150] hsr_slave_0: entered promiscuous mode [ 470.459396][T13150] hsr_slave_1: entered promiscuous mode [ 470.466298][T13150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.495202][T13150] Cannot create hsr debugfs directory [ 470.958286][T13150] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 471.040380][T13150] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 471.081590][T13150] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 471.094817][T13150] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 471.232767][T13150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.282058][T13150] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.303178][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.311028][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.335287][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.343154][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.497675][ T5846] Bluetooth: hci2: command tx timeout [ 471.522296][T13196] syz.5.2620: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 471.544815][T13196] CPU: 0 UID: 0 PID: 13196 Comm: syz.5.2620 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 471.556719][T13196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 471.567807][T13196] Call Trace: [ 471.571468][T13196] [ 471.574726][T13196] dump_stack_lvl+0x16c/0x1f0 [ 471.579924][T13196] warn_alloc+0x24d/0x3a0 [ 471.584739][T13196] ? __pfx_warn_alloc+0x10/0x10 [ 471.590127][T13196] ? __pfx_mark_lock+0x10/0x10 [ 471.595432][T13196] ? lock_acquire.part.0+0x11b/0x380 [ 471.601304][T13196] __vmalloc_node_range_noprof+0x10df/0x1530 [ 471.607933][T13196] ? rcu_is_watching+0x12/0xc0 [ 471.613228][T13196] ? trace_contention_end+0xee/0x140 [ 471.619107][T13196] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 471.624970][T13196] ? dvb_demux_do_ioctl+0x496/0x1340 [ 471.630842][T13196] ? __pfx___mutex_lock+0x10/0x10 [ 471.636418][T13196] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 471.643430][T13196] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 471.649956][T13196] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 471.655821][T13196] vmalloc_noprof+0x6b/0x90 [ 471.660847][T13196] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 471.667093][T13196] dvb_demux_do_ioctl+0x54d/0x1340 [ 471.672786][T13196] dvb_usercopy+0x165/0x320 [ 471.677817][T13196] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 471.683971][T13196] ? __pfx_dvb_usercopy+0x10/0x10 [ 471.689540][T13196] ? __pfx_lock_release+0x10/0x10 [ 471.695167][T13196] ? __fget_files+0x206/0x3a0 [ 471.700378][T13196] dvb_demux_ioctl+0x29/0x40 [ 471.705479][T13196] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 471.711341][T13196] __x64_sys_ioctl+0x190/0x200 [ 471.716620][T13196] do_syscall_64+0xcd/0x250 [ 471.721639][T13196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.728172][T13196] RIP: 0033:0x7f14cc585d29 [ 471.733068][T13196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.754680][T13196] RSP: 002b:00007f14cd3bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.763982][T13196] RAX: ffffffffffffffda RBX: 00007f14cc775fa0 RCX: 00007f14cc585d29 [ 471.772785][T13196] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 471.781585][T13196] RBP: 00007f14cc601b08 R08: 0000000000000000 R09: 0000000000000000 [ 471.790390][T13196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.799201][T13196] R13: 0000000000000000 R14: 00007f14cc775fa0 R15: 00007ffc58d8eb08 [ 471.803651][T13150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.808000][T13196] [ 471.811025][T13196] Mem-Info: [ 471.836903][T13196] active_anon:38325 inactive_anon:0 isolated_anon:0 [ 471.836903][T13196] active_file:13661 inactive_file:45216 isolated_file:0 [ 471.836903][T13196] unevictable:768 dirty:564 writeback:0 [ 471.836903][T13196] slab_reclaimable:10871 slab_unreclaimable:101199 [ 471.836903][T13196] mapped:39193 shmem:28022 pagetables:762 [ 471.836903][T13196] sec_pagetables:0 bounce:0 [ 471.836903][T13196] kernel_misc_reclaimable:0 [ 471.836903][T13196] free:1296965 free_pcp:4801 free_cma:0 [ 471.908075][T13196] Node 0 active_anon:154900kB inactive_anon:0kB active_file:54644kB inactive_file:180788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157572kB dirty:2252kB writeback:0kB shmem:112052kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10684kB pagetables:3048kB sec_pagetables:0kB all_unreclaimable? no [ 472.008854][T13196] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 472.104529][T13196] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 472.147955][T13196] lowmem_reserve[]: 0 2465 2466 0 0 [ 472.153785][T13196] Node 0 DMA32 free:1279028kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:157664kB inactive_anon:0kB active_file:54644kB inactive_file:179956kB unevictable:1536kB writepending:2248kB present:3129332kB managed:2551332kB mlocked:0kB bounce:0kB free_pcp:2028kB local_pcp:1516kB free_cma:0kB [ 472.238663][T13196] lowmem_reserve[]: 0 0 0 0 0 [ 472.243967][T13196] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 472.303282][T13196] lowmem_reserve[]: 0 0 0 0 0 [ 472.308625][T13196] Node 1 Normal free:3889504kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17296kB local_pcp:11780kB free_cma:0kB [ 472.349520][T13196] lowmem_reserve[]: 0 0 0 0 0 [ 472.354789][T13196] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 472.378169][T13196] Node 0 DMA32: 19*4kB (ME) 4125*8kB (ME) 3153*16kB (UME) 2541*32kB (UME) 1527*64kB (UME) 614*128kB (UM) 228*256kB (M) 89*512kB (UME) 29*1024kB (UME) 11*2048kB (UME) 189*4096kB (UM) = 1271460kB [ 472.417753][T13196] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 472.449197][T13196] Node 1 Normal: 215*4kB (UME) 59*8kB (UME) 46*16kB (UME) 228*32kB (UME) 122*64kB (UME) 25*128kB (UME) 14*256kB (UME) 8*512kB (UE) 5*1024kB (UME) 5*2048kB (UE) 939*4096kB (UM) = 3889556kB [ 472.486872][T13150] veth0_vlan: entered promiscuous mode [ 472.494397][T13196] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 472.515301][T13196] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 472.519014][T13150] veth1_vlan: entered promiscuous mode [ 472.536061][T13196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 472.562135][T13196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 472.576470][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 472.584241][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 472.587747][T13196] 89007 total pagecache pages [ 472.605634][T13196] 33 pages in swap cache [ 472.611044][T13150] veth0_macvtap: entered promiscuous mode [ 472.618101][T13196] Free swap = 117140kB [ 472.629927][T13196] Total swap = 124996kB [ 472.630771][T13150] veth1_macvtap: entered promiscuous mode [ 472.639201][T13196] 2097051 pages RAM [ 472.657014][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.657398][T13196] 0 pages HighMem/MovableOnly [ 472.678448][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.686887][T13196] 427368 pages reserved [ 472.696204][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.697485][T13196] 0 pages cma reserved [ 472.716125][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.726995][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.754507][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.794762][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.806513][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.832523][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.852257][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.880074][T13150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.903433][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.915388][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.928508][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.967659][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.987612][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.007937][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.037804][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.057693][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.079314][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.103443][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.116445][T13225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2625'. [ 473.127417][T13150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.156363][T13223] sp0: Synchronizing with TNC [ 473.164772][T13150] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.179658][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 473.203081][T13222] [U] è [ 473.213012][T13150] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.232998][T13150] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.282322][T13150] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.546936][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.579645][ T5853] Bluetooth: hci2: command tx timeout [ 473.586033][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.738829][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.780658][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.625464][T13254] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2634'. [ 474.857397][T13254] bond0: (slave bond_slave_1): Releasing backup interface [ 475.663114][ T5853] Bluetooth: hci2: command tx timeout [ 476.137447][T13278] netlink: 'syz.4.2640': attribute type 33 has an invalid length. [ 476.167945][T13278] netlink: 322 bytes leftover after parsing attributes in process `syz.4.2640'. [ 476.410898][T13283] mkiss: ax0: crc mode is auto. [ 477.165892][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2649'. [ 477.215978][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2649'. [ 478.854214][ T5853] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 479.025830][T13350] netlink: 322 bytes leftover after parsing attributes in process `syz.6.2665'. [ 479.066699][T13350] bond0: entered promiscuous mode [ 479.087733][T13350] bond_slave_0: entered promiscuous mode [ 479.109709][T13350] bond_slave_1: entered promiscuous mode [ 479.127243][T13350] bond0: entered allmulticast mode [ 479.147102][T13350] bond_slave_0: entered allmulticast mode [ 479.177110][T13350] bond_slave_1: entered allmulticast mode [ 480.687653][T13387] futex_wake_op: syz.5.2678 tries to shift op by 64; fix this program [ 483.132068][ T29] audit: type=1800 audit(4294967401.176:6): pid=13427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2692" name="dbroot" dev="configfs" ino=35426 res=0 errno=0 [ 483.172348][T13427] sp0: Synchronizing with TNC [ 484.616984][T13458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2703'. [ 486.220778][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2714'. [ 486.234310][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2714'. [ 487.443345][ T5853] Bluetooth: hci1: unexpected event 0x02 length: 0 < 1 [ 491.351135][T13575] syz.4.2739: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 491.384400][T13575] CPU: 1 UID: 0 PID: 13575 Comm: syz.4.2739 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 491.396296][T13575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 491.407383][T13575] Call Trace: [ 491.411015][T13575] [ 491.414266][T13575] dump_stack_lvl+0x16c/0x1f0 [ 491.419468][T13575] warn_alloc+0x24d/0x3a0 [ 491.424293][T13575] ? __pfx_warn_alloc+0x10/0x10 [ 491.429706][T13575] ? __pfx_mark_lock+0x10/0x10 [ 491.435022][T13575] ? lock_acquire.part.0+0x11b/0x380 [ 491.440904][T13575] __vmalloc_node_range_noprof+0x10df/0x1530 [ 491.447554][T13575] ? rcu_is_watching+0x12/0xc0 [ 491.452875][T13575] ? trace_contention_end+0xee/0x140 [ 491.458749][T13575] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 491.464633][T13575] ? dvb_demux_do_ioctl+0x496/0x1340 [ 491.470527][T13575] ? __pfx___mutex_lock+0x10/0x10 [ 491.476127][T13575] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 491.483142][T13575] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 491.489669][T13575] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 491.495540][T13575] vmalloc_noprof+0x6b/0x90 [ 491.500562][T13575] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 491.506454][T13575] dvb_demux_do_ioctl+0x54d/0x1340 [ 491.512149][T13575] dvb_usercopy+0x165/0x320 [ 491.517185][T13575] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 491.523354][T13575] ? __pfx_dvb_usercopy+0x10/0x10 [ 491.528946][T13575] ? __pfx_lock_release+0x10/0x10 [ 491.534551][T13575] ? __fget_files+0x206/0x3a0 [ 491.539759][T13575] dvb_demux_ioctl+0x29/0x40 [ 491.544874][T13575] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 491.550743][T13575] __x64_sys_ioctl+0x190/0x200 [ 491.556030][T13575] do_syscall_64+0xcd/0x250 [ 491.561042][T13575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.567579][T13575] RIP: 0033:0x7f1563785d29 [ 491.572474][T13575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.594100][T13575] RSP: 002b:00007f15615f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.603434][T13575] RAX: ffffffffffffffda RBX: 00007f1563975fa0 RCX: 00007f1563785d29 [ 491.612258][T13575] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 491.621071][T13575] RBP: 00007f1563801b08 R08: 0000000000000000 R09: 0000000000000000 [ 491.629877][T13575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.638688][T13575] R13: 0000000000000000 R14: 00007f1563975fa0 R15: 00007fffd036bc18 [ 491.647522][T13575] [ 491.707691][T13575] Mem-Info: [ 491.712282][T13575] active_anon:24709 inactive_anon:9 isolated_anon:0 [ 491.712282][T13575] active_file:13822 inactive_file:45157 isolated_file:0 [ 491.712282][T13575] unevictable:768 dirty:668 writeback:0 [ 491.712282][T13575] slab_reclaimable:10798 slab_unreclaimable:102469 [ 491.712282][T13575] mapped:28979 shmem:13067 pagetables:785 [ 491.712282][T13575] sec_pagetables:0 bounce:0 [ 491.712282][T13575] kernel_misc_reclaimable:0 [ 491.712282][T13575] free:1309326 free_pcp:5655 free_cma:0 [ 491.845250][T13575] Node 0 active_anon:101036kB inactive_anon:36kB active_file:55288kB inactive_file:180552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117516kB dirty:2668kB writeback:0kB shmem:52332kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10820kB pagetables:3040kB sec_pagetables:0kB all_unreclaimable? no [ 491.926387][T13575] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 492.011019][T13575] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 492.139208][T13598] [ 492.141810][T13598] ====================================================== [ 492.149539][T13598] WARNING: possible circular locking dependency detected [ 492.157280][T13598] 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 Not tainted [ 492.165114][T13598] ------------------------------------------------------ [ 492.171600][T13575] lowmem_reserve[]: [ 492.172823][T13598] syz.6.2749/13598 is trying to acquire lock: [ 492.172845][T13598] ffff88805f3a9f78 [ 492.177060][T13575] 0 [ 492.183674][T13598] (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: start_creating.part.0+0xb0/0x3a0 [ 492.188391][T13575] 2465 [ 492.190516][T13598] [ 492.190516][T13598] but task is already holding lock: [ 492.202629][T13575] 2466 [ 492.203633][T13598] ffffffff8de395c8 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x324/0xa20 [ 492.203717][T13598] [ 492.203717][T13598] which lock already depends on the new lock. [ 492.203717][T13598] [ 492.203726][T13598] [ 492.203726][T13598] the existing dependency chain (in reverse order) is: [ 492.203736][T13598] [ 492.203736][T13598] -> #2 (relay_channels_mutex){+.+.}-{4:4}: [ 492.203775][T13598] __mutex_lock+0x19b/0xa60 [ 492.203818][T13598] relay_prepare_cpu+0x2c/0x300 [ 492.203860][T13598] cpuhp_invoke_callback+0x3d0/0xa10 [ 492.203890][T13598] __cpuhp_invoke_callback_range+0x101/0x200 [ 492.203923][T13598] _cpu_up+0x3fd/0x910 [ 492.203955][T13598] cpu_up+0x1dc/0x240 [ 492.213516][T13575] 0 [ 492.215069][T13598] cpuhp_bringup_mask+0xdc/0x210 [ 492.225976][T13575] 0 [ 492.236587][T13598] bringup_nonboot_cpus+0x176/0x1c0 [ 492.236635][T13598] smp_init+0x34/0x160 [ 492.246911][T13575] [ 492.255363][T13598] kernel_init_freeable+0x3ad/0x8b0 [ 492.255420][T13598] kernel_init+0x1c/0x2b0 [ 492.255477][T13598] ret_from_fork+0x45/0x80 [ 492.255502][T13598] ret_from_fork_asm+0x1a/0x30 [ 492.255543][T13598] [ 492.255543][T13598] -> #1 (cpu_hotplug_lock){++++}-{0:0} [ 492.261708][T13575] Node 0 [ 492.266938][T13598] : [ 492.266948][T13598] cpus_read_lock+0x42/0x160 [ 492.273890][T13575] DMA32 free:1329036kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:100628kB inactive_anon:0kB active_file:55340kB inactive_file:179720kB unevictable:1536kB writepending:2684kB present:3129332kB managed:2551332kB mlocked:0kB bounce:0kB free_pcp:7032kB local_pcp:664kB free_cma:0kB [ 492.280438][T13598] zswap_store+0x8f8/0x25f0 [ 492.280476][T13598] swap_writepage+0x3b6/0x1120 [ 492.285864][T13575] lowmem_reserve[]: [ 492.290420][T13598] shmem_writepage+0xf7b/0x1490 [ 492.290453][T13598] pageout+0x3b2/0xaa0 [ 492.293515][T13575] 0 [ 492.299149][T13598] shrink_folio_list+0x3025/0x42d0 [ 492.299180][T13598] evict_folios+0x6e3/0x19c0 [ 492.299206][T13598] try_to_shrink_lruvec+0x61e/0xa80 [ 492.299234][T13598] shrink_lruvec+0x313/0x2ba0 [ 492.299262][T13598] shrink_node+0x105e/0x3f20 [ 492.299290][T13598] do_try_to_free_pages+0x35f/0x1a30 [ 492.299321][T13598] try_to_free_mem_cgroup_pages+0x31a/0x7a0 [ 492.299355][T13598] try_charge_memcg+0x356/0xaf0 [ 492.299392][T13598] obj_cgroup_charge+0x179/0x4d0 [ 492.303214][T13575] 0 [ 492.308378][T13598] __memcg_slab_post_alloc_hook+0x1b6/0x9b0 [ 492.308426][T13598] kmem_cache_alloc_lru_noprof+0x30d/0x3b0 [ 492.308484][T13598] alloc_inode+0xbf/0x230 [ 492.308525][T13598] new_inode+0x22/0x210 [ 492.308566][T13598] __debugfs_create_file+0x11a/0x660 [ 492.314565][T13575] 0 [ 492.316163][T13598] debugfs_create_file_full+0x6d/0xa0 [ 492.322888][T13575] 0 [ 492.327737][T13598] kvm_dev_ioctl+0x16b7/0x1aa0 [ 492.327785][T13598] __x64_sys_ioctl+0x190/0x200 [ 492.333915][T13575] 0 [ 492.338984][T13598] do_syscall_64+0xcd/0x250 [ 492.347881][T13575] [ 492.350615][T13598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.353270][T13575] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 492.358870][T13598] [ 492.358870][T13598] -> #0 (&sb->s_type->i_mutex_key#3){++++}-{4:4}: [ 492.358923][T13598] __lock_acquire+0x249e/0x3c40 [ 492.392210][T13575] lowmem_reserve[]: [ 492.397120][T13598] lock_acquire.part.0+0x11b/0x380 [ 492.403202][T13575] 0 [ 492.407065][T13598] down_write+0x93/0x200 [ 492.413588][T13575] 0 [ 492.417966][T13598] start_creating.part.0+0xb0/0x3a0 [ 492.418015][T13598] __debugfs_create_file+0xa5/0x660 [ 492.418058][T13598] debugfs_create_file_full+0x6d/0xa0 [ 492.635167][T13598] relay_create_buf_file+0xf0/0x170 [ 492.641492][T13598] relay_open_buf.part.0+0x760/0xb90 [ 492.647897][T13598] relay_open+0x5e2/0xa20 [ 492.653244][T13598] do_blk_trace_setup+0x4b4/0xac0 [ 492.659345][T13598] __blk_trace_setup+0xd8/0x180 [ 492.665265][T13598] blk_trace_setup+0x47/0x70 [ 492.670897][T13598] sg_ioctl+0x7a3/0x26b0 [ 492.676172][T13598] __x64_sys_ioctl+0x190/0x200 [ 492.681989][T13598] do_syscall_64+0xcd/0x250 [ 492.687531][T13598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.694618][T13598] [ 492.694618][T13598] other info that might help us debug this: [ 492.694618][T13598] [ 492.705859][T13598] Chain exists of: [ 492.705859][T13598] &sb->s_type->i_mutex_key#3 --> cpu_hotplug_lock --> relay_channels_mutex [ 492.705859][T13598] [ 492.721857][T13598] Possible unsafe locking scenario: [ 492.721857][T13598] [ 492.730050][T13598] CPU0 CPU1 [ 492.735948][T13598] ---- ---- [ 492.741864][T13598] lock(relay_channels_mutex); [ 492.747202][T13598] lock(cpu_hotplug_lock); [ 492.754928][T13598] lock(relay_channels_mutex); [ 492.763037][T13598] lock(&sb->s_type->i_mutex_key#3); [ 492.768957][T13598] [ 492.768957][T13598] *** DEADLOCK *** [ 492.768957][T13598] [ 492.777901][T13598] 2 locks held by syz.6.2749/13598: [ 492.783609][T13598] #0: ffff8880253feae8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70 [ 492.794268][T13598] #1: ffffffff8de395c8 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x324/0xa20 [ 492.804935][T13598] [ 492.804935][T13598] stack backtrace: [ 492.811431][T13598] CPU: 1 UID: 0 PID: 13598 Comm: syz.6.2749 Not tainted 6.13.0-rc6-syzkaller-00006-g5428dc1906dd #0 [ 492.823283][T13598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 492.834432][T13598] Call Trace: [ 492.838042][T13598] [ 492.841272][T13598] dump_stack_lvl+0x116/0x1f0 [ 492.846446][T13598] print_circular_bug+0x41c/0x610 [ 492.852001][T13598] check_noncircular+0x31a/0x400 [ 492.857457][T13598] ? __pfx_check_noncircular+0x10/0x10 [ 492.863490][T13598] ? stack_trace_save+0x95/0xd0 [ 492.868845][T13598] ? lockdep_lock+0xc6/0x200 [ 492.873905][T13598] ? __pfx_lockdep_lock+0x10/0x10 [ 492.879444][T13598] __lock_acquire+0x249e/0x3c40 [ 492.884787][T13598] ? __pfx___lock_acquire+0x10/0x10 [ 492.890506][T13598] lock_acquire.part.0+0x11b/0x380 [ 492.896130][T13598] ? start_creating.part.0+0xb0/0x3a0 [ 492.902057][T13598] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 492.908258][T13598] ? rcu_is_watching+0x12/0xc0 [ 492.913508][T13598] ? trace_lock_acquire+0x14e/0x1f0 [ 492.919240][T13598] ? start_creating.part.0+0xb0/0x3a0 [ 492.925174][T13598] ? lock_acquire+0x2f/0xb0 [ 492.930136][T13598] ? start_creating.part.0+0xb0/0x3a0 [ 492.936067][T13598] down_write+0x93/0x200 [ 492.940745][T13598] ? start_creating.part.0+0xb0/0x3a0 [ 492.946672][T13598] ? __pfx_down_write+0x10/0x10 [ 492.952028][T13598] ? do_raw_spin_unlock+0x172/0x230 [ 492.957771][T13598] ? mntput+0x10/0x90 [ 492.962152][T13598] ? simple_pin_fs+0xa3/0x190 [ 492.967303][T13598] start_creating.part.0+0xb0/0x3a0 [ 492.973042][T13598] __debugfs_create_file+0xa5/0x660 [ 492.978782][T13598] debugfs_create_file_full+0x6d/0xa0 [ 492.984712][T13598] ? __pfx_blk_create_buf_file_callback+0x10/0x10 [ 492.991771][T13598] relay_create_buf_file+0xf0/0x170 [ 492.997505][T13598] relay_open_buf.part.0+0x760/0xb90 [ 493.003338][T13598] relay_open+0x5e2/0xa20 [ 493.008114][T13598] ? debugfs_create_file_full+0x75/0xa0 [ 493.014238][T13598] do_blk_trace_setup+0x4b4/0xac0 [ 493.019777][T13598] __blk_trace_setup+0xd8/0x180 [ 493.025134][T13598] ? __pfx___blk_trace_setup+0x10/0x10 [ 493.031148][T13598] ? do_vfs_ioctl+0x513/0x1950 [ 493.036395][T13598] blk_trace_setup+0x47/0x70 [ 493.041460][T13598] sg_ioctl+0x7a3/0x26b0 [ 493.046149][T13598] ? __pfx_sg_ioctl+0x10/0x10 [ 493.051305][T13598] ? __pfx_lock_release+0x10/0x10 [ 493.056834][T13598] ? trace_lock_acquire+0x14e/0x1f0 [ 493.062580][T13598] ? __fget_files+0x206/0x3a0 [ 493.067732][T13598] ? __pfx_sg_ioctl+0x10/0x10 [ 493.072886][T13598] __x64_sys_ioctl+0x190/0x200 [ 493.078127][T13598] do_syscall_64+0xcd/0x250 [ 493.083088][T13598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.089583][T13598] RIP: 0033:0x7f0ad4b85d29 [ 493.094459][T13598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.116025][T13598] RSP: 002b:00007f0ad5977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.125282][T13598] RAX: ffffffffffffffda RBX: 00007f0ad4d75fa0 RCX: 00007f0ad4b85d29 [ 493.134047][T13598] RDX: 0000000000000038 RSI: 00000000c0481273 RDI: 0000000000000003 [ 493.142813][T13598] RBP: 00007f0ad4c01b08 R08: 0000000000000000 R09: 0000000000000000 [ 493.151604][T13598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.160372][T13598] R13: 0000000000000000 R14: 00007f0ad4d75fa0 R15: 00007ffde9f64cf8 [ 493.169147][T13598] [ 493.227746][T13575] 0 0 0 [ 493.233939][T13575] Node 1 Normal free:3886216kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20616kB local_pcp:12296kB free_cma:0kB [ 493.267559][T13575] lowmem_reserve[]: 0 0 0 0 0 [ 493.275363][T13575] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 493.290743][T13575] Node 0 DMA32: 1*4kB (U) 26*8kB (ME) 1129*16kB (UME) 1982*32kB (UME) 1261*64kB (UME) 527*128kB (UM) 245*256kB (UME) 79*512kB (UME) 83*1024kB (UME) 31*2048kB (UME) 206*4096kB (UM) = 1325284kB [ 493.312021][T13575] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 493.324973][T13575] Node 1 Normal: 209*4kB (UME) 60*8kB (UME) 44*16kB (UME) 227*32kB (UME) 121*64kB (UME) 26*128kB (UME) 14*256kB (UME) 8*512kB (UE) 4*1024kB (UE) 6*2048kB (UME) 938*4096kB (UM) = 3886468kB [ 493.348690][T13575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.359770][T13575] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 493.370239][T13575] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.380960][T13575] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 493.391393][T13575] 75289 total pagecache pages [ 493.396550][T13575] 30 pages in swap cache [ 493.402009][T13575] Free swap = 117072kB [ 493.406616][T13575] Total swap = 124996kB [ 493.411513][T13575] 2097051 pages RAM [ 493.415762][T13575] 0 pages HighMem/MovableOnly [ 493.421199][T13575] 427368 pages reserved [ 493.457087][T13575] 0 pages cma reserved