last executing test programs: 13m0.68827139s ago: executing program 3 (id=2378): dup$auto(0x1) 13m0.559404341s ago: executing program 3 (id=2383): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf7s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) 13m0.452911931s ago: executing program 3 (id=2387): ustat$auto(0x801, &(0x7f0000000000)={0xbff, 0x2, "be5705f65205", "184885ca64ad"}) 13m0.329470515s ago: executing program 3 (id=2391): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0xb, 0xff00, 0x6, 0x9}, 0x6f4) 13m0.135549502s ago: executing program 3 (id=2398): rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 13m0.009037187s ago: executing program 3 (id=2404): clock_gettime$auto(0x6, &(0x7f0000000040)={0xef, 0x101}) 12m59.893738831s ago: executing program 32 (id=2404): clock_gettime$auto(0x6, &(0x7f0000000040)={0xef, 0x101}) 12m17.067448265s ago: executing program 1 (id=3671): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(0x3, 0x5411, 0x10000000000402) 12m16.943720554s ago: executing program 1 (id=3675): r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/vkms/vkms_config\x00', 0x8000, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r0, &(0x7f0000000380)=""/4096, 0x1000) 12m16.847641062s ago: executing program 1 (id=3679): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/loop9/rqos/wbt/unknown_cnt\x00', 0x300, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000180)=""/209, 0xd1) 12m16.792942649s ago: executing program 1 (id=3682): ioperm$auto(0x1000, 0x40, 0x6) delete_module$auto(0x0, 0x5) 12m16.660919966s ago: executing program 1 (id=3687): rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) migrate_pages$auto(0x1, 0x9, 0x0, &(0x7f0000000840)=0x2) 12m16.246669015s ago: executing program 1 (id=3702): r0 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x129941, 0x0) write$auto_buffer_subbuf_size_fops_trace(r0, 0x0, 0x0) 12m16.13043029s ago: executing program 33 (id=3702): r0 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x129941, 0x0) write$auto_buffer_subbuf_size_fops_trace(r0, 0x0, 0x0) 10m36.215737456s ago: executing program 2 (id=6394): r0 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) poll$auto(&(0x7f00000000c0)={r0, 0x4, 0x4}, 0x1, 0x2) 10m36.135616574s ago: executing program 2 (id=6397): memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x4) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) 10m36.067361705s ago: executing program 2 (id=6399): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip_vs\x00', 0x100, 0x0) pread64$auto(r0, &(0x7f0000000000)='\x02', 0x7, 0x6) 10m35.998726491s ago: executing program 2 (id=6402): r0 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) write$auto_vga_arb_device_fops_vgaarb(r0, &(0x7f0000000040)="01", 0x1) 10m35.90352564s ago: executing program 2 (id=6405): setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) tkill$auto(0x80000000000001, 0x7) 10m35.62300941s ago: executing program 2 (id=6415): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto(r0, 0x0, 0x6) 10m35.422674005s ago: executing program 34 (id=6415): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto(r0, 0x0, 0x6) 2m18.446637067s ago: executing program 5 (id=20390): socket(0x2, 0x801, 0x106) connect$auto(0x3, &(0x7f0000000140), 0x55) listen$auto(0x3, 0x81) 2m18.343742691s ago: executing program 5 (id=20384): setreuid$auto(0x1, 0x3) r0 = socket(0x2a, 0x2, 0x0) bind$auto(r0, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x6b) 2m18.22867886s ago: executing program 5 (id=20395): mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000380)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82=s\x83\xe6\xae\x00\x00\x00\x00\x0e\x19\x12\x85\bvf(e\xda\x92\x97\t\x15\xf6\xc8\xee\x04\x16\xc1\x1a!\x1d\xe0\xb7\x06D&zg\xb0a\xab|E\xde\x14\xee[\xe1\xc0\xa8Nh\x0f\xa3\xdfT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\xc5OA\xa0\xc4%\xfa\x12\x10\xd8\ncG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\v\xe7|v\xb4*\xf1\xfb\x96\xeb\x87[\xed}\xa5\x99\xae\xed\x9f\xeb\xb7\xd8}\b\xabYq\x94_\xf8\x9cg\xd8X\xa1\xe2\x81^3\x9d$ =\x97\x9a\x8d') openat$dir(0xffffffffffffff9c, &(0x7f0000001340)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_/file0\x00', 0x40000, 0x0) 2m18.040672883s ago: executing program 5 (id=20397): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x4000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) 2m17.620463182s ago: executing program 5 (id=20392): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 2m17.322694859s ago: executing program 5 (id=20398): mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) nanosleep$auto(0x0, 0x0) 2m17.059473539s ago: executing program 35 (id=20398): mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) nanosleep$auto(0x0, 0x0) 2m9.809727734s ago: executing program 0 (id=20475): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/bond0/queues/tx-13/xps_cpus\x00', 0x2, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/209, 0xd1) 2m9.684891168s ago: executing program 0 (id=20472): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x20001000, 0x2000000c) 2m9.027916143s ago: executing program 0 (id=20483): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000400)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 2m8.924534956s ago: executing program 0 (id=20487): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 2m8.742721071s ago: executing program 0 (id=20496): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 2m8.395436526s ago: executing program 0 (id=20489): mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89b0, &(0x7f0000000140)={'vlan0\x00'}) 2m7.967337244s ago: executing program 36 (id=20489): mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89b0, &(0x7f0000000140)={'vlan0\x00'}) 2.261048206s ago: executing program 7 (id=22411): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x71, 0x0, 0x8) 2.194310937s ago: executing program 7 (id=22412): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 1.269278822s ago: executing program 7 (id=22425): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) fanotify_init$auto(0x5, 0x2000000000002) fchown$auto(0x0, 0x7fffffffffffffff, 0xffffffffffffffff) 1.250322263s ago: executing program 4 (id=22426): mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x0, 0x28000) sysfs$auto(0x2, 0x1e, 0x0) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x3b71, 0x0) 1.183636799s ago: executing program 6 (id=22427): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 1.178846279s ago: executing program 7 (id=22429): iopl$auto(0x3) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x10000000016, 0x1, 0x4, 0x5, 0x0) 1.072556051s ago: executing program 6 (id=22430): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x3fe, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(r0, 0x10000000084, 0xd, 0x0, 0x4) 1.072486018s ago: executing program 4 (id=22431): mkdir$auto(&(0x7f0000000300)='./file0\x00', 0xf801) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x70) mknodat$auto(r0, &(0x7f00000003c0)='./file0\x00', 0xfff, 0x5) rename$auto(&(0x7f0000000b80)='./file0/file0\x00', &(0x7f0000000bc0)='./file0\x00') 1.016724134s ago: executing program 8 (id=22433): mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x560c, 0x1) 994.27467ms ago: executing program 4 (id=22434): r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES32], 0x18}, 0x1, 0x0, 0x0, 0x60008094}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x2000c040) 991.166204ms ago: executing program 6 (id=22435): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x0, 0xfa9d, 0x8001, &(0x7f0000000280)=0xa, 0x400, 0x1) 853.028421ms ago: executing program 6 (id=22436): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x40, @dev={0xac, 0x14, 0x14, 0x27}}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x70080fe) 852.440038ms ago: executing program 8 (id=22444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x4000000) 807.87547ms ago: executing program 8 (id=22437): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x5ce}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munlock$auto(0x9, 0x29b9) 807.689394ms ago: executing program 4 (id=22438): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/bus/usb/017/001\x00', 0xa300, 0x0) read$auto_mon_fops_binary_mon_bin(r0, &(0x7f00000001c0)=""/223, 0xdf) ioctl$auto_MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000180)={&(0x7f0000000040)={0x5, 0x33, 0x5, 0x1, 0xd3, 0x6, 0x3, 0x5, 0x6, 0x10000, 0x9, 0x5, 0xab, @setup="3dbaee61ea0b55f6", 0x0, 0xb9, 0x6, 0x3}, 0x0, 0x6}) 726.980612ms ago: executing program 4 (id=22439): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) getsockopt$auto(0x4, 0x6, 0x1a, 0xfffffffffffffffc, 0x0) 664.662321ms ago: executing program 6 (id=22440): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) tkill$auto(0x80000000000001, 0x7) 656.702701ms ago: executing program 4 (id=22441): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x108000, 0x800034, 0x9) 385.466889ms ago: executing program 8 (id=22442): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto(0x3, 0x89e1, 0x91) 302.535143ms ago: executing program 6 (id=22443): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @broadcast}, 0x6) 276.138436ms ago: executing program 8 (id=22445): r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES32], 0x18}, 0x1, 0x0, 0x0, 0x60008094}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x2000c040) 250.773808ms ago: executing program 7 (id=22446): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) bpf$auto(0x100000001, 0x0, 0x0) 7.282286ms ago: executing program 37 (id=22443): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @broadcast}, 0x6) 1.017383ms ago: executing program 8 (id=22448): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r0 = socket(0xa, 0x5, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) getsockopt$auto(r0, 0x84, 0x20, 0x0, 0x0) 0s ago: executing program 7 (id=22449): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mmap$auto(0x0, 0x40009, 0xdc, 0x9b72, 0x7, 0x28000) kernel console output (not intermixed with test programs): 6312] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.872984][ T2996] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.884207][ T6312] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 300.891876][ T6312] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.138015][ T2996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.152532][ T2996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.166369][ T2996] bond0 (unregistering): Released all slaves [ 301.345030][T19294] chnl_net:caif_netlink_parms(): no params data found [ 301.535563][ T2996] hsr_slave_0: left promiscuous mode [ 301.555150][ T2996] hsr_slave_1: left promiscuous mode [ 301.574940][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.584414][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.599929][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.613771][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.637524][ T2996] veth1_macvtap: left promiscuous mode [ 301.652433][ T2996] veth0_macvtap: left promiscuous mode [ 301.658080][ T2996] veth1_vlan: left promiscuous mode [ 301.670698][ T2996] veth0_vlan: left promiscuous mode [ 302.238401][ T2996] team0 (unregistering): Port device team_slave_1 removed [ 302.260899][ T2996] team0 (unregistering): Port device team_slave_0 removed [ 302.493865][T19294] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.510546][T19294] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.519796][T19294] bridge_slave_0: entered allmulticast mode [ 302.529001][T19294] bridge_slave_0: entered promiscuous mode [ 302.538220][T19294] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.545771][T19294] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.566181][T19294] bridge_slave_1: entered allmulticast mode [ 302.573240][T19294] bridge_slave_1: entered promiscuous mode [ 302.617328][T19294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.635833][T19294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.710127][T19294] team0: Port device team_slave_0 added [ 302.719747][T19294] team0: Port device team_slave_1 added [ 302.756260][T19294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.769765][T19294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.836646][T19294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.855560][T19294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.864071][T19294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.890314][T19294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.943997][ T6312] Bluetooth: hci3: command tx timeout [ 303.021871][T19294] hsr_slave_0: entered promiscuous mode [ 303.029092][T19294] hsr_slave_1: entered promiscuous mode [ 303.048415][T19294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.063327][T19294] Cannot create hsr debugfs directory [ 303.383785][T19294] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 303.400844][T19294] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 303.451672][T19294] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 303.503969][T19294] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 303.516234][T19457] delete_channel: no stack [ 303.706796][T19294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.750816][T19294] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.780254][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.787440][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.829196][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.836359][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.110836][T19294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.527320][T19294] veth0_vlan: entered promiscuous mode [ 304.540618][T19294] veth1_vlan: entered promiscuous mode [ 304.561399][T19294] veth0_macvtap: entered promiscuous mode [ 304.570230][T19294] veth1_macvtap: entered promiscuous mode [ 304.598170][T19294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.619369][T19294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.643248][T19294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.663365][T19294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.674971][T19294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.691666][T19294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.703640][T19294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.731023][T19294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.760733][T19294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.782452][T19294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.806478][T19294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.827859][T19294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.839641][T19294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.857180][T19294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.872689][T19294] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.911288][T19294] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.943329][T19294] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.958780][T19294] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.002736][ T6312] Bluetooth: hci3: command tx timeout [ 305.013845][T19548] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 305.036683][T19547] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 305.070601][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.089447][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.163467][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.199812][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.426063][T19559] zswap: compressor not available [ 307.124961][ T6312] Bluetooth: hci3: command tx timeout [ 309.188254][ T6312] Bluetooth: hci3: command tx timeout [ 309.814315][T19877] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 311.108204][T19947] ptrace attach of "./syz-executor exec"[10509] was attempted by "./syz-executor exec"[19947] [ 311.833181][T19978] sg_write: data in/out 2059/169 bytes for SCSI command 0x57-- guessing data in; [ 311.833181][T19978] program syz.5.6688 not setting count and/or reply_len properly [ 311.892500][T19981] Ignoring unsupported numa_zonelist_order value: [ 311.892500][T19981] [ 312.083832][ T29] audit: type=1800 audit(4294967297.206:44): pid=19993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6694" name="discovery_nqn" dev="configfs" ino=53712 res=0 errno=0 [ 312.104657][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.518864][T20021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6707'. [ 313.122299][T20071] block nbd12: NBD_DISCONNECT [ 313.567078][ T29] audit: type=1326 audit(4294967298.703:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20098 comm="syz.4.6745" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4116985d29 code=0x0 [ 313.814178][T20116] Process accounting resumed [ 315.855436][T20246] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(49) [ 316.266846][T20264] [U] LnÈb*'F [ 316.342601][T20266] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 317.477086][T20340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6860'. [ 318.271310][T20399] Process accounting resumed [ 319.588297][T20500] __vm_enough_memory: pid: 20500, comm: syz.4.6932, bytes: 4503599627366400 not enough memory for the allocation [ 321.100924][T20619] program syz.5.6974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.152962][T20619] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 322.037585][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.044043][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.002797][ T29] audit: type=1800 audit(4294967309.117:46): pid=20789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7041" name="dbroot" dev="configfs" ino=55934 res=0 errno=0 [ 324.052505][ T29] audit: type=1804 audit(4294967309.137:47): pid=20789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.7041" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=55934 res=1 errno=0 [ 324.103592][ T6312] Bluetooth: hci2: command 0x0406 tx timeout [ 324.246340][T20799] ptrace attach of "./syz-executor exec"[6309] was attempted by "./syz-executor exec"[20799] [ 326.035131][T20867] gspca_gl860.sensor: string doesn't fit in 6 chars. [ 326.843838][T20929] Process accounting resumed [ 327.075062][T20943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7097'. [ 329.035007][T21087] misc userio: Invalid payload size [ 329.231237][T21103] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 330.463125][T21171] ptrace attach of "./syz-executor exec"[19294] was attempted by ""[21171] [ 331.942482][T21253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7248'. [ 332.637739][T21285] Ignoring unsupported numa_zonelist_order value: [ 332.637739][T21285] [ 333.184295][T21300] block nbd12: NBD_DISCONNECT [ 333.413702][T21306] Process accounting resumed [ 335.596659][T21418] ptrace attach of "./syz-executor exec"[6309] was attempted by "./syz-executor exec"[21418] [ 337.537729][T21542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7387'. [ 341.466588][T21672] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(49) [ 341.764818][T21692] dlm: non-version read from control device 0 [ 343.624392][T21799] Invalid input. Must be >= 4608 [ 344.511517][T21868] kAFS: No cell specified [ 350.060868][T22127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7673'. [ 352.340184][T22282] Process accounting resumed [ 355.156219][T22491] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 355.237257][T22491] CIFS mount error: No usable UNC path provided in device string! [ 355.237257][T22491] [ 355.278083][T22491] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 358.078523][T22616] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7892'. [ 361.736274][T22832] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(49) [ 364.425679][T22999] Invalid input. Must be >= 4608 [ 365.146741][T23036] Process accounting resumed [ 366.022040][T23070] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 366.084245][T23072] ubi13: attaching mtd0 [ 366.089432][T23072] ubi13 error: ubi_attach_mtd_dev: bad VID header (131085) or data offsets (131149) [ 366.791697][T23114] dlm: non-version read from control device 2147479552 [ 367.548292][T23171] Process accounting resumed [ 367.553115][T23171] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 368.006205][T23206] kAFS: No cell specified [ 368.732248][ T29] audit: type=1806 audit(4294967304.353:48): xattr="." res=0 [ 368.811779][T23265] snd_aloop snd_aloop.0: control 5:9:1:IA>/[k= 4608 [ 411.045558][T25847] CIFS mount error: No usable UNC path provided in device string! [ 411.045558][T25847] [ 411.059186][T25847] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 412.804248][T25982] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 412.852954][T25984] ubi13: attaching mtd0 [ 412.857487][T25984] ubi13 error: ubi_attach_mtd_dev: bad VID header (131085) or data offsets (131149) [ 413.548583][T26022] dlm: non-version read from control device 2147479552 [ 414.186006][T26065] Process accounting resumed [ 414.219052][T26065] synth uevent: /bus/usb/drivers/gud: unknown uevent action string [ 416.868311][T26232] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 418.005042][T26304] Debayer B: ================= START STATUS ================= [ 418.044043][T26304] Debayer B: Debayer Mean Window Size: 3 [ 418.051294][T26304] Debayer B: ================== END STATUS ================== [ 419.074198][T26383] binder: binder_mmap: 26380 0-1000 bad vm_flags failed -1 syzkaller syzkaller login: [ 420.992279][T26525] < [ 421.610523][T26527] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 421.944528][T26582] ecryptfs_miscdev_write: Invalid packet size [192] [ 423.997918][T26750] Invalid input. Must be >= 4608 [ 424.192621][T26768] binder: binder_mmap: 26766 0-1000 bad vm_flags failed -1 [ 424.636188][T26801] binder: binder_mmap: 26800 0-1000 bad vm_flags failed -1 [ 425.442448][T26836] binder: binder_mmap: 26833 0-1000 bad vm_flags failed -1 [ 425.972841][ T6312] Bluetooth: hci3: command 0x0406 tx timeout [ 427.786868][T26963] aoe: could not set interface list: too many interfaces [ 428.133752][T26987] aoe: could not set interface list: too many interfaces [ 429.256881][T27066] Format for deleting device is "id" (uint). [ 429.966243][T27115] Process accounting resumed [ 429.971041][T27115] kstrtoul() returned -22 for lu_gp_id [ 430.099214][ T29] audit: type=1107 audit(4294967366.032:50): pid=27123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 430.767378][ T29] audit: type=1107 audit(4294967366.685:51): pid=27150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 433.439260][T27250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10153'. [ 434.047482][T27303] Process accounting resumed [ 434.052329][T27303] kstrtoul() returned -22 for lu_gp_id [ 434.685172][T27353] : Can't lookup blockdev [ 436.975770][ T29] audit: type=1400 audit(4294967372.958:52): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=27527 comm="syz.4.10291" [ 437.097006][T27536] : Can't lookup blockdev [ 441.247001][ T29] audit: type=1800 audit(4294967377.240:53): pid=27846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10445" name="discovery_nqn" dev="configfs" ino=77214 res=0 errno=0 [ 441.985209][T27903] udc dummy_udc.0: soft-connect without a gadget driver [ 442.191264][T27923] futex_wake_op: syz.4.10484 tries to shift op by 64; fix this program [ 443.032774][T27987] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 444.548705][T28115] ecryptfs_miscdev_write: Invalid packet size [192] syzkaller syzkaller login: [ 447.241135][T28343] delete_channel: no stack [ 448.087884][T28413] Format for deleting device is "id" (uint). [ 448.454153][T28444] : Can't lookup blockdev [ 449.782256][T28483] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 450.119248][T28527] < [ 451.693949][T28630] : Can't lookup blockdev [ 453.865235][T28769] : Can't lookup blockdev [ 454.933817][T28832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10927'. [ 456.062446][ T29] audit: type=1400 audit(4294967392.137:54): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=28868 comm="syz.0.10945" [ 459.914442][T29081] Invalid ELF header magic: != ELF [ 460.104193][T29097] futex_wake_op: syz.0.11057 tries to shift op by 64; fix this program [ 460.404200][T29125] futex_wake_op: syz.5.11071 tries to shift op by 64; fix this program [ 460.442993][ T29] audit: type=1800 audit(4294967396.489:55): pid=29121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.11076" name="discovery_nqn" dev="configfs" ino=82031 res=0 errno=0 [ 460.754115][T29153] futex_wake_op: syz.6.11085 tries to shift op by 64; fix this program [ 461.556005][ T6319] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 462.129901][T29274] aoe: invalid device specification [ 462.814003][T29330] zram: Added device: zram1 [ 464.225998][T29452] syz.4.11231 (29452): attempted to duplicate a private mapping with mremap. This is not supported. [ 465.929902][T29586] zram: Added device: zram2 [ 466.248308][T29616] zram: Added device: zram3 [ 468.080938][T29776] QAT: Stopping all acceleration devices. [ 468.107699][T29780] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 469.314105][T29853] delete_channel: no stack [ 469.347441][T29861] : Can't lookup blockdev [ 470.341399][T29943] Format for deleting device is "id" (uint). syzkaller syzkaller login: [ 474.270505][T30205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11604'. [ 474.426938][T30217] ecryptfs_miscdev_write: Invalid packet size [192] [ 476.737032][T30408] udc dummy_udc.0: soft-connect without a gadget driver [ 479.412330][T30624] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 479.418858][T30624] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 479.714752][ T29] audit: type=1800 audit(4294967415.910:56): pid=30645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.11816" name="features" dev="configfs" ino=85751 res=0 errno=0 [ 480.005316][ T6319] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 482.093613][T30789] aoe: invalid device specification [ 482.105728][T30792] netlink: 'syz.6.11887': attribute type 1 has an invalid length. [ 482.416154][T30816] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 482.708365][T30841] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 483.192226][T30878] netlink: 168 bytes leftover after parsing attributes in process `syz.5.11929'. [ 484.968928][T31006] netlink: 'syz.4.11987': attribute type 1 has an invalid length. [ 485.831700][T31055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12011'. [ 485.845169][T31055] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 485.886269][T31061] netlink: 5995 bytes leftover after parsing attributes in process `syz.5.12013'. [ 486.165387][T31080] vmstat_refresh: nr_hugetlb -6144 [ 486.294907][T31088] openvswitch: netlink: Message has 4 unknown bytes. [ 486.349821][T31092] CIFS: VFS: Invalid SecurityFlags: [ 486.873486][T31127] netlink: 'syz.0.12042': attribute type 10 has an invalid length. [ 486.955432][T31133] nfs: Unknown parameter 'nl80211' [ 486.979958][T31135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.995930][T31135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.284595][T31155] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 723.562225][T12305] dump_stack_lvl+0x16c/0x1f0 [ 723.567059][T12305] sysfs_warn_dup+0x7f/0xa0 [ 723.571642][T12305] sysfs_do_create_link_sd+0x124/0x140 [ 723.577188][T12305] sysfs_create_link+0x61/0xc0 [ 723.582037][T12305] device_add+0x62e/0x1a70 [ 723.586514][T12305] ? __pfx_device_add+0x10/0x10 [ 723.591416][T12305] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 723.597375][T12305] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 723.603426][T12305] wiphy_register+0x1c7a/0x2860 [ 723.608357][T12305] ? netdev_run_todo+0x837/0x12d0 [ 723.613468][T12305] ? __pfx_wiphy_register+0x10/0x10 [ 723.618748][T12305] ieee80211_register_hw+0x2951/0x3fa0 [ 723.624284][T12305] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 723.630319][T12305] ? net_generic+0xea/0x2a0 [ 723.634909][T12305] ? lockdep_init_map_type+0x16d/0x7d0 [ 723.640432][T12305] ? net_generic+0x30/0x2a0 [ 723.645009][T12305] ? rcu_is_watching+0x12/0xc0 [ 723.650014][T12305] ? trace_hrtimer_init+0x1a6/0x230 [ 723.655280][T12305] ? __hrtimer_init+0x106/0x2c0 [ 723.660195][T12305] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 723.666009][T12305] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 723.672154][T12305] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 723.677540][T12305] hwsim_new_radio_nl+0xb42/0x12b0 [ 723.682735][T12305] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 723.688371][T12305] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 723.695813][T12305] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 723.703453][T12305] genl_family_rcv_msg_doit+0x202/0x2f0 [ 723.709079][T12305] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 723.715223][T12305] ? genl_get_cmd+0x195/0x580 [ 723.719974][T12305] ? bpf_lsm_capable+0x9/0x10 [ 723.724721][T12305] ? security_capable+0x7e/0x260 [ 723.729732][T12305] ? ns_capable+0xd7/0x110 [ 723.734210][T12305] genl_rcv_msg+0x565/0x800 [ 723.738786][T12305] ? __pfx_genl_rcv_msg+0x10/0x10 [ 723.743893][T12305] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 723.749540][T12305] netlink_rcv_skb+0x165/0x410 [ 723.754367][T12305] ? __pfx_genl_rcv_msg+0x10/0x10 [ 723.759467][T12305] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 723.764826][T12305] ? down_read+0xc9/0x330 [ 723.769229][T12305] ? __pfx_down_read+0x10/0x10 [ 723.774100][T12305] ? netlink_deliver_tap+0x1ae/0xca0 [ 723.779451][T12305] genl_rcv+0x28/0x40 [ 723.783497][T12305] netlink_unicast+0x53c/0x7f0 [ 723.788336][T12305] ? __pfx_netlink_unicast+0x10/0x10 [ 723.793687][T12305] ? __phys_addr_symbol+0x30/0x80 [ 723.798783][T12305] ? __check_object_size+0x488/0x710 [ 723.804161][T12305] netlink_sendmsg+0x8b8/0xd70 [ 723.809001][T12305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.814366][T12305] ____sys_sendmsg+0x9ae/0xb40 [ 723.819203][T12305] ? copy_msghdr_from_user+0x10b/0x160 [ 723.824824][T12305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 723.830186][T12305] ? try_to_wake_up+0x158/0x1490 [ 723.835363][T12305] ___sys_sendmsg+0x135/0x1e0 [ 723.840128][T12305] ? __pfx____sys_sendmsg+0x10/0x10 [ 723.845503][T12305] ? __pfx_lock_release+0x10/0x10 [ 723.850596][T12305] ? trace_lock_acquire+0x14e/0x1f0 [ 723.855884][T12305] ? __fget_files+0x206/0x3a0 [ 723.860634][T12305] __sys_sendmsg+0x16e/0x220 [ 723.865391][T12305] ? __pfx___sys_sendmsg+0x10/0x10 [ 723.870580][T12305] ? __x64_sys_futex+0x1e1/0x4c0 [ 723.875601][T12305] ? rcu_is_watching+0x12/0xc0 [ 723.880433][T12305] ? rcu_is_watching+0x12/0xc0 [ 723.885263][T12305] do_syscall_64+0xcd/0x250 [ 723.889842][T12305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.895809][T12305] RIP: 0033:0x7f4116985d29 [ 723.900327][T12305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.920004][T12305] RSP: 002b:00007f411782b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.928484][T12305] RAX: ffffffffffffffda RBX: 00007f4116b75fa0 RCX: 00007f4116985d29 [ 723.936515][T12305] RDX: 0000000004000800 RSI: 0000000020000e00 RDI: 0000000000000003 [ 723.944542][T12305] RBP: 00007f4116a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 723.952573][T12305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.960571][T12305] R13: 0000000000000000 R14: 00007f4116b75fa0 R15: 00007ffce9178f28 [ 723.968658][T12305] [ 725.815466][T12454] Invalid ELF header len 3 [ 726.536590][T12506] openvswitch: netlink: Key 23 has unexpected len 0 expected 2 [ 726.654481][T12513] netlink: ct family unspecified [ 726.676785][T12517] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 727.262656][T12558] openvswitch: netlink: Message has 4 unknown bytes. [ 727.329782][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18433'. [ 727.467677][T12574] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 727.628785][T12585] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 727.698376][T12594] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 728.773715][T12665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.691607][T12728] openvswitch: netlink: IP tunnel dst address not specified [ 730.312563][T12762] netlink: 108 bytes leftover after parsing attributes in process `syz.4.18521'. [ 731.243328][T12821] netlink: zone id is out of range [ 731.267616][T12821] netlink: zone id is out of range [ 731.272811][T12821] netlink: zone id is out of range [ 731.285951][T12821] netlink: zone id is out of range [ 731.291135][T12821] netlink: zone id is out of range [ 731.314382][T12821] netlink: zone id is out of range [ 731.592977][ T6319] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 731.607114][T12847] netlink: 'syz.4.18559': attribute type 2 has an invalid length. [ 732.729718][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18589'. [ 733.047067][T12922] netlink: 85 bytes leftover after parsing attributes in process `syz.4.18596'. [ 733.085751][T12926] nbd: must specify an index to disconnect [ 733.417112][T12949] net_ratelimit: 3 callbacks suppressed [ 733.417141][T12949] netlink: zone id is out of range [ 733.463233][T12949] netlink: zone id is out of range [ 733.472941][T12949] netlink: zone id is out of range [ 733.493287][T12949] netlink: del zone limit has 8 unknown bytes [ 733.592792][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18614'. [ 733.659737][T12967] netlink: 'syz.4.18617': attribute type 1 has an invalid length. [ 733.911801][T12990] netlink: 'syz.6.18628': attribute type 22 has an invalid length. [ 734.330782][T13023] Invalid ELF header magic: != ELF [ 736.504532][ T29] audit: type=1326 audit(4294967473.186:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13191 comm="syz.0.18726" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ae8585d29 code=0x0 [ 739.263559][T13399] netlink: Unknown conntrack attr (type=64, max=9) [ 739.400250][T13407] netlink: zone id is out of range [ 739.405729][T13407] netlink: zone id is out of range [ 739.413639][T13407] netlink: set zone limit has 8 unknown bytes [ 739.484360][T13414] nbd: must specify a size in bytes for the device [ 739.787012][T13440] openvswitch: netlink: Key type 261 is out of range max 32 [ 741.503424][T13569] openvswitch: HSR: Dropping previously announced user features [ 743.293064][T13657] openvswitch: netlink: Message has 4 unknown bytes. [ 743.457393][T13669] sctp: [Deprecated]: syz.4.18950 (pid 13669) Use of int in max_burst socket option deprecated. [ 743.457393][T13669] Use struct sctp_assoc_value instead [ 743.986692][T13707] ptrace attach of "./syz-executor exec"[19294] was attempted by "./syz-executor exec"[13707] [ 745.176560][T13792] netlink: zone id is out of range [ 745.181764][T13792] netlink: del zone limit has 4 unknown bytes [ 746.441164][T13852] netlink: 'syz.5.19035': attribute type 1 has an invalid length. [ 747.119579][T13892] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 747.591340][T13912] netlink: zone id is out of range [ 747.630867][T13912] netlink: set zone limit has 8 unknown bytes [ 747.749247][T13922] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 747.872522][T13928] openvswitch: netlink: Message has 4 unknown bytes. [ 748.234184][T13954] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 748.302146][T13958] openvswitch: netlink: Missing valid actions attribute. [ 749.077020][T14008] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 749.506372][T14028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19124'. [ 749.516625][T14025] svc: failed to register nfsdv3 RPC service (errno 111). [ 749.525452][T14025] svc: failed to register nfsaclv3 RPC service (errno 111). [ 749.893875][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.900646][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.411257][T14065] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 750.429113][T14065] CPU: 1 UID: 0 PID: 14065 Comm: syz.6.19132 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 750.440047][T14065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 750.450159][T14065] Call Trace: [ 750.453490][T14065] [ 750.456479][T14065] dump_stack_lvl+0x16c/0x1f0 [ 750.461229][T14065] sysfs_warn_dup+0x7f/0xa0 [ 750.465817][T14065] sysfs_do_create_link_sd+0x124/0x140 [ 750.471385][T14065] sysfs_create_link+0x61/0xc0 [ 750.476239][T14065] device_add+0x62e/0x1a70 [ 750.480722][T14065] ? __pfx_device_add+0x10/0x10 [ 750.485645][T14065] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 750.491610][T14065] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 750.497868][T14065] wiphy_register+0x1c7a/0x2860 [ 750.502836][T14065] ? netdev_run_todo+0x837/0x12d0 [ 750.508073][T14065] ? __pfx_wiphy_register+0x10/0x10 [ 750.513350][T14065] ieee80211_register_hw+0x2951/0x3fa0 [ 750.518897][T14065] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 750.524922][T14065] ? net_generic+0xea/0x2a0 [ 750.529574][T14065] ? lockdep_init_map_type+0x16d/0x7d0 [ 750.535096][T14065] ? net_generic+0x30/0x2a0 [ 750.539658][T14065] ? rcu_is_watching+0x12/0xc0 [ 750.544514][T14065] ? trace_hrtimer_init+0x1a6/0x230 [ 750.549755][T14065] ? __hrtimer_init+0x106/0x2c0 [ 750.554654][T14065] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 750.560444][T14065] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 750.566572][T14065] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 750.571922][T14065] hwsim_new_radio_nl+0xb42/0x12b0 [ 750.577116][T14065] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 750.582726][T14065] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 750.590155][T14065] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 750.597579][T14065] genl_family_rcv_msg_doit+0x202/0x2f0 [ 750.603197][T14065] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 750.609311][T14065] ? genl_get_cmd+0x195/0x580 [ 750.614031][T14065] ? bpf_lsm_capable+0x9/0x10 [ 750.618751][T14065] ? security_capable+0x7e/0x260 [ 750.623835][T14065] ? ns_capable+0xd7/0x110 [ 750.628311][T14065] genl_rcv_msg+0x565/0x800 [ 750.632865][T14065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 750.637941][T14065] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 750.643551][T14065] netlink_rcv_skb+0x165/0x410 [ 750.648359][T14065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 750.653429][T14065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 750.658857][T14065] ? down_read+0xc9/0x330 [ 750.663232][T14065] ? __pfx_down_read+0x10/0x10 [ 750.668045][T14065] ? netlink_deliver_tap+0x1ae/0xca0 [ 750.673371][T14065] genl_rcv+0x28/0x40 [ 750.677412][T14065] netlink_unicast+0x53c/0x7f0 [ 750.682328][T14065] ? __pfx_netlink_unicast+0x10/0x10 [ 750.687656][T14065] ? __phys_addr_symbol+0x30/0x80 [ 750.692811][T14065] ? __check_object_size+0x488/0x710 [ 750.698149][T14065] netlink_sendmsg+0x8b8/0xd70 [ 750.702957][T14065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 750.708288][T14065] ____sys_sendmsg+0x9ae/0xb40 [ 750.713097][T14065] ? copy_msghdr_from_user+0x10b/0x160 [ 750.718614][T14065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 750.723955][T14065] ? try_to_wake_up+0x158/0x1490 [ 750.728938][T14065] ___sys_sendmsg+0x135/0x1e0 [ 750.733665][T14065] ? __pfx____sys_sendmsg+0x10/0x10 [ 750.738920][T14065] ? __pfx_lock_release+0x10/0x10 [ 750.743981][T14065] ? trace_lock_acquire+0x14e/0x1f0 [ 750.749238][T14065] ? __fget_files+0x206/0x3a0 [ 750.753961][T14065] __sys_sendmsg+0x16e/0x220 [ 750.758608][T14065] ? __pfx___sys_sendmsg+0x10/0x10 [ 750.763777][T14065] ? __x64_sys_futex+0x1e1/0x4c0 [ 750.768771][T14065] ? rcu_is_watching+0x12/0xc0 [ 750.773574][T14065] ? rcu_is_watching+0x12/0xc0 [ 750.778379][T14065] do_syscall_64+0xcd/0x250 [ 750.782929][T14065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.788871][T14065] RIP: 0033:0x7fa54af85d29 [ 750.793320][T14065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.813141][T14065] RSP: 002b:00007fa54bdfa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.821675][T14065] RAX: ffffffffffffffda RBX: 00007fa54b175fa0 RCX: 00007fa54af85d29 [ 750.829781][T14065] RDX: 0000000004000800 RSI: 0000000020000e00 RDI: 0000000000000003 [ 750.837874][T14065] RBP: 00007fa54b001b08 R08: 0000000000000000 R09: 0000000000000000 [ 750.846678][T14065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.854710][T14065] R13: 0000000000000000 R14: 00007fa54b175fa0 R15: 00007ffebf6d3708 [ 750.862729][T14065] [ 753.363887][T14238] netlink: 'syz.6.19222': attribute type 2 has an invalid length. [ 755.739194][T14294] kexec: Could not allocate control_code_buffer [ 756.909683][T14418] net_ratelimit: 1 callbacks suppressed [ 756.909710][T14418] openvswitch: netlink: Key type 29 is not supported [ 757.884643][T14487] Invalid ELF header magic: != ELF [ 760.835733][T14691] netlink: zone id is out of range [ 760.841397][T14691] netlink: zone id is out of range [ 760.847302][T14691] netlink: zone id is out of range [ 760.857397][T14691] netlink: get zone limit has 4 unknown bytes [ 761.138440][T14706] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 762.544007][T14787] netlink: 'syz.4.19468': attribute type 1 has an invalid length. [ 763.225569][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19487'. [ 764.230929][T14895] openvswitch: netlink: Key type 261 is out of range max 32 [ 765.507802][T14970] netlink: Conntrack attr type has unexpected length (type=0, length=107, expected=0) [ 766.197350][T15017] openvswitch: netlink: IP tunnel dst address not specified [ 766.241358][T15020] openvswitch: HSR: Dropping previously announced user features [ 766.809893][T15055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19597'. [ 768.629968][T15158] netlink: 'syz.5.19645': attribute type 2 has an invalid length. [ 771.410626][T15370] netlink: 32 bytes leftover after parsing attributes in process `syz.6.19743'. [ 772.240185][T15420] sctp: [Deprecated]: syz.0.19765 (pid 15420) Use of struct sctp_assoc_value in delayed_ack socket option. [ 772.240185][T15420] Use struct sctp_sack_info instead [ 772.388589][T15428] netlink: 'syz.4.19769': attribute type 1 has an invalid length. [ 773.624939][T15508] netlink: 'syz.4.19809': attribute type 11 has an invalid length. [ 774.332881][T15552] openvswitch: netlink: Flow key attribute not present in set flow. [ 774.393393][T15556] delete_channel: no stack [ 774.698404][T15575] netlink: 648 bytes leftover after parsing attributes in process `syz.0.19841'. [ 774.727849][T15575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19841'. [ 774.924412][T15593] netlink: get zone limit has 8 unknown bytes [ 775.040884][T15601] netlink: 'syz.6.19852': attribute type 5 has an invalid length. [ 776.187316][T15664] delete_channel: no stack [ 776.869201][T15706] ptrace attach of "./syz-executor exec"[13425] was attempted by "./syz-executor exec"[15706] [ 778.248278][T15772] nbd: must specify an index to disconnect [ 778.958608][T15817] netlink: 'syz.6.19952': attribute type 1 has an invalid length. [ 779.040680][T15821] openvswitch: netlink: Key type 29 is not supported [ 779.061922][T15823] netlink: 85 bytes leftover after parsing attributes in process `syz.0.19955'. [ 779.764173][ T6319] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 780.340297][T15899] Invalid ELF header magic: != ELF [ 780.975845][T15876] kexec: Could not allocate control_code_buffer [ 781.586354][T15954] sctp: [Deprecated]: syz.0.20024 (pid 15954) Use of int in max_burst socket option deprecated. [ 781.586354][T15954] Use struct sctp_assoc_value instead [ 782.800657][T16034] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 782.813153][T16033] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 783.232924][T16050] openvswitch: netlink: Missing valid actions attribute. [ 783.295556][T16052] netlink: zone id is out of range [ 783.300769][T16052] netlink: del zone limit has 4 unknown bytes [ 784.321706][T16107] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 784.348776][T16107] CPU: 1 UID: 0 PID: 16107 Comm: syz.5.20095 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 784.359708][T16107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 784.369817][T16107] Call Trace: [ 784.373145][T16107] [ 784.376114][T16107] dump_stack_lvl+0x16c/0x1f0 [ 784.380858][T16107] sysfs_warn_dup+0x7f/0xa0 [ 784.385450][T16107] sysfs_do_create_link_sd+0x124/0x140 [ 784.390999][T16107] sysfs_create_link+0x61/0xc0 [ 784.395856][T16107] device_add+0x62e/0x1a70 [ 784.400347][T16107] ? __pfx_device_add+0x10/0x10 [ 784.405263][T16107] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 784.411260][T16107] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 784.417407][T16107] wiphy_register+0x1c7a/0x2860 [ 784.422333][T16107] ? netdev_run_todo+0x837/0x12d0 [ 784.427440][T16107] ? __pfx_wiphy_register+0x10/0x10 [ 784.432731][T16107] ieee80211_register_hw+0x2951/0x3fa0 [ 784.438312][T16107] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 784.444190][T16107] ? net_generic+0xea/0x2a0 [ 784.448774][T16107] ? lockdep_init_map_type+0x16d/0x7d0 [ 784.454292][T16107] ? net_generic+0x30/0x2a0 [ 784.458875][T16107] ? rcu_is_watching+0x12/0xc0 [ 784.463717][T16107] ? trace_hrtimer_init+0x1a6/0x230 [ 784.468980][T16107] ? __hrtimer_init+0x106/0x2c0 [ 784.473884][T16107] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 784.479697][T16107] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 784.485851][T16107] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 784.491216][T16107] hwsim_new_radio_nl+0xb42/0x12b0 [ 784.496403][T16107] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 784.502159][T16107] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 784.509721][T16107] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 784.517197][T16107] genl_family_rcv_msg_doit+0x202/0x2f0 [ 784.522853][T16107] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 784.528998][T16107] ? genl_get_cmd+0x195/0x580 [ 784.533760][T16107] ? bpf_lsm_capable+0x9/0x10 [ 784.538505][T16107] ? security_capable+0x7e/0x260 [ 784.543532][T16107] ? ns_capable+0xd7/0x110 [ 784.548025][T16107] genl_rcv_msg+0x565/0x800 [ 784.552603][T16107] ? __pfx_genl_rcv_msg+0x10/0x10 [ 784.557702][T16107] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 784.563335][T16107] netlink_rcv_skb+0x165/0x410 [ 784.568176][T16107] ? __pfx_genl_rcv_msg+0x10/0x10 [ 784.573284][T16107] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 784.578651][T16107] ? down_read+0xc9/0x330 [ 784.583059][T16107] ? __pfx_down_read+0x10/0x10 [ 784.587928][T16107] ? netlink_deliver_tap+0x1ae/0xca0 [ 784.593284][T16107] genl_rcv+0x28/0x40 [ 784.597340][T16107] netlink_unicast+0x53c/0x7f0 [ 784.602176][T16107] ? __pfx_netlink_unicast+0x10/0x10 [ 784.607564][T16107] ? __phys_addr_symbol+0x30/0x80 [ 784.612664][T16107] ? __check_object_size+0x488/0x710 [ 784.618042][T16107] netlink_sendmsg+0x8b8/0xd70 [ 784.622973][T16107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 784.628350][T16107] ____sys_sendmsg+0x9ae/0xb40 [ 784.633185][T16107] ? copy_msghdr_from_user+0x10b/0x160 [ 784.638726][T16107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 784.644100][T16107] ___sys_sendmsg+0x135/0x1e0 [ 784.648865][T16107] ? __pfx____sys_sendmsg+0x10/0x10 [ 784.654152][T16107] ? __pfx_aa_sk_perm+0x10/0x10 [ 784.659131][T16107] ? lock_acquire+0x2f/0xb0 [ 784.663745][T16107] ? __pfx_lock_release+0x10/0x10 [ 784.668837][T16107] ? trace_lock_acquire+0x14e/0x1f0 [ 784.674130][T16107] ? __fget_files+0x206/0x3a0 [ 784.678883][T16107] __sys_sendmsg+0x16e/0x220 [ 784.683552][T16107] ? __pfx___sys_sendmsg+0x10/0x10 [ 784.688748][T16107] ? __x64_sys_futex+0x1e1/0x4c0 [ 784.693776][T16107] ? rcu_is_watching+0x12/0xc0 [ 784.698617][T16107] ? rcu_is_watching+0x12/0xc0 [ 784.703716][T16107] do_syscall_64+0xcd/0x250 [ 784.708312][T16107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.714281][T16107] RIP: 0033:0x7f4ad1185d29 [ 784.718753][T16107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.738509][T16107] RSP: 002b:00007f4ad1f95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.746989][T16107] RAX: ffffffffffffffda RBX: 00007f4ad1375fa0 RCX: 00007f4ad1185d29 [ 784.755023][T16107] RDX: 0000000004000800 RSI: 0000000020000e00 RDI: 0000000000000003 [ 784.764561][T16107] RBP: 00007f4ad1201b08 R08: 0000000000000000 R09: 0000000000000000 [ 784.772608][T16107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.780635][T16107] R13: 0000000000000000 R14: 00007f4ad1375fa0 R15: 00007ffe5e59ff88 [ 784.788679][T16107] [ 785.185251][T16132] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 785.371383][T16140] svc: failed to register nfsdv3 RPC service (errno 111). [ 785.395804][T16140] svc: failed to register nfsaclv3 RPC service (errno 111). [ 786.489876][T16203] nbd: must specify a size in bytes for the device [ 787.867655][T16291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20171'. [ 788.213587][T16313] openvswitch: netlink: Key type 261 is out of range max 32 [ 788.835045][T16346] openvswitch: netlink: IP tunnel dst address not specified [ 788.841364][T16349] netlink: Conntrack attr type has unexpected length (type=0, length=107, expected=0) [ 789.216509][T16371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20209'. [ 790.857702][T16409] openvswitch: HSR: Dropping previously announced user features [ 790.981224][T16416] netlink: 'syz.5.20234': attribute type 1 has an invalid length. [ 792.114042][T16465] netlink: 'syz.6.20254': attribute type 2 has an invalid length. [ 794.070079][T16581] netlink: 32 bytes leftover after parsing attributes in process `syz.5.20308'. [ 796.044994][T16675] netlink: 'syz.5.20348': attribute type 1 has an invalid length. [ 796.255138][T16684] netlink: 'syz.0.20352': attribute type 11 has an invalid length. [ 796.562558][T16701] delete_channel: no stack [ 796.863629][T16715] netlink: 'syz.0.20368': attribute type 1 has an invalid length. [ 796.953114][T16721] netlink: 648 bytes leftover after parsing attributes in process `syz.6.20371'. [ 796.964294][T16721] netlink: 16 bytes leftover after parsing attributes in process `syz.6.20371'. [ 798.438825][ T2986] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.514901][ T2986] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.636942][ T2986] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.702601][ T2986] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.876797][ T2986] bridge_slave_1: left allmulticast mode [ 798.894840][ T2986] bridge_slave_1: left promiscuous mode [ 798.900644][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.934011][ T2986] bridge_slave_0: left allmulticast mode [ 798.946985][ T2986] bridge_slave_0: left promiscuous mode [ 798.974600][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.208614][T16799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 799.223968][T16799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 799.231554][T16799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 799.239932][T16799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 799.248386][T16799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 799.256022][T16799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 799.372835][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.392241][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.411803][ T2986] bond0 (unregistering): Released all slaves [ 799.525613][ T2986] HSR: left promiscuous mode [ 799.594702][ T2986] nl80211: left promiscuous mode [ 799.753869][ T2986] tipc: Left network mode [ 799.860892][T16798] chnl_net:caif_netlink_parms(): no params data found [ 800.335104][T16798] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.354094][T16798] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.374016][T16798] bridge_slave_0: entered allmulticast mode [ 800.390593][T16798] bridge_slave_0: entered promiscuous mode [ 800.404106][T16851] delete_channel: no stack [ 800.413784][T16798] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.421141][T16798] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.457704][T16798] bridge_slave_1: entered allmulticast mode [ 800.464938][T16798] bridge_slave_1: entered promiscuous mode [ 800.497974][T16798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.511832][T16798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.561285][T16798] team0: Port device team_slave_0 added [ 800.572550][T16798] team0: Port device team_slave_1 added [ 800.603832][T16798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.610917][T16798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.639537][T16798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.657265][T16798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.665213][T16798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.691345][T16798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.725909][T16798] hsr_slave_0: entered promiscuous mode [ 800.732146][T16798] hsr_slave_1: entered promiscuous mode [ 800.739072][T16798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 800.747201][T16798] Cannot create hsr debugfs directory [ 800.907805][T16798] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 800.922589][T16798] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 800.934713][T16798] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 800.945662][T16798] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 801.052623][T16798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.085940][T16798] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.125057][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.132348][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.153480][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.160636][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.222784][ T2986] hsr_slave_0: left promiscuous mode [ 801.228763][ T2986] hsr_slave_1: left promiscuous mode [ 801.234904][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.242963][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.253093][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.261135][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.271930][ T2986] veth1_macvtap: left promiscuous mode [ 801.277479][ T2986] veth0_macvtap: left promiscuous mode [ 801.283191][ T2986] veth1_vlan: left promiscuous mode [ 801.288487][ T2986] veth0_vlan: left promiscuous mode [ 801.300552][T16799] Bluetooth: hci2: command tx timeout [ 801.393207][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 801.406954][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 801.619092][T16798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.841237][T16798] veth0_vlan: entered promiscuous mode [ 801.853778][T16798] veth1_vlan: entered promiscuous mode [ 801.896870][T16798] veth0_macvtap: entered promiscuous mode [ 801.906104][T16798] veth1_macvtap: entered promiscuous mode [ 801.922710][T16798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.933384][T16798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.945963][T16798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.959045][T16798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.970109][T16798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.983492][T16798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.996028][T16798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.011722][T16798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.024919][T16798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.035646][T16798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.047942][T16798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.059021][T16798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.070923][T16798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.083734][T16798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.101306][T16798] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.111039][T16798] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.120453][T16798] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.131395][T16798] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.193096][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.216960][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.243406][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.252110][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.379205][T16799] Bluetooth: hci2: command tx timeout [ 805.439468][T16799] Bluetooth: hci2: command tx timeout [ 807.379901][ T3518] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.510243][T16799] Bluetooth: hci2: command tx timeout [ 807.545829][ T3518] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.662196][ T3518] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.945334][ T3518] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.996234][ T6319] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 808.003622][ T6319] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 808.011863][ T6319] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 808.019746][ T6319] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 808.027318][ T6319] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 808.034671][ T6319] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 808.150595][ T3518] bridge_slave_1: left allmulticast mode [ 808.175868][ T3518] bridge_slave_1: left promiscuous mode [ 808.181647][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.231881][ T3518] bridge_slave_0: left allmulticast mode [ 808.238249][ T3518] bridge_slave_0: left promiscuous mode [ 808.244010][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.391173][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.403962][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.416172][ T3518] bond0 (unregistering): Released all slaves [ 808.427032][T17139] kexec: Could not allocate control_code_buffer [ 808.475686][ T3518] HSR: left promiscuous mode [ 808.515203][ T3518] .': left promiscuous mode [ 808.556424][ T3518] : left promiscuous mode [ 808.606867][ T3518] tipc: Left network mode [ 808.612819][T17156] chnl_net:caif_netlink_parms(): no params data found [ 808.709386][T17156] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.717028][T17156] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.724573][T17156] bridge_slave_0: entered allmulticast mode [ 808.731495][T17156] bridge_slave_0: entered promiscuous mode [ 808.746804][T17156] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.754633][T17156] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.761957][T17156] bridge_slave_1: entered allmulticast mode [ 808.768873][T17156] bridge_slave_1: entered promiscuous mode [ 808.807980][T17156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.825552][T17156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.851976][T17156] team0: Port device team_slave_0 added [ 808.859452][T17156] team0: Port device team_slave_1 added [ 808.888424][T17156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.895530][T17156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.923677][T17156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.940101][T17156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.947364][T17156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.973585][T17156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.011725][T17156] hsr_slave_0: entered promiscuous mode [ 809.018108][T17156] hsr_slave_1: entered promiscuous mode [ 809.024870][T17156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 809.032906][T17156] Cannot create hsr debugfs directory [ 809.197613][T17156] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 809.221833][T17156] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 809.244573][T17156] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 809.256982][T17156] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 809.294466][T17156] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.301660][T17156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.309117][T17156] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.316329][T17156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.396951][T17156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.423448][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.431751][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.454480][T17156] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.466251][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.473480][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.499794][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.506933][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.645426][ T3518] hsr_slave_0: left promiscuous mode [ 809.651685][ T3518] hsr_slave_1: left promiscuous mode [ 809.658742][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.666215][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.679804][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.687746][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.699699][ T3518] veth1_macvtap: left promiscuous mode [ 809.705272][ T3518] veth0_macvtap: left promiscuous mode [ 809.712781][ T3518] veth1_vlan: left promiscuous mode [ 809.719782][ T3518] veth0_vlan: left promiscuous mode [ 809.890432][ T3518] team0 (unregistering): Port device team_slave_1 removed [ 809.904595][ T3518] team0 (unregistering): Port device team_slave_0 removed [ 810.055150][T16799] Bluetooth: hci1: command tx timeout [ 810.057132][T17156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.292799][T17156] veth0_vlan: entered promiscuous mode [ 810.310868][T17156] veth1_vlan: entered promiscuous mode [ 810.340100][T17156] veth0_macvtap: entered promiscuous mode [ 810.354991][T17156] veth1_macvtap: entered promiscuous mode [ 810.372902][T17156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.386560][T17156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.396957][T17156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.407607][T17156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.417546][T17156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.428453][T17156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.439959][T17156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.449465][T17156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.460881][T17156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.472260][T17156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.484609][T17156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.494881][T17156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.506248][T17156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.516884][T17156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.542995][T17156] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.551790][T17156] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.561874][T17156] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.570960][T17156] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.627686][T17197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.640256][T17197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.675672][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.684776][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.041405][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.047772][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.124743][T16799] Bluetooth: hci1: command tx timeout [ 814.193955][T16799] Bluetooth: hci1: command tx timeout [ 814.957172][T17445] netlink: 28 bytes leftover after parsing attributes in process `syz.6.20552'. [ 816.271408][T16799] Bluetooth: hci1: command tx timeout [ 817.418817][T17566] openvswitch: netlink: IP tunnel TTL not specified. [ 819.037345][T17633] netlink: 28 bytes leftover after parsing attributes in process `syz.8.20604'. [ 819.289915][T17646] netlink: 28 bytes leftover after parsing attributes in process `syz.7.20616'. [ 820.564559][T17713] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 821.003100][T17737] usb usb15: usbfs: interface 0 claimed by hub while 'syz.8.20631' sets config #0 [ 822.499852][T17802] ima: policy update failed [ 822.541871][ T29] audit: type=1802 audit(4294967559.663:81): pid=17802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.20652" res=0 errno=0 [ 823.463659][T17834] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20665'. [ 823.616085][T17839] svc: failed to register nfsdv3 RPC service (errno 111). [ 823.636420][T17839] svc: failed to register nfsaclv3 RPC service (errno 111). [ 824.484308][T17868] openvswitch: netlink: Flow key attribute not present in set flow. [ 826.658421][T17943] svc: failed to register nfsdv3 RPC service (errno 111). [ 826.666991][T17943] svc: failed to register nfsaclv3 RPC service (errno 111). [ 826.819867][T17958] openvswitch: netlink: IP tunnel TTL not specified. [ 828.191885][T18038] netlink: 'syz.8.20728': attribute type 1 has an invalid length. [ 828.966800][T18085] ima: policy update failed [ 828.984821][ T29] audit: type=1802 audit(4294967566.137:82): pid=18085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.20741" res=0 errno=0 [ 830.869579][T18188] svc: failed to register nfsdv3 RPC service (errno 111). [ 830.900783][T18188] svc: failed to register nfsaclv3 RPC service (errno 111). [ 831.003210][T18200] ima: policy update failed [ 831.019877][ T29] audit: type=1802 audit(4294967568.188:83): pid=18200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.20777" res=0 errno=0 [ 831.104843][T18205] netlink: 'syz.7.20781': attribute type 1 has an invalid length. [ 833.343855][T18300] sd 0:0:1:0: PR command failed: 1026 [ 833.353045][T18300] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 833.365432][T18300] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 835.288355][T18386] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 835.828067][T18419] 0}^: entered promiscuous mode [ 836.144767][T18438] ima: policy update failed [ 836.168552][ T29] audit: type=1802 audit(4294967573.374:84): pid=18438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.20894" res=0 errno=0 [ 836.548033][T18455] sd 0:0:1:0: PR command failed: 1026 [ 836.553681][T18455] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 836.561039][T18455] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 837.333928][T18500] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 837.556380][T18512] ima: policy update failed [ 837.561176][ T29] audit: type=1802 audit(4294967574.772:85): pid=18512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.20917" res=0 errno=0 [ 838.191948][T18543] 0}^: entered promiscuous mode [ 838.508074][T18552] ima: policy update failed [ 838.524162][ T29] audit: type=1802 audit(4294967575.727:86): pid=18552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.20935" res=0 errno=0 [ 838.718718][T18563] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 840.049351][T18611] netlink: Conntrack attr has 16 unknown bytes [ 840.576647][T18636] sg_write: process 317 (syz.7.20973) changed security contexts after opening file descriptor, this is not allowed. [ 845.452526][T18827] ptrace attach of "./syz-executor exec"[17156] was attempted by ";lIӄU_G1# #9RL#\x09c[ @=g|Dκ] 1--Yؚz {dm~VwMCf#\x09S0NE`c ?#OjHt}8hthFK=Ep5+Cv0ƨDL#\x0a1M\x5c\x1bwa125^]J$.2,mdFg_;ǩ%4LtˎN#\x0aЋ)4ٕxb\x09٭9{KX?{90)ŎIbHAXdZG31m~!wSaxNք_Yֵ\x0d%!@\x0b\x09eҲZRQ6sX$gezb4Q\x07~W#BT툑S{{\x0bIC\x0c2@iΆ13!9+djа߯UWj((Tt{uԖr\x1bh\x1bfݏ^:Z\x07|5=A'0\x0cpq'.37w:&tϱAPz:)Cu.0d8^J\x0cլb@B\x0b}a#\x0c2_39<*TƣRq@\x09?Sw/E¾*p]V7-{1pd<ʗžHNʶ5:6̩u5_1M5K{Z7/>Ue0\x0a`D'&=e.\x0a\x0dN;#FeX4*f3P\x0cxȷÖ+!vM%ٽP$bcr19eĺi,aLTTG&#z0\x5c'>cd\x5cB:ƕB8o՚verx(,ٟΫPWc\x0dQg6\x07I65v[ju&S\x0c!XW\x0cf䓆p⁢G$\x0cspIDyǣɬU4M7r~{%??'\x1bۗyIeر(b2@\x1blJÎԍ-\x07\x0c&\x5cee>\x1b2t9PF!.G_Q5]Sֲ~gŤ/xx̯ڎ/d~ȹ)5CtLՅ3qmTZi+|OlOPESܶsYk2%j [ 854.190691][T19108] ptrace attach of "./syz-executor exec"[10509] was attempted by "|0`pwŵet)aq'|1F%v.Qzgṣv@$XױD@zzB\x0dPV0\x0bt@WE}\x0b'|W~N\x09YVoTƩX\x0brϋK\x07dTkŏ[+MeC\x0cVy\x22kzMw ب)\x1bͻ\x0aZ$تzbomK&{-~^mT+:*\x5cœBlvM#?LNu\x0a?(R׸̕DzN\x22A*P>^NzBNktCKacC [JA3QgbAP#0EM\x1bŗ\x5c\x07[-S3u&u?FLK0zwto,5tmx?EЫG\x0dt[\x5c [ 854.992671][T19132] netlink: 28 bytes leftover after parsing attributes in process `syz.8.21193'. [ 855.160354][T19132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.253560][T19132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.963253][T19142] ptrace attach of "./syz-executor exec"[16798] was attempted by "ʔ21MQrW\x0c\x5cOYv(ټSQf4RV\x0bKo946ha߬)hwyYr* Y&ٓ/GgIB\x0cLAi\x0c!<e_\x0b`!.c7)mSEs+̜ת‰\x0b\x075\x0a+=օi[/\x0d!iMR\x1bˑ]nEKFpF)E3e@ҤGh\x22SduY3<1\x0as&)Xz6]wg_'E9 =yKK<\x22C\x0av$w[d݀68_X`}t; \x1b3s,ݲDҁGNSYq?$|R\x0a\x0cQ|ML-~\x5cp\x0a*yq*f@w(ν\x0a\x1bQǞl*VC^O#zV;R jN:њ\x0bZEcZ/ƖWG#%_3vf57(LW(5hrEіJHy~sdD5/\x0a䉣)AG ,Zq!APfrV*x+ \x0dwBusދMF.%`5+婵;joD`fە4ɪIƎ̺'xbJLo۲ba3^@\x22F\x0d!'\x0aF@S:\x0aA\x0a3ڑt?*j'\x22VI7ltoK\x09Kj\x22g9ȹ+!C*m [ 858.750221][T19211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21228'. [ 859.097497][T19218] Process accounting resumed [ 860.215582][T19243] Process accounting resumed [ 860.279409][T19232] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 860.527236][T19253] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21248'. [ 862.250507][T19309] netlink: 4 bytes leftover after parsing attributes in process `syz.8.21270'. [ 862.841718][T19318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21274'. [ 863.425027][T19338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21283'. [ 863.595300][T19348] Process accounting resumed [ 864.214459][T19372] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 865.141103][T19398] usb usb15: usbfs: process 19398 (syz.7.21307) did not claim interface 0 before use [ 867.782521][T19453] netlink: 28 bytes leftover after parsing attributes in process `syz.6.21326'. [ 869.193506][T19492] Process accounting resumed [ 869.612281][T19503] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 872.135719][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.143028][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.499975][T19598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.798161][T19607] bcache: register_bcache() error : failed to open device [ 879.329456][T19807] netlink: 'syz.4.21474': attribute type 11 has an invalid length. [ 879.849126][T16799] Bluetooth: hci3: ACL packet too small [ 880.464915][T19849] bcache: register_bcache() error : failed to open device [ 883.235247][T16799] Bluetooth: hci0: ACL packet too small [ 883.316305][T19950] Process accounting resumed [ 883.639764][T19965] netlink: 'syz.8.21535': attribute type 11 has an invalid length. [ 883.758483][T19971] Process accounting resumed [ 887.378889][T20135] Process accounting resumed [ 889.958800][T20267] netlink: 206 bytes leftover after parsing attributes in process `syz.4.21658'. [ 890.157613][T20280] Process accounting resumed [ 890.475114][T20298] netlink: 206 bytes leftover after parsing attributes in process `syz.8.21670'. [ 891.085917][T20338] netlink: 206 bytes leftover after parsing attributes in process `syz.7.21685'. [ 891.479831][T20360] sg_write: data in/out 32581/1048664 bytes for SCSI command 0x0-- guessing data in; [ 891.479831][T20360] program syz.7.21695 not setting count and/or reply_len properly [ 892.386774][T20399] block nbd3: Unsupported socket: shutdown callout must be supported. [ 893.080084][T20438] Process accounting resumed [ 893.958273][T20481] Process accounting resumed [ 894.438635][T20512] openvswitch: netlink: IP tunnel TTL not specified. [ 895.196721][T20543] openvswitch: netlink: IP tunnel TTL not specified. [ 899.174465][T20695] Process accounting resumed [ 901.434327][T20802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21874'. [ 905.461986][T20932] netlink: 28 bytes leftover after parsing attributes in process `syz.6.21930'. [ 906.120867][T20947] Process accounting resumed [ 906.332049][T20961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21943'. [ 906.418625][T20965] netlink: 122 bytes leftover after parsing attributes in process `syz.4.21954'. [ 906.435135][T20965] netlink: 122 bytes leftover after parsing attributes in process `syz.4.21954'. [ 907.506946][T20992] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21956'. [ 909.412954][T21074] netlink: 28 bytes leftover after parsing attributes in process `syz.7.21992'. [ 909.843494][T21095] netlink: 122 bytes leftover after parsing attributes in process `syz.7.22001'. [ 909.858490][T21095] netlink: 122 bytes leftover after parsing attributes in process `syz.7.22001'. [ 916.001023][T21374] netlink: 178 bytes leftover after parsing attributes in process `syz.4.22131'. [ 918.564282][T21452] program syz.7.22165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 918.844514][T21468] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 918.851054][T21468] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 920.194434][T21503] Process accounting resumed [ 920.848266][T21533] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 920.854792][T21533] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 922.239544][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.7.22223'. [ 925.136583][ T6319] Bluetooth: hci2: command 0x0406 tx timeout [ 927.333582][T21776] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 928.958443][T21850] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22336'. [ 930.229899][ T6319] Bluetooth: hci1: command 0x0406 tx timeout [ 931.244968][T21910] netlink: 4 bytes leftover after parsing attributes in process `syz.8.22363'. [ 931.396003][T21910] netlink: 4 bytes leftover after parsing attributes in process `syz.8.22363'. [ 932.075385][T21943] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22377'. [ 932.528335][T21967] sctp: [Deprecated]: syz.4.22396 (pid 21967) Use of int in maxseg socket option. [ 932.528335][T21967] Use struct sctp_assoc_value instead [ 933.116143][T22001] netlink: 4 bytes leftover after parsing attributes in process `syz.8.22404'. [ 933.257276][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.271034][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.629758][T22023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22414'. [ 934.623376][ T29] audit: type=1326 audit(8277292090.899:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22054 comm="syz.7.22429" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69a0f85d29 code=0x0 [ 934.660608][T22057] sctp: [Deprecated]: syz.6.22430 (pid 22057) Use of int in maxseg socket option. [ 934.660608][T22057] Use struct sctp_assoc_value instead [ 935.400941][ T2986] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.512048][ T2986] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.617520][ T2986] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.698125][ T2986] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.837514][ T2986] bridge_slave_1: left allmulticast mode [ 935.850128][ T2986] bridge_slave_1: left promiscuous mode [ 935.864269][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.913198][ T2986] bridge_slave_0: left allmulticast mode [ 935.919119][ T2986] bridge_slave_0: left promiscuous mode [ 935.950523][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.078142][ T6319] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 936.092392][ T6319] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 936.119567][ T6319] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 936.154349][ T6319] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 936.164044][ T6319] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 936.171615][ T6319] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 936.256484][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 936.268183][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.287510][ T2986] bond0 (unregistering): Released all slaves [ 936.346016][ T2986] HSR: left promiscuous mode [ 936.404247][ T2986] .': left promiscuous mode [ 936.462969][T22101] chnl_net:caif_netlink_parms(): no params data found [ 936.537745][T22101] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.545162][T22101] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.554305][T22101] bridge_slave_0: entered allmulticast mode [ 936.562167][T22101] bridge_slave_0: entered promiscuous mode [ 936.574922][T22101] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.585787][T22101] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.593176][T22101] bridge_slave_1: entered allmulticast mode [ 936.600162][T22101] bridge_slave_1: entered promiscuous mode [ 936.635170][T22101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.649747][T22101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.692700][T22101] team0: Port device team_slave_0 added [ 936.709000][T22101] team0: Port device team_slave_1 added [ 936.750601][T22101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 936.758224][T22101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 936.784716][T22101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 936.797186][T22101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 936.804167][T22101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 936.830523][T22101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.866007][T22101] hsr_slave_0: entered promiscuous mode [ 936.872320][T22101] hsr_slave_1: entered promiscuous mode [ 936.878619][T22101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 936.886247][T22101] Cannot create hsr debugfs directory [ 937.010668][T22101] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 937.022044][T22101] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 937.035999][T22101] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 937.045676][T22101] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 937.080841][T22101] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.088050][T22101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.095496][T22101] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.102843][T22101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.183120][T22101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.201687][T22101] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.210546][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.221341][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.257767][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.264929][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.276507][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.283696][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.411425][ T2986] hsr_slave_0: left promiscuous mode [ 937.417923][ T2986] hsr_slave_1: left promiscuous mode [ 937.426901][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.434566][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.444595][ T2986] veth1_macvtap: left promiscuous mode [ 937.450171][ T2986] veth0_macvtap: left promiscuous mode [ 937.457067][ T2986] veth1_vlan: left promiscuous mode [ 937.466140][ T2986] veth0_vlan: left promiscuous mode [ 937.556155][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 937.568448][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 937.704036][T22101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.931785][ T2986] ref_tracker: net notrefcnt@ffff88805ccd5ca0 has 1/2 users at [ 937.931785][ T2986] sk_alloc+0xa93/0xb90 [ 937.931785][ T2986] inet6_create+0x380/0x1320 [ 937.931785][ T2986] __sock_create+0x335/0x8d0 [ 937.931785][ T2986] udp_sock_create6+0xc8/0x660 [ 937.931785][ T2986] sctp_udp_sock_start+0x280/0x4b0 [ 937.931785][ T2986] proc_sctp_do_udp_port+0x3ba/0x4a0 [ 937.931785][ T2986] proc_sys_call_handler+0x403/0x5d0 [ 937.931785][ T2986] iter_file_splice_write+0x90f/0x10b0 [ 937.931785][ T2986] direct_splice_actor+0x18f/0x6c0 [ 937.931785][ T2986] splice_direct_to_actor+0x346/0xa40 [ 937.931785][ T2986] do_splice_direct+0x178/0x250 [ 937.931785][ T2986] do_sendfile+0xaed/0xe30 [ 937.931785][ T2986] __x64_sys_sendfile64+0x1da/0x220 [ 937.931785][ T2986] do_syscall_64+0xcd/0x250 [ 937.931785][ T2986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.931785][ T2986] [ 937.956850][T22101] veth0_vlan: entered promiscuous mode [ 938.019288][ T2986] ref_tracker: net notrefcnt@ffff88805ccd5ca0 has 1/2 users at [ 938.019288][ T2986] sk_alloc+0xa93/0xb90 [ 938.019288][ T2986] inet_create+0x3a1/0x10a0 [ 938.019288][ T2986] __sock_create+0x335/0x8d0 [ 938.019288][ T2986] udp_sock_create4+0xa7/0x450 [ 938.019288][ T2986] sctp_udp_sock_start+0x10b/0x4b0 [ 938.019288][ T2986] proc_sctp_do_udp_port+0x3ba/0x4a0 [ 938.019288][ T2986] proc_sys_call_handler+0x403/0x5d0 [ 938.019288][ T2986] iter_file_splice_write+0x90f/0x10b0 [ 938.019288][ T2986] direct_splice_actor+0x18f/0x6c0 [ 938.019288][ T2986] splice_direct_to_actor+0x346/0xa40 [ 938.019288][ T2986] do_splice_direct+0x178/0x250 [ 938.019288][ T2986] do_sendfile+0xaed/0xe30 [ 938.019288][ T2986] __x64_sys_sendfile64+0x1da/0x220 [ 938.019288][ T2986] do_syscall_64+0xcd/0x250 [ 938.019288][ T2986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.019288][ T2986] [ 938.044482][T22101] veth1_vlan: entered promiscuous mode [ 938.114256][ T2986] ------------[ cut here ]------------ [ 938.122819][ T2986] WARNING: CPU: 1 PID: 2986 at lib/ref_tracker.c:179 ref_tracker_dir_exit+0x3e3/0x680 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 938.132592][ T2986] Modules linked in: [ 938.136628][ T2986] CPU: 1 UID: 0 PID: 2986 Comm: kworker/u8:8 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 938.147775][ T2986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 938.158010][ T2986] Workqueue: netns cleanup_net [ 938.162910][ T2986] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 938.169032][ T2986] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 0b 33 d1 fc 48 8b 74 24 18 48 89 ef e8 fe 98 54 06 90 <0f> 0b 90 e8 f5 32 d1 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 84 [ 938.172023][T22101] veth0_macvtap: entered promiscuous mode [ 938.189035][ T2986] RSP: 0018:ffffc9000b867b38 EFLAGS: 00010246 [ 938.200789][ T2986] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 938.208840][ T2986] RDX: 0000000000000001 RSI: ffffffff8bb16f80 RDI: 0000000000000001 [ 938.216866][ T2986] RBP: ffff88805ccd5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 938.225130][ T2986] R10: ffffffff901ce3d7 R11: 0000000000000b8f R12: ffff88805ccd5cf0 [ 938.233174][ T6319] Bluetooth: hci3: command tx timeout [ 938.238611][ T2986] R13: ffff88805ccd5cf0 R14: ffff88805ccd5cf0 R15: ffff88805ccd5cf0 [ 938.242334][T22101] veth1_macvtap: entered promiscuous mode [ 938.246608][ T2986] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 938.261549][ T2986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 938.268590][ T2986] CR2: 00007f2d61fd9440 CR3: 000000000db7e000 CR4: 00000000003526f0 [ 938.276783][ T2986] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 938.284867][ T2986] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 938.292961][ T2986] Call Trace: [ 938.296273][ T2986] [ 938.299285][ T2986] ? __warn+0xea/0x3c0 [ 938.303424][ T2986] ? ref_tracker_dir_exit+0x3e3/0x680 [ 938.308917][ T2986] ? report_bug+0x3c0/0x580 [ 938.313480][ T2986] ? handle_bug+0x54/0xa0 [ 938.317920][ T2986] ? exc_invalid_op+0x17/0x50 [ 938.322669][ T2986] ? asm_exc_invalid_op+0x1a/0x20 [ 938.327856][ T2986] ? ref_tracker_dir_exit+0x3e3/0x680 [ 938.333300][ T2986] ? ref_tracker_dir_exit+0x3e2/0x680 [ 938.338837][ T2986] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 938.344629][ T2986] ? cleanup_net+0x984/0xbd0 [ 938.350525][ T2986] cleanup_net+0x990/0xbd0 [ 938.355040][ T2986] ? __pfx_cleanup_net+0x10/0x10 [ 938.360464][ T2986] ? __schedule+0xe60/0x5ad0 [ 938.365226][ T2986] ? lock_acquire+0x2f/0xb0 [ 938.369844][ T2986] ? process_one_work+0x8bb/0x1b30 [ 938.375014][ T2986] process_one_work+0x958/0x1b30 [ 938.380193][ T2986] ? __pfx_process_one_work+0x10/0x10 [ 938.385651][ T2986] ? rcu_is_watching+0x12/0xc0 [ 938.390531][ T2986] ? assign_work+0x1a0/0x250 [ 938.395205][ T2986] worker_thread+0x6c8/0xf00 [ 938.399923][ T2986] ? __pfx_worker_thread+0x10/0x10 [ 938.405087][ T2986] kthread+0x2c1/0x3a0 [ 938.409261][ T2986] ? _raw_spin_unlock_irq+0x23/0x50 [ 938.414514][ T2986] ? __pfx_kthread+0x10/0x10 [ 938.419244][ T2986] ret_from_fork+0x45/0x80 [ 938.423715][ T2986] ? __pfx_kthread+0x10/0x10 [ 938.428578][ T2986] ret_from_fork_asm+0x1a/0x30 [ 938.433426][ T2986] [ 938.436741][ T2986] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 938.444060][ T2986] CPU: 1 UID: 0 PID: 2986 Comm: kworker/u8:8 Not tainted 6.13.0-rc4-syzkaller-00071-gfd0584d220fe #0 [ 938.454963][ T2986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 938.465068][ T2986] Workqueue: netns cleanup_net [ 938.469910][ T2986] Call Trace: [ 938.473229][ T2986] [ 938.476196][ T2986] dump_stack_lvl+0x3d/0x1f0 [ 938.480851][ T2986] panic+0x71d/0x800 [ 938.484862][ T2986] ? __pfx_panic+0x10/0x10 [ 938.489353][ T2986] ? show_trace_log_lvl+0x29d/0x3d0 [ 938.494610][ T2986] ? check_panic_on_warn+0x1f/0xb0 [ 938.499793][ T2986] ? ref_tracker_dir_exit+0x3e3/0x680 [ 938.505227][ T2986] check_panic_on_warn+0xab/0xb0 [ 938.510238][ T2986] __warn+0xf6/0x3c0 [ 938.514200][ T2986] ? ref_tracker_dir_exit+0x3e3/0x680 [ 938.519638][ T2986] report_bug+0x3c0/0x580 [ 938.524110][ T2986] handle_bug+0x54/0xa0 [ 938.528329][ T2986] exc_invalid_op+0x17/0x50 [ 938.532900][ T2986] asm_exc_invalid_op+0x1a/0x20 [ 938.537808][ T2986] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 938.543852][ T2986] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 0b 33 d1 fc 48 8b 74 24 18 48 89 ef e8 fe 98 54 06 90 <0f> 0b 90 e8 f5 32 d1 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 84 [ 938.563562][ T2986] RSP: 0018:ffffc9000b867b38 EFLAGS: 00010246 [ 938.569688][ T2986] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 938.577709][ T2986] RDX: 0000000000000001 RSI: ffffffff8bb16f80 RDI: 0000000000000001 [ 938.585731][ T2986] RBP: ffff88805ccd5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 938.593755][ T2986] R10: ffffffff901ce3d7 R11: 0000000000000b8f R12: ffff88805ccd5cf0 [ 938.601777][ T2986] R13: ffff88805ccd5cf0 R14: ffff88805ccd5cf0 R15: ffff88805ccd5cf0 [ 938.609809][ T2986] ? ref_tracker_dir_exit+0x3e2/0x680 [ 938.615317][ T2986] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 938.621111][ T2986] ? cleanup_net+0x984/0xbd0 [ 938.625772][ T2986] cleanup_net+0x990/0xbd0 [ 938.630260][ T2986] ? __pfx_cleanup_net+0x10/0x10 [ 938.635270][ T2986] ? __schedule+0xe60/0x5ad0 [ 938.639912][ T2986] ? lock_acquire+0x2f/0xb0 [ 938.644463][ T2986] ? process_one_work+0x8bb/0x1b30 [ 938.649635][ T2986] process_one_work+0x958/0x1b30 [ 938.654630][ T2986] ? __pfx_process_one_work+0x10/0x10 [ 938.660071][ T2986] ? rcu_is_watching+0x12/0xc0 [ 938.664902][ T2986] ? assign_work+0x1a0/0x250 [ 938.669570][ T2986] worker_thread+0x6c8/0xf00 [ 938.674220][ T2986] ? __pfx_worker_thread+0x10/0x10 [ 938.679391][ T2986] kthread+0x2c1/0x3a0 [ 938.683518][ T2986] ? _raw_spin_unlock_irq+0x23/0x50 [ 938.688781][ T2986] ? __pfx_kthread+0x10/0x10 [ 938.693435][ T2986] ret_from_fork+0x45/0x80 [ 938.697903][ T2986] ? __pfx_kthread+0x10/0x10 [ 938.702583][ T2986] ret_from_fork_asm+0x1a/0x30 [ 938.707426][ T2986] [ 938.710614][ T2986] Kernel Offset: disabled [ 938.714978][ T2986] Rebooting in 86400 seconds..