last executing test programs: 14m48.580843051s ago: executing program 1 (id=1235): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) setsockopt$auto(0x4, 0x84, 0x6, 0xfffffffffffffffe, 0x0) 14m48.393165737s ago: executing program 1 (id=1238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000300)={0x2c, r1, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x9, 0x4, 0x0, 0x1, [@generic="ac00fc008f"]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) 14m48.159858391s ago: executing program 1 (id=1240): syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, r0) 14m47.965972773s ago: executing program 1 (id=1250): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) arch_prctl$auto(0x2001, 0x2) 14m47.461404874s ago: executing program 1 (id=1247): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 14m46.868754886s ago: executing program 1 (id=1249): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x18, 0x5, 0x2) 14m46.515856012s ago: executing program 32 (id=1249): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x18, 0x5, 0x2) 10m10.551690345s ago: executing program 3 (id=5540): socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) listen$auto(0x3, 0x83) 10m10.277244873s ago: executing program 3 (id=5542): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x2, 0x300) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\x88\xa8\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) read$auto(0x3, 0x0, 0x80) 10m10.050501215s ago: executing program 3 (id=5545): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty14\x00', 0x40a01, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4b72, r1) 10m9.788280068s ago: executing program 3 (id=5548): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='T'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 10m9.43497052s ago: executing program 3 (id=5552): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) tkill$auto(0x80000000000001, 0x7) 10m7.81536398s ago: executing program 3 (id=5566): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r1, 0xc0045543, r0) 10m7.502094862s ago: executing program 33 (id=5566): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r1, 0xc0045543, r0) 7m58.16890232s ago: executing program 2 (id=7126): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clock_adjtime$auto(0x8, 0x0) 7m57.672862235s ago: executing program 2 (id=7131): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.events.local\x00', 0x103042, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) read$auto(0x3, 0x0, 0x80) 7m57.424977002s ago: executing program 2 (id=7135): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) 7m54.296475557s ago: executing program 2 (id=7171): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x108000, 0x800034, 0x9) 7m52.984557798s ago: executing program 2 (id=7189): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 7m51.99043002s ago: executing program 2 (id=7196): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r0, 0x13, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x48050) 7m51.640085518s ago: executing program 34 (id=7196): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r0, 0x13, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x48050) 6m12.29006046s ago: executing program 4 (id=8287): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6m11.98023604s ago: executing program 4 (id=8291): openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) ioctl$auto(0x3, 0x3b87, 0x38) 6m11.833326105s ago: executing program 4 (id=8293): sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 6m11.671951505s ago: executing program 4 (id=8297): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/memory/memory0/online\x00', 0x123902, 0x0) unshare$auto(0x40000080) read$auto(0x4, 0x0, 0xfdef) 6m10.983874846s ago: executing program 4 (id=8298): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) tkill$auto(0x1, 0x7) 6m9.625905208s ago: executing program 4 (id=8315): r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 6m9.258917067s ago: executing program 35 (id=8315): r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 4.791240555s ago: executing program 6 (id=11971): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 4.647927025s ago: executing program 6 (id=11974): mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000100), 0x1) 4.363774902s ago: executing program 0 (id=11977): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setreuid$auto(0x80000000, 0x7fffffffffffffff) 4.275643479s ago: executing program 6 (id=11978): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sethostname$auto(0x0, 0x7) 4.18316961s ago: executing program 7 (id=11979): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) fstat$auto(0x2, 0x0) socket(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x5, 0x104000000000010e, 0x5, 0x0, 0x16) 3.923546966s ago: executing program 7 (id=11988): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 3.504829554s ago: executing program 6 (id=11981): r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000300), 0x841, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.502242043s ago: executing program 0 (id=11982): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x2841, 0x0) munmap$auto(0x0, 0xffffffff) read$auto(0x3, 0x0, 0x80) 3.193293887s ago: executing program 6 (id=11983): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) move_pages$auto(0x1, 0x2000000000003, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x5, 0x1, 0x4b, 0x0, 0x9) 3.005701279s ago: executing program 6 (id=11984): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000001480)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x7, 0x0, 0x200002, 0x9}, 0x803}, 0xfffffff9, 0xe, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) 3.00564083s ago: executing program 5 (id=11985): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) getsockopt$auto(0x3, 0x6, 0x2a, 0x0, 0x0) 2.975717558s ago: executing program 7 (id=11986): write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) 2.711171293s ago: executing program 0 (id=11987): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) 2.711089359s ago: executing program 5 (id=11989): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYBLOB='\nG'], 0x18}, 0x1, 0x0, 0x0, 0x64048001}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 1.798773436s ago: executing program 7 (id=11990): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8000000000000000, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) r0 = open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) fchown$auto(r0, 0xe5a, 0x5) utimes$auto(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x8, 0x8001}) 1.798647631s ago: executing program 5 (id=11991): mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000100), 0x1) 1.797956773s ago: executing program 0 (id=11998): socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a000000", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.512570562s ago: executing program 0 (id=11992): r0 = socket(0x1e, 0x1, 0x0) getsockname$auto(r0, &(0x7f0000000000), &(0x7f0000000040)=0xd1) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0xfdef}, 0x1, 0x0, 0x0, 0x10}, 0x2020057) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r1 = socket(0x1e, 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_MM_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400c0}, 0x14002881) 1.501511645s ago: executing program 7 (id=11993): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$auto(r0, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 1.209239691s ago: executing program 0 (id=11994): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x40000000003, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_getevents$auto(0x6, 0xf, 0x1, 0x0, 0x0) 1.209164191s ago: executing program 5 (id=11995): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x20000080) sysfs$auto(0x2, 0x4, 0x4) mincore$auto(0x1000, 0x8001, 0x0) r0 = io_uring_setup$auto(0x877, 0x0) io_uring_enter$auto(r0, 0xcd00, 0xcd00, 0x7, 0x0, 0x8000000000000000) 275.67108ms ago: executing program 5 (id=11996): openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) mincore$auto(0x0, 0x10000, 0x0) write$auto(0x3, 0x0, 0xffd8) 484.106µs ago: executing program 5 (id=11997): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x2, 0x73) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00"}, 0x55) 0s ago: executing program 7 (id=12006): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x20499d, 0x9) kernel console output (not intermixed with test programs): HW Seek Mode: Bounded [ 256.885000][T12591] vivid-003: Radio Programmable HW Seek: false [ 256.905235][T12591] vivid-003: RDS Rx I/O Mode: Block I/O [ 256.928252][T12591] vivid-003: Generate RBDS Instead of RDS: false [ 256.957401][T12591] vivid-003: RDS Reception: true [ 256.966305][T12591] vivid-003: RDS Program Type: 0 inactive [ 256.975210][T12591] vivid-003: RDS PS Name: inactive [ 256.988297][T12591] vivid-003: RDS Radio Text: inactive [ 257.000063][T12591] vivid-003: RDS Traffic Announcement: false inactive [ 257.018327][T12591] vivid-003: RDS Traffic Program: false inactive [ 257.032107][T12591] vivid-003: RDS Music: false inactive [ 257.078420][T12591] vivid-003: ================== END STATUS ================== [ 259.170271][T12648] netlink: 'syz.4.3011': attribute type 11 has an invalid length. [ 259.190727][T12648] netlink: 'syz.4.3011': attribute type 11 has an invalid length. [ 259.207790][T12648] netlink: 'syz.4.3011': attribute type 11 has an invalid length. [ 259.974705][T12661] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 260.427447][T12686] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 260.865019][T12707] openvswitch: netlink: Message has 4 unknown bytes. [ 261.709988][T12750] openvswitch: netlink: IP tunnel dst address not specified [ 262.017792][T12767] mmap: syz.0.3068 (12767): VmData 20692992 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 262.342835][T12781] delete_channel: no stack [ 265.526974][T12913] netlink: 'syz.2.3137': attribute type 1 has an invalid length. [ 266.158332][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3149'. [ 266.182728][T12940] tc_dump_action: action bad kind [ 269.764132][T13083] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 270.494738][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3229'. [ 270.509317][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3229'. [ 271.634353][T13157] netlink: 'syz.2.3249': attribute type 11 has an invalid length. [ 271.660427][T13157] netlink: 'syz.2.3249': attribute type 11 has an invalid length. [ 271.689503][T13157] netlink: 'syz.2.3249': attribute type 11 has an invalid length. [ 272.289683][T13189] netlink: 'syz.0.3264': attribute type 11 has an invalid length. [ 272.307866][T13189] netlink: 'syz.0.3264': attribute type 11 has an invalid length. [ 272.324025][T13189] netlink: 'syz.0.3264': attribute type 11 has an invalid length. [ 273.588278][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 274.234139][T13280] netlink: 'syz.0.3304': attribute type 2 has an invalid length. [ 275.401416][T13326] openvswitch: netlink: IP tunnel dst address not specified [ 275.682100][T13328] ima: policy update failed [ 275.689470][ T29] audit: type=1802 audit(4294967398.642:16): pid=13328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3328" res=0 errno=0 [ 276.092605][T13351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3337'. [ 276.642690][ T29] audit: type=1800 audit(4294967399.602:17): pid=13375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3345" name="dbroot" dev="configfs" ino=32177 res=0 errno=0 [ 277.187965][T13398] netlink: 'syz.4.3357': attribute type 1 has an invalid length. [ 277.231991][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3358'. [ 278.400289][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3381'. [ 278.428347][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3381'. [ 279.513556][T13498] openvswitch: netlink: Message has 4 unknown bytes. [ 280.224742][T13524] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 280.539665][T13536] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 280.698599][T13544] netlink: 'syz.4.3425': attribute type 1 has an invalid length. [ 281.798404][ T29] audit: type=1326 audit(4294967404.752:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13585 comm="syz.3.3443" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f773e585d29 code=0x0 [ 281.976667][T13594] openvswitch: netlink: Key type 261 is out of range max 32 [ 282.102389][ T29] audit: type=1326 audit(4294967405.062:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13600 comm="syz.0.3450" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f160b385d29 code=0x0 [ 282.107745][T13602] netlink: 'syz.2.3449': attribute type 2 has an invalid length. [ 282.272149][T13609] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 283.528309][T13657] nbd: must specify a size in bytes for the device [ 283.689002][T13664] MTRR 1 not used [ 283.895139][T13674] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 284.021252][T13679] delete_channel: no stack [ 284.919179][T13722] delete_channel: no stack [ 286.050032][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3534'. [ 286.681599][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3548'. [ 288.210298][T13888] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 290.636426][T13994] MTRR 1 not used [ 290.780475][T14003] netlink: 'syz.3.3640': attribute type 1 has an invalid length. [ 290.846426][T14002] nvme_fabrics: missing parameter 'transport=%s' [ 290.863033][T14002] nvme_fabrics: missing parameter 'nqn=%s' [ 291.990764][T14061] zero sized request [ 293.395298][T14125] openvswitch: netlink: Flow actions attr not present in new flow. [ 294.019405][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3707'. [ 294.038367][T14151] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 295.720100][T14223] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 298.538583][T14331] svc: failed to register nfsdv3 RPC service (errno 111). [ 298.560587][T14331] svc: failed to register nfsaclv3 RPC service (errno 111). [ 299.549161][T14373] netlink: Unknown conntrack attr (type=146, max=9) [ 300.821830][T14414] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 301.861022][T14454] openvswitch: netlink: nsh attr 160 is out of range max 3 [ 302.400809][T14472] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3853'. [ 302.437506][T14470] netlink: Unknown conntrack attr (0) [ 302.556383][T14476] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 304.727321][T14557] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 304.909332][T14563] dyndbg: expected <4096 bytes into control [ 306.375541][T14619] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 309.764723][T14723] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 312.409245][T14797] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.536870912.4294967293), cmd(3) [ 313.666666][ T29] audit: type=1800 audit(4294967303.950:20): pid=14845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4020" name="discovery_nqn" dev="configfs" ino=35523 res=0 errno=0 [ 314.822138][T14886] sctp: [Deprecated]: syz.3.4040 (pid 14886) Use of int in maxseg socket option. [ 314.822138][T14886] Use struct sctp_assoc_value instead [ 315.583444][T14917] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 315.730402][T14923] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 315.886262][T14934] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 316.347546][T14952] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 317.026531][T14979] Invalid ELF header magic: != ELF [ 317.592477][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.598971][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.876188][T15060] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 320.525886][T15116] nbd: must specify an index to disconnect [ 320.848701][T15127] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 321.749953][T15165] openvswitch: netlink: Duplicate or invalid key (type 0). [ 323.607640][T15233] binder: 15232:15233 ioctl c018620c 9 returned -1 [ 324.747959][T15284] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 325.573310][T15315] openvswitch: netlink: Message has 4 unknown bytes. [ 327.125451][T15381] openvswitch: netlink: Key type 29 is not supported [ 328.510157][T15429] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 328.848558][T15444] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 329.640541][T15479] netlink: zone id is out of range [ 331.857058][T15542] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 332.694515][T15577] sd 0:0:1:0: PR command failed: 1026 [ 332.706472][T15577] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 332.749471][T15577] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 334.368400][T15645] kAFS: bad VL server IP address [ 335.824962][T15707] netlink: 346 bytes leftover after parsing attributes in process `syz.4.4410'. [ 337.449424][T15767] netlink: 'syz.3.4437': attribute type 2 has an invalid length. [ 337.867301][T15779] could not allocate digest TFM handle binfmt_misc [ 338.204598][T15797] netlink: ct family unspecified [ 340.045247][T15863] netlink: 'syz.2.4478': attribute type 11 has an invalid length. [ 340.053526][T15863] netlink: 'syz.2.4478': attribute type 1 has an invalid length. [ 340.063615][T15863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4478'. [ 340.073118][T15863] netlink: 'syz.2.4478': attribute type 1 has an invalid length. [ 341.110428][T15907] crash hp: kexec_trylock() failed, kdump image may be inaccurate syzkaller syzkaller login: [ 341.823435][T15927] netlink: 'syz.2.4507': attribute type 2 has an invalid length. [ 342.431105][T15902] kexec: Could not allocate control_code_buffer [ 345.044863][T16045] vivid-003: ================= START STATUS ================= [ 345.055215][T16045] vivid-003: Radio HW Seek Mode: Bounded [ 345.063668][T16045] vivid-003: Radio Programmable HW Seek: false [ 345.070606][T16045] vivid-003: RDS Rx I/O Mode: Block I/O [ 345.076228][T16045] vivid-003: Generate RBDS Instead of RDS: false [ 345.083102][T16045] vivid-003: RDS Reception: true [ 345.094494][T16045] vivid-003: RDS Program Type: 0 inactive [ 345.102094][T16045] vivid-003: RDS PS Name: inactive [ 345.107377][T16045] vivid-003: RDS Radio Text: inactive [ 345.116018][T16045] vivid-003: RDS Traffic Announcement: false inactive [ 345.125587][T16045] vivid-003: RDS Traffic Program: false inactive [ 345.137996][T16045] vivid-003: RDS Music: false inactive [ 345.146278][T16045] vivid-003: ================== END STATUS ================== [ 345.715145][T16070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.880984][T16080] netlink: 'syz.3.4576': attribute type 11 has an invalid length. [ 345.912083][T16080] netlink: 'syz.3.4576': attribute type 11 has an invalid length. [ 346.455179][T16095] could not allocate digest TFM handle [ 346.651383][T16098] could not allocate digest TFM handle [ 346.990052][T16128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4594'. [ 347.479355][T16147] debugfs: Directory '!PjE r҄y*"l-y–L̓]' with parent 'ieee80211' already present! [ 350.115508][T16254] openvswitch: netlink: IP tunnel dst address not specified [ 350.656909][T16279] Sensor A: ================= START STATUS ================= [ 350.680085][T16279] Sensor A: Test Pattern: 75% Colorbar [ 350.686037][T16279] Sensor A: Show Information: All [ 350.696925][T16279] Sensor A: Vertical Flip: false [ 350.708452][T16279] Sensor A: Horizontal Flip: false [ 350.713644][T16279] Sensor A: Brightness: 128 [ 350.735557][T16279] Sensor A: Contrast: 128 [ 350.740993][T16279] Sensor A: Hue: 0 [ 350.759475][T16279] Sensor A: Saturation: 128 [ 350.765314][T16279] Sensor A: ================== END STATUS ================== [ 350.935224][T16288] netlink: 294 bytes leftover after parsing attributes in process `syz.3.4664'. [ 352.067964][T16330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4682'. [ 352.856819][T16363] Process accounting resumed [ 352.987384][T16368] netlink: 'syz.0.4698': attribute type 11 has an invalid length. [ 353.011733][T16368] netlink: 'syz.0.4698': attribute type 1 has an invalid length. [ 353.019728][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4698'. [ 353.028718][T16368] netlink: 'syz.0.4698': attribute type 1 has an invalid length. [ 353.549475][T16391] netlink: 'syz.4.4710': attribute type 11 has an invalid length. [ 353.557353][T16391] netlink: 'syz.4.4710': attribute type 1 has an invalid length. [ 353.575317][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4710'. [ 353.586244][T16391] netlink: 'syz.4.4710': attribute type 1 has an invalid length. [ 354.396235][T16423] svc: failed to register nfsdv3 RPC service (errno 111). [ 354.416410][T16423] svc: failed to register nfsaclv3 RPC service (errno 111). [ 354.920438][T16449] openvswitch: netlink: Multiple metadata blocks provided [ 358.037552][T16546] syz.4.4774 (16546) used greatest stack depth: 20288 bytes left [ 358.350949][T16557] netlink: 294 bytes leftover after parsing attributes in process `syz.2.4781'. [ 359.259397][T16587] netlink: 294 bytes leftover after parsing attributes in process `syz.0.4793'. [ 361.446838][T16642] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4818'. [ 361.520657][T16642] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4818'. [ 364.369028][T16704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4843'. [ 367.439211][T16803] block nbd1: Unsupported socket: shutdown callout must be supported. [ 368.982387][T16855] svc: failed to register nfsdv3 RPC service (errno 111). [ 369.000057][T16855] svc: failed to register nfsaclv3 RPC service (errno 111). [ 374.081647][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4962'. [ 374.213999][T16990] Sensor A: ================= START STATUS ================= [ 374.224435][T16990] Sensor A: Test Pattern: 75% Colorbar [ 374.244737][T16990] Sensor A: Show Information: All [ 374.255211][T16990] Sensor A: Vertical Flip: false [ 374.261698][T16990] Sensor A: Horizontal Flip: false [ 374.267089][T16990] Sensor A: Brightness: 128 [ 374.275354][T16990] Sensor A: Contrast: 128 [ 374.280182][T16990] Sensor A: Hue: 0 [ 374.284044][T16990] Sensor A: Saturation: 128 [ 374.293911][T16990] Sensor A: ================== END STATUS ================== [ 374.850887][T17006] Invalid ELF header magic: != ELF [ 375.302963][T17019] Process accounting resumed [ 379.033832][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.048761][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.221493][T17144] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 381.645532][T17207] netlink: 350 bytes leftover after parsing attributes in process `syz.3.5054'. [ 382.518357][T17233] netlink: 85 bytes leftover after parsing attributes in process `syz.0.5066'. [ 383.149230][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5074'. [ 384.843097][T17295] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 392.120289][T17508] sd 0:0:1:0: PR command failed: 1026 [ 392.125747][T17508] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 392.145933][T17508] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 393.262396][T17553] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5201'. [ 397.352403][T17654] ovs_: entered promiscuous mode [ 399.614345][T17734] sock: sock_timestamping_bind_phc: sock not bind to device [ 405.263178][ T29] audit: type=1800 audit(8277292060.730:21): pid=17915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=FFFFF2FFFFFFF2FFFFFFF2FFFFFFF2 name="features" dev="configfs" ino=45598 res=0 errno=0 [ 406.221186][T17938] netlink: 350 bytes leftover after parsing attributes in process `syz.3.5361'. [ 406.882112][T17962] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek 1 [ 429.718658][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 429.739293][ T52] bridge_slave_1: left allmulticast mode [ 429.745544][ T52] bridge_slave_1: left promiscuous mode [ 429.752799][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.760250][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 429.784132][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 429.799851][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 429.813457][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 429.854424][ T52] bridge_slave_0: left allmulticast mode [ 429.868303][ T52] bridge_slave_0: left promiscuous mode [ 429.874064][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.985126][T18440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5576'. [ 431.199207][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.224680][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.249404][ T52] bond0 (unregistering): Released all slaves [ 431.393777][ T52] HSR: left promiscuous mode [ 431.562216][ T52] ovs_: left promiscuous mode [ 431.781698][T18430] chnl_net:caif_netlink_parms(): no params data found [ 431.908870][ T5836] Bluetooth: hci1: command tx timeout [ 432.264819][T18430] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.286508][T18430] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.311995][T18430] bridge_slave_0: entered allmulticast mode [ 432.330039][T18430] bridge_slave_0: entered promiscuous mode [ 432.355364][T18430] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.362671][T18430] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.387012][T18430] bridge_slave_1: entered allmulticast mode [ 432.434520][T18430] bridge_slave_1: entered promiscuous mode [ 432.583007][T18430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.606780][T18430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.794785][T18430] team0: Port device team_slave_0 added [ 432.823860][T18430] team0: Port device team_slave_1 added [ 432.987276][T18430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.998136][T18430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.058466][T18430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.102680][T18430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.109886][T18430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.156205][T18430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.265284][T18430] hsr_slave_0: entered promiscuous mode [ 433.272155][T18430] hsr_slave_1: entered promiscuous mode [ 433.288830][T18430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.296429][T18430] Cannot create hsr debugfs directory [ 433.617745][T18430] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 433.686681][ T52] hsr_slave_0: left promiscuous mode [ 433.695016][ T52] hsr_slave_1: left promiscuous mode [ 433.704910][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.712542][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.720748][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.732215][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.756276][ T52] veth1_macvtap: left promiscuous mode [ 433.762020][ T52] veth0_macvtap: left promiscuous mode [ 433.768015][ T52] veth1_vlan: left promiscuous mode [ 433.773451][ T52] veth0_vlan: left promiscuous mode [ 433.988293][ T5836] Bluetooth: hci1: command tx timeout [ 434.246220][ T52] team0 (unregistering): Port device team_slave_1 removed [ 434.293933][ T52] team0 (unregistering): Port device team_slave_0 removed [ 434.713120][T18430] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 434.731781][T18430] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 434.755524][T18430] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 434.908023][T18430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.934045][T18430] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.952593][ T1303] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.959837][ T1303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.977749][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.985001][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.216389][T18430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.524117][T18430] veth0_vlan: entered promiscuous mode [ 435.543233][T18430] veth1_vlan: entered promiscuous mode [ 435.586695][T18430] veth0_macvtap: entered promiscuous mode [ 435.614373][T18430] veth1_macvtap: entered promiscuous mode [ 435.635147][T18430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.651342][T18430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.663600][T18430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.682260][T18430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.692858][T18430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.708269][T18430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.723632][T18430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.737614][T18430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.757099][T18430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.769797][T18430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.780594][T18430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.791408][T18430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.802287][T18430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.814265][T18430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.835949][T18430] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.847507][T18430] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.865773][T18430] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.875435][T18430] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.980132][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.998128][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.031463][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.041908][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.068329][ T5836] Bluetooth: hci1: command tx timeout [ 436.249257][T18548] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5568'. [ 436.275164][T18548] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5568'. [ 437.078901][T18580] netlink: 'syz.0.5587': attribute type 1 has an invalid length. [ 437.108353][T18580] nbd: error processing sock list [ 437.842367][T18622] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 438.148287][ T5836] Bluetooth: hci1: command tx timeout [ 439.488584][T18677] sock: sock_timestamping_bind_phc: sock not bind to device [ 440.528507][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.535150][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.257884][T18728] ptrace attach of "./syz-executor exec"[5835] was attempted by "c͜R(]T~iY'8IM6-&=XfbN\x0aU>U|~O,8<x01.A/0#!̉[%\x0dvb~<~?\x5cSm%vS ۔u^ݯG/;HY.\x0di˜(Cp!]I,Q\x0b#Ku6sv\x07`t0_-E5p\x0dM\x5c#{ U`b_0 [ 442.339317][T18751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5641'. [ 442.509049][T18751] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 442.517192][T18751] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 442.614989][T18756] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5644'. [ 446.475234][T18872] sock: sock_timestamping_bind_phc: sock not bind to device [ 447.563956][T18905] sock: sock_timestamping_bind_phc: sock not bind to device [ 449.063765][T18960] program syz.0.5719 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 449.149102][T18962] ptrace attach of "./syz-executor exec"[18430] was attempted by "./syz-executor exec"[18962] [ 452.380896][T19071] Process accounting resumed [ 452.396688][T19071] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 456.138954][T19217] netlink: 334 bytes leftover after parsing attributes in process `syz.4.5785'. [ 460.963875][T19345] Process accounting resumed [ 462.931789][T19411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5855'. [ 463.650208][T19435] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 463.656728][T19435] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 468.038784][T19587] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 472.925793][T19736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5996'. [ 481.426107][T20067] netlink: 206 bytes leftover after parsing attributes in process `syz.4.6137'. [ 481.536866][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6139'. [ 481.819772][T20085] bridge0: port 3(gretap0) entered blocking state [ 481.842893][T20085] bridge0: port 3(gretap0) entered disabled state [ 481.850045][T20085] gretap0: entered allmulticast mode [ 481.864147][T20085] gretap0: entered promiscuous mode [ 481.873238][T20085] bridge0: port 3(gretap0) entered blocking state [ 481.879847][T20085] bridge0: port 3(gretap0) entered forwarding state [ 481.999726][T20091] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 482.840578][T20135] netlink: 'syz.4.6171': attribute type 1 has an invalid length. [ 483.766768][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6192'. [ 487.168527][T20302] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 487.175019][T20302] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 487.279139][T20306] Process accounting resumed [ 487.289300][T20306] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 488.129362][T20320] Process accounting resumed [ 488.293522][T20326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6249'. [ 498.997743][T20619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6370'. [ 499.756035][T20638] bridge0: port 3(gretap0) entered blocking state [ 499.785870][T20638] bridge0: port 3(gretap0) entered disabled state [ 499.815017][T20638] gretap0: entered allmulticast mode [ 499.858323][T20638] gretap0: entered promiscuous mode [ 499.873269][T20638] bridge0: port 3(gretap0) entered blocking state [ 499.879859][T20638] bridge0: port 3(gretap0) entered forwarding state [ 501.036578][T20669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6387'. [ 501.912616][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.923698][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.844234][T20737] kexec: Could not allocate control_code_buffer [ 505.333771][T20796] netlink: 'syz.5.6439': attribute type 1 has an invalid length. [ 506.624223][T20845] netlink: 'syz.2.6468': attribute type 1 has an invalid length. [ 515.771352][T21097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6559'. [ 516.753525][T21122] kafs: addr_prefs: Invalid Command [ 517.832609][T21159] netlink: 'syz.0.6584': attribute type 1 has an invalid length. [ 523.013870][T21301] zswap: compressor not available [ 523.769576][T21335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6650'. [ 529.135975][T21497] ptrace attach of "./syz-executor exec"[18430] was attempted by ""[21497] [ 529.602659][T21515] [U] [ 529.605801][T21515] [U] [ 529.608536][T21515] [U] [ 529.611266][T21515] [U] [ 529.658289][T21515] [U] [ 529.661081][T21515] [U] [ 529.663812][T21515] [U] [ 529.666540][T21515] [U] [ 529.679282][T21515] [U] [ 529.682112][T21515] [U] [ 529.684837][T21515] [U] [ 529.687558][T21515] [U] [ 529.725655][T21515] [U] [ 529.728423][T21515] [U] [ 529.731146][T21515] [U] [ 529.733868][T21515] [U] [ 529.764394][T21515] [U] [ 529.767145][T21515] [U] [ 529.769844][T21515] [U] [ 529.772544][T21515] [U] [ 529.805939][T21515] [U] [ 529.808692][T21515] [U] [ 529.811391][T21515] [U] [ 529.814124][T21515] [U] [ 529.866824][T21515] [U] [ 529.869640][T21515] [U] [ 529.872373][T21515] [U] [ 529.875096][T21515] [U] [ 529.880445][T21515] [U] [ 529.883201][T21515] [U] [ 529.885933][T21515] [U] [ 529.888668][T21515] [U] [ 529.928141][T21515] [U] [ 529.930912][T21515] [U] [ 529.933645][T21515] [U] [ 529.936374][T21515] [U] [ 529.954215][T21515] [U] [ 529.956996][T21515] [U] [ 529.959724][T21515] [U] [ 529.962449][T21515] [U] [ 529.994829][T21515] [U] [ 529.997606][T21515] [U] [ 530.000343][T21515] [U] [ 530.003075][T21515] [U] [ 530.023431][T21515] [U] [ 530.026243][T21515] [U] [ 530.028984][T21515] [U] [ 530.031716][T21515] [U] [ 530.048235][T21515] [U] [ 530.051030][T21515] [U] [ 530.053763][T21515] [U] [ 530.056491][T21515] [U] [ 530.068116][T21515] [U] [ 530.070883][T21515] [U] [ 530.073628][T21515] [U] [ 530.076359][T21515] [U] [ 530.100986][T21515] [U] [ 530.103744][T21515] [U] [ 530.106475][T21515] [U] [ 530.109198][T21515] [U] [ 530.118595][T21515] [U] [ 530.121347][T21515] [U] [ 530.124078][T21515] [U] [ 530.126809][T21515] [U] [ 530.131819][T21515] [U] [ 530.134559][T21515] [U] [ 530.137287][T21515] [U] [ 530.140011][T21515] [U] [ 530.158103][T21515] [U] [ 530.160863][T21515] [U] [ 530.163586][T21515] [U] [ 530.166314][T21515] [U] [ 530.176440][T21515] [U] [ 530.179206][T21515] [U] [ 530.181935][T21515] [U] [ 530.184653][T21515] [U] [ 530.226158][T21515] [U] [ 530.228923][T21515] [U] [ 530.231650][T21515] [U] [ 530.234379][T21515] [U] [ 530.243511][T21515] [U] [ 530.246275][T21515] [U] [ 530.249004][T21515] [U] [ 530.251727][T21515] [U] [ 530.255472][T21515] [U] [ 530.258216][T21515] [U] [ 530.260947][T21515] [U] [ 530.263677][T21515] [U] [ 530.286891][T21515] [U] [ 530.289651][T21515] [U] [ 530.292379][T21515] [U] [ 530.295120][T21515] [U] [ 530.318104][T21515] [U] [ 530.320856][T21515] [U] [ 530.323590][T21515] [U] [ 530.326312][T21515] [U] [ 530.360037][T21515] [U] [ 530.362790][T21515] [U] [ 530.365512][T21515] [U] [ 530.368246][T21515] [U] [ 530.390513][T21515] [U] [ 530.393291][T21515] [U] [ 530.396018][T21515] [U] [ 530.398736][T21515] [U] [ 530.424811][T21515] [U] [ 539.655873][T21821] openvswitch: netlink: IP tunnel TTL not specified. [ 553.764033][T22309] netlink: zone id is out of range [ 553.771082][T22309] netlink: zone id is out of range [ 553.776306][T22309] netlink: zone id is out of range [ 553.786236][T22309] netlink: zone id is out of range [ 553.791910][T22309] netlink: zone id is out of range [ 553.797457][T22309] netlink: zone id is out of range [ 553.804034][T22309] netlink: zone id is out of range [ 553.813567][T22309] netlink: zone id is out of range [ 553.823168][T22309] netlink: zone id is out of range [ 553.834690][T22309] netlink: zone id is out of range [ 555.148193][T22346] Process accounting resumed [ 555.191162][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 555.869495][T22366] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7089'. syzkaller syzkaller login: [ 556.456049][T22390] Process accounting resumed [ 556.638792][T22397] size and base must be multiples of 4 kiB [ 556.645365][T22397] CPU: 1 UID: 0 PID: 22397 Comm: syz.5.7102 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 556.656170][T22397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 556.666271][T22397] Call Trace: [ 556.669577][T22397] [ 556.672967][T22397] dump_stack_lvl+0x16c/0x1f0 [ 556.677690][T22397] mtrr_del+0xd1/0x110 [ 556.681811][T22397] mtrr_ioctl+0x900/0xcd0 [ 556.686193][T22397] ? __pfx_mtrr_ioctl+0x10/0x10 [ 556.691099][T22397] ? __pfx_lock_release+0x10/0x10 [ 556.696185][T22397] ? __fget_files+0x206/0x3a0 [ 556.700903][T22397] ? __pfx_mtrr_ioctl+0x10/0x10 [ 556.705799][T22397] proc_reg_unlocked_ioctl+0x226/0x320 [ 556.711357][T22397] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 556.717386][T22397] __x64_sys_ioctl+0x190/0x200 [ 556.722193][T22397] do_syscall_64+0xcd/0x250 [ 556.726746][T22397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.732686][T22397] RIP: 0033:0x7f0109985d29 [ 556.737144][T22397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.756799][T22397] RSP: 002b:00007f010a748038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.765265][T22397] RAX: ffffffffffffffda RBX: 00007f0109b76080 RCX: 00007f0109985d29 [ 556.773286][T22397] RDX: 0000000000000003 RSI: 0000000040104d04 RDI: 0000000000000003 [ 556.781298][T22397] RBP: 00007f0109a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 556.789307][T22397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.797315][T22397] R13: 0000000000000000 R14: 00007f0109b76080 R15: 00007fff299e26b8 [ 556.805346][T22397] [ 557.749879][T22417] Process accounting resumed [ 557.763395][T22417] synth uevent: /devices/virtual/tty/ptyef: unknown uevent action string [ 557.787515][T22417] tty ptyef: uevent: failed to send synthetic uevent: -22 [ 559.034321][T22462] zero sized request [ 563.357365][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.373403][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.405927][T22589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.910758][T22603] Process accounting resumed [ 564.446099][T22594] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 564.826835][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.296387][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.320045][T22623] Process accounting resumed [ 565.487833][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 565.508381][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 565.526977][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 565.537273][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 565.554667][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 565.563566][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 565.660328][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.937398][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.966041][T22645] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 566.252210][ T12] bridge_slave_1: left allmulticast mode [ 566.257905][ T12] bridge_slave_1: left promiscuous mode [ 566.265621][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.276438][ T12] bridge_slave_0: left allmulticast mode [ 566.287220][ T12] bridge_slave_0: left promiscuous mode [ 566.294791][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.781155][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.793387][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.806979][ T12] bond0 (unregistering): Released all slaves [ 566.819348][T22630] chnl_net:caif_netlink_parms(): no params data found [ 566.861575][ T12] : left promiscuous mode [ 566.897707][T22630] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.906822][T22630] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.914540][T22630] bridge_slave_0: entered allmulticast mode [ 566.930745][T22630] bridge_slave_0: entered promiscuous mode [ 566.937901][T22630] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.948504][T22630] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.955736][T22630] bridge_slave_1: entered allmulticast mode [ 566.963942][T22630] bridge_slave_1: entered promiscuous mode [ 567.007184][T22630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.019672][T22630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.097834][T22630] team0: Port device team_slave_0 added [ 567.116556][T22630] team0: Port device team_slave_1 added [ 567.175812][T22630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.182912][T22630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.228704][T22630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.253642][T22630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.260862][T22630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.288761][T22630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.364128][T22630] hsr_slave_0: entered promiscuous mode [ 567.372684][T22630] hsr_slave_1: entered promiscuous mode [ 567.596904][ T12] hsr_slave_0: left promiscuous mode [ 567.603157][ T12] hsr_slave_1: left promiscuous mode [ 567.612009][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.619679][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.627660][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.636511][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.655608][ T12] veth1_macvtap: left promiscuous mode [ 567.661307][ T12] veth0_macvtap: left promiscuous mode [ 567.666855][ T12] veth1_vlan: left promiscuous mode [ 567.672211][ T5836] Bluetooth: hci3: command tx timeout [ 567.672565][ T12] veth0_vlan: left promiscuous mode [ 568.052777][ T12] team0 (unregistering): Port device team_slave_1 removed [ 568.093193][ T12] team0 (unregistering): Port device team_slave_0 removed [ 568.625276][T22630] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 568.687910][T22630] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 568.710503][T22630] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 568.725498][T22630] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 568.828432][T22630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.851163][T22630] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.866036][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.873181][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.916802][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.923977][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.136218][T22630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.405250][T22630] veth0_vlan: entered promiscuous mode [ 569.416192][T22630] veth1_vlan: entered promiscuous mode [ 569.469596][T22630] veth0_macvtap: entered promiscuous mode [ 569.478956][T22630] veth1_macvtap: entered promiscuous mode [ 569.497163][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.512263][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.523846][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.548770][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.559150][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.570168][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.582227][T22630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.612086][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.622930][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.633107][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.643614][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.654403][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.664922][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.676086][T22630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.687606][T22630] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.696650][T22630] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.705742][T22630] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.714674][T22630] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.748264][ T5836] Bluetooth: hci3: command tx timeout [ 569.802314][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.829532][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.871285][ T4498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.879740][ T4498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.513300][T22740] net_ratelimit: 10 callbacks suppressed [ 570.513321][T22740] netlink: zone id is out of range [ 570.543138][T22740] netlink: zone id is out of range [ 571.828594][ T5836] Bluetooth: hci3: command tx timeout [ 573.533061][T22875] bridge0: port 3(hsr0) entered blocking state [ 573.557797][T22875] bridge0: port 3(hsr0) entered disabled state [ 573.597044][T22875] hsr0: entered allmulticast mode [ 573.628156][T22875] hsr_slave_0: entered allmulticast mode [ 573.648112][T22875] hsr_slave_1: entered allmulticast mode [ 573.668905][T22875] hsr0: entered promiscuous mode [ 573.685801][T22875] bridge0: port 3(hsr0) entered blocking state [ 573.692148][T22875] bridge0: port 3(hsr0) entered forwarding state [ 573.910046][ T5836] Bluetooth: hci3: command tx timeout [ 575.974740][T22972] netlink: 342 bytes leftover after parsing attributes in process `syz.4.7291'. [ 578.023354][T23043] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7313'. [ 579.407351][T23087] Trying to write to read-only block-device sda1 [ 580.361532][T23112] sg_write: data in/out 32625/1048664 bytes for SCSI command 0x0-- guessing data in; [ 580.361532][T23112] program syz.6.7343 not setting count and/or reply_len properly [ 580.535469][T23120] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7346'. [ 582.371198][T23198] netlink: 342 bytes leftover after parsing attributes in process `syz.0.7374'. [ 582.458259][T23203] size and base must be multiples of 4 kiB [ 582.464120][T23203] CPU: 1 UID: 0 PID: 23203 Comm: syz.4.7371 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 582.474923][T23203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 582.485017][T23203] Call Trace: [ 582.488324][T23203] [ 582.491281][T23203] dump_stack_lvl+0x16c/0x1f0 [ 582.496003][T23203] mtrr_del+0xd1/0x110 [ 582.500120][T23203] mtrr_ioctl+0x900/0xcd0 [ 582.504487][T23203] ? __pfx_mtrr_ioctl+0x10/0x10 [ 582.509366][T23203] ? __pfx_lock_release+0x10/0x10 [ 582.514412][T23203] ? __fget_files+0x206/0x3a0 [ 582.519107][T23203] ? __pfx_mtrr_ioctl+0x10/0x10 [ 582.523977][T23203] proc_reg_unlocked_ioctl+0x226/0x320 [ 582.529449][T23203] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 582.535459][T23203] __x64_sys_ioctl+0x190/0x200 [ 582.540238][T23203] do_syscall_64+0xcd/0x250 [ 582.544759][T23203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.550763][T23203] RIP: 0033:0x7fc8a3985d29 [ 582.555183][T23203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.574809][T23203] RSP: 002b:00007fc8a474e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 582.583238][T23203] RAX: ffffffffffffffda RBX: 00007fc8a3b76080 RCX: 00007fc8a3985d29 [ 582.591231][T23203] RDX: 0000000000000003 RSI: 0000000040104d04 RDI: 0000000000000003 [ 582.599220][T23203] RBP: 00007fc8a3a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 582.607206][T23203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.615184][T23203] R13: 0000000000000000 R14: 00007fc8a3b76080 R15: 00007ffe1282b8f8 [ 582.623179][T23203] [ 583.137813][T23194] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 583.148328][T23194] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 583.154417][T23194] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 583.249108][T23194] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 583.255263][T23194] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 583.264958][T23194] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 583.307251][T23194] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 583.415638][T23194] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 583.721796][T23229] Process accounting resumed [ 583.726608][T23229] synth uevent: /devices/virtual/tty/ptyef: unknown uevent action string [ 583.735885][T23229] tty ptyef: uevent: failed to send synthetic uevent: -22 [ 584.388146][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 584.763193][T23247] IPVS: length: 11322 != 8 [ 585.105188][T23260] size and base must be multiples of 4 kiB [ 585.141869][T23260] CPU: 0 UID: 0 PID: 23260 Comm: syz.6.7393 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 585.153141][T23260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 585.163237][T23260] Call Trace: [ 585.166548][T23260] [ 585.169504][T23260] dump_stack_lvl+0x16c/0x1f0 [ 585.174227][T23260] mtrr_del+0xd1/0x110 [ 585.178338][T23260] mtrr_ioctl+0x900/0xcd0 [ 585.182711][T23260] ? __pfx_mtrr_ioctl+0x10/0x10 [ 585.187609][T23260] ? __pfx_lock_release+0x10/0x10 [ 585.192679][T23260] ? __fget_files+0x206/0x3a0 [ 585.197382][T23260] ? __pfx_mtrr_ioctl+0x10/0x10 [ 585.202250][T23260] proc_reg_unlocked_ioctl+0x226/0x320 [ 585.207720][T23260] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 585.213712][T23260] __x64_sys_ioctl+0x190/0x200 [ 585.218489][T23260] do_syscall_64+0xcd/0x250 [ 585.223009][T23260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.228915][T23260] RIP: 0033:0x7f95f9385d29 [ 585.233339][T23260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.252962][T23260] RSP: 002b:00007f95fa11f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.261392][T23260] RAX: ffffffffffffffda RBX: 00007f95f9576080 RCX: 00007f95f9385d29 [ 585.269388][T23260] RDX: 0000000000000003 RSI: 0000000040104d04 RDI: 0000000000000003 [ 585.277458][T23260] RBP: 00007f95f9401b08 R08: 0000000000000000 R09: 0000000000000000 [ 585.285437][T23260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.293509][T23260] R13: 0000000000000000 R14: 00007f95f9576080 R15: 00007ffe31310278 [ 585.301501][T23260] [ 585.348839][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 585.355014][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 585.361294][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 585.522662][T23267] vivid-013: ================= START STATUS ================= [ 585.532762][T23267] vivid-013: Generate PTS: true [ 585.543680][T23267] vivid-013: Generate SCR: true [ 585.552055][T23267] tpg source WxH: 640x360 (Y'CbCr) [ 585.560600][T23267] tpg field: 1 [ 585.565324][T23267] tpg crop: 640x360@0x0 [ 585.571846][T23267] tpg compose: 640x360@0x0 [ 585.578353][T23267] tpg colorspace: 8 [ 585.587785][T23267] tpg transfer function: 0/0 [ 585.596653][T23267] tpg Y'CbCr encoding: 0/0 [ 585.605737][T23267] tpg quantization: 0/0 [ 585.614669][T23267] tpg RGB range: 0/2 [ 585.622154][T23267] vivid-013: ================== END STATUS ================== [ 585.781486][T23273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7401'. [ 586.371292][T23288] netlink: 330 bytes leftover after parsing attributes in process `syz.0.7406'. [ 587.428906][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 587.434988][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 587.442643][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 589.508517][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 590.661361][T23432] netlink: 334 bytes leftover after parsing attributes in process `syz.4.7445'. [ 590.714005][T23432] netlink: 334 bytes leftover after parsing attributes in process `syz.4.7445'. [ 591.146767][T23453] Process accounting resumed [ 593.001888][T23534] netlink: 'syz.0.7472': attribute type 1 has an invalid length. [ 593.042268][T23534] netlink: 'syz.0.7472': attribute type 1 has an invalid length. [ 594.846321][T23601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7490'. [ 595.528691][T23614] nbd: socks must be embedded in a SOCK_ITEM attr [ 595.544153][T23614] block nbd2: shutting down sockets [ 597.515730][ T29] audit: type=1804 audit(8277292252.980:22): pid=23683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7524" name="/newroot/sys/kernel/debug/tracing/trace" dev="tracefs" ino=1128 res=1 errno=0 [ 598.197268][T23713] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7538'. [ 599.668889][T23758] netlink: 334 bytes leftover after parsing attributes in process `syz.5.7558'. [ 600.341112][T23777] nbd: socks must be embedded in a SOCK_ITEM attr [ 600.359161][T23777] block nbd2: shutting down sockets [ 600.513991][T23786] netlink: 'syz.6.7573': attribute type 2 has an invalid length. [ 600.529222][T23786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7573'. [ 601.262158][T23814] netlink: 330 bytes leftover after parsing attributes in process `syz.0.7585'. [ 603.165579][T23878] bridge0: port 4(batadv0) entered blocking state [ 603.198184][T23878] bridge0: port 4(batadv0) entered disabled state [ 603.204815][T23878] batadv0: entered allmulticast mode [ 603.250311][T23878] batadv0: entered promiscuous mode [ 603.256094][T23878] bridge0: port 4(batadv0) entered blocking state [ 603.262677][T23878] bridge0: port 4(batadv0) entered forwarding state [ 603.510600][ T52] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 603.520683][ T52] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 603.561409][ T29] audit: type=1326 audit(8277292259.030:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23886 comm="syz.6.7617" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95f9385d29 code=0x0 [ 603.951427][T23908] netlink: 334 bytes leftover after parsing attributes in process `syz.0.7625'. [ 604.446769][T23924] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7632'. [ 605.510822][T23952] netlink: 'syz.4.7642': attribute type 1 has an invalid length. [ 605.559134][T23952] netlink: 'syz.4.7642': attribute type 1 has an invalid length. [ 605.613215][T23954] netlink: 334 bytes leftover after parsing attributes in process `syz.5.7643'. [ 606.894787][T23998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7661'. [ 607.004358][T24000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7662'. [ 607.902137][T24021] netlink: 108 bytes leftover after parsing attributes in process `syz.6.7668'. [ 608.020015][T24025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7670'. [ 609.001586][T24049] netlink: 342 bytes leftover after parsing attributes in process `syz.6.7680'. [ 609.529830][T24061] sctp: [Deprecated]: syz.6.7686 (pid 24061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 609.529830][T24061] Use struct sctp_sack_info instead [ 609.844646][T24082] delete_channel: no stack [ 613.163389][T24165] random: crng reseeded on system resumption [ 615.336867][T24234] vivid-013: ================= START STATUS ================= [ 615.364300][T24234] vivid-013: Generate PTS: true [ 615.379315][T24234] vivid-013: Generate SCR: true [ 615.385107][T24234] tpg source WxH: 640x360 (Y'CbCr) [ 615.394506][T24234] tpg field: 1 [ 615.397916][T24234] tpg crop: 640x360@0x0 [ 615.404076][T24234] tpg compose: 640x360@0x0 [ 615.411483][T24234] tpg colorspace: 8 [ 615.417881][T24234] tpg transfer function: 0/0 [ 615.426739][T24234] tpg Y'CbCr encoding: 0/0 [ 615.440331][T24234] tpg quantization: 0/0 [ 615.452790][T24234] tpg RGB range: 0/2 [ 615.456812][T24234] vivid-013: ================== END STATUS ================== [ 615.882940][T24259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7769'. [ 617.275397][T24300] bridge0: port 4(hsr0) entered blocking state [ 617.293531][T24300] bridge0: port 4(hsr0) entered disabled state [ 617.308418][T24300] hsr0: entered allmulticast mode [ 617.318356][T24300] hsr_slave_0: entered allmulticast mode [ 617.328484][T24300] hsr_slave_1: entered allmulticast mode [ 617.346951][T24300] hsr0: entered promiscuous mode [ 617.357477][T24300] bridge0: port 4(hsr0) entered blocking state [ 617.363809][T24300] bridge0: port 4(hsr0) entered forwarding state [ 617.577242][T24309] netlink: 172 bytes leftover after parsing attributes in process `syz.5.7789'. [ 618.101875][T24330] netlink: 330 bytes leftover after parsing attributes in process `syz.5.7800'. [ 618.180216][T24332] netlink: zone id is out of range [ 618.185378][T24332] netlink: zone id is out of range [ 618.218116][T24332] netlink: zone id is out of range [ 618.223289][T24332] netlink: zone id is out of range [ 618.242086][T24332] netlink: zone id is out of range [ 618.257862][T24332] netlink: zone id is out of range [ 618.267928][T24332] netlink: zone id is out of range [ 618.278501][T24332] netlink: zone id is out of range [ 618.286602][T24332] netlink: zone id is out of range [ 618.298072][T24332] netlink: zone id is out of range [ 618.569814][T24344] netlink: 334 bytes leftover after parsing attributes in process `syz.6.7807'. [ 618.959467][T24350] IPVS: length: 11322 != 8 [ 619.008170][T24355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7809'. [ 624.617152][T24510] netlink: 244 bytes leftover after parsing attributes in process `syz.5.7868'. [ 624.792309][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.798852][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.282516][T24527] netlink: 346 bytes leftover after parsing attributes in process `syz.4.7874'. [ 626.698437][T24544] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7879'. [ 627.371329][T24557] netlink: 334 bytes leftover after parsing attributes in process `syz.0.7886'. [ 627.905047][T24568] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7891'. [ 627.948850][T24568] bridge0: port 3(gretap0) entered disabled state [ 627.955477][T24568] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.964477][T24568] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.981009][T24568] bridge0: entered allmulticast mode [ 628.661304][T24596] netlink: 334 bytes leftover after parsing attributes in process `syz.6.7903'. [ 628.700997][T24596] netlink: 334 bytes leftover after parsing attributes in process `syz.6.7903'. [ 628.963895][T24603] netlink: 334 bytes leftover after parsing attributes in process `syz.6.7905'. [ 631.239617][T24662] sg_write: data in/out 32676/1048664 bytes for SCSI command 0x0-- guessing data in; [ 631.239617][T24662] program syz.4.7929 not setting count and/or reply_len properly [ 631.892243][T24169] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 632.268811][T24681] nbd: socks must be embedded in a SOCK_ITEM attr [ 632.275714][T24681] block nbd3: shutting down sockets [ 632.447128][T24685] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7940'. [ 632.478187][T24685] macsec0: entered allmulticast mode [ 632.483556][T24685] veth1_macvtap: entered allmulticast mode [ 635.757392][T24754] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 635.785847][T24754] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 635.818103][T24754] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 635.826788][T24754] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 637.038995][T24169] Bluetooth: hci0: command 0x0c1a tx timeout [ 637.828194][T24169] Bluetooth: hci3: command 0x0c1a tx timeout [ 637.834282][T24169] Bluetooth: hci1: command 0x0406 tx timeout [ 637.838667][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 638.504735][T24843] Invalid ELF header magic: != ELF [ 640.330427][T24897] netlink: 'syz.4.8022': attribute type 1 has an invalid length. [ 640.603314][T24901] zswap: compressor not available [ 640.955362][T24924] netlink: 244 bytes leftover after parsing attributes in process `syz.4.8030'. [ 641.112509][T24928] program syz.4.8033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.767859][T24980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8051'. [ 643.185511][T24995] netlink: 330 bytes leftover after parsing attributes in process `syz.6.8056'. [ 643.466819][T25008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8062'. [ 643.616678][T25010] bridge0: port 5(batadv0) entered blocking state [ 643.650688][T25010] bridge0: port 5(batadv0) entered disabled state [ 643.686108][T25010] batadv0: entered allmulticast mode [ 643.699269][T25010] batadv0: entered promiscuous mode [ 643.728166][T25010] bridge0: port 5(batadv0) entered blocking state [ 643.734727][T25010] bridge0: port 5(batadv0) entered forwarding state [ 643.925078][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 643.934488][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 645.463111][T25068] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8087'. [ 646.840756][T25120] netlink: 334 bytes leftover after parsing attributes in process `syz.4.8107'. [ 647.633254][T25147] netlink: 334 bytes leftover after parsing attributes in process `syz.4.8119'. [ 648.777902][T25176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8134'. [ 648.819716][T25176] bridge0: port 5(batadv0) entered disabled state [ 648.826460][T25176] bridge0: port 4(hsr0) entered disabled state [ 648.832945][T25176] bridge0: port 3(gretap0) entered disabled state [ 648.839581][T25176] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.846881][T25176] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.879930][T25176] bridge0: entered allmulticast mode [ 649.080505][T25183] syz.4.8136 (25183): /proc/25182/oom_adj is deprecated, please use /proc/25182/oom_score_adj instead. [ 649.634607][T25205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8147'. [ 649.692702][T25205] bridge0: port 4(batadv0) entered disabled state [ 649.699547][T25205] bridge0: port 3(hsr0) entered disabled state [ 649.705860][T25205] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.713199][T25205] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.818279][T25205] bridge0: entered allmulticast mode [ 651.190968][T25229] zswap: compressor not available [ 651.787904][T25248] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8161'. [ 651.818257][T25248] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.825736][T25248] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.852584][T25248] bridge0: entered allmulticast mode [ 652.022849][T25255] netlink: 334 bytes leftover after parsing attributes in process `syz.5.8164'. [ 652.091121][T25259] Invalid ELF header magic: != ELF [ 652.908336][T25285] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8177'. [ 653.029106][T25287] netlink: 'syz.0.8179': attribute type 19 has an invalid length. [ 653.067902][T25287] netlink: 334 bytes leftover after parsing attributes in process `syz.0.8179'. [ 653.121557][T25291] netlink: 334 bytes leftover after parsing attributes in process `syz.6.8180'. [ 653.563022][T25304] netlink: 'syz.5.8184': attribute type 2 has an invalid length. [ 653.584350][T25304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8184'. [ 654.665787][T25326] netlink: 'syz.5.8194': attribute type 1 has an invalid length. [ 655.305716][T25344] nbd: socks must be embedded in a SOCK_ITEM attr [ 655.328430][T25344] block nbd4: shutting down sockets [ 656.235731][T25368] netlink: 'syz.0.8210': attribute type 1 has an invalid length. [ 657.002830][T25385] Invalid ELF header magic: != ELF [ 658.176636][T25394] netlink: 342 bytes leftover after parsing attributes in process `syz.6.8223'. [ 661.173158][T25467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8247'. [ 661.756889][T25482] netlink: 346 bytes leftover after parsing attributes in process `syz.6.8255'. [ 664.829228][T25574] netlink: 334 bytes leftover after parsing attributes in process `syz.4.8293'. [ 667.389035][T25635] netlink: 334 bytes leftover after parsing attributes in process `syz.5.8321'. [ 667.909553][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 667.926222][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 667.935958][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 667.964181][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 667.975630][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 667.986207][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 667.993153][T25655] netlink: 11 bytes leftover after parsing attributes in process `syz.5.8328'. [ 668.229053][T25658] netlink: 'syz.5.8330': attribute type 9 has an invalid length. [ 668.252859][T25658] netlink: 330 bytes leftover after parsing attributes in process `syz.5.8330'. [ 668.423252][T25647] chnl_net:caif_netlink_parms(): no params data found [ 668.606284][T25673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8335'. [ 668.769721][T25647] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.792086][T25647] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.800737][T25647] bridge_slave_0: entered allmulticast mode [ 668.807886][T25647] bridge_slave_0: entered promiscuous mode [ 668.818906][T25647] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.836794][T25647] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.854709][T25647] bridge_slave_1: entered allmulticast mode [ 668.864011][T25647] bridge_slave_1: entered promiscuous mode [ 668.957059][T25647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.971493][T25647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.074743][T25647] team0: Port device team_slave_0 added [ 669.093493][T25647] team0: Port device team_slave_1 added [ 669.199782][T25647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.212978][T25647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.240565][T25647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.254967][T25647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.263505][T25647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.290753][T25647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.423173][T25647] hsr_slave_0: entered promiscuous mode [ 669.443885][T25647] hsr_slave_1: entered promiscuous mode [ 669.458349][T25647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.466784][T25647] Cannot create hsr debugfs directory [ 669.870991][T25647] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 669.892350][T25647] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 669.914544][T25647] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 669.927763][T25647] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 670.068245][T24825] Bluetooth: hci2: command tx timeout [ 670.101764][T25647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.122904][T25647] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.134069][T23348] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.141263][T23348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.166760][T23348] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.173941][T23348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.427052][T25726] netlink: 'syz.6.8353': attribute type 1 has an invalid length. [ 670.443601][T25726] netlink: 'syz.6.8353': attribute type 1 has an invalid length. [ 670.472723][T25647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.727534][T25736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8354'. [ 670.810378][T25736] macsec0: entered allmulticast mode [ 670.816005][T25736] veth1_macvtap: entered allmulticast mode [ 670.873383][T25647] veth0_vlan: entered promiscuous mode [ 670.891136][T25647] veth1_vlan: entered promiscuous mode [ 670.981249][T25647] veth0_macvtap: entered promiscuous mode [ 671.012047][T25647] veth1_macvtap: entered promiscuous mode [ 671.053245][T25647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.095093][T25647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.115311][T25647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.138590][T25647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.149126][T25647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.166117][T25647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.182019][T25647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.203758][T25647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.224455][T25647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.279189][T25647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.298325][T25647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.314774][T25647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.335606][T25647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.362728][T25647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.374060][T25647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.384439][T25647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.396212][T25647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.419820][T25647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.442819][T25647] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.453911][T25647] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.463652][T25647] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.492603][T25647] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.668657][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.708018][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.766926][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.776027][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.149568][T24825] Bluetooth: hci2: command tx timeout [ 674.228422][T24825] Bluetooth: hci2: command tx timeout [ 675.293960][T25848] netlink: 'syz.0.8401': attribute type 21 has an invalid length. [ 675.361818][T25848] netlink: 334 bytes leftover after parsing attributes in process `syz.0.8401'. [ 675.587304][T25854] netlink: 'syz.6.8397': attribute type 19 has an invalid length. [ 675.617797][T25854] netlink: 334 bytes leftover after parsing attributes in process `syz.6.8397'. [ 676.103855][T25873] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8406'. [ 676.308337][T24825] Bluetooth: hci2: command tx timeout [ 676.653219][T25880] tipc: Trying to set illegal importance in message [ 677.320494][T25887] netlink: 342 bytes leftover after parsing attributes in process `syz.6.8411'. [ 677.812696][T25909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8421'. [ 677.827726][T25909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8421'. [ 678.175475][T25923] netlink: 342 bytes leftover after parsing attributes in process `syz.7.8426'. [ 678.535254][T25933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8432'. [ 678.801838][T25947] bridge0: port 4(macsec0) entered blocking state [ 678.826959][T25947] bridge0: port 4(macsec0) entered disabled state [ 678.848321][T25947] macsec0: entered allmulticast mode [ 678.855978][T25947] veth1_macvtap: entered allmulticast mode [ 678.870043][T25947] macsec0: entered promiscuous mode [ 682.564562][T26075] netlink: 342 bytes leftover after parsing attributes in process `syz.5.8492'. [ 682.853257][T26079] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8495'. [ 683.530184][T26106] netlink: 330 bytes leftover after parsing attributes in process `syz.5.8506'. [ 686.238482][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.244832][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.792582][T26211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8549'. [ 686.853492][T26213] tipc: Started in network mode [ 686.865851][T26213] tipc: Node identity ffffffff, cluster identity 4711 [ 686.875774][T26213] tipc: Node number set to 4294967295 [ 687.394625][T26236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8562'. [ 688.752478][T26278] netlink: 334 bytes leftover after parsing attributes in process `syz.0.8580'. [ 689.058394][T26288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8584'. [ 689.069244][T26288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8584'. [ 690.415486][T26329] netlink: 334 bytes leftover after parsing attributes in process `syz.6.8600'. [ 690.961317][T26341] netlink: 334 bytes leftover after parsing attributes in process `syz.0.8605'. [ 691.086437][T26346] netlink: 346 bytes leftover after parsing attributes in process `syz.6.8608'. [ 692.093773][T26383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8622'. [ 692.213813][T26383] veth0_macvtap: left promiscuous mode [ 692.268065][T26383] macvtap0: entered allmulticast mode [ 694.160525][T26445] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8649'. [ 694.189193][T26445] ipvlan0: entered allmulticast mode [ 694.200210][T26445] veth0_vlan: entered allmulticast mode [ 694.732344][T26466] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8657'. [ 694.756773][T26466] vxcan1: entered promiscuous mode [ 694.787287][T26472] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8658'. [ 696.372718][T26510] netlink: 342 bytes leftover after parsing attributes in process `syz.5.8675'. [ 696.851722][T26528] netlink: 334 bytes leftover after parsing attributes in process `syz.7.8683'. [ 697.150070][T26537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8687'. [ 697.171476][T26537] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 700.475809][T26648] sg_write: process 901 (syz.6.8735) changed security contexts after opening file descriptor, this is not allowed. [ 701.035088][T26671] lo: entered allmulticast mode [ 701.061894][T26670] lo: left allmulticast mode [ 701.767202][T26685] netlink: 342 bytes leftover after parsing attributes in process `syz.5.8747'. [ 702.689092][T26704] netlink: 346 bytes leftover after parsing attributes in process `syz.0.8757'. [ 703.480967][T26726] tipc: Started in network mode [ 703.504610][T26726] tipc: Node identity ffffffff, cluster identity 4711 [ 703.524044][T26726] tipc: Node number set to 4294967295 [ 704.306531][T26748] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8778'. [ 704.466720][T26751] tipc: Started in network mode [ 704.475551][T26751] tipc: Node identity ffffffff, cluster identity 11 [ 704.487122][T26751] tipc: Node number set to 4294967295 [ 705.412331][T26781] netlink: 342 bytes leftover after parsing attributes in process `syz.5.8792'. [ 709.135707][T26905] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8844'. [ 709.176376][T26905] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.183894][T26905] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.217636][T26905] bridge0: entered promiscuous mode [ 709.224139][T26905] bridge0: entered allmulticast mode [ 709.334978][T26911] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8847'. [ 709.348216][T26911] ksmbd: Unknown IPC event: 0, ignore. [ 710.280681][T26954] TCP: TCP_TX_DELAY enabled [ 710.419889][T26957] netlink: 'syz.6.8869': attribute type 9 has an invalid length. [ 710.427833][T26957] netlink: 330 bytes leftover after parsing attributes in process `syz.6.8869'. [ 712.209397][T27012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8890'. [ 712.365421][T27020] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8895'. [ 712.428647][T27014] netlink: 350 bytes leftover after parsing attributes in process `syz.7.8891'. [ 712.958450][T27046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8905'. [ 712.989699][T27046] ipvlan0: entered allmulticast mode [ 712.995071][T27046] veth0_vlan: entered allmulticast mode [ 714.195870][T27085] netlink: 342 bytes leftover after parsing attributes in process `syz.5.8918'. [ 714.352096][T27087] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8919'. [ 714.372365][T27087] ipvlan0: entered allmulticast mode [ 714.377800][T27087] veth0_vlan: entered allmulticast mode [ 716.742476][T27175] netlink: 342 bytes leftover after parsing attributes in process `syz.6.8958'. [ 717.523596][T27195] rnbd_client L202: map_device: Unknown parameter or missing value '' [ 718.215281][T27224] netlink: 'syz.6.8974': attribute type 21 has an invalid length. [ 718.239206][T27224] netlink: 334 bytes leftover after parsing attributes in process `syz.6.8974'. [ 719.159288][T27246] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8984'. [ 719.745721][T27268] netlink: 'syz.7.9002': attribute type 1 has an invalid length. [ 719.755019][T27268] netlink: 'syz.7.9002': attribute type 1 has an invalid length. [ 720.507021][T27296] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9007'. [ 723.162958][T27371] ALUA LU Group already has a valid ID, ignoring request [ 724.917442][T27431] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9067'. [ 725.639517][T27453] netlink: 334 bytes leftover after parsing attributes in process `syz.6.9077'. [ 725.667444][T27452] netlink: 334 bytes leftover after parsing attributes in process `syz.7.9076'. [ 726.752121][T27487] netlink: 74 bytes leftover after parsing attributes in process `syz.7.9091'. [ 727.727686][T27529] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9110'. [ 727.757086][T27529] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9110'. [ 728.153470][T27545] netlink: 346 bytes leftover after parsing attributes in process `syz.0.9116'. [ 728.953713][T27565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9123'. [ 728.999093][T27565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9123'. [ 729.330603][T27576] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9125'. [ 730.843598][T27622] netlink: 338 bytes leftover after parsing attributes in process `syz.6.9148'. [ 735.946603][T27747] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9195'. [ 736.025521][T27747] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 737.162326][T27786] lo: entered promiscuous mode [ 737.171089][T27785] lo: left promiscuous mode [ 738.870149][T27837] bridge0: port 3(veth1_to_hsr) entered blocking state [ 738.877330][T27837] bridge0: port 3(veth1_to_hsr) entered disabled state [ 738.908273][T27837] veth1_to_hsr: entered allmulticast mode [ 738.915235][T27837] veth1_to_hsr: entered promiscuous mode [ 738.989768][T27833] netlink: 74 bytes leftover after parsing attributes in process `syz.6.9230'. [ 741.769830][T27889] netlink: 334 bytes leftover after parsing attributes in process `syz.5.9250'. [ 742.732488][T27916] netlink: 350 bytes leftover after parsing attributes in process `syz.5.9262'. [ 743.598485][T27944] netlink: 342 bytes leftover after parsing attributes in process `syz.7.9273'. [ 743.801153][T27952] netlink: 334 bytes leftover after parsing attributes in process `syz.7.9277'. [ 744.625386][T27974] netlink: 74 bytes leftover after parsing attributes in process `syz.0.9286'. [ 746.572028][T28034] netlink: 342 bytes leftover after parsing attributes in process `syz.6.9311'. [ 746.632399][T28036] netlink: 342 bytes leftover after parsing attributes in process `syz.0.9312'. [ 747.671649][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.678178][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.698005][T28050] netlink: 342 bytes leftover after parsing attributes in process `syz.7.9317'. [ 750.637852][T28156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9357'. [ 751.091265][T28167] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9360'. [ 751.110621][T28167] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9360'. [ 752.690255][T28217] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9379'. [ 753.958271][T28251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9394'. [ 754.303268][T28261] netlink: 342 bytes leftover after parsing attributes in process `syz.0.9397'. [ 757.217813][T28332] IPVS: length: 11322 != 24 [ 758.273717][T28356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9429'. [ 758.325057][T28356] ksmbd: Unknown IPC event: 0, ignore. [ 758.987863][T28370] netlink: 'syz.7.9436': attribute type 19 has an invalid length. [ 759.005980][T28370] netlink: 310 bytes leftover after parsing attributes in process `syz.7.9436'. [ 759.328618][T28363] nbd4: detected capacity change from 0 to 68719476736 [ 759.351925][T22636] block nbd4: Send control failed (result -22) [ 759.418282][T22636] block nbd4: Request send failed, requeueing [ 759.440573][T24825] block nbd4: Receive control failed (result -32) [ 759.464301][ T40] block nbd4: Dead connection, failed to find a fallback [ 759.471722][ T40] block nbd4: shutting down sockets [ 759.477368][ T40] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 759.488406][ T40] Buffer I/O error on dev nbd4, logical block 0, async page read [ 759.513397][T22636] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 759.571842][T22636] Buffer I/O error on dev nbd4, logical block 0, async page read [ 759.628486][T22636] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 759.683091][T22636] Buffer I/O error on dev nbd4, logical block 0, async page read [ 759.742122][T22636] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 759.818052][T22636] Buffer I/O error on dev nbd4, logical block 0, async page read [ 759.852636][T22636] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 759.888096][T22636] Buffer I/O error on dev nbd4, logical block 0, async page read [ 759.896208][T22636] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 759.926929][T22636] Buffer I/O error on dev nbd4, logical block 0, async page read [ 759.944150][T22636] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 759.968052][T22636] Buffer I/O error on dev nbd4, logical block 0, async page read [ 759.998362][T22636] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 760.007477][T22636] Buffer I/O error on dev nbd4, logical block 0, async page read [ 760.033641][T22636] ldm_validate_partition_table(): Disk read failed. [ 760.041295][T28382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9441'. [ 760.043036][T22636] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 760.077963][T22636] Buffer I/O error on dev nbd4, logical block 0, async page read [ 760.136310][T22636] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 760.170417][T22636] Buffer I/O error on dev nbd4, logical block 0, async page read [ 760.188359][T22636] Dev nbd4: unable to read RDB block 0 [ 760.195825][T22636] nbd4: unable to read partition table [ 760.229590][T22636] ldm_validate_partition_table(): Disk read failed. [ 760.321777][T22636] Dev nbd4: unable to read RDB block 0 [ 760.334367][T22636] nbd4: unable to read partition table [ 760.540027][T28395] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9445'. [ 760.615204][T28395] ksmbd: Unknown IPC event: 0, ignore. [ 761.713799][T28421] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9451'. [ 761.836525][T28425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9452'. [ 762.166991][T28432] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9458'. [ 762.187982][T28432] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 765.474567][T28498] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9485'. [ 765.574505][T28498] veth0_macvtap: left promiscuous mode [ 765.586012][T28498] macvtap0: entered allmulticast mode [ 767.697258][T28542] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9499'. [ 767.744933][T28542] veth0_macvtap: left promiscuous mode [ 767.784925][T28542] macvtap0: entered allmulticast mode [ 770.172840][T28607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9523'. [ 770.209522][T28607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9523'. [ 770.471364][T28619] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9529'. [ 771.314014][T28649] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9542'. [ 771.675460][T28662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9545'. [ 772.466246][T28686] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9557'. [ 773.310275][T28722] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9572'. [ 773.568636][T28735] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9584'. [ 774.019141][T28750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9581'. [ 774.138481][T28753] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9583'. [ 774.998998][T28783] erspan0: entered allmulticast mode [ 776.362424][T28835] sctp: [Deprecated]: syz.6.9617 (pid 28835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 776.362424][T28835] Use struct sctp_sack_info instead [ 778.969459][T28902] netlink: 'syz.5.9641': attribute type 19 has an invalid length. [ 778.987943][T28902] netlink: 310 bytes leftover after parsing attributes in process `syz.5.9641'. [ 779.235321][T28908] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9644'. [ 779.294901][T28908] macvlan1: entered allmulticast mode [ 779.300483][T28908] veth1_vlan: entered allmulticast mode [ 780.950311][T28942] netlink: 338 bytes leftover after parsing attributes in process `syz.7.9657'. [ 782.704632][T28987] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9677'. [ 782.897852][T28993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9679'. [ 783.111286][T29004] : entered promiscuous mode [ 783.552271][T29016] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9689'. [ 783.620590][T29016] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9689'. [ 784.158668][T29037] nbd: socks must be embedded in a SOCK_ITEM attr [ 784.165906][T29037] block nbd5: shutting down sockets [ 784.526315][T29052] sctp: [Deprecated]: syz.0.9702 (pid 29052) Use of int in max_burst socket option deprecated. [ 784.526315][T29052] Use struct sctp_assoc_value instead [ 785.141837][T29072] netlink: 342 bytes leftover after parsing attributes in process `syz.0.9713'. [ 786.985720][T29134] netlink: 350 bytes leftover after parsing attributes in process `syz.6.9739'. [ 788.154155][T29170] bridge0: port 3(veth1_to_hsr) entered blocking state [ 788.168184][T29170] bridge0: port 3(veth1_to_hsr) entered disabled state [ 788.176265][T29170] veth1_to_hsr: entered allmulticast mode [ 788.199125][T29170] veth1_to_hsr: entered promiscuous mode [ 790.719414][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 791.166415][T29228] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9777'. [ 791.182361][T29228] bridge0: entered promiscuous mode [ 793.408053][T29273] lo: entered promiscuous mode [ 793.418956][T29272] lo: left promiscuous mode [ 793.547297][T29280] netlink: 342 bytes leftover after parsing attributes in process `syz.5.9796'. [ 793.602009][T29280] netlink: 342 bytes leftover after parsing attributes in process `syz.5.9796'. [ 795.710247][T29335] netlink: 342 bytes leftover after parsing attributes in process `syz.7.9816'. [ 797.365630][T29370] netlink: 346 bytes leftover after parsing attributes in process `syz.6.9830'. [ 798.768221][T29402] nbd: socks must be embedded in a SOCK_ITEM attr [ 798.784322][T29402] block nbd5: shutting down sockets [ 799.447229][T29417] netlink: 'syz.5.9849': attribute type 13 has an invalid length. [ 799.735846][T29429] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9856'. [ 801.782750][T29471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9872'. [ 805.674420][T29525] netlink: 338 bytes leftover after parsing attributes in process `syz.5.9889'. [ 805.719997][T29525] netlink: 338 bytes leftover after parsing attributes in process `syz.5.9889'. [ 807.714625][T29557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9900'. [ 807.760398][T29557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9900'. [ 809.113853][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.120700][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.141227][T29607] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9922'. [ 810.858400][T29627] netlink: 342 bytes leftover after parsing attributes in process `syz.7.9930'. [ 812.178581][T29643] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9936'. [ 812.283954][T29643] vxcan1: entered promiscuous mode [ 813.198625][T29656] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9941'. [ 813.225620][T29656] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9941'. [ 816.364308][T29721] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9965'. [ 817.316818][T29732] netlink: 342 bytes leftover after parsing attributes in process `syz.7.9969'. [ 818.969705][T29761] netlink: 342 bytes leftover after parsing attributes in process `syz.5.9981'. [ 819.016072][T29762] sctp: [Deprecated]: syz.0.9989 (pid 29762) Use of struct sctp_assoc_value in delayed_ack socket option. [ 819.016072][T29762] Use struct sctp_sack_info instead [ 819.334894][T29773] blk_print_req_error: 24 callbacks suppressed [ 819.334917][T29773] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 819.366169][T29773] buffer_io_error: 23 callbacks suppressed [ 819.366190][T29773] Buffer I/O error on dev nbd4, logical block 0, async page read [ 819.397116][T29773] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 819.419253][T29773] Buffer I/O error on dev nbd4, logical block 0, async page read [ 819.435035][T29773] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 819.458997][T29773] Buffer I/O error on dev nbd4, logical block 0, async page read [ 819.476289][T29773] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 819.496489][T29773] Buffer I/O error on dev nbd4, logical block 0, async page read [ 819.514466][T29773] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 819.534224][T29773] Buffer I/O error on dev nbd4, logical block 0, async page read [ 819.551196][T29773] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 819.570753][T29773] Buffer I/O error on dev nbd4, logical block 0, async page read [ 819.588287][T29773] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 819.618020][T29773] Buffer I/O error on dev nbd4, logical block 0, async page read [ 819.629318][T29773] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 819.678074][T29773] Buffer I/O error on dev nbd4, logical block 0, async page read [ 819.696883][T29773] ldm_validate_partition_table(): Disk read failed. [ 819.717229][T29773] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 819.748125][T29773] Buffer I/O error on dev nbd4, logical block 0, async page read [ 819.766421][T29773] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 819.797170][T29773] Buffer I/O error on dev nbd4, logical block 0, async page read [ 819.831802][T29773] Dev nbd4: unable to read RDB block 0 [ 819.843455][T29773] nbd4: unable to read partition table [ 820.395327][T29787] netlink: 346 bytes leftover after parsing attributes in process `syz.7.9992'. [ 821.484471][T29807] netlink: 342 bytes leftover after parsing attributes in process `syz.6.9995'. [ 821.681948][T29810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9998'. [ 821.731598][T29810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9998'. [ 822.728986][T29838] netlink: 342 bytes leftover after parsing attributes in process `syz.6.10012'. [ 822.772975][T29838] netlink: 342 bytes leftover after parsing attributes in process `syz.6.10012'. [ 823.696232][T29868] netlink: 'syz.5.10024': attribute type 4 has an invalid length. [ 823.705509][T29868] netlink: 330 bytes leftover after parsing attributes in process `syz.5.10024'. [ 824.863346][T29897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10035'. [ 826.023889][T29923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10045'. [ 826.379896][T29932] netlink: 342 bytes leftover after parsing attributes in process `syz.5.10049'. [ 827.791507][T29965] futex_wake_op: syz.7.10062 tries to shift op by 64; fix this program [ 827.945255][T29968] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10064'. [ 828.114236][T29976] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10065'. [ 829.510514][T30009] sctp: [Deprecated]: syz.5.10079 (pid 30009) Use of int in max_burst socket option deprecated. [ 829.510514][T30009] Use struct sctp_assoc_value instead [ 829.727099][T30012] netlink: 330 bytes leftover after parsing attributes in process `syz.6.10081'. [ 829.777052][T30015] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10080'. [ 830.428663][T30029] netlink: 74 bytes leftover after parsing attributes in process `syz.5.10089'. [ 831.949656][T30040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10093'. [ 832.051524][T30042] sctp: [Deprecated]: syz.7.10092 (pid 30042) Use of int in max_burst socket option deprecated. [ 832.051524][T30042] Use struct sctp_assoc_value instead [ 832.193083][T30050] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10095'. [ 832.268857][T30055] ubi0: attaching mtd0 [ 832.277357][T30055] ubi0 error: ubi_attach_mtd_dev: bad VID header (59392) or data offsets (59456) [ 832.490190][ T29] audit: type=1326 audit(8277292487.960:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30058 comm="syz.5.10099" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0109985d29 code=0x0 [ 839.209740][T30080] netlink: 130 bytes leftover after parsing attributes in process `syz.7.10109'. [ 839.331673][T30084] sctp: [Deprecated]: syz.6.10107 (pid 30084) Use of int in max_burst socket option deprecated. [ 839.331673][T30084] Use struct sctp_assoc_value instead [ 839.412272][T30089] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10111'. [ 839.704005][T30096] netlink: 342 bytes leftover after parsing attributes in process `syz.6.10116'. [ 840.385929][T30122] sctp: [Deprecated]: syz.7.10125 (pid 30122) Use of int in max_burst socket option deprecated. [ 840.385929][T30122] Use struct sctp_assoc_value instead [ 840.741634][T30132] netlink: 130 bytes leftover after parsing attributes in process `syz.7.10132'. [ 841.404443][T30160] sctp: [Deprecated]: syz.0.10141 (pid 30160) Use of int in max_burst socket option deprecated. [ 841.404443][T30160] Use struct sctp_assoc_value instead [ 841.575945][T30166] netlink: 338 bytes leftover after parsing attributes in process `syz.5.10146'. [ 842.112841][T30182] netlink: 342 bytes leftover after parsing attributes in process `syz.5.10151'. [ 842.498882][T30194] netlink: 'syz.0.10156': attribute type 2 has an invalid length. [ 842.570315][T30192] sctp: [Deprecated]: syz.5.10155 (pid 30192) Use of int in max_burst socket option deprecated. [ 842.570315][T30192] Use struct sctp_assoc_value instead [ 842.965720][ T29] audit: type=1326 audit(8277292498.430:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30201 comm="syz.5.10160" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0109985d29 code=0x0 [ 843.424475][T30221] sctp: [Deprecated]: syz.7.10167 (pid 30221) Use of int in max_burst socket option deprecated. [ 843.424475][T30221] Use struct sctp_assoc_value instead [ 844.463190][T30254] sctp: [Deprecated]: syz.7.10179 (pid 30254) Use of int in max_burst socket option deprecated. [ 844.463190][T30254] Use struct sctp_assoc_value instead [ 844.925155][T30264] net_ratelimit: 10 callbacks suppressed [ 844.925178][T30264] openvswitch: netlink: IP tunnel dst address not specified [ 844.979319][T30265] openvswitch: netlink: IP tunnel dst address not specified [ 845.263639][T30276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10187'. [ 845.298947][T30276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10187'. [ 846.629934][T30320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10201'. [ 846.663558][T30320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10201'. [ 848.320307][T30350] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10213'. [ 848.378812][T30350] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10213'. [ 848.509388][T30355] netlink: 'syz.5.10217': attribute type 2 has an invalid length. [ 848.530822][T30355] netlink: 'syz.5.10217': attribute type 2 has an invalid length. [ 848.805434][T30368] netlink: 346 bytes leftover after parsing attributes in process `syz.0.10222'. [ 850.082530][T30410] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10240'. [ 850.095498][T30410] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 851.662462][T30448] netlink: 342 bytes leftover after parsing attributes in process `syz.5.10254'. [ 852.754863][T30473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10265'. [ 852.775213][T30473] macvlan1: entered allmulticast mode [ 852.787060][T30473] veth1_vlan: entered allmulticast mode [ 853.688052][T30507] netlink: 330 bytes leftover after parsing attributes in process `syz.7.10277'. [ 854.363824][T30524] netlink: 'syz.5.10282': attribute type 2 has an invalid length. [ 854.407595][T30524] netlink: 'syz.5.10282': attribute type 2 has an invalid length. [ 854.450603][T30529] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10285'. [ 855.383827][T30550] netlink: 342 bytes leftover after parsing attributes in process `syz.7.10291'. [ 856.228040][T30583] netlink: 342 bytes leftover after parsing attributes in process `syz.6.10305'. [ 856.335132][T30585] netlink: 338 bytes leftover after parsing attributes in process `syz.6.10306'. [ 856.347456][T30585] netlink: 338 bytes leftover after parsing attributes in process `syz.6.10306'. [ 856.606808][T30593] netlink: 342 bytes leftover after parsing attributes in process `syz.6.10309'. [ 858.081717][T30629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10323'. [ 859.683913][T30667] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 860.065864][T30682] netlink: 326 bytes leftover after parsing attributes in process `syz.0.10346'. [ 861.186863][T30710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10357'. [ 862.908282][T30748] netlink: 'syz.0.10371': attribute type 4 has an invalid length. [ 862.924399][T30748] netlink: 330 bytes leftover after parsing attributes in process `syz.0.10371'. [ 864.525355][T30797] netlink: 342 bytes leftover after parsing attributes in process `syz.6.10389'. [ 864.918036][T30803] nbd: socks must be embedded in a SOCK_ITEM attr [ 864.935002][T30803] block nbd5: shutting down sockets [ 865.480801][T30812] netlink: 346 bytes leftover after parsing attributes in process `syz.5.10395'. [ 865.952725][T30828] netlink: 'syz.7.10401': attribute type 2 has an invalid length. [ 865.996079][T30828] netlink: 'syz.7.10401': attribute type 2 has an invalid length. [ 866.307240][T30839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10407'. [ 866.741165][T30850] futex_wake_op: syz.6.10411 tries to shift op by 64; fix this program [ 867.105217][T30859] netlink: 'syz.6.10414': attribute type 2 has an invalid length. [ 867.132737][T30859] netlink: 'syz.6.10414': attribute type 2 has an invalid length. [ 867.369243][T30868] netlink: 'syz.5.10420': attribute type 3 has an invalid length. [ 867.379925][T30869] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10417'. [ 868.638920][T30906] netlink: 334 bytes leftover after parsing attributes in process `syz.5.10434'. [ 868.763377][T30911] netlink: 130 bytes leftover after parsing attributes in process `syz.0.10437'. [ 870.418405][T30954] netlink: 74 bytes leftover after parsing attributes in process `syz.0.10454'. [ 870.569680][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.576802][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.422430][T31011] netlink: 'syz.0.10474': attribute type 2 has an invalid length. [ 872.432270][T31011] netlink: 'syz.0.10474': attribute type 2 has an invalid length. [ 872.694532][T31018] delete_channel: no stack [ 873.456728][T31039] netlink: 338 bytes leftover after parsing attributes in process `syz.7.10486'. [ 876.160428][T31105] netlink: 'syz.6.10512': attribute type 3 has an invalid length. [ 877.145708][T31120] netlink: 130 bytes leftover after parsing attributes in process `syz.5.10518'. [ 877.909078][T31138] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10526'. [ 878.288297][T31138] bond0: (slave bond_slave_0): Releasing backup interface [ 878.763388][T31150] openvswitch: netlink: VXLAN extension 0 has unexpected len 1 expected 0 [ 878.929816][T31152] netlink: 'syz.7.10531': attribute type 2 has an invalid length. [ 880.368360][T31181] netlink: 342 bytes leftover after parsing attributes in process `syz.7.10542'. [ 882.060043][T31199] __vm_enough_memory: pid: 31199, comm: syz.7.10550, bytes: 4503599627366400 not enough memory for the allocation [ 882.081225][T31207] netlink: 'syz.5.10552': attribute type 3 has an invalid length. [ 882.119640][T31207] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10552'. [ 886.474442][T31302] netlink: 350 bytes leftover after parsing attributes in process `syz.5.10590'. [ 886.770701][T31309] netlink: 'syz.7.10593': attribute type 1 has an invalid length. [ 887.424646][T31320] netlink: 342 bytes leftover after parsing attributes in process `syz.6.10596'. [ 889.603128][T31366] netlink: 130 bytes leftover after parsing attributes in process `syz.6.10614'. [ 890.903981][T31390] netlink: 'syz.0.10630': attribute type 22 has an invalid length. [ 890.912165][T31390] netlink: 334 bytes leftover after parsing attributes in process `syz.0.10630'. [ 891.299648][T31403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10626'. [ 891.341690][T31403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10626'. [ 891.470402][T31407] netlink: 334 bytes leftover after parsing attributes in process `syz.6.10628'. [ 897.709363][T31473] netlink: 342 bytes leftover after parsing attributes in process `syz.7.10653'. [ 897.944431][T31481] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10654'. [ 898.125098][T31483] netlink: 326 bytes leftover after parsing attributes in process `syz.6.10655'. [ 898.659534][T31501] futex_wake_op: syz.6.10661 tries to shift op by 64; fix this program [ 901.943649][T31578] netlink: 'syz.5.10689': attribute type 16 has an invalid length. [ 901.978067][T31578] netlink: 322 bytes leftover after parsing attributes in process `syz.5.10689'. [ 902.008846][T31580] netlink: 'syz.0.10690': attribute type 28 has an invalid length. [ 902.016803][T31580] netlink: 326 bytes leftover after parsing attributes in process `syz.0.10690'. [ 903.771147][T31617] netlink: 342 bytes leftover after parsing attributes in process `syz.0.10708'. [ 908.124064][T31714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10740'. [ 908.334363][T31717] netlink: 342 bytes leftover after parsing attributes in process `syz.0.10741'. [ 909.350217][T31738] netlink: 'syz.0.10757': attribute type 9 has an invalid length. [ 910.182471][T31755] netlink: 'syz.6.10754': attribute type 1 has an invalid length. [ 910.942938][T31767] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 910.970795][T31767] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 913.219521][T31808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10775'. [ 913.249050][T31808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10775'. [ 914.448491][T31843] netlink: 342 bytes leftover after parsing attributes in process `syz.7.10789'. [ 914.738189][T31851] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10793'. [ 915.218026][T31862] netlink: 342 bytes leftover after parsing attributes in process `syz.0.10804'. [ 915.273942][T31862] netlink: 342 bytes leftover after parsing attributes in process `syz.0.10804'. [ 916.282811][T31889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10807'. [ 916.370399][T31892] ubi0: attaching mtd0 [ 916.374529][T31892] ubi0 error: ubi_attach_mtd_dev: bad VID header (65536) or data offsets (65600) [ 917.530218][T31920] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10817'. [ 918.032016][T31930] sctp: [Deprecated]: syz.7.10821 (pid 31930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 918.032016][T31930] Use struct sctp_sack_info instead [ 918.067738][T31934] netlink: 172 bytes leftover after parsing attributes in process `syz.0.10829'. [ 918.108112][T31934] netlink: 172 bytes leftover after parsing attributes in process `syz.0.10829'. [ 919.381913][T31967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10831'. [ 919.799780][T31986] netlink: 334 bytes leftover after parsing attributes in process `syz.5.10840'. [ 920.674340][T32009] netlink: 326 bytes leftover after parsing attributes in process `syz.5.10848'. [ 921.806800][T32045] netlink: 334 bytes leftover after parsing attributes in process `syz.0.10870'. [ 921.918674][T32049] netlink: 'syz.5.10864': attribute type 28 has an invalid length. [ 921.926668][T32049] netlink: 326 bytes leftover after parsing attributes in process `syz.5.10864'. [ 923.152375][T32068] netlink: 130 bytes leftover after parsing attributes in process `syz.5.10871'. [ 923.532807][T32077] netlink: 'syz.5.10875': attribute type 2 has an invalid length. [ 924.357700][T32103] netlink: 334 bytes leftover after parsing attributes in process `syz.5.10884'. [ 924.552590][T32110] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10888'. [ 924.952646][T32122] netlink: 334 bytes leftover after parsing attributes in process `syz.7.10891'. [ 924.985749][T32122] IPv6: NLM_F_CREATE should be specified when creating new route [ 926.016300][T32148] netlink: 342 bytes leftover after parsing attributes in process `syz.7.10902'. [ 926.814720][T32168] netlink: 342 bytes leftover after parsing attributes in process `syz.6.10911'. [ 927.997438][T32193] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10928'. [ 928.380798][T32193] bond0: (slave bond_slave_0): Releasing backup interface [ 928.473466][T32196] netlink: 338 bytes leftover after parsing attributes in process `syz.5.10919'. [ 930.131991][T32238] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10938'. [ 930.183216][T32244] netlink: 342 bytes leftover after parsing attributes in process `syz.7.10943'. [ 930.960415][T32238] bond0: (slave bond_slave_0): Releasing backup interface [ 931.154341][T32256] netlink: 334 bytes leftover after parsing attributes in process `syz.5.10948'. [ 931.316637][T32260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10950'. [ 931.958291][T32274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10957'. [ 932.003646][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.015918][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.108444][T32279] netlink: 342 bytes leftover after parsing attributes in process `syz.5.10960'. [ 933.974748][T32314] kafs: addr_prefs: Invalid Command [ 934.059371][T32312] __vm_enough_memory: pid: 32312, comm: syz.0.10974, bytes: 4503599627366400 not enough memory for the allocation [ 935.138286][T32350] netlink: 'syz.5.10988': attribute type 1 has an invalid length. [ 935.280575][T32354] netlink: 'syz.7.10989': attribute type 1 has an invalid length. [ 935.353956][T32357] netlink: 342 bytes leftover after parsing attributes in process `syz.6.10991'. [ 935.888931][T32369] netlink: 334 bytes leftover after parsing attributes in process `syz.6.10999'. [ 935.947171][T32369] netlink: 334 bytes leftover after parsing attributes in process `syz.6.10999'. [ 936.056185][T32374] netlink: 342 bytes leftover after parsing attributes in process `syz.5.11000'. [ 937.631993][T32412] netlink: 334 bytes leftover after parsing attributes in process `syz.5.11017'. [ 937.879467][T32417] netlink: 'syz.5.11019': attribute type 22 has an invalid length. [ 937.922024][T32417] netlink: 334 bytes leftover after parsing attributes in process `syz.5.11019'. [ 938.117141][T32424] netlink: 342 bytes leftover after parsing attributes in process `syz.6.11022'. [ 938.970506][T32452] netlink: 'syz.6.11035': attribute type 27 has an invalid length. [ 938.992766][T32452] netlink: 334 bytes leftover after parsing attributes in process `syz.6.11035'. [ 939.566555][T32469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11041'. [ 941.061456][T32506] netlink: 'syz.5.11055': attribute type 1 has an invalid length. [ 941.069464][T32506] netlink: 322 bytes leftover after parsing attributes in process `syz.5.11055'. [ 941.108656][T32506] netlink: 'syz.5.11055': attribute type 1 has an invalid length. [ 941.116546][T32506] netlink: 322 bytes leftover after parsing attributes in process `syz.5.11055'. [ 942.828947][T32540] sctp: [Deprecated]: syz.0.11068 (pid 32540) Use of struct sctp_assoc_value in delayed_ack socket option. [ 942.828947][T32540] Use struct sctp_sack_info instead [ 943.514053][T32550] netlink: 326 bytes leftover after parsing attributes in process `syz.7.11071'. [ 943.853745][T32559] sctp: [Deprecated]: syz.6.11074 (pid 32559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 943.853745][T32559] Use struct sctp_sack_info instead [ 948.211710][T32646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11110'. [ 948.328959][T32648] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11111'. [ 949.127965][T32670] netlink: 'syz.5.11120': attribute type 11 has an invalid length. [ 950.122989][T24825] Bluetooth: hci0: Malformed Event: 0x02 [ 950.158173][T32696] netlink: 'syz.6.11131': attribute type 9 has an invalid length. [ 950.297004][T32698] Invalid ELF header magic: != ELF [ 950.750696][T32713] netlink: 'syz.6.11136': attribute type 16 has an invalid length. [ 950.796214][T32713] netlink: 322 bytes leftover after parsing attributes in process `syz.6.11136'. [ 953.705520][ T314] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 953.729237][ T314] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 953.953075][ T324] Process accounting resumed [ 954.233830][ T335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11167'. [ 954.279690][ T335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11167'. [ 957.405490][ T415] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11201'. [ 959.747445][ T449] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11214'. [ 960.072485][ T458] netlink: 314 bytes leftover after parsing attributes in process `syz.6.11219'. [ 960.097923][ T458] netlink: 314 bytes leftover after parsing attributes in process `syz.6.11219'. [ 961.542475][ T502] netlink: 172 bytes leftover after parsing attributes in process `syz.7.11233'. [ 961.575394][ T502] netlink: 172 bytes leftover after parsing attributes in process `syz.7.11233'. [ 962.491804][ T532] netlink: 334 bytes leftover after parsing attributes in process `syz.5.11246'. [ 962.982084][ T543] netlink: 346 bytes leftover after parsing attributes in process `syz.5.11253'. [ 963.655574][ T559] can: request_module (can-proto-3) failed. [ 964.189783][ T576] netlink: 334 bytes leftover after parsing attributes in process `syz.0.11263'. [ 964.208419][ T576] IPv6: NLM_F_CREATE should be specified when creating new route [ 964.766572][ T596] netlink: 342 bytes leftover after parsing attributes in process `syz.5.11272'. [ 965.112961][ T604] netlink: 342 bytes leftover after parsing attributes in process `syz.5.11275'. [ 965.251725][ T608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11277'. [ 965.276017][ T608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11277'. [ 965.977946][ T633] netlink: 342 bytes leftover after parsing attributes in process `syz.7.11287'. [ 966.017678][ T633] netlink: 342 bytes leftover after parsing attributes in process `syz.7.11287'. [ 966.811083][ T659] netlink: 342 bytes leftover after parsing attributes in process `syz.6.11298'. [ 967.107543][ T668] netlink: 350 bytes leftover after parsing attributes in process `syz.7.11301'. [ 967.608594][ T682] HfR: entered promiscuous mode [ 967.633282][ T682] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11307'. [ 967.658028][ T682] HfR: left promiscuous mode [ 968.239242][ T699] netlink: 334 bytes leftover after parsing attributes in process `syz.0.11314'. [ 968.988123][ T724] vxcan1: entered promiscuous mode [ 969.062839][ T717] __vm_enough_memory: pid: 717, comm: syz.6.11321, bytes: 4503599627366400 not enough memory for the allocation [ 970.926155][ T781] __nla_validate_parse: 4 callbacks suppressed [ 970.926176][ T781] netlink: 334 bytes leftover after parsing attributes in process `syz.6.11344'. [ 973.278836][ T842] netlink: 'syz.0.11369': attribute type 10 has an invalid length. [ 973.339604][ T842] netlink: 326 bytes leftover after parsing attributes in process `syz.0.11369'. [ 973.759471][ T858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11376'. [ 973.969344][ T869] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11382'. [ 974.284284][ T879] netlink: 342 bytes leftover after parsing attributes in process `syz.7.11384'. [ 974.318863][ T879] netlink: 342 bytes leftover after parsing attributes in process `syz.7.11384'. [ 974.594445][ T889] serio: Serial port ptm0 [ 974.848400][ T893] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11392'. [ 975.102929][ T902] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11395'. [ 977.774912][ T983] netlink: 342 bytes leftover after parsing attributes in process `syz.5.11419'. [ 977.911205][ T987] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11421'. [ 977.944938][ T987] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11421'. [ 978.520527][ T1012] netlink: 326 bytes leftover after parsing attributes in process `syz.5.11431'. [ 980.075905][ T1078] netlink: 74 bytes leftover after parsing attributes in process `syz.0.11455'. [ 980.268723][ T1082] netlink: 'syz.7.11458': attribute type 16 has an invalid length. [ 980.279516][ T1082] netlink: 330 bytes leftover after parsing attributes in process `syz.7.11458'. [ 980.452275][ T1090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11461'. [ 980.603822][ T1102] ptrace attach of "./syz-executor exec"[22630] was attempted by ""[1102] [ 982.132726][ T1139] netlink: 334 bytes leftover after parsing attributes in process `syz.7.11477'. [ 982.987327][ T1169] netlink: 338 bytes leftover after parsing attributes in process `syz.7.11490'. [ 983.285239][ T1179] netlink: 'syz.5.11495': attribute type 27 has an invalid length. [ 983.300237][ T1179] netlink: 334 bytes leftover after parsing attributes in process `syz.5.11495'. [ 984.054956][ T1195] netlink: 74 bytes leftover after parsing attributes in process `syz.5.11498'. [ 984.588593][ T1213] netlink: 342 bytes leftover after parsing attributes in process `syz.7.11504'. [ 984.806116][ T1215] netlink: 'syz.7.11506': attribute type 4 has an invalid length. [ 984.831970][ T1215] netlink: 'syz.7.11506': attribute type 4 has an invalid length. [ 985.266335][ T1235] netlink: 334 bytes leftover after parsing attributes in process `syz.0.11513'. [ 985.285278][ T1235] netlink: 334 bytes leftover after parsing attributes in process `syz.0.11513'. [ 988.193159][ T1326] netlink: 'syz.5.11548': attribute type 29 has an invalid length. [ 988.218902][ T1326] netlink: 334 bytes leftover after parsing attributes in process `syz.5.11548'. [ 988.717992][T24825] Bluetooth: hci2: Malformed Event: 0x02 [ 988.801030][ T1356] netlink: 334 bytes leftover after parsing attributes in process `syz.0.11562'. [ 989.292177][ T1378] netlink: 'syz.7.11571': attribute type 11 has an invalid length. [ 989.791628][ T1393] netlink: 334 bytes leftover after parsing attributes in process `syz.0.11578'. [ 990.056997][ T1407] bond0: option all_slaves_active: invalid value (7) [ 990.188035][ T1413] Process accounting resumed [ 990.193359][ T1411] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11585'. [ 990.424394][ T1423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11590'. [ 990.436832][ T1423] vlan1: entered promiscuous mode [ 990.446028][ T1423] vlan1: entered allmulticast mode [ 991.131707][ T1449] netlink: 'syz.5.11601': attribute type 1 has an invalid length. [ 992.178874][ T1473] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11609'. [ 992.941661][ T1491] Invalid ELF header magic: != ELF [ 993.442344][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.448880][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.479693][ T1521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11626'. [ 995.491214][ T1521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11626'. [ 995.741141][ T1529] netlink: 342 bytes leftover after parsing attributes in process `syz.6.11630'. [ 995.961203][T24825] Bluetooth: hci0: ACL packet too small [ 996.926435][ T1573] netlink: 334 bytes leftover after parsing attributes in process `syz.5.11643'. [ 998.112607][ T1618] netlink: 342 bytes leftover after parsing attributes in process `syz.0.11655'. [ 998.291653][ T1622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11657'. [ 998.311759][ T1622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11657'. [ 999.395351][ T1661] netlink: 342 bytes leftover after parsing attributes in process `syz.0.11675'. [ 1001.239914][ T1713] cgroup2: Unknown parameter 'S' [ 1002.847877][ T1753] netlink: 334 bytes leftover after parsing attributes in process `syz.0.11710'. [ 1002.987011][ T1757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11711'. [ 1004.688947][ T1791] netlink: 334 bytes leftover after parsing attributes in process `syz.7.11721'. [ 1005.014263][ T1797] netlink: 'syz.0.11727': attribute type 3 has an invalid length. [ 1005.391354][ T1810] netlink: 350 bytes leftover after parsing attributes in process `syz.0.11734'. [ 1005.753444][ T1820] netlink: 350 bytes leftover after parsing attributes in process `syz.7.11737'. [ 1005.887060][ T1825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11739'. [ 1005.922098][ T1822] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1005.925218][ T1825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11739'. [ 1005.960083][ T1822] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1006.428944][ T1837] lo: entered allmulticast mode [ 1006.509791][ T1841] lo: left allmulticast mode [ 1007.247532][ T1857] RDS: rds_bind could not find a transport for 86a4:131b:e300:1000::, load rds_tcp or rds_rdma? [ 1007.857683][ T1868] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11753'. [ 1008.865802][ T1888] netlink: 342 bytes leftover after parsing attributes in process `syz.7.11760'. [ 1009.198959][ T1897] netlink: 'syz.0.11766': attribute type 4 has an invalid length. [ 1009.247850][ T1897] netlink: 110 bytes leftover after parsing attributes in process `syz.0.11766'. [ 1010.215270][ T1921] netlink: 342 bytes leftover after parsing attributes in process `syz.0.11774'. [ 1013.014544][ T1990] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11802'. [ 1013.820465][ T2015] netlink: 330 bytes leftover after parsing attributes in process `syz.0.11810'. [ 1014.018425][ T2019] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11813'. [ 1014.201735][ T2026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11814'. [ 1014.319499][ T2029] openvswitch: netlink: Unknown nsh attribute 0 [ 1014.532325][ T2037] netlink: 'syz.7.11818': attribute type 11 has an invalid length. [ 1015.334535][ T2054] netlink: 342 bytes leftover after parsing attributes in process `syz.6.11826'. [ 1015.538645][ T2058] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11827'. [ 1016.246885][ T2071] netlink: 74 bytes leftover after parsing attributes in process `syz.7.11832'. [ 1017.303445][ T2097] netlink: 326 bytes leftover after parsing attributes in process `syz.5.11841'. [ 1017.363784][ T2099] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1017.536540][ T2101] netlink: 350 bytes leftover after parsing attributes in process `syz.5.11843'. [ 1018.526036][ T2124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11859'. [ 1019.722755][ T2155] netlink: 326 bytes leftover after parsing attributes in process `syz.5.11863'. [ 1020.448893][ T2176] netlink: 342 bytes leftover after parsing attributes in process `syz.5.11868'. [ 1023.558586][ T2237] netlink: 330 bytes leftover after parsing attributes in process `syz.7.11894'. [ 1023.900639][ T2250] netlink: 'syz.0.11900': attribute type 16 has an invalid length. [ 1023.914259][ T2250] netlink: 330 bytes leftover after parsing attributes in process `syz.0.11900'. [ 1024.133091][ T2255] netlink: 'syz.0.11893': attribute type 29 has an invalid length. [ 1024.176199][ T2255] netlink: 334 bytes leftover after parsing attributes in process `syz.0.11893'. [ 1024.921845][ T2273] netlink: 342 bytes leftover after parsing attributes in process `syz.6.11899'. [ 1025.044606][ T2277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11902'. [ 1025.203372][ T2277] bond0: (slave bond_slave_1): Releasing backup interface [ 1025.645599][ T2299] netlink: 326 bytes leftover after parsing attributes in process `syz.0.11907'. [ 1026.250014][ T2320] netlink: 342 bytes leftover after parsing attributes in process `syz.7.11914'. [ 1027.246826][ T2365] netlink: 334 bytes leftover after parsing attributes in process `syz.5.11924'. [ 1027.285146][ T2367] netlink: 350 bytes leftover after parsing attributes in process `syz.7.11923'. [ 1028.838685][ T2427] netlink: 342 bytes leftover after parsing attributes in process `syz.0.11936'. [ 1029.303188][ T2447] netlink: 326 bytes leftover after parsing attributes in process `syz.6.11944'. [ 1029.837083][ T2466] netlink: 'syz.5.11951': attribute type 21 has an invalid length. [ 1029.847810][ T2466] netlink: 334 bytes leftover after parsing attributes in process `syz.5.11951'. [ 1030.175806][ T2480] binder: 2477:2480 ioctl c0306201 9 returned -14 [ 1031.521162][ T2522] netlink: 314 bytes leftover after parsing attributes in process `syz.0.11966'. [ 1031.565690][ T2522] netlink: 314 bytes leftover after parsing attributes in process `syz.0.11966'. [ 1031.639090][ T2525] netlink: 342 bytes leftover after parsing attributes in process `syz.6.11976'. [ 1031.679236][ T2525] netlink: 342 bytes leftover after parsing attributes in process `syz.6.11976'. [ 1032.223973][ T2545] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11975'. [ 1033.891980][ T2589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11989'. [ 1034.037747][ T2591] HfR: entered promiscuous mode [ 1034.115166][ T2591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11987'. [ 1034.128051][ T2591] HfR: left promiscuous mode [ 1034.865347][ T2595] netlink: 342 bytes leftover after parsing attributes in process `syz.0.11998'. [ 1036.791372][ T2619] [ 1036.793838][ T2619] ====================================================== [ 1036.801051][ T2619] WARNING: possible circular locking dependency detected [ 1036.808154][ T2619] 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 Not tainted [ 1036.815253][ T2619] ------------------------------------------------------ [ 1036.822260][ T2619] syz.7.12006/2619 is trying to acquire lock: [ 1036.828316][ T2619] ffff888023486540 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x2e0/0x2820 [ 1036.838343][ T2619] [ 1036.838343][ T2619] but task is already holding lock: [ 1036.845900][ T2619] ffff88807aaad9a0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x35/0x6a0 [ 1036.855405][ T2619] [ 1036.855405][ T2619] which lock already depends on the new lock. [ 1036.855405][ T2619] [ 1036.865798][ T2619] [ 1036.865798][ T2619] the existing dependency chain (in reverse order) is: [ 1036.874802][ T2619] [ 1036.874802][ T2619] -> #5 (&mm->mmap_lock){++++}-{4:4}: [ 1036.882363][ T2619] __might_fault+0x11b/0x190 [ 1036.887912][ T2619] _copy_from_user+0x29/0xd0 [ 1036.893044][ T2619] __blk_trace_setup+0xa8/0x180 [ 1036.898434][ T2619] blk_trace_setup+0x47/0x70 [ 1036.903552][ T2619] sg_ioctl+0x7a3/0x26b0 [ 1036.908330][ T2619] __x64_sys_ioctl+0x190/0x200 [ 1036.913618][ T2619] do_syscall_64+0xcd/0x250 [ 1036.918664][ T2619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.925086][ T2619] [ 1036.925086][ T2619] -> #4 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1036.932908][ T2619] __mutex_lock+0x19b/0xa60 [ 1036.937935][ T2619] blk_mq_init_sched+0x42b/0x640 [ 1036.943400][ T2619] elevator_init_mq+0x2cd/0x420 [ 1036.948776][ T2619] add_disk_fwnode+0x113/0x1300 [ 1036.954144][ T2619] sd_probe+0xa66/0xfa0 [ 1036.958817][ T2619] really_probe+0x23e/0xa90 [ 1036.963855][ T2619] __driver_probe_device+0x1de/0x440 [ 1036.969663][ T2619] driver_probe_device+0x4c/0x1b0 [ 1036.975223][ T2619] __device_attach_driver+0x1df/0x310 [ 1036.981130][ T2619] bus_for_each_drv+0x157/0x1e0 [ 1036.986763][ T2619] __device_attach_async_helper+0x1d3/0x290 [ 1036.993179][ T2619] async_run_entry_fn+0x9c/0x530 [ 1036.998641][ T2619] process_one_work+0x958/0x1b30 [ 1037.004096][ T2619] worker_thread+0x6c8/0xf00 [ 1037.009202][ T2619] kthread+0x2c1/0x3a0 [ 1037.013793][ T2619] ret_from_fork+0x45/0x80 [ 1037.018730][ T2619] ret_from_fork_asm+0x1a/0x30 [ 1037.024111][ T2619] [ 1037.024111][ T2619] -> #3 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 1037.032980][ T2619] blk_queue_enter+0x50f/0x640 [ 1037.038270][ T2619] blk_mq_alloc_request+0x59b/0x950 [ 1037.043994][ T2619] scsi_execute_cmd+0x20a/0xf30 [ 1037.049369][ T2619] read_capacity_16+0x21a/0xe20 [ 1037.054750][ T2619] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 1037.061083][ T2619] sd_probe+0x8ee/0xfa0 [ 1037.065753][ T2619] really_probe+0x23e/0xa90 [ 1037.070804][ T2619] __driver_probe_device+0x1de/0x440 [ 1037.076617][ T2619] driver_probe_device+0x4c/0x1b0 [ 1037.082176][ T2619] __device_attach_driver+0x1df/0x310 [ 1037.088075][ T2619] bus_for_each_drv+0x157/0x1e0 [ 1037.093450][ T2619] __device_attach_async_helper+0x1d3/0x290 [ 1037.099866][ T2619] async_run_entry_fn+0x9c/0x530 [ 1037.105326][ T2619] process_one_work+0x958/0x1b30 [ 1037.110824][ T2619] worker_thread+0x6c8/0xf00 [ 1037.116192][ T2619] kthread+0x2c1/0x3a0 [ 1037.120870][ T2619] ret_from_fork+0x45/0x80 [ 1037.125803][ T2619] ret_from_fork_asm+0x1a/0x30 [ 1037.131099][ T2619] [ 1037.131099][ T2619] -> #2 (&q->limits_lock){+.+.}-{4:4}: [ 1037.138744][ T2619] __mutex_lock+0x19b/0xa60 [ 1037.143772][ T2619] __nbd_set_size+0x2c0/0x730 [ 1037.148979][ T2619] nbd_start_device+0x8fd/0xd70 [ 1037.154352][ T2619] nbd_genl_connect+0x1204/0x1c00 [ 1037.159900][ T2619] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1037.165969][ T2619] genl_rcv_msg+0x565/0x800 [ 1037.170992][ T2619] netlink_rcv_skb+0x165/0x410 [ 1037.176275][ T2619] genl_rcv+0x28/0x40 [ 1037.180785][ T2619] netlink_unicast+0x53c/0x7f0 [ 1037.186073][ T2619] netlink_sendmsg+0x8b8/0xd70 [ 1037.191355][ T2619] ____sys_sendmsg+0x9ae/0xb40 [ 1037.196636][ T2619] ___sys_sendmsg+0x135/0x1e0 [ 1037.201863][ T2619] __sys_sendmsg+0x16e/0x220 [ 1037.206977][ T2619] do_syscall_64+0xcd/0x250 [ 1037.212005][ T2619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.218427][ T2619] [ 1037.218427][ T2619] -> #1 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 1037.227036][ T2619] blk_mq_submit_bio+0x1fb6/0x24c0 [ 1037.232687][ T2619] __submit_bio+0x384/0x540 [ 1037.237728][ T2619] submit_bio_noacct_nocheck+0x698/0xd70 [ 1037.243904][ T2619] submit_bio_noacct+0x93a/0x1e20 [ 1037.249467][ T2619] mpage_readahead+0x41d/0x590 [ 1037.254760][ T2619] read_pages+0x1a8/0xdc0 [ 1037.259608][ T2619] page_cache_ra_unbounded+0x3dc/0x750 [ 1037.265586][ T2619] force_page_cache_ra+0x24b/0x340 [ 1037.271217][ T2619] page_cache_sync_ra+0x110/0x9c0 [ 1037.276771][ T2619] filemap_get_pages+0xd7b/0x1be0 [ 1037.282337][ T2619] filemap_read+0x3ca/0xd70 [ 1037.287371][ T2619] blkdev_read_iter+0x187/0x480 [ 1037.292752][ T2619] vfs_read+0x87f/0xbe0 [ 1037.297440][ T2619] ksys_read+0x12b/0x250 [ 1037.302203][ T2619] do_syscall_64+0xcd/0x250 [ 1037.307239][ T2619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.313662][ T2619] [ 1037.313662][ T2619] -> #0 (mapping.invalidate_lock#2){++++}-{4:4}: [ 1037.322798][ T2619] __lock_acquire+0x249e/0x3c40 [ 1037.328182][ T2619] lock_acquire.part.0+0x11b/0x380 [ 1037.333816][ T2619] down_read+0x9a/0x330 [ 1037.338503][ T2619] filemap_fault+0x2e0/0x2820 [ 1037.343707][ T2619] __do_fault+0x10a/0x490 [ 1037.348552][ T2619] do_pte_missing+0x1a8/0x3e00 [ 1037.353838][ T2619] __handle_mm_fault+0x103c/0x2a40 [ 1037.359470][ T2619] handle_mm_fault+0x3fa/0xaa0 [ 1037.364754][ T2619] do_user_addr_fault+0x7a3/0x13f0 [ 1037.370382][ T2619] exc_page_fault+0x5c/0xc0 [ 1037.375404][ T2619] asm_exc_page_fault+0x26/0x30 [ 1037.380791][ T2619] rep_movs_alternative+0x4a/0x70 [ 1037.386429][ T2619] _copy_to_iter+0x384/0x1400 [ 1037.391634][ T2619] get_random_bytes_user+0x180/0x3c0 [ 1037.397442][ T2619] __x64_sys_getrandom+0x184/0x290 [ 1037.403072][ T2619] do_syscall_64+0xcd/0x250 [ 1037.408104][ T2619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.414521][ T2619] [ 1037.414521][ T2619] other info that might help us debug this: [ 1037.414521][ T2619] [ 1037.424754][ T2619] Chain exists of: [ 1037.424754][ T2619] mapping.invalidate_lock#2 --> &q->debugfs_mutex --> &mm->mmap_lock [ 1037.424754][ T2619] [ 1037.438758][ T2619] Possible unsafe locking scenario: [ 1037.438758][ T2619] [ 1037.446200][ T2619] CPU0 CPU1 [ 1037.451559][ T2619] ---- ---- [ 1037.456915][ T2619] rlock(&mm->mmap_lock); [ 1037.461336][ T2619] lock(&q->debugfs_mutex); [ 1037.468446][ T2619] lock(&mm->mmap_lock); [ 1037.475299][ T2619] rlock(mapping.invalidate_lock#2); [ 1037.480673][ T2619] [ 1037.480673][ T2619] *** DEADLOCK *** [ 1037.480673][ T2619] [ 1037.488814][ T2619] 1 lock held by syz.7.12006/2619: [ 1037.493929][ T2619] #0: ffff88807aaad9a0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x35/0x6a0 [ 1037.503863][ T2619] [ 1037.503863][ T2619] stack backtrace: [ 1037.509742][ T2619] CPU: 1 UID: 0 PID: 2619 Comm: syz.7.12006 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 1037.520505][ T2619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1037.530558][ T2619] Call Trace: [ 1037.533836][ T2619] [ 1037.536763][ T2619] dump_stack_lvl+0x116/0x1f0 [ 1037.541452][ T2619] print_circular_bug+0x41c/0x610 [ 1037.546488][ T2619] check_noncircular+0x31a/0x400 [ 1037.551434][ T2619] ? __pfx_check_noncircular+0x10/0x10 [ 1037.556901][ T2619] ? __lock_acquire+0xcc5/0x3c40 [ 1037.561843][ T2619] ? lockdep_lock+0xc6/0x200 [ 1037.566434][ T2619] ? __pfx_lockdep_lock+0x10/0x10 [ 1037.571464][ T2619] __lock_acquire+0x249e/0x3c40 [ 1037.576315][ T2619] ? __pfx___lock_acquire+0x10/0x10 [ 1037.581520][ T2619] ? filemap_get_entry+0x1a8/0x3c0 [ 1037.586634][ T2619] lock_acquire.part.0+0x11b/0x380 [ 1037.591757][ T2619] ? filemap_fault+0x2e0/0x2820 [ 1037.596649][ T2619] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1037.602284][ T2619] ? rcu_is_watching+0x12/0xc0 [ 1037.607057][ T2619] ? trace_lock_acquire+0x14e/0x1f0 [ 1037.612257][ T2619] ? filemap_fault+0x2e0/0x2820 [ 1037.617109][ T2619] ? lock_acquire+0x2f/0xb0 [ 1037.621608][ T2619] ? filemap_fault+0x2e0/0x2820 [ 1037.626477][ T2619] down_read+0x9a/0x330 [ 1037.630638][ T2619] ? filemap_fault+0x2e0/0x2820 [ 1037.635492][ T2619] ? __pfx_down_read+0x10/0x10 [ 1037.640259][ T2619] ? __filemap_get_folio+0x2a5/0xaf0 [ 1037.645985][ T2619] filemap_fault+0x2e0/0x2820 [ 1037.650670][ T2619] ? __pfx_filemap_fault+0x10/0x10 [ 1037.655805][ T2619] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1037.661436][ T2619] ? rcu_is_watching+0x12/0xc0 [ 1037.666203][ T2619] ? __pfx_filemap_map_pages+0x10/0x10 [ 1037.671660][ T2619] __do_fault+0x10a/0x490 [ 1037.675986][ T2619] ? __pfx_filemap_map_pages+0x10/0x10 [ 1037.681444][ T2619] do_pte_missing+0x1a8/0x3e00 [ 1037.686217][ T2619] __handle_mm_fault+0x103c/0x2a40 [ 1037.691349][ T2619] ? __pfx___handle_mm_fault+0x10/0x10 [ 1037.696810][ T2619] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1037.702448][ T2619] ? find_vma+0xc0/0x140 [ 1037.706689][ T2619] ? __pfx_find_vma+0x10/0x10 [ 1037.711367][ T2619] handle_mm_fault+0x3fa/0xaa0 [ 1037.716136][ T2619] do_user_addr_fault+0x7a3/0x13f0 [ 1037.721260][ T2619] exc_page_fault+0x5c/0xc0 [ 1037.725871][ T2619] asm_exc_page_fault+0x26/0x30 [ 1037.730737][ T2619] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1037.736548][ T2619] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1037.756512][ T2619] RSP: 0018:ffffc90004f57bc8 EFLAGS: 00050246 [ 1037.762597][ T2619] RAX: 0000000000000001 RBX: 0000000000059000 RCX: 0000000000000040 [ 1037.770575][ T2619] RDX: fffff520009eafbb RSI: ffffc90004f57d98 RDI: 0000000000059000 [ 1037.778553][ T2619] RBP: ffffc90004f57e88 R08: 0000000000000000 R09: fffff520009eafba [ 1037.786525][ T2619] R10: ffffc90004f57dd7 R11: 0000000000000000 R12: 0000000000059040 [ 1037.794518][ T2619] R13: 00007ffffffff000 R14: ffffc90004f57d98 R15: 0000000000000040 [ 1037.802503][ T2619] _copy_to_iter+0x384/0x1400 [ 1037.807196][ T2619] ? chacha_block_generic+0x181/0x260 [ 1037.812571][ T2619] ? __pfx__copy_to_iter+0x10/0x10 [ 1037.817699][ T2619] ? __pfx___might_resched+0x10/0x10 [ 1037.822986][ T2619] ? crng_make_state+0x48e/0x6d0 [ 1037.827940][ T2619] get_random_bytes_user+0x180/0x3c0 [ 1037.833236][ T2619] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1037.839041][ T2619] ? do_futex+0x123/0x350 [ 1037.843374][ T2619] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1037.848506][ T2619] ? import_ubuf+0x1b6/0x220 [ 1037.853205][ T2619] __x64_sys_getrandom+0x184/0x290 [ 1037.858331][ T2619] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1037.863970][ T2619] ? xfd_validate_state+0x5d/0x180 [ 1037.869096][ T2619] do_syscall_64+0xcd/0x250 [ 1037.873637][ T2619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.879536][ T2619] RIP: 0033:0x7fe6af385d29 [ 1037.883948][ T2619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1037.903558][ T2619] RSP: 002b:00007fe6b027f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1037.911973][ T2619] RAX: ffffffffffffffda RBX: 00007fe6af575fa0 RCX: 00007fe6af385d29 [ 1037.920028][ T2619] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 1037.928012][ T2619] RBP: 00007fe6af401b08 R08: 0000000000000000 R09: 0000000000000000 [ 1037.935986][ T2619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.944097][ T2619] R13: 0000000000000000 R14: 00007fe6af575fa0 R15: 00007ffd37187378 [ 1037.952087][ T2619]