last executing test programs: 11.985334829s ago: executing program 2 (id=3214): unshare$auto(0x40000080) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 11.344124053s ago: executing program 2 (id=3219): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xd, 0x100000001, 0x63, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x400, 0x7ffffff9, 0x5, 0xffffffff80000000, 0x9, 0x61, 0x105}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 11.147948468s ago: executing program 2 (id=3220): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 10.732277678s ago: executing program 2 (id=3225): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r0 = socket(0x2, 0x3, 0xa) connect$auto(r0, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) 9.519917236s ago: executing program 2 (id=3234): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 7.943552297s ago: executing program 2 (id=3253): pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\a/\x00\x03\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\xff^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3d, 0x7a) r0 = socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000380)={&(0x7f0000000180), 0x36}, 0x2e, &(0x7f0000000380), 0x7}, 0x5}, 0x2, 0x100) 7.768232249s ago: executing program 32 (id=3253): pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\a/\x00\x03\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\xff^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3d, 0x7a) r0 = socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000380)={&(0x7f0000000180), 0x36}, 0x2e, &(0x7f0000000380), 0x7}, 0x5}, 0x2, 0x100) 3.493056345s ago: executing program 3 (id=3286): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) read$auto_def_blk_fops_fs(r0, &(0x7f0000000140)=""/194, 0xc2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) 2.489472721s ago: executing program 3 (id=3294): madvise$auto(0x0, 0x2000040080000004, 0xe) clone$auto(0x100000000, 0x1, 0x0, &(0x7f0000000040)=0xfffffffc, 0x37) sendmsg$auto_L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000000) madvise$auto(0x1ffff000, 0x5510, 0x8) 2.43377856s ago: executing program 0 (id=3295): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd12/queue/iosched/fifo_batch\x00', 0xc2082, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x80) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 2.252280715s ago: executing program 0 (id=3297): mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) 2.066322163s ago: executing program 1 (id=3298): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8050}, 0x4008845) lstat$auto(0x0, &(0x7f0000000180)={0x11, 0x84, 0x2, 0x1000, 0x0, 0x0, 0x0, 0xfa97, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x4, 0x100000007ffffffe, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x400000000000004, 0x6}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 1.970607938s ago: executing program 3 (id=3299): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0x10, 0x2) mbind$auto(0x0, 0xfa9d, 0x8001, &(0x7f0000000300)=0xc9e, 0x400, 0x1) 1.919779075s ago: executing program 0 (id=3300): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0x8, 0x300000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0x3, 0xc0044dff, 0x38) 1.668832163s ago: executing program 1 (id=3301): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100cda4420008bd7100f9db5f250200000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.451284323s ago: executing program 3 (id=3302): mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) mlockall$auto(0x7) madvise$auto(0x2000, 0xffffffffffff0001, 0x9) mlockall$auto(0x7) 1.192760118s ago: executing program 1 (id=3303): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r0 = socket(0x2, 0x3, 0xa) connect$auto(r0, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) 630.584867ms ago: executing program 0 (id=3304): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x4, 0x53000000, 0xffffffffffffffff, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) bpf$auto(0x18, 0x0, 0x9) 490.805726ms ago: executing program 1 (id=3305): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/bus/usb/017/001\x00', 0xa300, 0x0) read$auto_mon_fops_binary_mon_bin(r0, &(0x7f0000000000)=""/118, 0x76) read$auto_mon_fops_binary_mon_bin(r0, &(0x7f0000000180)=""/234, 0xea) 475.44827ms ago: executing program 3 (id=3306): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183841, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) pread64$auto(r0, 0x0, 0x8, 0x5) 301.401821ms ago: executing program 0 (id=3307): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000bc0)={0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$auto_batadv(0x0, r1) 261.647175ms ago: executing program 1 (id=3308): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x2a240, 0x0) timer_create$auto(0x8, &(0x7f0000000080)={@sival_ptr=0x0, @inferred=r0, 0x0, @_tid}, 0x0) 66.936405ms ago: executing program 1 (id=3309): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r0, 0x13, 0x70bd26, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894) 20.449027ms ago: executing program 0 (id=3310): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(0x3, 0xc1485544, 0xb551) 0s ago: executing program 3 (id=3311): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x12, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts. [ 81.042063][ T5819] cgroup: Unknown subsys name 'net' [ 81.167399][ T5819] cgroup: Unknown subsys name 'cpuset' [ 81.176584][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.880543][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.950939][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.959927][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.970443][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.978858][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.988131][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.992019][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.996177][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.010383][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.022125][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.022815][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.030726][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.044932][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.053217][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.060545][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.069914][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.070606][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.078612][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.086698][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.101389][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.107149][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.123548][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.131958][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.139571][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.139692][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.476344][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 85.654249][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 85.681450][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 85.729909][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.738424][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.746119][ T5831] bridge_slave_0: entered allmulticast mode [ 85.753502][ T5831] bridge_slave_0: entered promiscuous mode [ 85.777078][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 85.790701][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.798329][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.806076][ T5831] bridge_slave_1: entered allmulticast mode [ 85.812890][ T5831] bridge_slave_1: entered promiscuous mode [ 85.881390][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.929429][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.010419][ T5831] team0: Port device team_slave_0 added [ 86.017606][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.024986][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.032184][ T5832] bridge_slave_0: entered allmulticast mode [ 86.039681][ T5832] bridge_slave_0: entered promiscuous mode [ 86.047341][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.055044][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.062243][ T5832] bridge_slave_1: entered allmulticast mode [ 86.069335][ T5832] bridge_slave_1: entered promiscuous mode [ 86.092298][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.099550][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.110524][ T5830] bridge_slave_0: entered allmulticast mode [ 86.117484][ T5830] bridge_slave_0: entered promiscuous mode [ 86.129107][ T5831] team0: Port device team_slave_1 added [ 86.161018][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.168260][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.176094][ T5829] bridge_slave_0: entered allmulticast mode [ 86.182902][ T5829] bridge_slave_0: entered promiscuous mode [ 86.190093][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.197619][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.205809][ T5830] bridge_slave_1: entered allmulticast mode [ 86.212679][ T5830] bridge_slave_1: entered promiscuous mode [ 86.231468][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.242413][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.249746][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.257192][ T5829] bridge_slave_1: entered allmulticast mode [ 86.264654][ T5829] bridge_slave_1: entered promiscuous mode [ 86.280210][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.287369][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.313640][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.327210][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.334307][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.360340][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.380415][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.430314][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.442117][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.463985][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.476519][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.522376][ T5832] team0: Port device team_slave_0 added [ 86.531261][ T5832] team0: Port device team_slave_1 added [ 86.550979][ T5831] hsr_slave_0: entered promiscuous mode [ 86.560460][ T5831] hsr_slave_1: entered promiscuous mode [ 86.597614][ T5829] team0: Port device team_slave_0 added [ 86.617154][ T5830] team0: Port device team_slave_0 added [ 86.627905][ T5830] team0: Port device team_slave_1 added [ 86.648435][ T5829] team0: Port device team_slave_1 added [ 86.670274][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.677507][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.704872][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.742404][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.749664][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.776128][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.801860][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.809031][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.835167][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.855220][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.862223][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.888571][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.911007][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.918068][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.944344][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.961822][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.969057][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.995355][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.065297][ T5832] hsr_slave_0: entered promiscuous mode [ 87.071681][ T5832] hsr_slave_1: entered promiscuous mode [ 87.078284][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.086227][ T5832] Cannot create hsr debugfs directory [ 87.094599][ T5847] Bluetooth: hci1: command tx timeout [ 87.129663][ T5830] hsr_slave_0: entered promiscuous mode [ 87.136272][ T5830] hsr_slave_1: entered promiscuous mode [ 87.142404][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.150214][ T5830] Cannot create hsr debugfs directory [ 87.173543][ T5847] Bluetooth: hci0: command tx timeout [ 87.173618][ T54] Bluetooth: hci3: command tx timeout [ 87.179521][ T5847] Bluetooth: hci2: command tx timeout [ 87.190144][ T5829] hsr_slave_0: entered promiscuous mode [ 87.201030][ T5829] hsr_slave_1: entered promiscuous mode [ 87.207651][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.215696][ T5829] Cannot create hsr debugfs directory [ 87.419658][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.467776][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.492023][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.519779][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.636728][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.670568][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.690133][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.709023][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.739533][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.757646][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.771807][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.782919][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.796546][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.829754][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.890838][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.898249][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.913578][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.929089][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.949911][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.957120][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.966615][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.983234][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.119451][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.168635][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.216454][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.242301][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.249600][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.265416][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.272577][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.354781][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.381985][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.406756][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.413958][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.441680][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.448924][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.500332][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.542361][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.587446][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.612274][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.619499][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.680310][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.687572][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.798358][ T5831] veth0_vlan: entered promiscuous mode [ 88.869127][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.886622][ T5831] veth1_vlan: entered promiscuous mode [ 88.985227][ T5831] veth0_macvtap: entered promiscuous mode [ 89.014176][ T5831] veth1_macvtap: entered promiscuous mode [ 89.039115][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.050944][ T5829] veth0_vlan: entered promiscuous mode [ 89.078529][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.091427][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.111037][ T5829] veth1_vlan: entered promiscuous mode [ 89.140543][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.150479][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.162313][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.171859][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.183722][ T5847] Bluetooth: hci1: command tx timeout [ 89.228570][ T5829] veth0_macvtap: entered promiscuous mode [ 89.253865][ T5847] Bluetooth: hci3: command tx timeout [ 89.254741][ T54] Bluetooth: hci0: command tx timeout [ 89.264706][ T5847] Bluetooth: hci2: command tx timeout [ 89.285310][ T5829] veth1_macvtap: entered promiscuous mode [ 89.342756][ T5830] veth0_vlan: entered promiscuous mode [ 89.356111][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.367336][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.379334][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.392573][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.403495][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.416986][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.430015][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.439739][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.449597][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.462369][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.471510][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.480907][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.490034][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.515986][ T5830] veth1_vlan: entered promiscuous mode [ 89.547504][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.556898][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.632684][ T5830] veth0_macvtap: entered promiscuous mode [ 89.665875][ T5830] veth1_macvtap: entered promiscuous mode [ 89.709060][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.712817][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.727502][ T5832] veth0_vlan: entered promiscuous mode [ 89.739293][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.755470][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.771928][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.782136][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.792952][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.804961][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.829047][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.842370][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.856001][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.874634][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.896161][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.920915][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.933007][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.948555][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.962855][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.017643][ T5832] veth1_vlan: entered promiscuous mode [ 90.035773][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.052822][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.166897][ T5832] veth0_macvtap: entered promiscuous mode [ 90.176395][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.192173][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.228229][ T5832] veth1_macvtap: entered promiscuous mode [ 90.272076][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.295798][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.308159][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.327837][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.344527][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.367093][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.378700][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.394825][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.409314][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.437848][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.483135][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.503491][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.515719][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.537117][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.548189][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.559671][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.576744][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.590656][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.600229][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.609566][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.908430][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.926712][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.083961][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.091861][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.263725][ T54] Bluetooth: hci1: command tx timeout [ 91.333720][ T54] Bluetooth: hci0: command tx timeout [ 91.333928][ T5847] Bluetooth: hci2: command tx timeout [ 91.340355][ T5841] Bluetooth: hci3: command tx timeout [ 93.333912][ T54] Bluetooth: hci1: command tx timeout [ 93.413716][ T54] Bluetooth: hci0: command tx timeout [ 93.419313][ T5841] Bluetooth: hci2: command tx timeout [ 93.419367][ T5847] Bluetooth: hci3: command tx timeout [ 95.170636][ T6014] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 96.142952][ T6030] nfs: Unknown parameter 'nl80211' [ 97.660433][ T1203] cfg80211: failed to load regulatory.db [ 97.745930][ T6072] queue_state_write: operation too long [ 97.763343][ T6072] queue_state_write: use 'run', 'start' or 'kick' [ 99.133222][ T29] audit: type=1326 audit(1735595792.837:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.3.92" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bdad85d29 code=0x0 [ 99.404559][ T6110] kAFS: bad VL server IP address [ 99.485516][ T6113] 0}^: entered promiscuous mode [ 101.201272][ T6159] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 101.313935][ T6163] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.046545][ T6185] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 102.067371][ T6184] netlink: 'syz.1.129': attribute type 11 has an invalid length. [ 102.903165][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 104.989597][ T6287] netlink: 'syz.3.176': attribute type 1 has an invalid length. [ 105.462535][ T6305] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 105.682930][ T6311] netlink: 'syz.2.187': attribute type 2 has an invalid length. [ 107.377610][ T6373] MTRR 1 not used [ 108.132510][ T29] audit: type=1800 audit(1735595801.847:3): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.230" name="discovery_nqn" dev="configfs" ino=8832 res=0 errno=0 [ 108.183968][ T6397] delete_channel: no stack [ 108.336435][ T6408] netlink: 'syz.2.233': attribute type 1 has an invalid length. [ 110.217918][ T6464] mmap: syz.1.259 (6464) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.931580][ T6520] ecryptfs_miscdev_write: Error while inspecting packet size [ 113.076895][ T6555] HSR: entered promiscuous mode [ 115.193453][ T6627] nbd: couldn't find device at index 33904 [ 118.026806][ T6726] openvswitch: netlink: Flow key attribute not present in set flow. [ 118.673878][ T6748] ======================================================= [ 118.673878][ T6748] WARNING: The mand mount option has been deprecated and [ 118.673878][ T6748] and is ignored by this kernel. Remove the mand [ 118.673878][ T6748] option from the mount to silence this warning. [ 118.673878][ T6748] ======================================================= [ 118.708788][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.713634][ T6750] : entered promiscuous mode [ 119.607425][ T6775] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 119.633629][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.712437][ T6780] tipc: Started in network mode [ 119.719140][ T6780] tipc: Node identity ee00, cluster identity 4711 [ 119.723191][ T6775] CIFS mount error: No usable UNC path provided in device string! [ 119.723191][ T6775] [ 119.729385][ T6780] tipc: Node number set to 60928 [ 119.776272][ T6775] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 121.517191][ T6841] sctp: [Deprecated]: syz.3.427 (pid 6841) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.517191][ T6841] Use struct sctp_sack_info instead [ 121.659970][ T6845] unsupported nla_type 32969 [ 124.619017][ T6938] netlink: zone id is out of range [ 124.665100][ T6938] netlink: set zone limit has 8 unknown bytes [ 124.722846][ T6944] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 127.253942][ T7025] openvswitch: HSR: Dropping previously announced user features [ 127.907507][ T7047] netlink: 'syz.0.518': attribute type 1 has an invalid length. [ 130.024156][ T7124] sd 0:0:1:0: PR command failed: 1026 [ 130.043348][ T7124] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 130.050208][ T7124] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 130.309681][ T7137] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd31 [ 133.408175][ T7239] netlink: 'syz.1.606': attribute type 11 has an invalid length. [ 133.426075][ T7239] netlink: 'syz.1.606': attribute type 11 has an invalid length. [ 133.449269][ T7239] netlink: 'syz.1.606': attribute type 11 has an invalid length. [ 134.055197][ T7266] netlink: zone id is out of range [ 134.068638][ T7266] netlink: zone id is out of range [ 134.092891][ T7266] netlink: zone id is out of range [ 134.098379][ T7266] netlink: get zone limit has 4 unknown bytes [ 135.458037][ T7303] nbd: illegal input index -33554433 [ 135.685308][ T7313] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 136.371115][ T7340] openvswitch: netlink: IP tunnel dst address not specified [ 136.580372][ T7346] batman_adv: Routing algorithm '' is not supported [ 136.854163][ T7358] netlink: 'syz.1.660': attribute type 2 has an invalid length. [ 138.027265][ T7401] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 138.037739][ T7401] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 138.624912][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.631511][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.351882][ T7466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.707'. [ 140.994907][ T7485] .': entered promiscuous mode [ 142.126222][ T7525] netlink: 'syz.0.738': attribute type 2 has an invalid length. [ 143.320617][ T7561] netlink: get zone limit has 8 unknown bytes [ 144.663780][ T7603] netlink: 'syz.3.767': attribute type 1 has an invalid length. [ 145.601904][ T7626] netlink: Conntrack attr type has unexpected length (type=0, length=107, expected=0) [ 147.389314][ T7680] nbd: must specify a device to reconfigure [ 147.859222][ T7697] process 'syz.3.810' launched './file0' with NULL argv: empty string added [ 148.351214][ T7715] sctp: [Deprecated]: syz.1.818 (pid 7715) Use of int in maxseg socket option. [ 148.351214][ T7715] Use struct sctp_assoc_value instead [ 150.190105][ T7772] cifs: Unknown parameter '' [ 150.835918][ T7796] HSR: entered promiscuous mode [ 151.706614][ T7825] sd 0:0:1:0: PR command failed: 1026 [ 151.712166][ T7825] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 151.753289][ T7825] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 152.149277][ T7839] MTRR 1 not used [ 156.053142][ T29] audit: type=1326 audit(1735595849.767:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7942 comm="syz.3.924" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bdad85d29 code=0x0 [ 156.210559][ T7951] delete_channel: no stack [ 157.078951][ T7980] delete_channel: no stack [ 158.664545][ T8032] nbd: illegal input index -33554433 [ 160.507729][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.987'. [ 161.868029][ T8102] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 162.114759][ T8110] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 162.162712][ T8112] netlink: 206 bytes leftover after parsing attributes in process `syz.1.1004'. [ 162.172626][ T8112] Zero length message leads to an empty skb [ 163.808546][ T8165] zero sized request [ 165.648617][ T8231] openvswitch: netlink: Missing valid actions attribute. [ 165.948699][ T8242] netlink: get zone limit has 8 unknown bytes [ 166.811578][ T8280] netlink: 'syz.3.1082': attribute type 11 has an invalid length. [ 166.910798][ T8284] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 166.942949][ T8284] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 167.605455][ T8310] nbd: must specify an index to disconnect [ 168.181602][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 169.196655][ T8369] nbd: must specify a device to reconfigure [ 170.756095][ T8414] cifs: Unknown parameter '' [ 171.522809][ T8442] netlink: 648 bytes leftover after parsing attributes in process `syz.1.1162'. [ 171.548048][ T8442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1162'. [ 173.356648][ T8494] nbd: must specify a size in bytes for the device [ 173.512411][ T8501] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 174.128523][ T8521] netlink: 'syz.1.1190': attribute type 1 has an invalid length. [ 175.041595][ T5847] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 175.046967][ T8554] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 178.099470][ T8644] netlink: zone id is out of range [ 178.111666][ T8644] netlink: zone id is out of range [ 178.123158][ T8644] netlink: zone id is out of range [ 178.128342][ T8644] netlink: zone id is out of range [ 178.176684][ T8644] netlink: zone id is out of range [ 178.181889][ T8644] netlink: zone id is out of range [ 178.201807][ T8644] netlink: zone id is out of range [ 178.211993][ T8644] netlink: zone id is out of range [ 178.434328][ T8654] delete_channel: no stack [ 181.009374][ T8705] kexec: Could not allocate control_code_buffer [ 181.465439][ T8743] syz.0.1291 uses obsolete (PF_INET,SOCK_PACKET) [ 182.016246][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'. [ 183.245267][ T8784] tipc: Started in network mode [ 183.250243][ T8784] tipc: Node identity ee00, cluster identity 4711 [ 183.288900][ T8784] tipc: Node number set to 60928 [ 184.609896][ T8819] net_ratelimit: 1 callbacks suppressed [ 184.609924][ T8819] openvswitch: netlink: Key type 261 is out of range max 32 [ 185.248265][ T8840] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 186.507600][ T8867] bond0: option arp_validate: invalid value () [ 188.640427][ T8948] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 189.957178][ T8945] kexec: Could not allocate control_code_buffer [ 190.697208][ T9000] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 193.759754][ T9126] openvswitch: HSR: Dropping previously announced user features [ 195.684937][ T9186] netlink: 'syz.1.1494': attribute type 1 has an invalid length. [ 196.190847][ T9201] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 200.056954][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.063489][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.324184][ T9317] openvswitch: netlink: Message has 4 unknown bytes. [ 202.812468][ T9372] openvswitch: netlink: Message has 4 unknown bytes. [ 204.628904][ T9424] netlink: zone id is out of range [ 204.658158][ T9424] netlink: set zone limit has 4 unknown bytes [ 206.556648][ T9473] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1626'. [ 207.258682][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 207.268702][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 207.275499][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 207.281784][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 208.188276][ T9518] delete_channel: no stack [ 210.885321][ T9591] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 211.295520][ T9603] netlink: 'syz.1.1680': attribute type 1 has an invalid length. [ 211.315645][ T9604] openvswitch: netlink: IP tunnel dst address not specified [ 212.480024][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1697'. [ 213.844789][ T9682] capability: warning: `syz.3.1717' uses 32-bit capabilities (legacy support in use) [ 216.222491][ T9757] netlink: del zone limit has 8 unknown bytes [ 217.286119][ T9792] Invalid ELF header magic: != ELF [ 217.763255][ T29] audit: type=1800 audit(4294967325.600:5): pid=9808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1775" name="discovery_nqn" dev="configfs" ino=18894 res=0 errno=0 [ 218.779670][ T29] audit: type=1800 audit(4294967326.610:6): pid=9843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1791" name="dbroot" dev="configfs" ino=19880 res=0 errno=0 [ 218.833311][ T9845] svc: failed to register nfsdv3 RPC service (errno 111). [ 218.939653][ T9850] netlink: 'syz.3.1794': attribute type 1 has an invalid length. [ 218.963303][ T9845] svc: failed to register nfsaclv3 RPC service (errno 111). [ 222.654160][ T29] audit: type=1800 audit(4294967330.497:7): pid=9974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1848" name="members" dev="configfs" ino=19042 res=0 errno=0 [ 223.801908][T10016] i8042 aux 00:02: in use; can't configure [ 224.472145][T10037] mmap: syz.0.1881 (10037): VmData 20692992 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 225.387999][T10070] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 225.634367][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1901'. [ 226.125022][T10089] raw_sendmsg: syz.3.1908 forgot to set AF_INET. Fix it! [ 227.760357][T10139] netlink: 5995 bytes leftover after parsing attributes in process `syz.0.1928'. [ 228.562499][T10153] program syz.2.1935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.472328][T10203] netlink: 'syz.0.1956': attribute type 1 has an invalid length. [ 231.053675][T10221] netlink: 'syz.3.1963': attribute type 1 has an invalid length. [ 232.784149][T10270] nbd: couldn't find a device at index 0 [ 233.115335][T10279] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 234.086156][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2007'. [ 235.129512][T10343] Invalid ELF header magic: != ELF [ 236.082579][T10390] openvswitch: netlink: IPv4 tunnel dst address is zero [ 237.269361][T10435] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 237.467075][T10448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'. [ 243.489323][T10650] openvswitch: netlink: IP tunnel dst address not specified [ 243.803561][T10660] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2171'. [ 245.820200][T10740] netlink: 'syz.1.2208': attribute type 2 has an invalid length. [ 246.490974][T10768] netlink: 'syz.1.2219': attribute type 2 has an invalid length. [ 246.500352][T10768] netlink: 674 bytes leftover after parsing attributes in process `syz.1.2219'. [ 246.979761][T10788] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 248.368082][T10841] openvswitch: netlink: ct_state flags 04001eac unsupported [ 249.736288][T10895] netlink: 'syz.1.2278': attribute type 1 has an invalid length. [ 251.171365][T10953] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 252.232750][T10996] openvswitch: netlink: Key 23 has unexpected len 0 expected 2 [ 252.796439][T11023] zero sized request [ 252.953739][T11027] openvswitch: netlink: Message has 4 unknown bytes. [ 255.991354][T11128] Invalid ELF header magic: != ELF [ 256.152789][T11136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.992865][T11204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2414'. [ 261.422856][T11323] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 261.496204][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.502690][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.797022][T11523] openvswitch: netlink: Key type 29 is not supported [ 267.685072][T11556] openvswitch: netlink: IP tunnel dst address not specified [ 268.842536][T11601] netlink: Unknown conntrack attr (type=64, max=9) [ 270.520403][T11662] netlink: Unknown conntrack attr (0) [ 271.933645][T11713] openvswitch: netlink: nsh attr 160 is out of range max 3 [ 272.633900][T11737] netlink: ct family unspecified [ 274.751403][T11803] openvswitch: netlink: Key 23 has unexpected len 0 expected 2 [ 276.076767][T11846] netlink: 'syz.0.2706': attribute type 2 has an invalid length. [ 277.480191][T11888] openvswitch: netlink: ct_state flags 01001eac unsupported [ 280.225892][T11957] openvswitch: netlink: IP tunnel dst address not specified [ 280.673231][T11973] openvswitch: netlink: ct_state flags 02001eac unsupported [ 283.545326][T12078] ima: policy update failed [ 283.558049][ T29] audit: type=1802 audit(4294967391.397:8): pid=12078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2811" res=0 errno=0 [ 285.119875][T12126] Scaler: ================= START STATUS ================= [ 285.130254][T12126] Scaler: ================== END STATUS ================== [ 288.432568][T12223] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 288.681224][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2889'. [ 290.397548][T12288] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2904'. [ 291.654862][T12339] openvswitch: netlink: IP tunnel TTL not specified. [ 292.566002][T12367] netlink: Unknown conntrack attr (0) [ 294.404578][T12434] openvswitch: netlink: nsh attr 160 is out of range max 3 [ 296.502893][T12505] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 297.793956][T12551] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek 1 [ 323.172865][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.183604][ T2998] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.259136][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.275472][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.283389][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 323.290768][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.506131][ T2998] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.737752][ T2998] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.928219][T13095] chnl_net:caif_netlink_parms(): no params data found [ 324.455402][ T2998] bridge_slave_1: left allmulticast mode [ 324.461423][ T2998] bridge_slave_1: left promiscuous mode [ 324.477148][ T2998] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.594098][ T2998] bridge_slave_0: left allmulticast mode [ 324.599828][ T2998] bridge_slave_0: left promiscuous mode [ 324.606373][ T2998] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.333529][ T54] Bluetooth: hci3: command tx timeout [ 326.127415][ T2998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.167484][ T2998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.208946][ T2998] bond0 (unregistering): Released all slaves [ 326.237339][T13095] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.254812][T13095] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.262105][T13095] bridge_slave_0: entered allmulticast mode [ 326.294078][T13095] bridge_slave_0: entered promiscuous mode [ 326.365214][T13095] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.372388][T13095] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.394985][T13095] bridge_slave_1: entered allmulticast mode [ 326.405571][T13095] bridge_slave_1: entered promiscuous mode [ 326.418000][T13164] Process accounting resumed [ 326.523973][ T2998] tipc: Left network mode [ 326.617901][T13095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.655875][T13095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.962058][T13095] team0: Port device team_slave_0 added [ 327.056443][T13095] team0: Port device team_slave_1 added [ 327.414581][ T54] Bluetooth: hci3: command tx timeout [ 327.435062][T13095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.442107][T13095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.536849][T13095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.566285][T13095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.603148][T13095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.644759][T13095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.097480][T13095] hsr_slave_0: entered promiscuous mode [ 328.148841][T13095] hsr_slave_1: entered promiscuous mode [ 328.183119][T13095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.190773][T13095] Cannot create hsr debugfs directory [ 329.493168][ T5847] Bluetooth: hci3: command tx timeout [ 329.626892][T13095] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.715838][T13095] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 329.797773][T13095] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 329.973342][ T2998] hsr_slave_0: left promiscuous mode [ 330.009228][ T2998] hsr_slave_1: left promiscuous mode [ 330.099666][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.115552][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.174521][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.182534][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.303919][ T2998] veth1_macvtap: left promiscuous mode [ 330.329393][ T2998] veth0_macvtap: left promiscuous mode [ 330.335581][ T2998] veth1_vlan: left promiscuous mode [ 330.341187][ T2998] veth0_vlan: left promiscuous mode [ 331.573613][ T5847] Bluetooth: hci3: command tx timeout [ 331.781103][ T2998] team0 (unregistering): Port device team_slave_1 removed [ 331.847800][ T2998] team0 (unregistering): Port device team_slave_0 removed [ 332.470596][T13095] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 332.731621][T13095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.782102][T13095] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.818139][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.825374][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.885061][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.892238][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.976609][T13095] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 332.987120][T13095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.125856][ T2998] ref_tracker: net notrefcnt@ffff8880617e81e0 has 1/2 users at [ 333.125856][ T2998] sk_alloc+0xa93/0xb90 [ 333.125856][ T2998] inet6_create+0x380/0x1320 [ 333.125856][ T2998] __sock_create+0x335/0x8d0 [ 333.125856][ T2998] udp_sock_create6+0xc8/0x660 [ 333.125856][ T2998] sctp_udp_sock_start+0x280/0x4b0 [ 333.125856][ T2998] proc_sctp_do_udp_port+0x3ba/0x4a0 [ 333.125856][ T2998] proc_sys_call_handler+0x403/0x5d0 [ 333.125856][ T2998] iter_file_splice_write+0x90f/0x10b0 [ 333.125856][ T2998] direct_splice_actor+0x18f/0x6c0 [ 333.125856][ T2998] splice_direct_to_actor+0x346/0xa40 [ 333.125856][ T2998] do_splice_direct+0x178/0x250 [ 333.125856][ T2998] do_sendfile+0xaed/0xe30 [ 333.125856][ T2998] __x64_sys_sendfile64+0x1da/0x220 [ 333.125856][ T2998] do_syscall_64+0xcd/0x250 [ 333.125856][ T2998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.125856][ T2998] [ 333.214455][ T2998] ref_tracker: net notrefcnt@ffff8880617e81e0 has 1/2 users at [ 333.214455][ T2998] sk_alloc+0xa93/0xb90 [ 333.214455][ T2998] inet_create+0x3a1/0x10a0 [ 333.214455][ T2998] __sock_create+0x335/0x8d0 [ 333.214455][ T2998] udp_sock_create4+0xa7/0x450 [ 333.214455][ T2998] sctp_udp_sock_start+0x10b/0x4b0 [ 333.214455][ T2998] proc_sctp_do_udp_port+0x3ba/0x4a0 [ 333.214455][ T2998] proc_sys_call_handler+0x403/0x5d0 [ 333.214455][ T2998] iter_file_splice_write+0x90f/0x10b0 [ 333.214455][ T2998] direct_splice_actor+0x18f/0x6c0 [ 333.214455][ T2998] splice_direct_to_actor+0x346/0xa40 [ 333.214455][ T2998] do_splice_direct+0x178/0x250 [ 333.214455][ T2998] do_sendfile+0xaed/0xe30 [ 333.214455][ T2998] __x64_sys_sendfile64+0x1da/0x220 [ 333.214455][ T2998] do_syscall_64+0xcd/0x250 [ 333.214455][ T2998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.214455][ T2998] [ 333.403768][ T2998] ------------[ cut here ]------------ [ 333.409608][ T2998] WARNING: CPU: 0 PID: 2998 at lib/ref_tracker.c:179 ref_tracker_dir_exit+0x3e3/0x680 [ 333.419426][ T2998] Modules linked in: [ 333.423512][ T2998] CPU: 0 UID: 0 PID: 2998 Comm: kworker/u8:6 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 333.434503][ T2998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 333.444681][ T2998] Workqueue: netns cleanup_net [ 333.446630][T13095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.449772][ T2998] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 333.462802][ T2998] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 bb 2d d1 fc 48 8b 74 24 18 48 89 ef e8 ee a4 54 06 90 <0f> 0b 90 e8 a5 2d d1 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 34 [ 333.483254][ T2998] RSP: 0018:ffffc9000bf17b38 EFLAGS: 00010246 [ 333.489393][ T2998] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 333.497803][ T2998] RDX: 0000000000000001 RSI: ffffffff8b4cd300 RDI: 0000000000000001 [ 333.506323][ T2998] RBP: ffff8880617e81e0 R08: 0000000000000001 R09: fffffbfff2d36dc1 [ 333.514623][ T2998] R10: ffffffff969b6e0f R11: 0000000000000b8f R12: ffff8880617e8230 [ 333.522683][ T2998] R13: ffff8880617e8230 R14: ffff8880617e8230 R15: ffff8880617e8230 [ 333.530901][ T2998] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 333.540169][ T2998] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.546886][ T2998] CR2: 00007f10b6bc8440 CR3: 000000007ef56000 CR4: 00000000003526f0 [ 333.555132][ T2998] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 333.563647][ T2998] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 333.571678][ T2998] Call Trace: [ 333.575545][ T2998] [ 333.578529][ T2998] ? __warn+0xea/0x3c0 [ 333.582684][ T2998] ? ref_tracker_dir_exit+0x3e3/0x680 [ 333.588188][ T2998] ? report_bug+0x3c0/0x580 [ 333.592764][ T2998] ? handle_bug+0x54/0xa0 [ 333.597289][ T2998] ? exc_invalid_op+0x17/0x50 [ 333.602037][ T2998] ? asm_exc_invalid_op+0x1a/0x20 [ 333.607250][ T2998] ? ref_tracker_dir_exit+0x3e3/0x680 [ 333.612704][ T2998] ? ref_tracker_dir_exit+0x3e2/0x680 [ 333.618250][ T2998] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 333.624132][ T2998] ? lockdep_hardirqs_on+0x7c/0x110 [ 333.629388][ T2998] ? cleanup_net+0x984/0xbd0 [ 333.634162][ T2998] cleanup_net+0x990/0xbd0 [ 333.638658][ T2998] ? __pfx_cleanup_net+0x10/0x10 [ 333.643717][ T2998] ? lock_acquire+0x2f/0xb0 [ 333.648297][ T2998] ? process_one_work+0x8bb/0x1b30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 333.653690][ T2998] process_one_work+0x958/0x1b30 [ 333.659215][ T2998] ? __pfx_batadv_nc_worker+0x10/0x10 [ 333.664993][ T2998] ? __pfx_process_one_work+0x10/0x10 [ 333.670425][ T2998] ? rcu_is_watching+0x12/0xc0 [ 333.675346][ T2998] ? assign_work+0x1a0/0x250 [ 333.680024][ T2998] worker_thread+0x6c8/0xf00 [ 333.684738][ T2998] ? __kthread_parkme+0x148/0x220 [ 333.689859][ T2998] ? __pfx_worker_thread+0x10/0x10 [ 333.695121][ T2998] kthread+0x2c1/0x3a0 [ 333.699256][ T2998] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.704834][ T2998] ? __pfx_kthread+0x10/0x10 [ 333.709493][ T2998] ret_from_fork+0x45/0x80 [ 333.714065][ T2998] ? __pfx_kthread+0x10/0x10 [ 333.718727][ T2998] ret_from_fork_asm+0x1a/0x30 [ 333.723661][ T2998] [ 333.726726][ T2998] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 333.734054][ T2998] CPU: 0 UID: 0 PID: 2998 Comm: kworker/u8:6 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 333.744956][ T2998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 333.755057][ T2998] Workqueue: netns cleanup_net [ 333.759899][ T2998] Call Trace: [ 333.763213][ T2998] [ 333.766182][ T2998] dump_stack_lvl+0x3d/0x1f0 [ 333.770839][ T2998] panic+0x71d/0x800 [ 333.774815][ T2998] ? __pfx_panic+0x10/0x10 [ 333.779296][ T2998] ? show_trace_log_lvl+0x29d/0x3d0 [ 333.784567][ T2998] ? check_panic_on_warn+0x1f/0xb0 [ 333.789752][ T2998] ? ref_tracker_dir_exit+0x3e3/0x680 [ 333.795194][ T2998] check_panic_on_warn+0xab/0xb0 [ 333.800196][ T2998] __warn+0xf6/0x3c0 [ 333.804136][ T2998] ? ref_tracker_dir_exit+0x3e3/0x680 [ 333.809546][ T2998] report_bug+0x3c0/0x580 [ 333.813913][ T2998] handle_bug+0x54/0xa0 [ 333.818106][ T2998] exc_invalid_op+0x17/0x50 [ 333.822649][ T2998] asm_exc_invalid_op+0x1a/0x20 [ 333.827575][ T2998] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 333.833596][ T2998] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 bb 2d d1 fc 48 8b 74 24 18 48 89 ef e8 ee a4 54 06 90 <0f> 0b 90 e8 a5 2d d1 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 34 [ 333.853230][ T2998] RSP: 0018:ffffc9000bf17b38 EFLAGS: 00010246 [ 333.859329][ T2998] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 333.867325][ T2998] RDX: 0000000000000001 RSI: ffffffff8b4cd300 RDI: 0000000000000001 [ 333.875586][ T2998] RBP: ffff8880617e81e0 R08: 0000000000000001 R09: fffffbfff2d36dc1 [ 333.883590][ T2998] R10: ffffffff969b6e0f R11: 0000000000000b8f R12: ffff8880617e8230 [ 333.891585][ T2998] R13: ffff8880617e8230 R14: ffff8880617e8230 R15: ffff8880617e8230 [ 333.899706][ T2998] ? ref_tracker_dir_exit+0x3e2/0x680 [ 333.905136][ T2998] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 333.910892][ T2998] ? lockdep_hardirqs_on+0x7c/0x110 [ 333.916209][ T2998] ? cleanup_net+0x984/0xbd0 [ 333.920849][ T2998] cleanup_net+0x990/0xbd0 [ 333.925311][ T2998] ? __pfx_cleanup_net+0x10/0x10 [ 333.930301][ T2998] ? lock_acquire+0x2f/0xb0 [ 333.934829][ T2998] ? process_one_work+0x8bb/0x1b30 [ 333.939974][ T2998] process_one_work+0x958/0x1b30 [ 333.944948][ T2998] ? __pfx_batadv_nc_worker+0x10/0x10 [ 333.950363][ T2998] ? __pfx_process_one_work+0x10/0x10 [ 333.955764][ T2998] ? rcu_is_watching+0x12/0xc0 [ 333.960589][ T2998] ? assign_work+0x1a0/0x250 [ 333.965243][ T2998] worker_thread+0x6c8/0xf00 [ 333.969884][ T2998] ? __kthread_parkme+0x148/0x220 [ 333.974977][ T2998] ? __pfx_worker_thread+0x10/0x10 [ 333.980137][ T2998] kthread+0x2c1/0x3a0 [ 333.984242][ T2998] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.989476][ T2998] ? __pfx_kthread+0x10/0x10 [ 333.994130][ T2998] ret_from_fork+0x45/0x80 [ 333.998574][ T2998] ? __pfx_kthread+0x10/0x10 [ 334.003197][ T2998] ret_from_fork_asm+0x1a/0x30 [ 334.008013][ T2998] [ 334.011324][ T2998] Kernel Offset: disabled [ 334.015720][ T2998] Rebooting in 86400 seconds..