last executing test programs: 2.955656989s ago: executing program 3 (id=1444): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x801, 0x84) clone$auto(0x100000001, 0x5, 0x0, 0x0, 0x49) getsockopt$auto(r0, 0x84, 0x83, 0x0, 0x0) 2.401063818s ago: executing program 3 (id=1449): set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(0x3, 0x0, 0x60, 0x0, 0x10001) 2.399378557s ago: executing program 1 (id=1457): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r0], 0x1ac}}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000440), 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) 2.251316591s ago: executing program 1 (id=1452): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3f, 0x0, 0x9) getsockopt$auto(0x3, 0x200000000001, 0x41, 0x0, 0x0) 2.143787256s ago: executing program 2 (id=1453): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x86873cc1, 0xa, 0x0) 2.079641135s ago: executing program 1 (id=1454): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r0, 0x84, 0x84, 0x0, &(0x7f0000000000)=0x9b) 1.955653271s ago: executing program 3 (id=1455): r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 1.747044875s ago: executing program 2 (id=1456): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) lstat$auto(0x0, &(0x7f0000000180)={0x7, 0xb, 0x100000002, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x400, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x7, 0x107}) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 1.611743735s ago: executing program 2 (id=1458): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x801, 0x84) clone$auto(0x100000001, 0x5, 0x0, 0x0, 0x49) getsockopt$auto(r0, 0x84, 0x83, 0x0, 0x0) 1.393880122s ago: executing program 3 (id=1459): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/query\x00', 0x2, 0x0) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) 1.390301276s ago: executing program 1 (id=1468): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x1, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) clock_adjtime$auto(0x0, 0x0) 1.080969667s ago: executing program 2 (id=1461): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32, @ANYBLOB="060006000500000008002e"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.080843614s ago: executing program 3 (id=1462): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(0x0, 0x0) open(0x0, 0x22240, 0x154) ioperm$auto(0x7, 0x6, 0x80) stat$auto(0x0, 0x0) 1.043533947s ago: executing program 0 (id=1463): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/neigh/macvtap0/delay_first_probe_time\x00', 0x141241, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/queue/io_poll_delay\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(r0, 0x0, 0xfcef) 909.269595ms ago: executing program 3 (id=1464): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x100000, 0x8, 0xb) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0xc00, 0x2c, 0x2c, 0x0, 0x2}) 868.554668ms ago: executing program 0 (id=1466): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) pipe2$auto(0x0, 0x80) ioctl$auto(0x1, 0x5761, 0x4) ioctl$auto(0x1, 0x5761, 0x4) 719.937857ms ago: executing program 0 (id=1467): r0 = socket(0x29, 0x5, 0x0) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x3fd, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = open(0x0, 0xa22c0, 0x155) ioctl$auto_FS_IOC_FSSETXATTR(r1, 0x401c5820, r0) 719.25853ms ago: executing program 2 (id=1469): r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 539.968632ms ago: executing program 0 (id=1470): r0 = socket(0x1e, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x7) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(r0, 0x10f, 0x89, 0x0, 0x0) 539.845999ms ago: executing program 1 (id=1471): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, ',!'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 226.384353ms ago: executing program 2 (id=1472): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) 225.775069ms ago: executing program 0 (id=1473): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x200, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) bpf$auto(0x2, 0x0, 0xb) bpf$auto(0x15, 0x0, 0x0) 168.266003ms ago: executing program 1 (id=1474): mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) mlockall$auto(0x7) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) setreuid$auto(0x3, 0x7) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) 0s ago: executing program 0 (id=1475): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x6, 0x0) socket(0x1, 0x2, 0x0) socket(0xa, 0x2, 0x0) setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. [ 73.850955][ T5822] cgroup: Unknown subsys name 'net' [ 73.967116][ T5822] cgroup: Unknown subsys name 'cpuset' [ 73.975891][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.564410][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.596565][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.602942][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.257136][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.267610][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.283655][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.291534][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.300025][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.342459][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.350881][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.368274][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.393587][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.401211][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.474032][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.481933][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.489752][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.497791][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.505499][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.576691][ T5146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.585117][ T5146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.593038][ T5146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.601073][ T5146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.608702][ T5146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.699855][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 77.825195][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 77.857275][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.865312][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.872625][ T5831] bridge_slave_0: entered allmulticast mode [ 77.879699][ T5831] bridge_slave_0: entered promiscuous mode [ 77.897218][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.905469][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.912696][ T5831] bridge_slave_1: entered allmulticast mode [ 77.920050][ T5831] bridge_slave_1: entered promiscuous mode [ 77.970138][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 77.981888][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.993731][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.059555][ T5831] team0: Port device team_slave_0 added [ 78.074268][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.081428][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.089171][ T5835] bridge_slave_0: entered allmulticast mode [ 78.096216][ T5835] bridge_slave_0: entered promiscuous mode [ 78.124930][ T5831] team0: Port device team_slave_1 added [ 78.138118][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.145531][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.152694][ T5835] bridge_slave_1: entered allmulticast mode [ 78.159642][ T5835] bridge_slave_1: entered promiscuous mode [ 78.218490][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.225695][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.252888][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.264898][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.272027][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.280149][ T5839] bridge_slave_0: entered allmulticast mode [ 78.288215][ T5839] bridge_slave_0: entered promiscuous mode [ 78.305753][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.315430][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.322409][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.348496][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.359917][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.367303][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.374794][ T5839] bridge_slave_1: entered allmulticast mode [ 78.381432][ T5839] bridge_slave_1: entered promiscuous mode [ 78.400902][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.415000][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 78.448115][ T5835] team0: Port device team_slave_0 added [ 78.464564][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.476513][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.488179][ T5835] team0: Port device team_slave_1 added [ 78.544613][ T5839] team0: Port device team_slave_0 added [ 78.562300][ T5831] hsr_slave_0: entered promiscuous mode [ 78.568701][ T5831] hsr_slave_1: entered promiscuous mode [ 78.576753][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.583780][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.609806][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.627165][ T5839] team0: Port device team_slave_1 added [ 78.654988][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.662014][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.688125][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.742352][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.749511][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.776249][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.788528][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.795568][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.821526][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.832689][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.840447][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.847730][ T5842] bridge_slave_0: entered allmulticast mode [ 78.855219][ T5842] bridge_slave_0: entered promiscuous mode [ 78.880304][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.887554][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.894887][ T5842] bridge_slave_1: entered allmulticast mode [ 78.901549][ T5842] bridge_slave_1: entered promiscuous mode [ 78.951205][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.965721][ T5835] hsr_slave_0: entered promiscuous mode [ 78.972165][ T5835] hsr_slave_1: entered promiscuous mode [ 78.978696][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.987231][ T5835] Cannot create hsr debugfs directory [ 79.008392][ T5839] hsr_slave_0: entered promiscuous mode [ 79.014709][ T5839] hsr_slave_1: entered promiscuous mode [ 79.020681][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.028398][ T5839] Cannot create hsr debugfs directory [ 79.036865][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.075569][ T5842] team0: Port device team_slave_0 added [ 79.095900][ T5842] team0: Port device team_slave_1 added [ 79.162824][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.170178][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.196170][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.209114][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.216172][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.242575][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.354470][ T5842] hsr_slave_0: entered promiscuous mode [ 79.360598][ T5842] hsr_slave_1: entered promiscuous mode [ 79.367015][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.375178][ T5842] Cannot create hsr debugfs directory [ 79.407662][ T5146] Bluetooth: hci0: command tx timeout [ 79.429573][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.458503][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.472145][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.478995][ T5146] Bluetooth: hci1: command tx timeout [ 79.492855][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.553830][ T5146] Bluetooth: hci2: command tx timeout [ 79.562017][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.589374][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.600556][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.622756][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.633632][ T5146] Bluetooth: hci3: command tx timeout [ 79.674401][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.697336][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.706782][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.729603][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.767307][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.777704][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.788762][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.818604][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.832282][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.866221][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.905932][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.913179][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.956557][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.963722][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.002371][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.065504][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.076693][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.092434][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.099615][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.120860][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.133193][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.148265][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.155442][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.187685][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.194894][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.237006][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.244187][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.266424][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.302166][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.309357][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.341511][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.348743][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.469559][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.548643][ T5831] veth0_vlan: entered promiscuous mode [ 80.573280][ T5831] veth1_vlan: entered promiscuous mode [ 80.658223][ T5831] veth0_macvtap: entered promiscuous mode [ 80.674386][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.696296][ T5831] veth1_macvtap: entered promiscuous mode [ 80.712797][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.748242][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.770838][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.786733][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.797290][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.806745][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.816397][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.830350][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.861951][ T5839] veth0_vlan: entered promiscuous mode [ 80.889635][ T5839] veth1_vlan: entered promiscuous mode [ 80.910121][ T5835] veth0_vlan: entered promiscuous mode [ 80.926963][ T5835] veth1_vlan: entered promiscuous mode [ 80.992335][ T5842] veth0_vlan: entered promiscuous mode [ 81.011837][ T5839] veth0_macvtap: entered promiscuous mode [ 81.014805][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.025886][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.067007][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.075842][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.078498][ T5839] veth1_macvtap: entered promiscuous mode [ 81.091446][ T5835] veth0_macvtap: entered promiscuous mode [ 81.102988][ T5835] veth1_macvtap: entered promiscuous mode [ 81.111872][ T5842] veth1_vlan: entered promiscuous mode [ 81.137826][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.149736][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.162809][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.175735][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.187759][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.198480][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.209273][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.220847][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.246742][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.247934][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.262080][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.287156][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.300398][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.317243][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.328854][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.339991][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.351772][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.385651][ T5842] veth0_macvtap: entered promiscuous mode [ 81.408379][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.424382][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.433217][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.447342][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.459238][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.468965][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.473668][ T5146] Bluetooth: hci0: command tx timeout [ 81.479176][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.492133][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.508666][ T5842] veth1_macvtap: entered promiscuous mode [ 81.537032][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.550175][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.553767][ T5146] Bluetooth: hci1: command tx timeout [ 81.562371][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.577314][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.590003][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.600856][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.614996][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.634503][ T5146] Bluetooth: hci2: command tx timeout [ 81.669144][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.681962][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.692554][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.703636][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.713740][ T5146] Bluetooth: hci3: command tx timeout [ 81.723438][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.736752][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.747963][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.778421][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.787556][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.801077][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.810320][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.840934][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.850214][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.891314][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.906069][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.945470][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.964871][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.988362][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.998175][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.049397][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.071604][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.110313][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.132195][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.264917][ T5934] netlink: 'syz.1.18': attribute type 1 has an invalid length. [ 83.272669][ T5934] netlink: 206 bytes leftover after parsing attributes in process `syz.1.18'. [ 83.283744][ T5934] Zero length message leads to an empty skb [ 83.560769][ T5146] Bluetooth: hci0: command tx timeout [ 83.625479][ T5948] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 83.625479][ T5948] The task syz.2.21 (5948) triggered the difference, watch for misbehavior. [ 83.642346][ T5146] Bluetooth: hci1: command tx timeout [ 83.713521][ T5146] Bluetooth: hci2: command tx timeout [ 83.794380][ T5146] Bluetooth: hci3: command tx timeout [ 85.487779][ T5994] netlink: 342 bytes leftover after parsing attributes in process `syz.2.42'. [ 85.634590][ T5146] Bluetooth: hci0: command tx timeout [ 85.715303][ T5146] Bluetooth: hci1: command tx timeout [ 85.795581][ T5146] Bluetooth: hci2: command tx timeout [ 85.878575][ T5146] Bluetooth: hci3: command tx timeout [ 87.136996][ T6041] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 89.804752][ T6112] nbd: socks must be embedded in a SOCK_ITEM attr [ 89.813307][ T6112] block nbd0: shutting down sockets [ 90.075374][ T6118] netlink: 342 bytes leftover after parsing attributes in process `syz.2.92'. [ 91.883588][ T6165] nbd: socks must be embedded in a SOCK_ITEM attr [ 91.912492][ T6165] block nbd0: shutting down sockets [ 91.982213][ T9] cfg80211: failed to load regulatory.db [ 92.148271][ T6172] netlink: 'syz.2.112': attribute type 1 has an invalid length. [ 92.408606][ T6171] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.773527][ T30] audit: type=1800 audit(1743085256.017:2): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.121" name=22050820 dev="tmpfs" ino=123 res=0 errno=0 [ 92.884073][ T6194] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.199336][ T6263] netlink: 'syz.1.151': attribute type 1 has an invalid length. [ 96.850902][ T6318] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.009226][ T6324] syz.3.179 uses obsolete (PF_INET,SOCK_PACKET) [ 97.116334][ T6329] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 97.293119][ T6333] sock: sock_timestamping_bind_phc: sock not bind to device [ 98.296635][ T6363] netlink: 350 bytes leftover after parsing attributes in process `syz.3.195'. [ 98.680157][ T6379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.204'. [ 98.695390][ T6379] vxcan1: entered promiscuous mode [ 100.764263][ T6431] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 101.018328][ T6442] netlink: 338 bytes leftover after parsing attributes in process `syz.3.230'. [ 101.385590][ T6451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.233'. [ 101.415762][ T6451] vxcan1: entered promiscuous mode [ 101.587321][ T6456] netlink: 350 bytes leftover after parsing attributes in process `syz.1.236'. [ 102.664597][ T6487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.245'. [ 102.677697][ T6487] vxcan1: entered promiscuous mode [ 102.810534][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 102.840948][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 104.621802][ T6551] capability: warning: `syz.1.276' uses 32-bit capabilities (legacy support in use) [ 105.245998][ T6569] netlink: 342 bytes leftover after parsing attributes in process `syz.1.285'. [ 105.477343][ T6575] netlink: 28 bytes leftover after parsing attributes in process `syz.2.289'. [ 105.522690][ T6575] macsec0: entered promiscuous mode [ 105.532995][ T6575] macsec0: entered allmulticast mode [ 105.551202][ T6575] veth1_macvtap: entered allmulticast mode [ 108.080217][ T30] audit: type=1804 audit(1743085271.337:3): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.313" name=2F6E6577726F6F742F37322F08 dev="tmpfs" ino=387 res=1 errno=0 [ 109.333290][ T6724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.322'. [ 109.347812][ T6724] macsec0: entered promiscuous mode [ 109.366755][ T6724] macsec0: entered allmulticast mode [ 109.372109][ T6724] veth1_macvtap: entered allmulticast mode [ 110.325035][ T6760] netlink: 354 bytes leftover after parsing attributes in process `syz.3.330'. [ 111.107246][ T6787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.341'. [ 111.122267][ T6787] macsec0: entered promiscuous mode [ 111.143293][ T6787] macsec0: entered allmulticast mode [ 111.166511][ T6787] veth1_macvtap: entered allmulticast mode [ 111.437304][ T6791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.345'. [ 111.461271][ T6791] ipvlan1: entered allmulticast mode [ 111.487358][ T6791] veth0_vlan: entered allmulticast mode [ 111.863063][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.822701][ T6835] netlink: 186 bytes leftover after parsing attributes in process `syz.2.363'. [ 116.655831][ T6953] netlink: 338 bytes leftover after parsing attributes in process `syz.3.414'. [ 116.721163][ T6959] dyndbg: bad flag-op , at start of  [ 116.738151][ T6959] dyndbg: flags parse failed [ 117.554780][ T6992] delete_channel: no stack [ 117.713876][ T7001] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 118.571182][ T7025] could not allocate digest TFM handle [ 118.582527][ T7033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.447'. [ 119.077803][ T7054] netlink: 93 bytes leftover after parsing attributes in process `syz.0.457'. [ 123.674650][ T7193] Loading of unsigned module is rejected [ 124.253518][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.519'. [ 124.284182][ T7216] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 124.902203][ T7227] lo: entered promiscuous mode [ 124.912055][ T7226] lo: left promiscuous mode [ 128.027293][ T7317] Console: switching to colour VGA+ 80x25 [ 130.705503][ T7391] Device name cannot be null; rc = [-22] [ 131.120843][ T7402] netlink: 280 bytes leftover after parsing attributes in process `syz.0.597'. [ 132.625936][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 134.298808][ T5146] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 134.872784][ T7507] netlink: 350 bytes leftover after parsing attributes in process `syz.2.643'. [ 135.560243][ T7539] netlink: 294 bytes leftover after parsing attributes in process `syz.0.656'. [ 137.127288][ T7594] process 'syz.0.678' launched './file0' with NULL argv: empty string added [ 137.933538][ T7629] sctp: [Deprecated]: syz.2.692 (pid 7629) Use of int in max_burst socket option deprecated. [ 137.933538][ T7629] Use struct sctp_assoc_value instead [ 138.052535][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.059080][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.024334][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'. [ 139.049164][ T7666] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 139.390359][ T7682] netlink: 338 bytes leftover after parsing attributes in process `syz.0.715'. [ 140.190607][ T7711] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 140.787160][ T7731] zswap: compressor not available [ 141.836692][ T7779] sctp: [Deprecated]: syz.0.749 (pid 7779) Use of int in max_burst socket option deprecated. [ 141.836692][ T7779] Use struct sctp_assoc_value instead [ 142.068842][ T7790] netlink: 194 bytes leftover after parsing attributes in process `syz.0.755'. [ 142.257747][ T7800] netlink: 342 bytes leftover after parsing attributes in process `syz.0.768'. [ 142.293499][ T7796] nbd0: detected capacity change from 0 to 68719476736 [ 142.323900][ T6980] block nbd0: Send control failed (result -22) [ 142.340890][ T6980] block nbd0: Request send failed, requeueing [ 142.359325][ T5146] block nbd0: Receive control failed (result -32) [ 142.375075][ T11] block nbd0: Dead connection, failed to find a fallback [ 142.383836][ T11] block nbd0: shutting down sockets [ 142.389393][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.398820][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.407550][ T6980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.428954][ T6980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.437721][ T6980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.447293][ T6980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.455529][ T6980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.465035][ T6980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.472932][ T6980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.484375][ T6980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.492278][ T6980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.502019][ T6980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.510755][ T6980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.525643][ T6980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.533876][ T6980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.542990][ T6980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.551587][ T6980] ldm_validate_partition_table(): Disk read failed. [ 142.574100][ T6980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.604312][ T6980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.612365][ T6980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.632729][ T6980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.641902][ T6980] Dev nbd0: unable to read RDB block 0 [ 142.648236][ T6980] nbd0: unable to read partition table [ 142.677547][ T6980] ldm_validate_partition_table(): Disk read failed. [ 142.699662][ T6980] Dev nbd0: unable to read RDB block 0 [ 142.722606][ T6980] nbd0: unable to read partition table [ 142.899798][ T7816] sctp: [Deprecated]: syz.1.765 (pid 7816) Use of int in max_burst socket option deprecated. [ 142.899798][ T7816] Use struct sctp_assoc_value instead [ 144.604797][ T7867] zswap: compressor not available [ 145.270363][ T7886] netlink: 338 bytes leftover after parsing attributes in process `syz.1.791'. [ 145.518217][ T7884] Loading of unsigned module is rejected [ 148.000828][ T7954] netlink: 346 bytes leftover after parsing attributes in process `syz.0.828'. [ 148.153747][ T7956] sctp: [Deprecated]: syz.3.820 (pid 7956) Use of int in max_burst socket option deprecated. [ 148.153747][ T7956] Use struct sctp_assoc_value instead [ 151.231623][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 156.802345][ T8150] kexec: Could not allocate control_code_buffer [ 157.376538][ T8189] netlink: 350 bytes leftover after parsing attributes in process `syz.3.913'. [ 157.394473][ T8188] netlink: 'syz.0.915': attribute type 9 has an invalid length. [ 157.402359][ T8188] netlink: 330 bytes leftover after parsing attributes in process `syz.0.915'. [ 157.592268][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'. [ 157.783741][ T8199] netlink: 206 bytes leftover after parsing attributes in process `syz.3.918'. [ 159.396490][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'. [ 159.418714][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'. [ 159.757288][ T8268] netlink: 186 bytes leftover after parsing attributes in process `syz.3.951'. [ 160.468548][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'. [ 161.165680][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'. [ 161.242448][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 161.940231][ T8361] ptrace attach of "./syz-executor exec"[5835] was attempted by ""[8361] [ 162.389823][ T8386] __nla_validate_parse: 1 callbacks suppressed [ 162.389850][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1003'. [ 162.718895][ T8395] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1007'. [ 163.110136][ T8407] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1012'. [ 164.364724][ T8453] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1032'. syzkaller syzkaller login: [ 166.217483][ T8516] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1055'. [ 167.808936][ T8564] zswap: compressor not available [ 167.866041][ T8563] mmap: syz.3.1073 (8563) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 168.398617][ T8595] ======================================================= [ 168.398617][ T8595] WARNING: The mand mount option has been deprecated and [ 168.398617][ T8595] and is ignored by this kernel. Remove the mand [ 168.398617][ T8595] option from the mount to silence this warning. [ 168.398617][ T8595] ======================================================= [ 168.697195][ T8604] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 168.728097][ T8604] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 169.414676][ T8630] nbd: socks must be embedded in a SOCK_ITEM attr [ 169.453803][ T8630] block nbd1: shutting down sockets [ 173.010171][ T8737] netlink: 206 bytes leftover after parsing attributes in process `syz.2.1143'. [ 173.230290][ T8743] netlink: 194 bytes leftover after parsing attributes in process `syz.2.1145'. [ 173.681290][ T8748] TCP: TCP_TX_DELAY enabled [ 173.904656][ T8760] nbd1: detected capacity change from 0 to 68719476736 [ 173.920387][ T6168] block nbd1: Send control failed (result -22) [ 173.947264][ T6168] block nbd1: Request send failed, requeueing [ 173.969902][ T99] block nbd1: Dead connection, failed to find a fallback [ 173.977207][ T99] block nbd1: shutting down sockets [ 173.982466][ T99] blk_print_req_error: 24 callbacks suppressed [ 173.982487][ T99] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.998249][ T99] buffer_io_error: 23 callbacks suppressed [ 173.998269][ T99] Buffer I/O error on dev nbd1, logical block 0, async page read [ 174.027535][ T6168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.067528][ T6168] Buffer I/O error on dev nbd1, logical block 0, async page read [ 174.100697][ T6168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.150138][ T6168] Buffer I/O error on dev nbd1, logical block 0, async page read [ 174.181314][ T6168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.221423][ T6168] Buffer I/O error on dev nbd1, logical block 0, async page read [ 174.248151][ T6168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.268681][ T6168] Buffer I/O error on dev nbd1, logical block 0, async page read [ 174.293075][ T6168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.316782][ T6168] Buffer I/O error on dev nbd1, logical block 0, async page read [ 174.340744][ T6168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.354307][ T6168] Buffer I/O error on dev nbd1, logical block 0, async page read [ 174.362384][ T6168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.372590][ T6168] Buffer I/O error on dev nbd1, logical block 0, async page read [ 174.394091][ T6168] ldm_validate_partition_table(): Disk read failed. [ 174.408116][ T6168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.459137][ T6168] Buffer I/O error on dev nbd1, logical block 0, async page read [ 174.472826][ T6168] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.492469][ T6168] Buffer I/O error on dev nbd1, logical block 0, async page read [ 174.512821][ T6168] Dev nbd1: unable to read RDB block 0 [ 174.535785][ T6168] nbd1: unable to read partition table [ 174.546290][ T6168] ldm_validate_partition_table(): Disk read failed. [ 174.553875][ T6168] Dev nbd1: unable to read RDB block 0 [ 174.560518][ T6168] nbd1: unable to read partition table [ 174.571321][ T30] audit: type=1804 audit(1743085337.827:4): pid=8780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1160" name="/newroot/281/file0" dev="tmpfs" ino=1446 res=1 errno=0 [ 174.633630][ T30] audit: type=1800 audit(1743085337.827:5): pid=8780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1160" name="file0" dev="tmpfs" ino=1446 res=0 errno=0 [ 174.682248][ T30] audit: type=1804 audit(1743085337.827:6): pid=8780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1160" name="/newroot/281/file0" dev="tmpfs" ino=1446 res=1 errno=0 [ 174.748609][ T30] audit: type=1800 audit(1743085337.827:7): pid=8780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1160" name="file0" dev="tmpfs" ino=1446 res=0 errno=0 [ 174.781641][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'. [ 175.491321][ T8804] netlink: 346 bytes leftover after parsing attributes in process `syz.1.1170'. [ 177.568295][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1204'. [ 178.594780][ T8914] tipc: Trying to set illegal importance in message [ 178.855131][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1223'. [ 179.264054][ T8930] batman_adv: Routing algorithm '0x00060000' is not supported [ 180.301380][ T8979] netlink: 214 bytes leftover after parsing attributes in process `syz.3.1244'. [ 180.894794][ T9003] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1255'. [ 181.227926][ T9013] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 181.549433][ T9024] MTRR 1 not used [ 186.706978][ T9155] kexec: Could not allocate control_code_buffer [ 189.890623][ T9315] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1382'. [ 193.668439][ T9368] kexec: Could not allocate control_code_buffer [ 194.477562][ T9438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1432'. [ 194.879423][ T9449] could not allocate digest TFM handle [ 197.485209][ T9524] netlink: 206 bytes leftover after parsing attributes in process `syz.2.1461'. [ 198.444350][ T54] ================================================================== [ 198.452477][ T54] BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 [ 198.460358][ T54] Read of size 140 at addr ffffc9000af9f000 by task kworker/u9:0/54 [ 198.468393][ T54] [ 198.470806][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 198.470845][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 198.470866][ T54] Workqueue: hci0 hci_devcd_timeout [ 198.470921][ T54] Call Trace: [ 198.470931][ T54] [ 198.470946][ T54] dump_stack_lvl+0x116/0x1f0 [ 198.470978][ T54] print_report+0xc3/0x670 [ 198.471026][ T54] ? __virt_addr_valid+0x5e/0x590 [ 198.471070][ T54] ? hci_devcd_dump+0x142/0x240 [ 198.471115][ T54] kasan_report+0xe0/0x110 [ 198.471163][ T54] ? hci_devcd_dump+0x142/0x240 [ 198.471214][ T54] kasan_check_range+0xef/0x1a0 [ 198.471247][ T54] __asan_memcpy+0x23/0x60 [ 198.471285][ T54] hci_devcd_dump+0x142/0x240 [ 198.471333][ T54] hci_devcd_timeout+0xb5/0x2e0 [ 198.471379][ T54] ? rcu_is_watching+0x12/0xc0 [ 198.471411][ T54] process_one_work+0x9cc/0x1b70 [ 198.471448][ T54] ? __pfx_process_one_work+0x10/0x10 [ 198.471482][ T54] ? assign_work+0x1a0/0x250 [ 198.471529][ T54] worker_thread+0x6c1/0xef0 [ 198.471565][ T54] ? __pfx_worker_thread+0x10/0x10 [ 198.471595][ T54] kthread+0x3a4/0x760 [ 198.471650][ T54] ? __pfx_kthread+0x10/0x10 [ 198.471695][ T54] ? __pfx_kthread+0x10/0x10 [ 198.471740][ T54] ? __pfx_kthread+0x10/0x10 [ 198.471785][ T54] ? __pfx_kthread+0x10/0x10 [ 198.471830][ T54] ? rcu_is_watching+0x12/0xc0 [ 198.471859][ T54] ? __pfx_kthread+0x10/0x10 [ 198.471906][ T54] ret_from_fork+0x45/0x80 [ 198.471932][ T54] ? __pfx_kthread+0x10/0x10 [ 198.471990][ T54] ret_from_fork_asm+0x1a/0x30 [ 198.472039][ T54] [ 198.472049][ T54] [ 198.632409][ T54] The buggy address ffffc9000af9f000 belongs to a vmalloc virtual mapping [ 198.640918][ T54] Memory state around the buggy address: [ 198.646556][ T54] ffffc9000af9ef00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 198.654679][ T54] ffffc9000af9ef80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 198.662753][ T54] >ffffc9000af9f000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 198.670821][ T54] ^ [ 198.674896][ T54] ffffc9000af9f080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 198.682967][ T54] ffffc9000af9f100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 198.691033][ T54] ================================================================== [ 198.700418][ T54] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 198.707656][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 198.719308][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 198.729390][ T54] Workqueue: hci0 hci_devcd_timeout [ 198.734632][ T54] Call Trace: [ 198.737922][ T54] [ 198.740862][ T54] dump_stack_lvl+0x3d/0x1f0 [ 198.745485][ T54] panic+0x71c/0x800 [ 198.749410][ T54] ? __pfx_panic+0x10/0x10 [ 198.753941][ T54] ? irqentry_exit+0x3b/0x90 [ 198.758545][ T54] ? lockdep_hardirqs_on+0x7c/0x110 [ 198.763780][ T54] ? preempt_schedule_thunk+0x16/0x30 [ 198.769185][ T54] ? hci_devcd_dump+0x142/0x240 [ 198.774068][ T54] ? preempt_schedule_common+0x44/0xc0 [ 198.779561][ T54] ? check_panic_on_warn+0x1f/0xb0 [ 198.784720][ T54] ? hci_devcd_dump+0x142/0x240 [ 198.789603][ T54] check_panic_on_warn+0xab/0xb0 [ 198.794590][ T54] end_report+0x107/0x170 [ 198.798959][ T54] kasan_report+0xee/0x110 [ 198.803412][ T54] ? hci_devcd_dump+0x142/0x240 [ 198.808316][ T54] kasan_check_range+0xef/0x1a0 [ 198.813208][ T54] __asan_memcpy+0x23/0x60 [ 198.817652][ T54] hci_devcd_dump+0x142/0x240 [ 198.822369][ T54] hci_devcd_timeout+0xb5/0x2e0 [ 198.827254][ T54] ? rcu_is_watching+0x12/0xc0 [ 198.832035][ T54] process_one_work+0x9cc/0x1b70 [ 198.837005][ T54] ? __pfx_process_one_work+0x10/0x10 [ 198.842396][ T54] ? assign_work+0x1a0/0x250 [ 198.847019][ T54] worker_thread+0x6c1/0xef0 [ 198.851628][ T54] ? __pfx_worker_thread+0x10/0x10 [ 198.856757][ T54] kthread+0x3a4/0x760 [ 198.860855][ T54] ? __pfx_kthread+0x10/0x10 [ 198.865478][ T54] ? __pfx_kthread+0x10/0x10 [ 198.870099][ T54] ? __pfx_kthread+0x10/0x10 [ 198.874719][ T54] ? __pfx_kthread+0x10/0x10 [ 198.879340][ T54] ? rcu_is_watching+0x12/0xc0 [ 198.884121][ T54] ? __pfx_kthread+0x10/0x10 [ 198.888754][ T54] ret_from_fork+0x45/0x80 [ 198.893184][ T54] ? __pfx_kthread+0x10/0x10 [ 198.897806][ T54] ret_from_fork_asm+0x1a/0x30 [ 198.902605][ T54] [ 198.905903][ T54] Kernel Offset: disabled [ 198.910271][ T54] Rebooting in 86400 seconds..