last executing test programs:

1.767659638s ago: executing program 3 (id=1205):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf25100000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080006"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0)

1.621935056s ago: executing program 3 (id=1207):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x2, 0x6, 0x0)
socket(0x1, 0x2, 0x0)
socket(0xa, 0x2, 0x0)
setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x40)

1.586014214s ago: executing program 1 (id=1208):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
setuid$auto(0x1f)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)

1.438403203s ago: executing program 3 (id=1209):
mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mouse0\x00', 0x0, 0x0)
r0 = epoll_create$auto(0x3e)
epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0)

1.337695808s ago: executing program 0 (id=1210):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')

1.256995117s ago: executing program 3 (id=1211):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40800)

1.12365591s ago: executing program 2 (id=1213):
mmap$auto(0x0, 0x9, 0x80000df, 0x1000000eb1, 0xffffffffffffffff, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
fstatfs$auto(0x3, 0x0)
r0 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x8)

998.021643ms ago: executing program 1 (id=1214):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x7, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, [0xfffffffffffffffe, 0x604add15, 0xd59, 0x500fffffffffff, 0x0, 0x6, 0x0, 0x7, 0x80000070624ce7, 0x5, 0x6, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x200000000001, 0x80000000, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x100000000000000, 0x0, 0x400000, 0x400000000005ba, 0xc, 0x0, 0x9, 0x7, 0x6, 0xfffffffffffffffd, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x4, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x4000000000, 0x10006, 0x0, 0x11]}, 0x1fe, 0xd)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0xc008010}, 0x4000001)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040)
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

949.601002ms ago: executing program 3 (id=1215):
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x106)
socket(0x1e, 0x805, 0x0)
listen$auto(0x3, 0x83)
accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd)

924.316045ms ago: executing program 2 (id=1216):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x1e, 0x0)
r0 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0)
fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0)

899.447961ms ago: executing program 0 (id=1217):
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r0 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={0x0, 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100)

786.046872ms ago: executing program 3 (id=1218):
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mlock$auto(0xfbe8, 0x4)
syz_clone(0x8124400, 0x0, 0x0, 0x0, 0x0, 0x0)
clone$auto(0x7, 0x2000400000d, 0xfffffffffffffffc, 0x0, 0x3)

750.395507ms ago: executing program 1 (id=1219):
lsm_list_modules$auto(0x0, 0x0, 0x0)
name_to_handle_at$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r0, 0x0, 0x9)
read$auto(r0, &(0x7f0000000040)='\x00', 0x1)

744.434787ms ago: executing program 0 (id=1220):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0)
ioctl$auto(0x3, 0xc040564a, 0x38)

726.438344ms ago: executing program 2 (id=1221):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/batman_adv/parameters/routing_algo\x00', 0x8182, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_eff\x00', 0xb00, 0x0)
pread64$auto(r1, 0x0, 0x594c, 0x5)
write$auto(r0, 0x0, 0xffc)

578.338605ms ago: executing program 0 (id=1222):
r0 = socket(0x11, 0x80003, 0x304)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4)
r1 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4)

569.090037ms ago: executing program 1 (id=1223):
inotify_init1$auto(0x3000000000000)
r0 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
ioctl$auto(0x3, 0x541b, r0)

466.125072ms ago: executing program 1 (id=1224):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
ioctl$auto(r0, 0x2272, r0)

425.969487ms ago: executing program 2 (id=1225):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$auto(0x3, 0x40106f52, 0x38)

336.263474ms ago: executing program 0 (id=1226):
socket(0x1d, 0x2, 0x6)
r0 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a)
close_range$auto(0x2, 0x8, 0x0)

228.086834ms ago: executing program 2 (id=1227):
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
eventfd$auto(0x0)
sysfs$auto(0x2, 0x47, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)

138.638287ms ago: executing program 0 (id=1228):
adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0x5, 0xd, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x10002, 0x2, 0x4, 0x0, 0xfffffffdfffffffa, 0x1, 0x20000, 0x9, 0x7, 0x8})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
r0 = gettid()
process_vm_readv$auto(r0, &(0x7f0000000040)={0x0, 0x2}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x3, 0x0)

57.903299ms ago: executing program 1 (id=1229):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0x80003, 0x300)
sendto$auto(0x3, 0x0, 0x8, 0xf034, &(0x7f0000000340)=@hci={0x1f, 0x5865, 0x3}, 0x22)

0s ago: executing program 2 (id=1230):
getsockopt$auto_SO_PEERCRED(0xffffffffffffffff, 0x80000001, 0x11, &(0x7f0000000000)='/sys/firmware/acpi/interrupts/gpe09\x00', 0x0)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000003c0))
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000))
close_range$auto(0x2, 0x8, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts.
[   82.036486][ T5827] cgroup: Unknown subsys name 'net'
[   82.171824][ T5827] cgroup: Unknown subsys name 'cpuset'
[   82.180437][ T5827] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.784433][ T5827] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   85.964923][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.978912][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.980019][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.994490][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.995221][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.010466][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.018438][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.018510][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.028075][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.042907][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.052704][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.053539][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.061955][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.075213][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.080475][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.089397][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.089727][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.104593][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.105604][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.120168][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.484057][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   86.538814][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   86.616556][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   86.665337][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.673188][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.681027][ T5838] bridge_slave_0: entered allmulticast mode
[   86.688362][ T5838] bridge_slave_0: entered promiscuous mode
[   86.701945][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   86.721212][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.728697][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.736282][ T5838] bridge_slave_1: entered allmulticast mode
[   86.743306][ T5838] bridge_slave_1: entered promiscuous mode
[   86.804922][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.812291][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.819578][ T5839] bridge_slave_0: entered allmulticast mode
[   86.826560][ T5839] bridge_slave_0: entered promiscuous mode
[   86.840582][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.857576][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.864970][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.872289][ T5839] bridge_slave_1: entered allmulticast mode
[   86.879855][ T5839] bridge_slave_1: entered promiscuous mode
[   86.893239][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.984015][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.994734][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.003041][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.011152][ T5836] bridge_slave_0: entered allmulticast mode
[   87.018825][ T5836] bridge_slave_0: entered promiscuous mode
[   87.030010][ T5838] team0: Port device team_slave_0 added
[   87.036331][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.044490][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.052205][ T5837] bridge_slave_0: entered allmulticast mode
[   87.059226][ T5837] bridge_slave_0: entered promiscuous mode
[   87.069822][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.086946][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.094542][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.101881][ T5836] bridge_slave_1: entered allmulticast mode
[   87.108967][ T5836] bridge_slave_1: entered promiscuous mode
[   87.117173][ T5838] team0: Port device team_slave_1 added
[   87.123918][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.131332][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.138730][ T5837] bridge_slave_1: entered allmulticast mode
[   87.145520][ T5837] bridge_slave_1: entered promiscuous mode
[   87.185271][ T5839] team0: Port device team_slave_0 added
[   87.217282][ T5839] team0: Port device team_slave_1 added
[   87.225486][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.238193][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.251047][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.258214][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.285124][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.299196][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.331904][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.339401][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.365906][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.381469][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.391766][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.399063][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.425237][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.462338][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.469546][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.496801][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.515406][ T5836] team0: Port device team_slave_0 added
[   87.524320][ T5836] team0: Port device team_slave_1 added
[   87.583345][ T5837] team0: Port device team_slave_0 added
[   87.620694][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.628306][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.654984][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.669710][ T5837] team0: Port device team_slave_1 added
[   87.679686][ T5838] hsr_slave_0: entered promiscuous mode
[   87.686231][ T5838] hsr_slave_1: entered promiscuous mode
[   87.699426][ T5839] hsr_slave_0: entered promiscuous mode
[   87.706027][ T5839] hsr_slave_1: entered promiscuous mode
[   87.712884][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.720803][ T5839] Cannot create hsr debugfs directory
[   87.727152][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.736890][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.764236][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.793132][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.800218][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.826701][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.852044][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.859232][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.885758][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.981457][ T5836] hsr_slave_0: entered promiscuous mode
[   87.988009][ T5836] hsr_slave_1: entered promiscuous mode
[   87.994146][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.002193][ T5836] Cannot create hsr debugfs directory
[   88.023826][ T5837] hsr_slave_0: entered promiscuous mode
[   88.030530][ T5837] hsr_slave_1: entered promiscuous mode
[   88.036688][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.044778][ T5837] Cannot create hsr debugfs directory
[   88.168731][ T5850] Bluetooth: hci1: command tx timeout
[   88.170726][ T5853] Bluetooth: hci0: command tx timeout
[   88.174304][ T5846] Bluetooth: hci2: command tx timeout
[   88.185912][ T5843] Bluetooth: hci3: command tx timeout
[   88.310888][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.324368][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.345338][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.360002][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.412048][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.422941][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.435646][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.451685][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.493926][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.503965][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.515183][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.538580][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.605760][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.619636][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.643504][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.674727][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.760137][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.776686][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.797408][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   88.819864][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.827172][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.843689][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.862312][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.869938][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.881653][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   88.914490][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.921863][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.951590][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.958818][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.976141][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   88.996221][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.003656][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.031802][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   89.043320][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.057578][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.064736][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.166717][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.249891][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   89.282248][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.289463][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.341832][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.349319][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.441839][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.505065][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.564432][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.576444][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.616119][ T5838] veth0_vlan: entered promiscuous mode
[   89.646348][ T5838] veth1_vlan: entered promiscuous mode
[   89.713704][ T5839] veth0_vlan: entered promiscuous mode
[   89.722199][ T5837] veth0_vlan: entered promiscuous mode
[   89.736385][ T5837] veth1_vlan: entered promiscuous mode
[   89.766637][ T5839] veth1_vlan: entered promiscuous mode
[   89.783985][ T5838] veth0_macvtap: entered promiscuous mode
[   89.795625][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.813232][ T5838] veth1_macvtap: entered promiscuous mode
[   89.830804][ T5837] veth0_macvtap: entered promiscuous mode
[   89.841449][ T5837] veth1_macvtap: entered promiscuous mode
[   89.877359][ T5839] veth0_macvtap: entered promiscuous mode
[   89.890093][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.907598][ T5839] veth1_macvtap: entered promiscuous mode
[   89.922074][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.933297][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.944091][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.953451][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.962366][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.973965][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.986161][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.998609][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.022635][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.033576][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.045447][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.056856][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.066385][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.075723][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.085112][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.116364][ T5836] veth0_vlan: entered promiscuous mode
[   90.135488][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.149752][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.160316][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.172768][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.183888][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.220652][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.231701][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.241977][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.249101][ T5846] Bluetooth: hci0: command tx timeout
[   90.253041][ T5850] Bluetooth: hci3: command tx timeout
[   90.258842][ T5853] Bluetooth: hci1: command tx timeout
[   90.264182][ T5843] Bluetooth: hci2: command tx timeout
[   90.270244][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.286485][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.308494][ T5836] veth1_vlan: entered promiscuous mode
[   90.316187][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.327101][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.338814][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.347641][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.407023][ T5836] veth0_macvtap: entered promiscuous mode
[   90.421828][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.432517][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.451957][ T5836] veth1_macvtap: entered promiscuous mode
[   90.506547][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.508509][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.528270][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.533760][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.548840][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.559921][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.570516][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.581464][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.592581][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.603343][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.604174][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.615014][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.632547][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.633311][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.651684][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.661917][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.672667][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.683603][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.715690][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.726187][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.741754][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.756869][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.781921][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.799249][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.815427][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.824735][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.912069][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   90.931363][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.944504][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.030316][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.070145][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.120584][ T5905] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.195309][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.218838][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.341528][ T5912] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   91.341528][ T5912] The task syz.1.5 (5912) triggered the difference, watch for misbehavior.
[   91.940246][ T1222] cfg80211: failed to load regulatory.db
[   91.969251][ T5928] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   91.992097][ T5928] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   92.047566][ T5928] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   92.092121][ T5928] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   92.138155][ T5928] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   92.332829][ T5843] Bluetooth: hci3: command tx timeout
[   92.339071][ T5843] Bluetooth: hci1: command tx timeout
[   92.370967][ T5928] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   92.408461][ T5928] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   92.425017][ T5928] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   92.465947][ T5928] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   92.563432][ T5928] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   92.574722][ T5928] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   92.688597][ T5928] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   93.596586][ T5956] netlink: 342 bytes leftover after parsing attributes in process `syz.2.19'.
[   93.644236][ T5956] netlink: 342 bytes leftover after parsing attributes in process `syz.2.19'.
[   93.677972][ T5956] Zero length message leads to an empty skb
[   94.007896][ T5843] Bluetooth: hci0: command 0x0419 tx timeout
[   94.169068][ T5843] Bluetooth: hci2: command 0x0419 tx timeout
[   94.216191][ T5970] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   94.407889][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout
[   94.577825][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout
[   94.788421][ T5983] process 'syz.3.31' launched './file0' with NULL argv: empty string added
[   95.337166][ T6004] sock: sock_timestamping_bind_phc: sock not bind to device
[   95.530849][ T6009] mmap: syz.1.42 (6009) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   96.088661][ T5843] Bluetooth: hci0: command 0x0419 tx timeout
[   96.249216][ T5843] Bluetooth: hci2: command 0x0419 tx timeout
[   96.488194][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout
[   96.652039][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout
[   98.167871][ T5843] Bluetooth: hci0: command 0x0419 tx timeout
[   98.328250][ T5843] Bluetooth: hci2: command 0x0419 tx timeout
[   98.568494][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout
[   98.727844][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout
[   99.694271][ T6119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.88'.
[  100.271900][ T5843] Bluetooth: hci0: command 0x0419 tx timeout
[  100.411346][ T5843] Bluetooth: hci2: command 0x0419 tx timeout
[  100.739947][ T6151] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  100.782616][ T6149] nbd: socks must be embedded in a SOCK_ITEM attr
[  100.801532][ T6149] block nbd0: shutting down sockets
[  101.015225][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'.
[  101.032650][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'.
[  101.349050][ T6166] capability: warning: `syz.3.107' uses 32-bit capabilities (legacy support in use)
[  101.771478][ T6176] nbd0: detected capacity change from 0 to 68719476736
[  101.799902][ T5854] block nbd0: Send control failed (result -22)
[  101.806499][ T5854] block nbd0: Request send failed, requeueing
[  101.843515][ T5843] block nbd0: Receive control failed (result -32)
[  101.844053][   T99] block nbd0: Dead connection, failed to find a fallback
[  101.859489][   T99] block nbd0: shutting down sockets
[  101.865318][   T99] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  101.875095][   T99] Buffer I/O error on dev nbd0, logical block 0, async page read
[  101.887333][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  101.921094][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  101.958087][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  102.026326][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  102.047961][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  102.057088][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  102.094147][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  102.114639][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  102.161045][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  102.209317][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  102.227922][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  102.237127][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  102.273153][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  102.287760][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  102.321717][ T5854] ldm_validate_partition_table(): Disk read failed.
[  102.341914][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  102.378768][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  102.424017][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  102.443443][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  102.470193][ T5854] Dev nbd0: unable to read RDB block 0
[  102.476307][ T5854]  nbd0: unable to read partition table
[  102.524813][ T5854] ldm_validate_partition_table(): Disk read failed.
[  102.543576][ T5854] Dev nbd0: unable to read RDB block 0
[  102.568917][ T5854]  nbd0: unable to read partition table
[  104.032837][ T6244] Invalid ELF header magic: != ELF
[  104.424170][ T6261] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  104.890566][ T6278] netlink: 342 bytes leftover after parsing attributes in process `syz.2.153'.
[  105.261031][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'.
[  106.175000][ T6328] netlink: 'syz.2.175': attribute type 1 has an invalid length.
[  106.208636][ T6330] syz.3.176 uses obsolete (PF_INET,SOCK_PACKET)
[  106.305636][ T6334] netlink: 'syz.2.178': attribute type 2 has an invalid length.
[  106.323328][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'.
[  106.543402][ T6342] block nbd1: Unsupported socket: shutdown callout must be supported.
[  106.849906][ T6353] netlink: 342 bytes leftover after parsing attributes in process `syz.1.187'.
[  106.875818][   T30] audit: type=1800 audit(1743258470.354:2): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.188" name=22050820 dev="tmpfs" ino=251 res=0 errno=0
[  107.403978][ T6362] Invalid ELF header magic: != ELF
����	����
������
��������
�����	������	�	�
�������	�������
����	���	���	
�������
�������	�	���	�	���	�
�������	
����	�����	�	�	���
������	�
������	�
����	�����	�	�	���
����	�����	�	�	���
����	�����	�	�	���
����	�����	�	�	���
����	�����	�	�	���
����	�����	�	�	���
������	�
������	�
����	�����	�	�	���
����	�����	�	�	���
����	�	����	�	���	�
����		���	��
����	��	�����		�
����	�����	�	�	���
�����	�������
����	��	�����		�
����	�����	�	�	���
���������	��	�
������	��
������	�
������	�
��������	
����	�����	�	�	���
����	�����	�	�	���
������	��		�	�	�	��
	��	��	�	�	��
�����	���	�
����	�����	�	�	���
������	�
������	�
������	�
����	���	�	�
����	���	�	�
����	�	�
��������	
����	�����	�	�	���
����	�������					
��������
�����		�	�
������
����	�����	�	�	���
����	�����	�	�	���
�����	�
�	����
�	
�������
�������	���
����	��	��	�

����	�����	�	�	���
����	�����	�	�	���
����	�	���	�	�	�
����	�����	�	�	���
����	�����	�	�	���
����	�����	�	�	���
����	�����	�	�	���
��������	�
���������	���
��������		��	�

syzkaller
syzkaller login: [  163.727844][ T8021] nbd: socks must be embedded in a SOCK_ITEM attr
[  163.734678][ T8021] block nbd1: shutting down sockets
[  166.310265][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.903'.
[  167.864093][ T8148] netlink: 206 bytes leftover after parsing attributes in process `syz.2.913'.
[  168.082329][ T8154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.916'.
[  169.561012][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.929'.
[  170.414330][ T5843] Bluetooth: hci0: unexpected event 0x06 length: 11 > 3
[  171.717138][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.959'.
[  171.750267][ T8251] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  171.858271][ T8257] netlink: 346 bytes leftover after parsing attributes in process `syz.0.961'.
[  173.856819][ T8322] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  175.124549][ T8368] qrtr: Invalid version 0
[  175.834664][ T8391] Console: switching to colour VGA+ 80x25
[  177.576964][ T8445] netlink: 194 bytes leftover after parsing attributes in process `syz.2.1042'.
[  179.522565][ T8496] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1063'.
[  179.768587][ T8498] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1064'.
[  182.934188][ T8581] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1097'.
[  183.524905][ T8608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1108'.
[  183.907076][   T30] audit: type=1804 audit(1743258547.384:4): pid=8619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1112" name="/newroot/267/file0" dev="tmpfs" ino=1375 res=1 errno=0
[  184.014214][   T30] audit: type=1800 audit(1743258547.424:5): pid=8619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1112" name="file0" dev="tmpfs" ino=1375 res=0 errno=0
[  184.062670][   T30] audit: type=1800 audit(1743258547.424:6): pid=8619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1112" name="file0" dev="tmpfs" ino=1375 res=0 errno=0
[  184.579544][ T8636] nbd: socks must be embedded in a SOCK_ITEM attr
[  184.598164][ T8636] block nbd1: shutting down sockets
[  184.862847][ T8648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1125'.
[  184.905793][ T8648] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1125'.
[  185.988524][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1140'.
[  186.409694][ T8700] ima: policy update failed
[  186.420503][   T30] audit: type=1802 audit(1743258549.904:7): pid=8700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0
[  187.009645][ T8718] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1154'.

syzkaller
syzkaller login: [  187.728001][ T8740] CIFS: VFS: Invalid SecurityFlags: 0x00
[  187.912613][ T8742] nbd: socks must be embedded in a SOCK_ITEM attr
[  187.943677][ T8742] block nbd1: shutting down sockets
[  188.492686][ T8761] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input6
[  189.828829][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'.
[  190.784893][ T8784] kexec: Could not allocate control_code_buffer
[  192.175728][ T8862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1214'.
[  192.385797][ T8872] snd_aloop snd_aloop.0: Parsing timer source 'iQ��' failed with -22
[  192.496341][ T8876] batman_adv: Routing algorithm 'ive list 'rx_eff':
[  192.496341][ T8876]   (any: no entry)
[  192.496341][ T8876]   (vcan0: no entry)
[  192.496341][ T8876]   (vxcan0: no entry)
[  192.496341][ T8876]   (vxcan1: no entry)
[  192.496341][ T8876] ' is not supported
[  193.048175][ T5843] ==================================================================
[  193.056833][ T5843] BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240
[  193.064718][ T5843] Read of size 140 at addr ffffc90019e2b000 by task kworker/u9:2/5843
[  193.072911][ T5843] 
[  193.075283][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: kworker/u9:2 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(full) 
[  193.075322][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  193.075342][ T5843] Workqueue: hci0 hci_devcd_timeout
[  193.075396][ T5843] Call Trace:
[  193.075405][ T5843]  <TASK>
[  193.075420][ T5843]  dump_stack_lvl+0x116/0x1f0
[  193.075463][ T5843]  print_report+0xc3/0x670
[  193.075495][ T5843]  ? __virt_addr_valid+0x5e/0x590
[  193.075542][ T5843]  ? hci_devcd_dump+0x142/0x240
[  193.075582][ T5843]  kasan_report+0xe0/0x110
[  193.075614][ T5843]  ? hci_devcd_dump+0x142/0x240
[  193.075658][ T5843]  kasan_check_range+0xef/0x1a0
[  193.075696][ T5843]  __asan_memcpy+0x23/0x60
[  193.075740][ T5843]  hci_devcd_dump+0x142/0x240
[  193.075781][ T5843]  hci_devcd_timeout+0xb5/0x2e0
[  193.075822][ T5843]  ? rcu_is_watching+0x12/0xc0
[  193.075860][ T5843]  process_one_work+0x9cc/0x1b70
[  193.075898][ T5843]  ? __pfx_process_one_work+0x10/0x10
[  193.075936][ T5843]  ? assign_work+0x1a0/0x250
[  193.075973][ T5843]  worker_thread+0x6c8/0xf10
[  193.076013][ T5843]  ? __pfx_worker_thread+0x10/0x10
[  193.076047][ T5843]  kthread+0x3c2/0x780
[  193.076076][ T5843]  ? __pfx_kthread+0x10/0x10
[  193.076104][ T5843]  ? __pfx_kthread+0x10/0x10
[  193.076130][ T5843]  ? __pfx_kthread+0x10/0x10
[  193.076158][ T5843]  ? __pfx_kthread+0x10/0x10
[  193.076186][ T5843]  ? rcu_is_watching+0x12/0xc0
[  193.076223][ T5843]  ? __pfx_kthread+0x10/0x10
[  193.076252][ T5843]  ret_from_fork+0x45/0x80
[  193.076284][ T5843]  ? __pfx_kthread+0x10/0x10
[  193.076312][ T5843]  ret_from_fork_asm+0x1a/0x30
[  193.076367][ T5843]  </TASK>
[  193.076377][ T5843] 
[  193.237279][ T5843] The buggy address ffffc90019e2b000 belongs to a vmalloc virtual mapping
[  193.245788][ T5843] Memory state around the buggy address:
[  193.251454][ T5843]  ffffc90019e2af00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  193.259529][ T5843]  ffffc90019e2af80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  193.267600][ T5843] >ffffc90019e2b000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  193.275673][ T5843]                    ^
[  193.279753][ T5843]  ffffc90019e2b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  193.287828][ T5843]  ffffc90019e2b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  193.295906][ T5843] ==================================================================
[  193.305449][ T5843] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  193.312691][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: kworker/u9:2 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(full) 
[  193.324517][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  193.334590][ T5843] Workqueue: hci0 hci_devcd_timeout
[  193.339830][ T5843] Call Trace:
[  193.343152][ T5843]  <TASK>
[  193.346095][ T5843]  dump_stack_lvl+0x3d/0x1f0
[  193.350716][ T5843]  panic+0x71c/0x800
[  193.354627][ T5843]  ? __pfx_panic+0x10/0x10
[  193.359064][ T5843]  ? irqentry_exit+0x3b/0x90
[  193.363678][ T5843]  ? lockdep_hardirqs_on+0x7c/0x110
[  193.368938][ T5843]  ? preempt_schedule_thunk+0x16/0x30
[  193.374355][ T5843]  ? hci_devcd_dump+0x142/0x240
[  193.379240][ T5843]  ? preempt_schedule_common+0x44/0xc0
[  193.384718][ T5843]  ? check_panic_on_warn+0x1f/0xb0
[  193.389846][ T5843]  ? hci_devcd_dump+0x142/0x240
[  193.394749][ T5843]  check_panic_on_warn+0xab/0xb0
[  193.399711][ T5843]  end_report+0x107/0x170
[  193.404059][ T5843]  kasan_report+0xee/0x110
[  193.408498][ T5843]  ? hci_devcd_dump+0x142/0x240
[  193.413382][ T5843]  kasan_check_range+0xef/0x1a0
[  193.418261][ T5843]  __asan_memcpy+0x23/0x60
[  193.422705][ T5843]  hci_devcd_dump+0x142/0x240
[  193.427408][ T5843]  hci_devcd_timeout+0xb5/0x2e0
[  193.432290][ T5843]  ? rcu_is_watching+0x12/0xc0
[  193.437076][ T5843]  process_one_work+0x9cc/0x1b70
[  193.442044][ T5843]  ? __pfx_process_one_work+0x10/0x10
[  193.447444][ T5843]  ? assign_work+0x1a0/0x250
[  193.452055][ T5843]  worker_thread+0x6c8/0xf10
[  193.456674][ T5843]  ? __pfx_worker_thread+0x10/0x10
[  193.461811][ T5843]  kthread+0x3c2/0x780
[  193.465922][ T5843]  ? __pfx_kthread+0x10/0x10
[  193.470529][ T5843]  ? __pfx_kthread+0x10/0x10
[  193.475133][ T5843]  ? __pfx_kthread+0x10/0x10
[  193.479740][ T5843]  ? __pfx_kthread+0x10/0x10
[  193.484386][ T5843]  ? rcu_is_watching+0x12/0xc0
[  193.489176][ T5843]  ? __pfx_kthread+0x10/0x10
[  193.493786][ T5843]  ret_from_fork+0x45/0x80
[  193.498220][ T5843]  ? __pfx_kthread+0x10/0x10
[  193.502827][ T5843]  ret_from_fork_asm+0x1a/0x30
[  193.507636][ T5843]  </TASK>
[  193.510992][ T5843] Kernel Offset: disabled
[  193.515327][ T5843] Rebooting in 86400 seconds..