last executing test programs: 1.767659638s ago: executing program 3 (id=1205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf25100000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080006"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.621935056s ago: executing program 3 (id=1207): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x6, 0x0) socket(0x1, 0x2, 0x0) socket(0xa, 0x2, 0x0) setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x40) 1.586014214s ago: executing program 1 (id=1208): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) setuid$auto(0x1f) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) 1.438403203s ago: executing program 3 (id=1209): mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mouse0\x00', 0x0, 0x0) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) 1.337695808s ago: executing program 0 (id=1210): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') 1.256995117s ago: executing program 3 (id=1211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0}) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40800) 1.12365591s ago: executing program 2 (id=1213): mmap$auto(0x0, 0x9, 0x80000df, 0x1000000eb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) fstatfs$auto(0x3, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x8) 998.021643ms ago: executing program 1 (id=1214): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x7, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, [0xfffffffffffffffe, 0x604add15, 0xd59, 0x500fffffffffff, 0x0, 0x6, 0x0, 0x7, 0x80000070624ce7, 0x5, 0x6, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x200000000001, 0x80000000, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x100000000000000, 0x0, 0x400000, 0x400000000005ba, 0xc, 0x0, 0x9, 0x7, 0x6, 0xfffffffffffffffd, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x4, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x4000000000, 0x10006, 0x0, 0x11]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0xc008010}, 0x4000001) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 949.601002ms ago: executing program 3 (id=1215): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0x1e, 0x805, 0x0) listen$auto(0x3, 0x83) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 924.316045ms ago: executing program 2 (id=1216): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x1e, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) 899.447961ms ago: executing program 0 (id=1217): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={0x0, 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) 786.046872ms ago: executing program 3 (id=1218): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0xfbe8, 0x4) syz_clone(0x8124400, 0x0, 0x0, 0x0, 0x0, 0x0) clone$auto(0x7, 0x2000400000d, 0xfffffffffffffffc, 0x0, 0x3) 750.395507ms ago: executing program 1 (id=1219): lsm_list_modules$auto(0x0, 0x0, 0x0) name_to_handle_at$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r0, 0x0, 0x9) read$auto(r0, &(0x7f0000000040)='\x00', 0x1) 744.434787ms ago: executing program 0 (id=1220): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc040564a, 0x38) 726.438344ms ago: executing program 2 (id=1221): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/batman_adv/parameters/routing_algo\x00', 0x8182, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_eff\x00', 0xb00, 0x0) pread64$auto(r1, 0x0, 0x594c, 0x5) write$auto(r0, 0x0, 0xffc) 578.338605ms ago: executing program 0 (id=1222): r0 = socket(0x11, 0x80003, 0x304) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) 569.090037ms ago: executing program 1 (id=1223): inotify_init1$auto(0x3000000000000) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) ioctl$auto(0x3, 0x541b, r0) 466.125072ms ago: executing program 1 (id=1224): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto(r0, 0x2272, r0) 425.969487ms ago: executing program 2 (id=1225): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x40106f52, 0x38) 336.263474ms ago: executing program 0 (id=1226): socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) close_range$auto(0x2, 0x8, 0x0) 228.086834ms ago: executing program 2 (id=1227): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) eventfd$auto(0x0) sysfs$auto(0x2, 0x47, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 138.638287ms ago: executing program 0 (id=1228): adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0x5, 0xd, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x10002, 0x2, 0x4, 0x0, 0xfffffffdfffffffa, 0x1, 0x20000, 0x9, 0x7, 0x8}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) r0 = gettid() process_vm_readv$auto(r0, &(0x7f0000000040)={0x0, 0x2}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x3, 0x0) 57.903299ms ago: executing program 1 (id=1229): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) sendto$auto(0x3, 0x0, 0x8, 0xf034, &(0x7f0000000340)=@hci={0x1f, 0x5865, 0x3}, 0x22) 0s ago: executing program 2 (id=1230): getsockopt$auto_SO_PEERCRED(0xffffffffffffffff, 0x80000001, 0x11, &(0x7f0000000000)='/sys/firmware/acpi/interrupts/gpe09\x00', 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000003c0)) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. [ 82.036486][ T5827] cgroup: Unknown subsys name 'net' [ 82.171824][ T5827] cgroup: Unknown subsys name 'cpuset' [ 82.180437][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.784433][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.964923][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.978912][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.980019][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.994490][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.995221][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.010466][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.018438][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.018510][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.028075][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.042907][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.052704][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.053539][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.061955][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.075213][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.080475][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.089397][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.089727][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.104593][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.105604][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.120168][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.484057][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 86.538814][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 86.616556][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 86.665337][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.673188][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.681027][ T5838] bridge_slave_0: entered allmulticast mode [ 86.688362][ T5838] bridge_slave_0: entered promiscuous mode [ 86.701945][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 86.721212][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.728697][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.736282][ T5838] bridge_slave_1: entered allmulticast mode [ 86.743306][ T5838] bridge_slave_1: entered promiscuous mode [ 86.804922][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.812291][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.819578][ T5839] bridge_slave_0: entered allmulticast mode [ 86.826560][ T5839] bridge_slave_0: entered promiscuous mode [ 86.840582][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.857576][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.864970][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.872289][ T5839] bridge_slave_1: entered allmulticast mode [ 86.879855][ T5839] bridge_slave_1: entered promiscuous mode [ 86.893239][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.984015][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.994734][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.003041][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.011152][ T5836] bridge_slave_0: entered allmulticast mode [ 87.018825][ T5836] bridge_slave_0: entered promiscuous mode [ 87.030010][ T5838] team0: Port device team_slave_0 added [ 87.036331][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.044490][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.052205][ T5837] bridge_slave_0: entered allmulticast mode [ 87.059226][ T5837] bridge_slave_0: entered promiscuous mode [ 87.069822][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.086946][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.094542][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.101881][ T5836] bridge_slave_1: entered allmulticast mode [ 87.108967][ T5836] bridge_slave_1: entered promiscuous mode [ 87.117173][ T5838] team0: Port device team_slave_1 added [ 87.123918][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.131332][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.138730][ T5837] bridge_slave_1: entered allmulticast mode [ 87.145520][ T5837] bridge_slave_1: entered promiscuous mode [ 87.185271][ T5839] team0: Port device team_slave_0 added [ 87.217282][ T5839] team0: Port device team_slave_1 added [ 87.225486][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.238193][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.251047][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.258214][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.285124][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.299196][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.331904][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.339401][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.365906][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.381469][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.391766][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.399063][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.425237][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.462338][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.469546][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.496801][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.515406][ T5836] team0: Port device team_slave_0 added [ 87.524320][ T5836] team0: Port device team_slave_1 added [ 87.583345][ T5837] team0: Port device team_slave_0 added [ 87.620694][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.628306][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.654984][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.669710][ T5837] team0: Port device team_slave_1 added [ 87.679686][ T5838] hsr_slave_0: entered promiscuous mode [ 87.686231][ T5838] hsr_slave_1: entered promiscuous mode [ 87.699426][ T5839] hsr_slave_0: entered promiscuous mode [ 87.706027][ T5839] hsr_slave_1: entered promiscuous mode [ 87.712884][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.720803][ T5839] Cannot create hsr debugfs directory [ 87.727152][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.736890][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.764236][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.793132][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.800218][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.826701][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.852044][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.859232][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.885758][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.981457][ T5836] hsr_slave_0: entered promiscuous mode [ 87.988009][ T5836] hsr_slave_1: entered promiscuous mode [ 87.994146][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.002193][ T5836] Cannot create hsr debugfs directory [ 88.023826][ T5837] hsr_slave_0: entered promiscuous mode [ 88.030530][ T5837] hsr_slave_1: entered promiscuous mode [ 88.036688][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.044778][ T5837] Cannot create hsr debugfs directory [ 88.168731][ T5850] Bluetooth: hci1: command tx timeout [ 88.170726][ T5853] Bluetooth: hci0: command tx timeout [ 88.174304][ T5846] Bluetooth: hci2: command tx timeout [ 88.185912][ T5843] Bluetooth: hci3: command tx timeout [ 88.310888][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.324368][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.345338][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.360002][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.412048][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.422941][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.435646][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.451685][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.493926][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.503965][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.515183][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.538580][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.605760][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.619636][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.643504][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.674727][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.760137][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.776686][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.797408][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.819864][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.827172][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.843689][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.862312][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.869938][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.881653][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.914490][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.921863][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.951590][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.958818][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.976141][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.996221][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.003656][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.031802][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.043320][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.057578][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.064736][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.166717][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.249891][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.282248][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.289463][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.341832][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.349319][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.441839][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.505065][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.564432][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.576444][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.616119][ T5838] veth0_vlan: entered promiscuous mode [ 89.646348][ T5838] veth1_vlan: entered promiscuous mode [ 89.713704][ T5839] veth0_vlan: entered promiscuous mode [ 89.722199][ T5837] veth0_vlan: entered promiscuous mode [ 89.736385][ T5837] veth1_vlan: entered promiscuous mode [ 89.766637][ T5839] veth1_vlan: entered promiscuous mode [ 89.783985][ T5838] veth0_macvtap: entered promiscuous mode [ 89.795625][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.813232][ T5838] veth1_macvtap: entered promiscuous mode [ 89.830804][ T5837] veth0_macvtap: entered promiscuous mode [ 89.841449][ T5837] veth1_macvtap: entered promiscuous mode [ 89.877359][ T5839] veth0_macvtap: entered promiscuous mode [ 89.890093][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.907598][ T5839] veth1_macvtap: entered promiscuous mode [ 89.922074][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.933297][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.944091][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.953451][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.962366][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.973965][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.986161][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.998609][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.022635][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.033576][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.045447][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.056856][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.066385][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.075723][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.085112][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.116364][ T5836] veth0_vlan: entered promiscuous mode [ 90.135488][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.149752][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.160316][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.172768][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.183888][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.220652][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.231701][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.241977][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.249101][ T5846] Bluetooth: hci0: command tx timeout [ 90.253041][ T5850] Bluetooth: hci3: command tx timeout [ 90.258842][ T5853] Bluetooth: hci1: command tx timeout [ 90.264182][ T5843] Bluetooth: hci2: command tx timeout [ 90.270244][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.286485][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.308494][ T5836] veth1_vlan: entered promiscuous mode [ 90.316187][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.327101][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.338814][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.347641][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.407023][ T5836] veth0_macvtap: entered promiscuous mode [ 90.421828][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.432517][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.451957][ T5836] veth1_macvtap: entered promiscuous mode [ 90.506547][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.508509][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.528270][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.533760][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.548840][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.559921][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.570516][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.581464][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.592581][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.603343][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.604174][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.615014][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.632547][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.633311][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.651684][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.661917][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.672667][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.683603][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.715690][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.726187][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.741754][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.756869][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.781921][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.799249][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.815427][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.824735][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.912069][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.931363][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.944504][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.030316][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.070145][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.120584][ T5905] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.195309][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.218838][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.341528][ T5912] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 91.341528][ T5912] The task syz.1.5 (5912) triggered the difference, watch for misbehavior. [ 91.940246][ T1222] cfg80211: failed to load regulatory.db [ 91.969251][ T5928] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 91.992097][ T5928] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 92.047566][ T5928] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 92.092121][ T5928] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 92.138155][ T5928] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 92.332829][ T5843] Bluetooth: hci3: command tx timeout [ 92.339071][ T5843] Bluetooth: hci1: command tx timeout [ 92.370967][ T5928] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 92.408461][ T5928] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 92.425017][ T5928] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 92.465947][ T5928] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 92.563432][ T5928] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 92.574722][ T5928] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 92.688597][ T5928] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.596586][ T5956] netlink: 342 bytes leftover after parsing attributes in process `syz.2.19'. [ 93.644236][ T5956] netlink: 342 bytes leftover after parsing attributes in process `syz.2.19'. [ 93.677972][ T5956] Zero length message leads to an empty skb [ 94.007896][ T5843] Bluetooth: hci0: command 0x0419 tx timeout [ 94.169068][ T5843] Bluetooth: hci2: command 0x0419 tx timeout [ 94.216191][ T5970] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.407889][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.577825][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.788421][ T5983] process 'syz.3.31' launched './file0' with NULL argv: empty string added [ 95.337166][ T6004] sock: sock_timestamping_bind_phc: sock not bind to device [ 95.530849][ T6009] mmap: syz.1.42 (6009) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.088661][ T5843] Bluetooth: hci0: command 0x0419 tx timeout [ 96.249216][ T5843] Bluetooth: hci2: command 0x0419 tx timeout [ 96.488194][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.652039][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.167871][ T5843] Bluetooth: hci0: command 0x0419 tx timeout [ 98.328250][ T5843] Bluetooth: hci2: command 0x0419 tx timeout [ 98.568494][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.727844][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.694271][ T6119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.88'. [ 100.271900][ T5843] Bluetooth: hci0: command 0x0419 tx timeout [ 100.411346][ T5843] Bluetooth: hci2: command 0x0419 tx timeout [ 100.739947][ T6151] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 100.782616][ T6149] nbd: socks must be embedded in a SOCK_ITEM attr [ 100.801532][ T6149] block nbd0: shutting down sockets [ 101.015225][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 101.032650][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 101.349050][ T6166] capability: warning: `syz.3.107' uses 32-bit capabilities (legacy support in use) [ 101.771478][ T6176] nbd0: detected capacity change from 0 to 68719476736 [ 101.799902][ T5854] block nbd0: Send control failed (result -22) [ 101.806499][ T5854] block nbd0: Request send failed, requeueing [ 101.843515][ T5843] block nbd0: Receive control failed (result -32) [ 101.844053][ T99] block nbd0: Dead connection, failed to find a fallback [ 101.859489][ T99] block nbd0: shutting down sockets [ 101.865318][ T99] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.875095][ T99] Buffer I/O error on dev nbd0, logical block 0, async page read [ 101.887333][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.921094][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 101.958087][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.026326][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 102.047961][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.057088][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 102.094147][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.114639][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 102.161045][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.209317][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 102.227922][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.237127][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 102.273153][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.287760][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 102.321717][ T5854] ldm_validate_partition_table(): Disk read failed. [ 102.341914][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.378768][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 102.424017][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.443443][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 102.470193][ T5854] Dev nbd0: unable to read RDB block 0 [ 102.476307][ T5854] nbd0: unable to read partition table [ 102.524813][ T5854] ldm_validate_partition_table(): Disk read failed. [ 102.543576][ T5854] Dev nbd0: unable to read RDB block 0 [ 102.568917][ T5854] nbd0: unable to read partition table [ 104.032837][ T6244] Invalid ELF header magic: != ELF [ 104.424170][ T6261] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.890566][ T6278] netlink: 342 bytes leftover after parsing attributes in process `syz.2.153'. [ 105.261031][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 106.175000][ T6328] netlink: 'syz.2.175': attribute type 1 has an invalid length. [ 106.208636][ T6330] syz.3.176 uses obsolete (PF_INET,SOCK_PACKET) [ 106.305636][ T6334] netlink: 'syz.2.178': attribute type 2 has an invalid length. [ 106.323328][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 106.543402][ T6342] block nbd1: Unsupported socket: shutdown callout must be supported. [ 106.849906][ T6353] netlink: 342 bytes leftover after parsing attributes in process `syz.1.187'. [ 106.875818][ T30] audit: type=1800 audit(1743258470.354:2): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.188" name=22050820 dev="tmpfs" ino=251 res=0 errno=0 [ 107.403978][ T6362] Invalid ELF header magic: != ELF ���� ���� ������ �������� ����� ������ � � ������� ������� ���� ��� ��� ������� ������� � ��� � ��� � ������� ���� ����� � � ��� ������ � ������ � ���� ����� � � ��� ���� ����� � � ��� ���� ����� � � ��� ���� ����� � � ��� ���� ����� � � ��� ���� ����� � � ��� ������ � ������ � ���� ����� � � ��� ���� ����� � � ��� ���� � ���� � ��� � ���� ��� �� ���� �� ����� � ���� ����� � � ��� ����� ������� ���� �� ����� � ���� ����� � � ��� ��������� �� � ������ �� ������ � ������ � �������� ���� ����� � � ��� ���� ����� � � ��� ������ �� � � � �� �� �� � � �� ����� ��� � ���� ����� � � ��� ������ � ������ � ������ � ���� ��� � � ���� ��� � � ���� � � �������� ���� ����� � � ��� ���� ������� �������� ����� � � ������ ���� ����� � � ��� ���� ����� � � ��� ����� � � ���� � ������� ������� ��� ���� �� �� � ���� ����� � � ��� ���� ����� � � ��� ���� � ��� � � � ���� ����� � � ��� ���� ����� � � ��� ���� ����� � � ��� ���� ����� � � ��� �������� � ��������� ��� �������� �� � syzkaller syzkaller login: [ 163.727844][ T8021] nbd: socks must be embedded in a SOCK_ITEM attr [ 163.734678][ T8021] block nbd1: shutting down sockets [ 166.310265][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.903'. [ 167.864093][ T8148] netlink: 206 bytes leftover after parsing attributes in process `syz.2.913'. [ 168.082329][ T8154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.916'. [ 169.561012][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.929'. [ 170.414330][ T5843] Bluetooth: hci0: unexpected event 0x06 length: 11 > 3 [ 171.717138][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.959'. [ 171.750267][ T8251] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 171.858271][ T8257] netlink: 346 bytes leftover after parsing attributes in process `syz.0.961'. [ 173.856819][ T8322] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 175.124549][ T8368] qrtr: Invalid version 0 [ 175.834664][ T8391] Console: switching to colour VGA+ 80x25 [ 177.576964][ T8445] netlink: 194 bytes leftover after parsing attributes in process `syz.2.1042'. [ 179.522565][ T8496] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1063'. [ 179.768587][ T8498] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1064'. [ 182.934188][ T8581] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1097'. [ 183.524905][ T8608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1108'. [ 183.907076][ T30] audit: type=1804 audit(1743258547.384:4): pid=8619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1112" name="/newroot/267/file0" dev="tmpfs" ino=1375 res=1 errno=0 [ 184.014214][ T30] audit: type=1800 audit(1743258547.424:5): pid=8619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1112" name="file0" dev="tmpfs" ino=1375 res=0 errno=0 [ 184.062670][ T30] audit: type=1800 audit(1743258547.424:6): pid=8619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1112" name="file0" dev="tmpfs" ino=1375 res=0 errno=0 [ 184.579544][ T8636] nbd: socks must be embedded in a SOCK_ITEM attr [ 184.598164][ T8636] block nbd1: shutting down sockets [ 184.862847][ T8648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1125'. [ 184.905793][ T8648] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1125'. [ 185.988524][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1140'. [ 186.409694][ T8700] ima: policy update failed [ 186.420503][ T30] audit: type=1802 audit(1743258549.904:7): pid=8700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 187.009645][ T8718] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1154'. syzkaller syzkaller login: [ 187.728001][ T8740] CIFS: VFS: Invalid SecurityFlags: 0x00 [ 187.912613][ T8742] nbd: socks must be embedded in a SOCK_ITEM attr [ 187.943677][ T8742] block nbd1: shutting down sockets [ 188.492686][ T8761] input: jJǸ-���9�%v����l��Q� J86�� as /devices/virtual/input/input6 [ 189.828829][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 190.784893][ T8784] kexec: Could not allocate control_code_buffer [ 192.175728][ T8862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1214'. [ 192.385797][ T8872] snd_aloop snd_aloop.0: Parsing timer source 'iQ��' failed with -22 [ 192.496341][ T8876] batman_adv: Routing algorithm 'ive list 'rx_eff': [ 192.496341][ T8876] (any: no entry) [ 192.496341][ T8876] (vcan0: no entry) [ 192.496341][ T8876] (vxcan0: no entry) [ 192.496341][ T8876] (vxcan1: no entry) [ 192.496341][ T8876] ' is not supported [ 193.048175][ T5843] ================================================================== [ 193.056833][ T5843] BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 [ 193.064718][ T5843] Read of size 140 at addr ffffc90019e2b000 by task kworker/u9:2/5843 [ 193.072911][ T5843] [ 193.075283][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: kworker/u9:2 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(full) [ 193.075322][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.075342][ T5843] Workqueue: hci0 hci_devcd_timeout [ 193.075396][ T5843] Call Trace: [ 193.075405][ T5843] <TASK> [ 193.075420][ T5843] dump_stack_lvl+0x116/0x1f0 [ 193.075463][ T5843] print_report+0xc3/0x670 [ 193.075495][ T5843] ? __virt_addr_valid+0x5e/0x590 [ 193.075542][ T5843] ? hci_devcd_dump+0x142/0x240 [ 193.075582][ T5843] kasan_report+0xe0/0x110 [ 193.075614][ T5843] ? hci_devcd_dump+0x142/0x240 [ 193.075658][ T5843] kasan_check_range+0xef/0x1a0 [ 193.075696][ T5843] __asan_memcpy+0x23/0x60 [ 193.075740][ T5843] hci_devcd_dump+0x142/0x240 [ 193.075781][ T5843] hci_devcd_timeout+0xb5/0x2e0 [ 193.075822][ T5843] ? rcu_is_watching+0x12/0xc0 [ 193.075860][ T5843] process_one_work+0x9cc/0x1b70 [ 193.075898][ T5843] ? __pfx_process_one_work+0x10/0x10 [ 193.075936][ T5843] ? assign_work+0x1a0/0x250 [ 193.075973][ T5843] worker_thread+0x6c8/0xf10 [ 193.076013][ T5843] ? __pfx_worker_thread+0x10/0x10 [ 193.076047][ T5843] kthread+0x3c2/0x780 [ 193.076076][ T5843] ? __pfx_kthread+0x10/0x10 [ 193.076104][ T5843] ? __pfx_kthread+0x10/0x10 [ 193.076130][ T5843] ? __pfx_kthread+0x10/0x10 [ 193.076158][ T5843] ? __pfx_kthread+0x10/0x10 [ 193.076186][ T5843] ? rcu_is_watching+0x12/0xc0 [ 193.076223][ T5843] ? __pfx_kthread+0x10/0x10 [ 193.076252][ T5843] ret_from_fork+0x45/0x80 [ 193.076284][ T5843] ? __pfx_kthread+0x10/0x10 [ 193.076312][ T5843] ret_from_fork_asm+0x1a/0x30 [ 193.076367][ T5843] </TASK> [ 193.076377][ T5843] [ 193.237279][ T5843] The buggy address ffffc90019e2b000 belongs to a vmalloc virtual mapping [ 193.245788][ T5843] Memory state around the buggy address: [ 193.251454][ T5843] ffffc90019e2af00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 193.259529][ T5843] ffffc90019e2af80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 193.267600][ T5843] >ffffc90019e2b000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 193.275673][ T5843] ^ [ 193.279753][ T5843] ffffc90019e2b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 193.287828][ T5843] ffffc90019e2b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 193.295906][ T5843] ================================================================== [ 193.305449][ T5843] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 193.312691][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: kworker/u9:2 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(full) [ 193.324517][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.334590][ T5843] Workqueue: hci0 hci_devcd_timeout [ 193.339830][ T5843] Call Trace: [ 193.343152][ T5843] <TASK> [ 193.346095][ T5843] dump_stack_lvl+0x3d/0x1f0 [ 193.350716][ T5843] panic+0x71c/0x800 [ 193.354627][ T5843] ? __pfx_panic+0x10/0x10 [ 193.359064][ T5843] ? irqentry_exit+0x3b/0x90 [ 193.363678][ T5843] ? lockdep_hardirqs_on+0x7c/0x110 [ 193.368938][ T5843] ? preempt_schedule_thunk+0x16/0x30 [ 193.374355][ T5843] ? hci_devcd_dump+0x142/0x240 [ 193.379240][ T5843] ? preempt_schedule_common+0x44/0xc0 [ 193.384718][ T5843] ? check_panic_on_warn+0x1f/0xb0 [ 193.389846][ T5843] ? hci_devcd_dump+0x142/0x240 [ 193.394749][ T5843] check_panic_on_warn+0xab/0xb0 [ 193.399711][ T5843] end_report+0x107/0x170 [ 193.404059][ T5843] kasan_report+0xee/0x110 [ 193.408498][ T5843] ? hci_devcd_dump+0x142/0x240 [ 193.413382][ T5843] kasan_check_range+0xef/0x1a0 [ 193.418261][ T5843] __asan_memcpy+0x23/0x60 [ 193.422705][ T5843] hci_devcd_dump+0x142/0x240 [ 193.427408][ T5843] hci_devcd_timeout+0xb5/0x2e0 [ 193.432290][ T5843] ? rcu_is_watching+0x12/0xc0 [ 193.437076][ T5843] process_one_work+0x9cc/0x1b70 [ 193.442044][ T5843] ? __pfx_process_one_work+0x10/0x10 [ 193.447444][ T5843] ? assign_work+0x1a0/0x250 [ 193.452055][ T5843] worker_thread+0x6c8/0xf10 [ 193.456674][ T5843] ? __pfx_worker_thread+0x10/0x10 [ 193.461811][ T5843] kthread+0x3c2/0x780 [ 193.465922][ T5843] ? __pfx_kthread+0x10/0x10 [ 193.470529][ T5843] ? __pfx_kthread+0x10/0x10 [ 193.475133][ T5843] ? __pfx_kthread+0x10/0x10 [ 193.479740][ T5843] ? __pfx_kthread+0x10/0x10 [ 193.484386][ T5843] ? rcu_is_watching+0x12/0xc0 [ 193.489176][ T5843] ? __pfx_kthread+0x10/0x10 [ 193.493786][ T5843] ret_from_fork+0x45/0x80 [ 193.498220][ T5843] ? __pfx_kthread+0x10/0x10 [ 193.502827][ T5843] ret_from_fork_asm+0x1a/0x30 [ 193.507636][ T5843] </TASK> [ 193.510992][ T5843] Kernel Offset: disabled [ 193.515327][ T5843] Rebooting in 86400 seconds..