last executing test programs: 2.796434613s ago: executing program 2 (id=1642): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xf6f6, 0x8000) r0 = socket(0x22, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x80044943, 0x0) 2.674631744s ago: executing program 2 (id=1645): sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc885}, 0x4008000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r0, 0x1, &(0x7f00000000c0)) 2.545850983s ago: executing program 2 (id=1647): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(0x0, &(0x7f0000000000)=0x9, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 2.345740334s ago: executing program 0 (id=1650): mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigsuspend$auto(0x0, 0x8) 2.089564886s ago: executing program 2 (id=1657): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x200007, 0x19) 1.188335551s ago: executing program 0 (id=1677): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) getsockopt$auto(r0, 0x0, 0x33, 0xfffffffffffffffe, 0x0) 1.015655486s ago: executing program 3 (id=1670): socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0xff, 0x1, 0x0, 0x88) 935.373028ms ago: executing program 1 (id=1671): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r0, 0x5459, r0) 787.64977ms ago: executing program 1 (id=1672): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00', @ANYRES32, @ANYRES32, @ANYRES64, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) 695.56778ms ago: executing program 1 (id=1673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r0) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x4c}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x40c0) 693.214585ms ago: executing program 0 (id=1683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000adc0)={0x48, r1, 0x1b, 0x70bd29, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x18, 0x3, 0x0, 0x1, [@nested={0x14, 0x11, 0x0, 0x1, [@nested={0x5a, 0xf2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044}, 0xc800) 547.188689ms ago: executing program 0 (id=1675): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video3\x00', 0x10b000, 0x0) ioctl$auto(r0, 0xc0205647, 0x38) 547.053851ms ago: executing program 3 (id=1676): r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r0, 0x1b, 0x70bd28, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0xc}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 546.392578ms ago: executing program 1 (id=1685): socket(0xa, 0x801, 0x84) listen$auto(0x3, 0x81) select$auto(0xa, 0x0, &(0x7f0000000100)={[0xa0000000000d, 0xea, 0x0, 0xf, 0x2, 0x3, 0x5, 0x2000000000000002, 0x8000000009, 0x8, 0xff, 0xa, 0x4, 0xaab, 0x90, 0x14006]}, 0x0, 0x0) 414.827017ms ago: executing program 3 (id=1678): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) write$auto(r0, 0x0, 0x100) 414.041105ms ago: executing program 1 (id=1688): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x26, 0x80805, 0x0) 376.650708ms ago: executing program 0 (id=1679): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='#\x00', 0xff4b) read$auto_def_blk_fops_fs(r0, &(0x7f0000000140)=""/194, 0xc2) 328.011793ms ago: executing program 2 (id=1680): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x80040, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x0, 0x0) ioctl$auto(r1, 0x4b45, r0) 264.269512ms ago: executing program 3 (id=1681): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0x3, 0x92f1, 0x4}, 0x8a) 181.716863ms ago: executing program 0 (id=1682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)={0x14, r1, 0x323, 0x4070bda3, 0x25dfdbfb}, 0x14}}, 0x40088d4) 103.585925ms ago: executing program 1 (id=1684): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x9, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x2714, 0xfffffffffffffffc, 0x0) 99.355427ms ago: executing program 3 (id=1686): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0xf, 0x44f, 0x7, 0x10005, 0x100001007181, 0x48a0d, 0x7, 0x2000, 0x7fff, 0x89, 0x26, 0x4, 0x600000000001, 0x384, 0x401, 0x8, 0x0, 0x0, 0x0, 0x864, 0x200e, 0x22000, 0x200, 0xffffffff, 0x88, [0x200, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x401ffc, 0x0, 0xe, 0x5, 0x400, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x1, 0x6, 0x8000000000002, 0x10000000000008, 0xc329, 0xf1, 0x10000000000, 0xffffffffffffffff, 0x4, 0x2f, 0x2, 0x0, 0x3006, 0x61, 0xffff, 0x0, 0x100, 0x0, 0x6, 0x2, 0x400000000088e, 0x9, 0xfffffffdfffffffc, 0x8, 0xa38, 0x0, 0x4, 0xfffffffffffffffc, 0xc, 0x8, 0x10000000007, 0xfffffffffffffff9, 0xd7ad]}, 0x9, 0xd) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd09, &(0x7f00000001c0)) 98.719462ms ago: executing program 2 (id=1695): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm1c/xrun_debug\x00', 0x60041, 0x0) write$auto(r0, 0x0, 0x8ed) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 3 (id=1687): mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. [ 87.260519][ T5826] cgroup: Unknown subsys name 'net' [ 87.384420][ T5826] cgroup: Unknown subsys name 'cpuset' [ 87.393474][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.187795][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.432088][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.441517][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.450002][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.458630][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.467422][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.540352][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.548857][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.556157][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.565142][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.572533][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.573337][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.587910][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.588161][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.595302][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.603440][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.618492][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.618748][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.630433][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.640221][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.648636][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.914474][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 92.314600][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.323202][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.332423][ T5835] bridge_slave_0: entered allmulticast mode [ 92.342574][ T5835] bridge_slave_0: entered promiscuous mode [ 92.353576][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.361692][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.370137][ T5835] bridge_slave_1: entered allmulticast mode [ 92.377934][ T5835] bridge_slave_1: entered promiscuous mode [ 92.464517][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 92.479445][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 92.495629][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.509109][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.589751][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 92.605335][ T5835] team0: Port device team_slave_0 added [ 92.637157][ T5835] team0: Port device team_slave_1 added [ 92.728677][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.736292][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.743792][ T5838] bridge_slave_0: entered allmulticast mode [ 92.750876][ T5838] bridge_slave_0: entered promiscuous mode [ 92.788247][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.795665][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.803719][ T5838] bridge_slave_1: entered allmulticast mode [ 92.811070][ T5838] bridge_slave_1: entered promiscuous mode [ 92.819069][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.826293][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.852326][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.901405][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.908404][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.935272][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.996168][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.005564][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.013147][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.021400][ T5840] bridge_slave_0: entered allmulticast mode [ 93.028432][ T5840] bridge_slave_0: entered promiscuous mode [ 93.037250][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.044677][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.052144][ T5836] bridge_slave_0: entered allmulticast mode [ 93.059237][ T5836] bridge_slave_0: entered promiscuous mode [ 93.071610][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.094668][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.104165][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.111928][ T5840] bridge_slave_1: entered allmulticast mode [ 93.119229][ T5840] bridge_slave_1: entered promiscuous mode [ 93.126261][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.133872][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.141465][ T5836] bridge_slave_1: entered allmulticast mode [ 93.148470][ T5836] bridge_slave_1: entered promiscuous mode [ 93.236179][ T5838] team0: Port device team_slave_0 added [ 93.258667][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.274685][ T5835] hsr_slave_0: entered promiscuous mode [ 93.282321][ T5835] hsr_slave_1: entered promiscuous mode [ 93.291760][ T5838] team0: Port device team_slave_1 added [ 93.302750][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.314358][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.364786][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.404686][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.411882][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.438082][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.466043][ T5836] team0: Port device team_slave_0 added [ 93.478444][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.485944][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.512492][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.512610][ T5850] Bluetooth: hci0: command tx timeout [ 93.540468][ T5836] team0: Port device team_slave_1 added [ 93.568180][ T5840] team0: Port device team_slave_0 added [ 93.615790][ T5840] team0: Port device team_slave_1 added [ 93.666682][ T5838] hsr_slave_0: entered promiscuous mode [ 93.673408][ T5853] Bluetooth: hci3: command tx timeout [ 93.673433][ T55] Bluetooth: hci1: command tx timeout [ 93.674388][ T5838] hsr_slave_1: entered promiscuous mode [ 93.679339][ T5850] Bluetooth: hci2: command tx timeout [ 93.690064][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.690336][ T5838] Cannot create hsr debugfs directory [ 93.711891][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.718862][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.744899][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.783226][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.790400][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.816851][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.828643][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.836162][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.862337][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.895447][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.902811][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.929715][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.056416][ T5836] hsr_slave_0: entered promiscuous mode [ 94.062956][ T5836] hsr_slave_1: entered promiscuous mode [ 94.069042][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.076872][ T5836] Cannot create hsr debugfs directory [ 94.139204][ T5840] hsr_slave_0: entered promiscuous mode [ 94.148433][ T5840] hsr_slave_1: entered promiscuous mode [ 94.155877][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.163862][ T5840] Cannot create hsr debugfs directory [ 94.299046][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.314524][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.348524][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.386322][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.558125][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.588593][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.614638][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.655333][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.677483][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.688704][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.703777][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.730981][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.822006][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.833480][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.846681][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.870598][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.034855][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.108847][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.123544][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.164584][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.187473][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.194942][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.216037][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.236602][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.253619][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.260797][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.274579][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.281830][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.299995][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.317914][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.325200][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.356229][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.363489][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.406645][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.413886][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.431532][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.462185][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.469370][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.526266][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.533466][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.592100][ T5850] Bluetooth: hci0: command tx timeout [ 95.751235][ T5850] Bluetooth: hci1: command tx timeout [ 95.756840][ T5850] Bluetooth: hci2: command tx timeout [ 95.766858][ T5853] Bluetooth: hci3: command tx timeout [ 96.039294][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.112958][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.174995][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.237325][ T5835] veth0_vlan: entered promiscuous mode [ 96.256743][ T5835] veth1_vlan: entered promiscuous mode [ 96.282343][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.305264][ T5836] veth0_vlan: entered promiscuous mode [ 96.356331][ T5836] veth1_vlan: entered promiscuous mode [ 96.373135][ T5838] veth0_vlan: entered promiscuous mode [ 96.407642][ T5835] veth0_macvtap: entered promiscuous mode [ 96.426170][ T5835] veth1_macvtap: entered promiscuous mode [ 96.448906][ T5838] veth1_vlan: entered promiscuous mode [ 96.478808][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.494656][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.513787][ T5836] veth0_macvtap: entered promiscuous mode [ 96.530274][ T5840] veth0_vlan: entered promiscuous mode [ 96.538203][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.547442][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.557482][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.568319][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.583537][ T5836] veth1_macvtap: entered promiscuous mode [ 96.613441][ T5840] veth1_vlan: entered promiscuous mode [ 96.654531][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.666674][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.682067][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.762008][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.772767][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.787590][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.814879][ T5840] veth0_macvtap: entered promiscuous mode [ 96.825493][ T5838] veth0_macvtap: entered promiscuous mode [ 96.844280][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.853587][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.863039][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.873549][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.886350][ T5838] veth1_macvtap: entered promiscuous mode [ 96.897965][ T5840] veth1_macvtap: entered promiscuous mode [ 96.917762][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.927466][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.978301][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.990624][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.001486][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.012973][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.024357][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.051410][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.062082][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.072503][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.083081][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.093282][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.104307][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.111719][ T978] cfg80211: failed to load regulatory.db [ 97.118015][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.131315][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.142636][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.152894][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.164144][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.175434][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.201451][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.212199][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.222236][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.233237][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.243192][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.253735][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.265508][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.275499][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.284808][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.295357][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.304678][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.328937][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.331605][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.337713][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.348382][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.362498][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.374960][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.552332][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.568298][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.568492][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.653870][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.671003][ T5850] Bluetooth: hci0: command tx timeout [ 97.680615][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.747263][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.767454][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.830242][ T5850] Bluetooth: hci2: command tx timeout [ 97.835849][ T5850] Bluetooth: hci3: command tx timeout [ 97.846271][ T5853] Bluetooth: hci1: command tx timeout [ 97.928290][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.966381][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.996136][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.012653][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.127627][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.140154][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.336397][ T5914] netlink: 'syz.2.7': attribute type 1 has an invalid length. [ 99.750267][ T5853] Bluetooth: hci0: command tx timeout [ 99.911593][ T5853] Bluetooth: hci2: command tx timeout [ 99.917146][ T5853] Bluetooth: hci1: command tx timeout [ 99.923061][ T5850] Bluetooth: hci3: command tx timeout [ 101.458460][ T6013] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 101.465166][ T6013] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 103.026446][ T6060] openvswitch: netlink: IP tunnel dst address not specified [ 103.719926][ T6077] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 104.174106][ T6098] ======================================================= [ 104.174106][ T6098] WARNING: The mand mount option has been deprecated and [ 104.174106][ T6098] and is ignored by this kernel. Remove the mand [ 104.174106][ T6098] option from the mount to silence this warning. [ 104.174106][ T6098] ======================================================= [ 105.406043][ T6132] CIFS: VFS: Invalid SecurityFlags: . [ 105.634055][ T6138] syz.1.109 uses obsolete (PF_INET,SOCK_PACKET) [ 107.304574][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'. [ 107.797930][ T6215] netlink: 342 bytes leftover after parsing attributes in process `syz.3.145'. syzkaller syzkaller login: [ 113.442721][ T6396] openvswitch: netlink: IP tunnel dst address not specified [ 113.583080][ T6400] warning: `syz.0.231' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.928953][ T6413] openvswitch: netlink: Flow key attr not present in new flow. [ 114.113493][ T6417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.240'. [ 114.787126][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 115.899937][ T6482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.271'. [ 118.129725][ T6563] netlink: 80 bytes leftover after parsing attributes in process `syz.0.309'. [ 118.977610][ T6590] Invalid ELF header magic: != ELF [ 119.612344][ T6614] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 120.334172][ T6639] cifs: Unknown parameter 'à' [ 120.738005][ T6654] openvswitch: netlink: IPv6 tunnel dst address is zero [ 121.227532][ T6674] netlink: zone id is out of range [ 121.235889][ T6674] netlink: zone id is out of range [ 121.248191][ T6674] netlink: zone id is out of range [ 121.275380][ T6674] netlink: zone id is out of range [ 121.285745][ T6674] netlink: zone id is out of range [ 121.320009][ T6674] netlink: zone id is out of range [ 121.325202][ T6674] netlink: zone id is out of range [ 121.338164][ T6674] netlink: zone id is out of range [ 121.980779][ T6701] device-mapper: ioctl: name not supplied when creating device [ 122.335836][ T6715] Zero length message leads to an empty skb [ 122.978598][ T6736] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 125.935500][ T6846] program syz.0.441 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.234281][ T6856] net_ratelimit: 47 callbacks suppressed [ 126.234306][ T6856] openvswitch: netlink: Duplicate or invalid key (type 0). [ 126.676864][ T6876] openvswitch: netlink: Multiple metadata blocks provided [ 130.620562][ T6997] sctp: [Deprecated]: syz.1.509 (pid 6997) Use of int in max_burst socket option deprecated. [ 130.620562][ T6997] Use struct sctp_assoc_value instead [ 131.067655][ T7011] ubi0: attaching mtd0 [ 131.094504][ T7011] ubi0: scanning is finished [ 131.099204][ T7011] ubi0: empty MTD device detected [ 131.283707][ T7011] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 131.291847][ T7011] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 131.299106][ T7011] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 131.306818][ T7011] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 131.314893][ T7011] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 131.322849][ T7011] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 131.333163][ T7011] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2104361115 [ 131.343599][ T7011] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 131.400684][ T7020] ubi0: background thread "ubi_bgt0d" started, PID 7020 [ 134.422096][ T7113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.930853][ T7160] mmap: syz.1.583 (7160) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 136.436447][ T7177] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 136.906001][ T7190] delete_channel: no stack [ 137.957173][ T7222] netlink: 'syz.3.617': attribute type 1 has an invalid length. [ 138.080851][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.087584][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.671406][ T7251] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 139.620139][ T7281] openvswitch: netlink: IP tunnel dst address not specified [ 140.420373][ T7300] netlink: 'syz.0.645': attribute type 1 has an invalid length. [ 140.466964][ T7305] process 'syz.2.646' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 141.290371][ T7327] netlink: 'syz.0.659': attribute type 1 has an invalid length. [ 145.070514][ T7462] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 146.275903][ T7500] netlink: 'syz.0.747': attribute type 1 has an invalid length. [ 147.261201][ T7535] openvswitch: netlink: IP tunnel dst address not specified [ 147.873360][ T7554] netlink: zone id is out of range [ 147.878641][ T7554] netlink: zone id is out of range [ 147.919681][ T7554] netlink: zone id is out of range [ 147.943173][ T7554] netlink: zone id is out of range [ 147.948361][ T7554] netlink: zone id is out of range [ 148.015251][ T7554] netlink: zone id is out of range [ 148.090803][ T7554] netlink: zone id is out of range [ 148.106196][ T7554] netlink: zone id is out of range [ 148.135124][ T7554] netlink: zone id is out of range [ 148.450091][ T7570] nfs4: Unknown parameter 'nfsd' [ 149.824182][ T7618] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 3000000000 [ 149.931346][ T7622] kAFS: No cell specified [ 150.621703][ T7646] zero sized request [ 151.021285][ T7660] sd 0:0:1:0: PR command failed: 1026 [ 151.065585][ T7660] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 151.092898][ T7660] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 151.534196][ T7675] tipc: Started in network mode [ 151.560740][ T7675] tipc: Node identity ee00, cluster identity 4711 [ 151.582096][ T7675] tipc: Node number set to 60928 [ 153.077407][ T7724] netlink: 'syz.1.844': attribute type 2 has an invalid length. [ 155.931184][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 156.768370][ T7857] netlink: 'syz.3.904': attribute type 1 has an invalid length. [ 157.034604][ T7866] net_ratelimit: 8 callbacks suppressed [ 157.034629][ T7866] openvswitch: netlink: IP tunnel TTL not specified. [ 157.598701][ T7893] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 158.591594][ T7928] sctp: [Deprecated]: syz.0.938 (pid 7928) Use of int in max_burst socket option deprecated. [ 158.591594][ T7928] Use struct sctp_assoc_value instead [ 158.812554][ T7937] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.202070][ T7954] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xeffffd12 [ 161.265906][ T8029] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 161.397934][ T8027] synth uevent: /bus/usb/drivers/lg-vl600: unknown uevent action string [ 162.903770][ T8051] NFSD: Unable to initialize client recovery tracking! (-110) [ 162.920942][ T8051] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 162.931344][ T8051] NFSD: starting 90-second grace period (net f000046b) [ 163.102976][ T8058] svc: failed to register nfsdv3 RPC service (errno 512). [ 163.114285][ T8058] svc: failed to register nfsaclv3 RPC service (errno 111). [ 163.354572][ T8071] svc: failed to register nfsdv3 RPC service (errno 111). [ 163.370142][ T8071] svc: failed to register nfsaclv3 RPC service (errno 111). [ 163.484608][ T8085] netlink: set zone limit has 8 unknown bytes [ 169.771837][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 170.325472][ T8295] openvswitch: netlink: nsh attr 68 is out of range max 3 [ 173.061842][ T8395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1155'. [ 173.301904][ T8403] nbd: must specify a size in bytes for the device [ 173.870004][ T8420] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1166'. [ 174.667096][ T8449] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 174.894993][ T8452] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 174.944150][ T8452] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 175.812713][ T8477] netlink: 206 bytes leftover after parsing attributes in process `syz.3.1195'. [ 176.659289][ T8502] netlink: 'syz.3.1206': attribute type 10 has an invalid length. [ 176.690337][ T8506] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 178.327902][ T8504] kexec: Could not allocate control_code_buffer [ 178.725197][ T8548] netlink: Conntrack attr has 16 unknown bytes [ 179.278595][ T8565] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 180.888629][ T8599] kafs: addr_prefs: Invalid Command [ 180.902442][ T8564] kexec: Could not allocate control_code_buffer [ 180.947068][ T8601] netlink: zone id is out of range [ 181.131401][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 181.479688][ T8588] NFSD: Unable to initialize client recovery tracking! (-110) [ 181.499578][ T8588] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 181.524128][ T8588] NFSD: starting 90-second grace period (net f000046b) [ 181.853984][ T8626] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 182.896859][ T8645] tipc: Enabling of bearer rejected, media not registered [ 183.836251][ T8622] kexec: Could not allocate control_code_buffer [ 186.415831][ T8751] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 186.799858][ T8761] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 186.841603][ T8756] CIFS: VFS: Invalid SecurityFlags: [ 192.257836][ T8981] netlink: zone id is out of range [ 192.275396][ T8981] netlink: zone id is out of range [ 192.304820][ T8981] netlink: zone id is out of range [ 192.310381][ T8981] netlink: zone id is out of range [ 192.315798][ T8981] netlink: set zone limit has 8 unknown bytes [ 192.871113][ T9007] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 194.381619][ T9071] netlink: 'syz.1.1451': attribute type 1 has an invalid length. [ 195.348218][ T9098] svc: failed to register nfsdv3 RPC service (errno 111). [ 195.379731][ T9098] svc: failed to register nfsaclv3 RPC service (errno 111). [ 195.621982][ T9108] netlink: 'syz.0.1473': attribute type 1 has an invalid length. [ 195.755492][ T9110] svc: failed to register nfsdv3 RPC service (errno 111). [ 195.779914][ T9110] svc: failed to register nfsaclv3 RPC service (errno 111). [ 196.907847][ T9148] sd 0:0:1:0: PR command failed: 1026 [ 196.918632][ T9148] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 196.959622][ T9148] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 198.019986][ T9187] netlink: 'syz.0.1500': attribute type 1 has an invalid length. [ 198.830407][ T9216] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 198.836962][ T9216] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 199.424674][ T9233] openvswitch: netlink: IP tunnel dst address not specified [ 199.516713][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.523673][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 syzkaller syzkaller login: [ 202.366833][ T9331] openvswitch: netlink: IP tunnel dst address not specified [ 202.390585][ T9335] openvswitch: netlink: Flow key attr not present in new flow. [ 202.572536][ T9342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1569'. [ 203.534063][ T9391] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1595'. [ 204.547858][ T9438] netlink: zone id is out of range [ 204.570105][ T9438] netlink: zone id is out of range [ 204.575822][ T9438] netlink: zone id is out of range [ 204.586377][ T9438] netlink: zone id is out of range [ 204.596492][ T9438] netlink: zone id is out of range [ 204.604974][ T9438] netlink: zone id is out of range [ 204.610548][ T9438] netlink: zone id is out of range [ 204.615728][ T9438] netlink: zone id is out of range [ 204.624874][ T9438] netlink: zone id is out of range [ 204.644541][ T9438] netlink: zone id is out of range [ 205.260623][ T9471] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 205.839827][ T9499] program syz.2.1645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.470605][ T5853] ================================================================== [ 208.478739][ T5853] BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 [ 208.486598][ T5853] Read of size 140 at addr ffffc90018a8b000 by task kworker/u9:7/5853 [ 208.494879][ T5853] [ 208.497257][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: kworker/u9:7 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 208.497297][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.497324][ T5853] Workqueue: hci0 hci_devcd_timeout [ 208.497364][ T5853] Call Trace: [ 208.497375][ T5853] [ 208.497391][ T5853] dump_stack_lvl+0x116/0x1f0 [ 208.497425][ T5853] print_report+0xc3/0x670 [ 208.497470][ T5853] ? __virt_addr_valid+0x5e/0x590 [ 208.497520][ T5853] ? hci_devcd_dump+0x142/0x240 [ 208.497555][ T5853] kasan_report+0xe0/0x110 [ 208.497599][ T5853] ? hci_devcd_dump+0x142/0x240 [ 208.497640][ T5853] kasan_check_range+0xef/0x1a0 [ 208.497669][ T5853] __asan_memcpy+0x23/0x60 [ 208.497705][ T5853] hci_devcd_dump+0x142/0x240 [ 208.497742][ T5853] hci_devcd_timeout+0xb5/0x2e0 [ 208.497778][ T5853] ? rcu_is_watching+0x12/0xc0 [ 208.497820][ T5853] process_one_work+0x9cc/0x1b70 [ 208.497866][ T5853] ? __pfx_process_one_work+0x10/0x10 [ 208.497910][ T5853] ? assign_work+0x1a0/0x250 [ 208.497945][ T5853] worker_thread+0x6c8/0xf10 [ 208.497992][ T5853] ? __pfx_worker_thread+0x10/0x10 [ 208.498029][ T5853] kthread+0x3c2/0x780 [ 208.498063][ T5853] ? __pfx_kthread+0x10/0x10 [ 208.498094][ T5853] ? __pfx_kthread+0x10/0x10 [ 208.498125][ T5853] ? __pfx_kthread+0x10/0x10 [ 208.498157][ T5853] ? __pfx_kthread+0x10/0x10 [ 208.498188][ T5853] ? rcu_is_watching+0x12/0xc0 [ 208.498228][ T5853] ? __pfx_kthread+0x10/0x10 [ 208.498260][ T5853] ret_from_fork+0x45/0x80 [ 208.498293][ T5853] ? __pfx_kthread+0x10/0x10 [ 208.498331][ T5853] ret_from_fork_asm+0x1a/0x30 [ 208.498390][ T5853] [ 208.498401][ T5853] [ 208.658797][ T5853] The buggy address ffffc90018a8b000 belongs to a vmalloc virtual mapping [ 208.667311][ T5853] Memory state around the buggy address: [ 208.672960][ T5853] ffffc90018a8af00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 208.681042][ T5853] ffffc90018a8af80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 208.689213][ T5853] >ffffc90018a8b000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 208.697309][ T5853] ^ [ 208.701389][ T5853] ffffc90018a8b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 208.709471][ T5853] ffffc90018a8b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 208.717543][ T5853] ================================================================== [ 208.731589][ T5853] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 208.738841][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: kworker/u9:7 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 208.750686][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.760783][ T5853] Workqueue: hci0 hci_devcd_timeout [ 208.766016][ T5853] Call Trace: [ 208.769310][ T5853] [ 208.772257][ T5853] dump_stack_lvl+0x3d/0x1f0 [ 208.776894][ T5853] panic+0x71c/0x800 [ 208.780819][ T5853] ? __pfx_panic+0x10/0x10 [ 208.785265][ T5853] ? irqentry_exit+0x3b/0x90 [ 208.789882][ T5853] ? lockdep_hardirqs_on+0x7c/0x110 [ 208.795101][ T5853] ? preempt_schedule_thunk+0x16/0x30 [ 208.800498][ T5853] ? hci_devcd_dump+0x142/0x240 [ 208.805376][ T5853] ? preempt_schedule_common+0x44/0xc0 [ 208.811028][ T5853] ? check_panic_on_warn+0x1f/0xb0 [ 208.816167][ T5853] ? hci_devcd_dump+0x142/0x240 [ 208.821056][ T5853] check_panic_on_warn+0xab/0xb0 [ 208.826022][ T5853] end_report+0x107/0x170 [ 208.830392][ T5853] kasan_report+0xee/0x110 [ 208.834841][ T5853] ? hci_devcd_dump+0x142/0x240 [ 208.839728][ T5853] kasan_check_range+0xef/0x1a0 [ 208.844601][ T5853] __asan_memcpy+0x23/0x60 [ 208.849047][ T5853] hci_devcd_dump+0x142/0x240 [ 208.853783][ T5853] hci_devcd_timeout+0xb5/0x2e0 [ 208.858658][ T5853] ? rcu_is_watching+0x12/0xc0 [ 208.863453][ T5853] process_one_work+0x9cc/0x1b70 [ 208.868452][ T5853] ? __pfx_process_one_work+0x10/0x10 [ 208.873854][ T5853] ? assign_work+0x1a0/0x250 [ 208.878484][ T5853] worker_thread+0x6c8/0xf10 [ 208.883127][ T5853] ? __pfx_worker_thread+0x10/0x10 [ 208.888287][ T5853] kthread+0x3c2/0x780 [ 208.892414][ T5853] ? __pfx_kthread+0x10/0x10 [ 208.897031][ T5853] ? __pfx_kthread+0x10/0x10 [ 208.901646][ T5853] ? __pfx_kthread+0x10/0x10 [ 208.906283][ T5853] ? __pfx_kthread+0x10/0x10 [ 208.910895][ T5853] ? rcu_is_watching+0x12/0xc0 [ 208.915692][ T5853] ? __pfx_kthread+0x10/0x10 [ 208.920310][ T5853] ret_from_fork+0x45/0x80 [ 208.924752][ T5853] ? __pfx_kthread+0x10/0x10 [ 208.929363][ T5853] ret_from_fork_asm+0x1a/0x30 [ 208.934173][ T5853] [ 208.937547][ T5853] Kernel Offset: disabled [ 208.941885][ T5853] Rebooting in 86400 seconds..